Why not just ping some device on the other side of the VPN? We ping the Wan interface of the router, Wan interface of the firewall, and then LAN interface of the Firewall. The first ping tells us if the router is up, the second if the firewall is up, and the final ping (which is only possible if the VPN is up) tells us if the VPN is up. If you reverse the order, make the VPN ping first, and make the execution of each check dependant on the previous check being DOWN, you can work your way "out" the chain of devices, and find the exact point of failure. It also saves resources by doing fewer checks.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Woznicki, Doug Sent: Saturday, September 03, 2005 10:47 AM To: [email protected] Subject: [SA-list] IPSec udp test for VPN I am trying to test a checkpoint FW1 VPN. The server will intermittently stop accepting connections. I am looking for a method to check the UDP port. Has anyone done this or can anyone give some suggestions? Thanks Doug Woznicki <mailto:[EMAIL PROTECTED]> Agilysys Inc. ------------------------- [This E-mail scanned for viruses by Declude Virus] To unsubscribe from a list, send a mail message to [EMAIL PROTECTED] With the following in the body of the message: unsubscribe SAlive
