Management Interface Failure With Vpn - D-Link DFL-1660 User Manual

Management Interface Failure with
VPN
single tunnel by specifying the IP address of the tunnel's endpoint (this is either the IP of the remote
endpoint or a client's IP address). The command takes the form:
ikesnoop -on <ip-address> -verbose
Ikesnoop can be turned off with the command:
ikesnoop -off
For a more detailed discussion of this topic, see Section 9.4.5, "Troubleshooting with ikesnoop".

Management Interface Failure with VPN

If any VPN tunnel is set up and then the management interface no longer operates then it is likely to
be a problem with the management traffic being routed back through the VPN tunnel instead of the
correct interface.
This happens when a route is established in the main routing table which routes any traffic for
all-nets through the VPN tunnel. If the management interface is not reached by the VPN tunnel then
the administrator needs to create a specific route that routes management interface traffic leaving the
NetDefend Firewall back to the management subnet.
When any VPN tunnel is defined, an all-nets route is automatically defined in the routing table so
the administrator should always set up a specific route for the management interface to be correctly
routed.
388
Chapter 9. VPN