Fortinet FortiGate FortiGate-500A, Руководство администратора

Страница: 260 / 394

260
01-28006-0100-20041105 Fortinet Inc.
Ping Generator VPN
Concentrator options
Figure 129:Adding a VPN concentrator to create a hub-and-spoke configuration
Ping Generator
Use this command to generate periodic traffic on one or two VPN tunnels.
The ping generator generates traffic in an IPSec VPN tunnel to keep the tunnel
connection open at times when no traffic is being generated inside the tunnel. For
example, the ping generator is useful in scenarios where a dialup client or dynamic
DNS peer connects from an IP address that changes periodically—traffic may be
suspended while the IP address changes. You may also use the ping generator to
trouble-shoot network connectivity inside a VPN tunnel.
You can configure settings to generate ping commands through two tunnels
simultaneously. The ping interval is fixed at 40 seconds.
The source and destination IP addresses refer to the source and destination
addresses of IP packets that are to be transported through the VPN. When a
destination address of
0.0.0.0
is entered for the ping generator, the address means
“none”.
Members The names of the Phase 2 configurations and manual key configurations
added to the IPSec VPN concentrator.
Edit, view, or delete IPSec VPN concentrators.
Concentrator
Name Type a name for the concentrator.
Available
Tunnels Provides a list of defined IPsec VPN tunnels. To add one of these tunnels to
the concentrator, select the VPN tunnel from the Available Tunnels list and
select the right arrow. A concentrator can have more than one tunnel in its
list of members.
Members Provides a list of tunnels that are members of the concentrator. To remove a
tunnel from the list, select the tunnel in the Members list and select the left
arrow.