Dialup Monitor; Static Ip And Dynamic Dns Monitor - Fortinet FortiGate FortiGate-5001 Administration Manual

VPN

Dialup monitor

Static IP and dynamic DNS monitor

FortiGate-5000 series Administration Guide
To establish or take down a VPN tunnel
1 Go to VPN > IPSEC > Monitor.
2 In the list of tunnels, select the Bring down tunnel or Bring up tunnel button in the row
that corresponds to the tunnel that you want to bring down or up.
If you take down an active tunnel while a dialup client such as FortiClient is still
connected, FortiClient will continue to show the tunnel connected and idle. The dialup
client must disconnect before another tunnel can be initiated.
The list of dialup tunnels provides information about the status of tunnels that have
been established for dialup clients. The list displays the IP addresses of dialup clients
and the names of all active tunnels. The number of tunnels shown in the list can
change as dialup clients connect and disconnect.
Figure 137:Dialup monitor
Flush dialup
tunnels icon
Name
Remote gateway The IP address and UDP port of the remote gateway.
Username
Timeout
Proxy ID Source The IP address of the host, server, or private network behind the FortiGate
Proxy ID
Destination
Bring up tunnel
and Bring down
tunnel icons
Page up and
Page down icons
The list of tunnels provides information about VPN connections to remote peers that
have static IP addresses or domain names. You can use this list to view status and IP
addressing information for each tunnel configuration. You can also start and stop
individual tunnels from the list.
Stop all dialup tunnels and stop the traffic passing through all dialup tunnels.
Dialup users may have to reconnect to establish new VPN sessions.
The name of the tunnel.
The peer ID, certificate name, or XAuth user name of the dialup client (if a
peer ID, certificate name, or XAuth user name was assigned to the dialup
client for authentication purposes).
The time before the next key exchange. The time is calculated by
subtracting the time elapsed since the last key exchange from the keylife.
unit. A network range may be displayed if the source address in the firewall
encryption policy was expressed as a range of IP addresses.
The virtual IP (VIP) address of the dialup client. A range of VIP addresses
may be displayed if the destination address in the firewall encryption policy
was expressed as a range of VIP addresses.
Start or stop the current dialup tunnel. If you stop the tunnel, the dialup user
may have to reconnect to establish a new VPN session.
Display the previous or next page of dialup-tunnel status listings.
01-28008-0013-20050204
Monitor
269