Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 741 / 1026

Table 70: VPN Tunnel Summary (continued)
Description Column
Domain in NSM in which the source security device used in the VPN
is managed. From Domain
Destination security devices used in the VPN. For example, a root
security device named NS5000 with an IP address of 1.1.1.1 appears
as NS5000(1.1.1.1). For a Vsys 1, “NS5000(1.1.1.1)(1)” appears. To Hostname(IP)(Vsys)
Domain in NSM in which the destination security device used in the
VPN is managed. To Domain
VPN Status: Up or Down Status
Security Parameter Index (SPI) key into and out of the active VPN.
This is the encryption method. SPI (in/out)
Peer gateway IP address for the active VPN. IP (Local-Peer)
Protocol used for the active VPN Protocol
Peer gateway ID for the active VPN. Peer GW ID
Configuring a VPN FIlter
You can configure a VPN filter to control the information that is provided in the VPN
Monitor. You can view VPN information related to the type, status, or the specific security
device or virtual system associated with the VPN tunnel that you want to view.
To create a VPN filter:
1.
Select Report Manager > VPN Monitor
2.
From the Option menu, select VPN Filter .
The VPN Filter dialog box is displayed.
3.
Click the add icon.
The New VPN Filter dialog box is displayed.
4.
In the Type area, select RAS , Site to Site , or Default to view both types of VPN.
5.
In the Device/Vsys area, select the type of device or virtual system associated with
the VPN tunnel. Select
Include all selected devices .
TIP: In the Selected Devices/Vsys area, by default, all devices or virtual
systems are included in the filter. To improve system performance, you
can remove devices or virtual systems by selecting them and clicking
Remove . Next, select Exclude all selected devices .
691 Copyright © 2010, Juniper Networks, Inc.
Chapter 17: Realtime Monitoring