Fortinet FortiGate 1000A, Руководство администратора

Страница: 276 / 412

276
01-28011-0254-20051115 Fortinet Inc.
Monitor VPN
Figure 138:Dialup monitor
Flush dialup
tunnels icon Stop all dialup tunnels and stop the traffic passing through all dialup tunnels.
Dialup users may have to reconnect to establish new VPN sessions.
Name The name of the tunnel.
Remote gateway The meaning of the value in the Remote gateway column changes,
depending on the configuration of the network at the far end:
• When a FortiClient dialup client establishes a tunnel, the Remote
gateway column displays either the public IP address and UDP port of
the remote host device (on which the FortiClient Host Security
application is installed), or if a NAT device exists in front of the remote
host, the Remote gateway column displays the public IP address and
UDP port of the remote host.
• When a FortiGate dialup client establishes a tunnel, the Remote
gateway column displays the public IP address and UDP port of the
FortiGate dialup client.
Username The peer ID, certificate name, or XAuth user name of the dialup client (if a
peer ID, certificate name, or XAuth user name was assigned to the dialup
client for authentication purposes).
Timeout The time before the next key exchange. The time is calculated by
subtracting the time elapsed since the last key exchange from the keylife.
Proxy ID Source The IP address of the host, server, or private network behind the FortiGate
unit. A network range may be displayed if the source address in the firewall
encryption policy was expressed as a range of IP addresses.
Proxy ID
Destination The meaning of the value in the Proxy ID Destination column changes,
depending on the configuration of the network at the far end.
When a FortiClient dialup client establishes a tunnel:
• If VIP addresses are not used and the remote host connects to the
Internet directly, the Proxy ID Destination field displays the public IP
address of the Network Interface Card (NIC) in the remote host.
• If VIP addresses are not used and the remote host is behind a NAT
device, the Proxy ID Destination field displays the private IP address of
the NIC in the remote host.
• If VIP addresses were configured (manually or through FortiGate DHCP
relay), the Proxy ID Destination field displays either the VIP address
belonging to a FortiClient dialup client, or a subnet address from which
VIP addresses were assigned.
When a FortiGate dialup client establishes a tunnel, the Proxy ID
Destination field displays the IP address of the remote private network.
Bring up tunnel
and Bring down
tunnel icons Start or stop the current dialup tunnel. If you stop the tunnel, the dialup user
may have to reconnect to establish a new VPN session.
Page up and
Page down icons Display the previous or next page of dialup-tunnel status listings.