Fortinet Fortiwifi fortiwifi-60, Administration Manual

Page: 264 / 394

264
01-28006-0014-20041105 Fortinet Inc.
Monitor VPN
To monitor a VPN tunnel
1 Go to VPN > IPSEC > Monitor .
You can establish or take down a VPN tunnel manually through the Monitor tab.
To establish or take down a VPN tunnel
1 Go to VPN > IPSEC > Monitor .
2 In the list of tunnels, select the Bring down tunnel or Bring up tunnel button in the row
that corresponds to the tunnel that you want to bring down or up.
Dialup monitor
The dialup monitor lists status information for all active dialup VPN tunnels. The
number of tunnels on the list changes as dialup users connect and disconnect from
the FortiWiFi unit.
Figure 135:Dialup Monitor
Static IP and dynamic DNS monitor
The static IP and dynamic DNS monitor provides information about VPN connections
to remote static and dynamic DNS IP addresses. You can use this list to view status
and IP addressing information for each tunnel configuration.
Note: If you take down an active tunnel while a dialup client such as FortiClient is still
connected, FortiClient will continue to show the tunnel connected and idle. The dialup client
must disconnect before another tunnel can be initiated.
Flush dialup
tunnels icon Stop all dialup tunnels and stop the traffic passing through all dialup tunnels.
Dialup users may have to re-connect to establish new VPN sessions.
Name The name of the phase 2 for the dialup tunnel followed by the number of the
dialup tunnel. For example, if there are 4 dialup tunnels running that use a
phase 2 configuration named Dial_tunnel, the dialup tunnels would be
named Dial_tunnel_1, Dial_tunnel_2, and Dial_tunnel_3.
Remote gateway The IP address and UDP port of the dialup remote gateway.
Username The XAUTH user name if XAUTH is enabled for the VPN tunnel. See
“Configuring XAuth” on page 255 .
Timeout The time before the next key exchange. The time is calculated by
subtracting the time elapsed since the last key exchange from the keylife.
Proxy ID Source The IP address range that the dialup user can connect to.
Proxy ID
Destination The IP address range from which the dialup user can connect. This is
usually the current IP address of the dialup user’s computer.
Bring down
tunnel icon Stop the current dialup tunnel. The dialup user may have to reconnect to
establish a new VPN session.