Fortinet FortiGate 1000A, Руководство администратора

Страница: 275 / 412

VPN Monitor
FortiGate-1000A/FA2 Administration Guide 01-28011-0254-20051115
275
Ping generator options
Figure 137:Ping generator
Monitor
You can use the monitor to view activity on IPSec VPN tunnels and start or stop those
tunnels. The display provides a list of addresses, proxy IDs, and timeout information
for all active tunnels.
To view active tunnels
1 Go to VPN > IPSEC > Monitor .
To interpret the display, see the following sections:
• “Dialup monitor” on page 275
• “Static IP and dynamic DNS monitor” on page 277
To establish or take down a VPN tunnel
1 Go to VPN > IPSEC > Monitor .
2 In the list of tunnels, select the Bring down tunnel or Bring up tunnel button in the row
that corresponds to the tunnel that you want to bring down or up.
If you take down an active tunnel while a dialup client such as FortiClient is still
connected, FortiClient will continue to show the tunnel connected and idle. The dialup
client must disconnect before another tunnel can be initiated.
Dialup monitor
The list of dialup tunnels provides information about the status of tunnels that have
been established for dialup clients. The list displays the IP addresses of dialup clients
and the names of all active tunnels. The number of tunnels shown in the list can
change as dialup clients connect and disconnect.
Enable Select the option to ping the specified destination address using the
specified source address.
Source IP 1 Enter the IP address from which traffic may originate locally.
Destination IP 1 Enter the IP address of the remote computer to ping.
Source IP 2 If you want to generate traffic on a second VPN tunnel simultaneously,
enter a second IP address from which traffic may originate locally.
Destination IP 2 Enter the IP address of the second computer to ping