The IP Manager discovers IPSec tunnels and Internet Key Exchange (IKE) tunnels between IPSec-enabled routers on IPv4 networks. It uses Router, Interface, and IP object types to model the tunnels.

During a full discovery, the IP Manager discovers the terminating subinterfaces (WAN endpoints) of IPSec tunnels and IKE tunnels, and layers the subinterfaces over the underlying physical interfaces. The IP Manager creates the network connections between the local and remote subinterfaces to form the IPSec and IKE tunnels.

The IP Availability Manager monitors the tunnels by monitoring the IsDownOrFlapping attribute of the WAN Interface objects that are associated with the tunnels. When the IP Availability Manager detects a change in the IsDownOrFlapping attribute of a WAN interface that is associated with a tunnel, it places the host router on the short discovery queue for a short discovery, to update the dynamic indices of the interfaces on the host router.

The parameters in Parameters for IPSec tunnel discovery and short discovery enable and control IPSec tunnel discovery and short discovery.

Table 1. Parameters for IPSec tunnel discovery and short discovery

Parameter name

Allowed values

Description

EnableIPSecDiscovery

TRUE,FALSE

Default: FALSE

Enables or disables the discovery of IPSec tunnels.

Belongs to tpmgr-param.conf file and is described in “Description of tpmgr-param.conf” on page 40.

ShortDiscoveryInstrPattern

Card_Fault_CiscoONSCPU or Card_Fault_CiscoEntityFRU

Instrumentation class pattern to be included in short discovery.

Belongs to tpmgr-param.conf file and is described in “Other interface-limiting parameter types in the tpmgr-param.conf file” on page 126.

autoReprobe_short

TRUE,FALSE

Default: FALSE

Enables or disables short discovery.

Belongs to discovery.conf file and is described in “Description of discovery.conf” on page 33.

reprobePeriod_short

Integer

Default: 900 seconds (15 minutes)

Interval between successive short discoveries.

numberShortProbeThreads

Integer

Default: 7 threads

Number of discovery threads that are used by the short discovery process.

By default, neither IPSec tunnel discovery nor short discovery is enabled.

Also, by default, WAN analysis is enabled, as explained in “Controlling the analysis of wide area networks” on page 34. IPSec tunnel analysis requires that WAN analysis be disabled.