I've got an Ipsec tunnel from an ER605 (to AWS) working nicely. I'd like to get some monitoring metrics for it though. I've used `snmpwalk` to query the device, and have got lots of basic metrics (looks like the standard RFC values that most devices have), but can't see anything related to the ipsec tunnel I have created. I can see responses for tunnel devices such as gre0, gretap0, ip6tnl0 and sit0 - but all of them are marked "down".

Is there any way to get any ipsec information via SNMP? Even just status, bytes in/out, errors or whatever would be a good start. Any help appreciated.