Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have cacti monitoring a bunch of things on my Cisco ASA 5505s, but nothing to indicate the level of traffic flowing through VPN tunnels on them.

Is this data available through SNMP on the ASA, and has anyone here managed to graph this in Cacti or another system?

NB - I am most interested in monitoring the traffic from my remote sites, rather than the total IPSEC traffic coming into HQ's ASA 5510.

share|improve this question

2 Answers 2

up vote 1 down vote accepted

The ASA does indeed support SNMP monitoring of IPSEC tunnels. It doesn't look like cacti has the required templates installed by default. These links may be helpful:

Cacti • View topic - Cisco ASA/PIX VPN Statistics
Cacti • View topic - Cisco ASA templates - YMMV
http://docs.cacti.net/usertemplate:host:cisco:asa_55xx

To a lesser extent, maybe this post: Cacti • View topic - [HOWTO] Add new MIB Variables to Cacti

share|improve this answer
    
Thanks for those. I am already using the asa_55xx templates in the last two links, but hadn't seen the top one. –  dunxd Mar 29 '12 at 10:23

Check out VPNTTG (VPN Tunnel Traffic Grapher) is a software for monitoring Cisco ASA IPSec Tunnel traffic.

Advantage of VPNTTG over other SNMP based monitoring software's is following: Other (commonly used) software's are working with static OID numbers, i.e. whenever tunnel disconnects and reconnects, it gets assigned a new OID number. This means that the historical data, gathered on the connection, is lost each time. However, VPNTTG works with VPN peer's IP address and it stores for each VPN tunnel historical monitoring data into the Database.

For more information about VPNTTG please visit www.vpnttg.com

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.