[strongSwan-dev] SNMP feature

[Martin Willi]

Hi Ali,

> I find that Strongswan team doesn't have any plan for it. Is it true? 

Yes.

> If it is true, what is the best way to add SNMP support?

First you'll need a MIB to work with. There are some vendor specific
MIBs for IPsec, [1] could work as well. For IKEv2 I'm not aware of any
MIB.

Adding support for SNMP should be doable within a plugin. You'll have to
collect all the events and query for counters. Taking a look at the
stroke plugin can help, especially at [2] and [3].

Regards
Martin

[1]http://tools.ietf.org/html/draft-ietf-ipsec-mib-03
[2]http://git.strongswan.org/?p=strongswan.git;a=blob;f=src/libcharon/plugins/stroke/stroke_list.c
[3]http://git.strongswan.org/?p=strongswan.git;a=blob;f=src/libcharon/plugins/stroke/stroke_counter.c