Fortinet FortiGate 100A, Administration Manual

Page: 259 / 374

VPN Dialup monitor
FortiGate-100A Administration Guide 01-28007-0068-20041203
259
To establish or take down a VPN tunnel
1 Go to VPN > IPSEC > Monitor .
2 In the list of tunnels, select the Bring down tunnel or Bring up tunnel button in the row
that corresponds to the tunnel that you want to bring down or up.
If you take down an active tunnel while a dialup client such as FortiClient is still
connected, FortiClient will continue to show the tunnel connected and idle. The dialup
client must disconnect before another tunnel can be initiated.
Dialup monitor
The list of dialup tunnels provides information about the status of tunnels that have
been established for dialup clients. The list displays the IP addresses of dialup clients
and the names of all active tunnels. The number of tunnels shown in the list can
change as dialup clients connect and disconnect.
Figure 131:Dialup monitor
Static IP and dynamic DNS monitor
The list of tunnels provides information about VPN connections to remote peers that
have static IP addresses or domain names. You can use this list to view status and IP
addressing information for each tunnel configuration. You can also start and stop
individual tunnels from the list.
Figure 132:Static IP and dynamic DNS monitor
Flush dialup
tunnels icon Stop all dialup tunnels and stop the traffic passing through all dialup tunnels.
Dialup users may have to reconnect to establish new VPN sessions.
Name The name of the tunnel.
Remote gateway The IP address and UDP port of the remote gateway.
Username The peer ID, certificate name, or XAuth user name of the dialup client (if a
peer ID, certificate name, or XAuth user name was assigned to the dialup
client for authentication purposes).
Timeout The time before the next key exchange. The time is calculated by
subtracting the time elapsed since the last key exchange from the keylife.
Proxy ID Source The IP address of the host, server, or private network behind the FortiGate
unit. A network range may be displayed if the source address in the firewall
encryption policy was expressed as a range of IP addresses.
Proxy ID
Destination The virtual IP (VIP) address of the dialup client. A range of VIP addresses
may be displayed if the destination address in the firewall encryption policy
was expressed as a range of VIP addresses.
Bring down
tunnel icon Stop the current dialup tunnel. The dialup user may have to reconnect to
establish a new VPN session.