IPsec status via SNMP or Zabbix agent
-
Hi
Is it possible to get the status of IPsec VPNs via SNMP or via Zabbix Agent?
I would like to see if the VPN is up or down from the pfSense point of view without relying on something at the other end of the tunnel being reachable and pinging it.Thanks
-
Nothing in SNMP, you could add something to the Zabbix agent I'm sure. I wouldn't bother though. You want to actually test whether you can pass traffic across it. Having an SA on one side doesn't necessarily mean it's actually functional.
-
True, Still might be useful to monitor the SA status. You might not always be able ping something at the other end, for example if people filter ICMP.
I will have a dig around the Zabbix agent and see what it can do.
-
I subscribe to the issue. It is very important for me