Table of Contents
Advertisement
Configuring a VPN FIlter
Copyright © 2010, Juniper Networks, Inc.
Table 70: VPN Tunnel Summary (continued)
Column
From Domain
To Hostname(IP)(Vsys)
To Domain
Status
SPI (in/out)
IP (Local-Peer)
Protocol
Peer GW ID
You can configure a VPN filter to control the information that is provided in the VPN
Monitor. You can view VPN information related to the type, status, or the specific security
device or virtual system associated with the VPN tunnel that you want to view.
To create a VPN filter:
Select Report Manager > VPN Monitor
1.
From the Option menu, select VPN Filter.
2.
The VPN Filter dialog box is displayed.
Click the add icon.
3.
The New VPN Filter dialog box is displayed.
In the Type area, select RAS, Site to Site, or Default to view both types of VPN.
4.
In the Device/Vsys area, select the type of device or virtual system associated with
5.
the VPN tunnel. Select Include all selected devices.
TIP: In the Selected Devices/Vsys area, by default, all devices or virtual
systems are included in the filter. To improve system performance, you
can remove devices or virtual systems by selecting them and clicking
Remove. Next, select Exclude all selected devices.
Description
Domain in NSM in which the source security device used in the VPN
is managed.
Destination security devices used in the VPN. For example, a root
security device named NS5000 with an IP address of 1.1.1.1 appears
as NS5000(1.1.1.1). For a Vsys 1, "NS5000(1.1.1.1)(1)" appears.
Domain in NSM in which the destination security device used in the
VPN is managed.
VPN Status: Up or Down
Security Parameter Index (SPI) key into and out of the active VPN.
This is the encryption method.
Peer gateway IP address for the active VPN.
Protocol used for the active VPN
Peer gateway ID for the active VPN.
Chapter 17: Realtime Monitoring
691
Advertisement
Table of Contents
