Dialup Monitor; Static Ip And Dynamic Dns Monitor - Fortinet FortiGate FortiGate-60M Administration Manual

VPN

Dialup monitor

Static IP and dynamic DNS monitor

FortiGate-60M Administration Guide
To establish or take down a VPN tunnel
1 Go to VPN > IPSEC > Monitor.
2 In the list of tunnels, select the Bring down tunnel or Bring up tunnel button in the row
that corresponds to the tunnel that you want to bring down or up.
If you take down an active tunnel while a dialup client such as FortiClient is still
connected, FortiClient will continue to show the tunnel connected and idle. The dialup
client must disconnect before another tunnel can be initiated.
The list of dialup tunnels provides information about the status of tunnels that have
been established for dialup clients. The list displays the IP addresses of dialup clients
and the names of all active tunnels. The number of tunnels shown in the list can
change as dialup clients connect and disconnect.
Figure 132:Dialup monitor
Flush dialup
tunnels icon
Name
Remote gateway The IP address and UDP port of the remote gateway.
Username
Timeout
Proxy ID Source The IP address of the host, server, or private network behind the FortiGate
Proxy ID
Destination
Bring down
tunnel icon
The list of tunnels provides information about VPN connections to remote peers that
have static IP addresses or domain names. You can use this list to view status and IP
addressing information for each tunnel configuration. You can also start and stop
individual tunnels from the list.
Figure 133:Static IP and dynamic DNS monitor
Stop all dialup tunnels and stop the traffic passing through all dialup tunnels.
Dialup users may have to reconnect to establish new VPN sessions.
The name of the tunnel.
The peer ID, certificate name, or XAuth user name of the dialup client (if a
peer ID, certificate name, or XAuth user name was assigned to the dialup
client for authentication purposes).
The time before the next key exchange. The time is calculated by
subtracting the time elapsed since the last key exchange from the keylife.
unit. A network range may be displayed if the source address in the firewall
encryption policy was expressed as a range of IP addresses.
The virtual IP (VIP) address of the dialup client. A range of VIP addresses
may be displayed if the destination address in the firewall encryption policy
was expressed as a range of VIP addresses.
Stop the current dialup tunnel. The dialup user may have to reconnect to
establish a new VPN session.
01-28007-0144-20041217
Monitor
261