VPN > Probes

On Security Gateways R82 and higher, you can configure Network Probes to monitor the status of Site-to-Site VPN Tunnels. See sk181994.

For more information, see the Site to Site VPN Administration Guide for your version.

In addition, see:

CLI

Run these commands in the Expert mode (see the CLI Reference Guide for your version):

probemon help

vpn tu tlist

Metric Information

Metric ID

Metric Description

Metric Type

Metric Units

Metric Labels

Metric Label Description

VSX Behavior

vpn.probes.tunnel

The state of the VPN tunnel:

  • 0 - Down

  • Any positive integer - Up

    (this value is the outbound SPI of the VPN tunnel)

This metric is available in:

  • R82 and higher

Gauge

{tunnel}

{'id', 'mspi', 'peer_name', 'peer_main_ip', 'remote_ip', 'local_ip', 'tunnel_methods', 'local_ts', 'remote_ts', 'tunnel_type'}

  • id

    The ID of the Network Probe.

  • mspi

    The MSPI of the VPN tunnel.

  • peer_name

    The name of the VPN peer.

  • peer_main_ip

    The main IP address of VPN peer.

  • remote_ip

    The IP address of VPN peer for this VPN tunnel.

  • local_ip

    The local IP address for this VPN tunnel.

  • tunnel_methods

    VPN tunnel encryption methods.

  • local_ts

    Local Traffic Selector (destination subnets).

  • remote_ts

    Traffic Selector on the VPN peer (destination subnets).

  • tunnel_type

    The VPN tunnel type (SSL, NAT-T, Visitor Mode, and so on).

Different data for each Virtual System.

vpn.probes.tunnel_generated_time

The time when the VPN Tunnel was established.

This metric is available in:

  • R82 and higher

Gauge

{second}/s

{'id'}

  • id

    The ID of the Network Probe.

Different data for each Virtual System.

vpn.probes.tunnel_expire_time

The time when the VPN Tunnel will expire.

This metric is available in:

  • R82 and higher

Gauge

{second}/s

{'id'}

  • id

    The ID of the Network Probe.

Different data for each Virtual System.

vpn.probes.tunnel_encrypted_bytes

The total number of encrypted bytes.

This metric is available in:

  • R82 and higher

Gauge

By

{'id'}

  • id

    The ID of the Network Probe.

Different data for each Virtual System.

vpn.probes.tunnel_encrypt_throughput

VPN tunnel encrypted throughput.

This metric is available in:

  • R82 and higher

Gauge

b/s

{'id'}

  • id

    The ID of the Network Probe.

Different data for each Virtual System.

vpn.probes.tunnel_decrypted_bytes

The total number of decrypted bytes.

This metric is available in:

  • R82 and higher

Gauge

By

{'id'}

  • id

    The ID of the Network Probe.

Different data for each Virtual System.

vpn.probes.tunnel_decrypt_throughput

VPN tunnel decrypted throughput.

This metric is available in:

  • R82 and higher

Gauge

b/s

{'id'}

  • id

    The ID of the Network Probe.

Different data for each Virtual System.