[Openswan Users] Best way to keep track of tunnel status?

Radek Antoniuk r.antoniuk at pixel.com.pl
Tue Mar 14 21:30:20 CET 2006


Paul Wouters wrote:
> On Mon, 13 Mar 2006, Francesco Peeters wrote:
>
>
>>I was wondering what would be the best (i.e. least resource-intensive) way
>>to keep track of the status of (an) IPsec tunnel(s)
>>
>>I know I can do 'ipsec auto --status' (which gives the easiest access to
>>the state info) or 'ipsec barf' or even tail auth.log, but I was wondering
>>if there's a better way to do this...
>
>
> Currently, ipsec auto --status is the best way o go.

Yeap, that's the script I have posted some time ago. But in fact if You
use DPD, you don't have to (unless for statistical/informational reasons).


-- 
Cheers,
Radek


More information about the Users mailing list