SNMP monitoring for VPN tunnels

[shrey2682]

Hi,

We have an in-house tool to monitor various firewall statistics using SNMPWALK and OIDs. We use a set of 4 OIDs to monitor the VPN tunnel status of the device.

1.3.6.1.4.1.12356.101.12.2.2.1.1 -> Entry (Integer)

1.3.6.1.4.1.12356.101.12.2.2.1.2 -> Phase 1 interface name (String)

1.3.6.1.4.1.12356.101.12.2.2.1.3 -> Phase 2 interface name (String)

1.3.6.1.4.1.12356.101.12.2.2.1.20 -> Tunnel Status (Binary)

During off-business hours in the absence of interesting traffic the IPSec Phase 2 goes down which generates and alert stating "VPN Tunnel <phase2-interface_name> is down. We have thousands of clients for which we received huge amount of same alerts repetitively. 

Is there any way we can monitor the Phase1 tunnel status and Phase2 tunnel status individually? I would basically like to monitor only Phase 1 status to ensure connectivity is fine between peer ends irrespective of it current usage/phase 2 status.

Need suggestions and recommendations.

Thanks,

Sreyansh