fortigate-ipsec-40-mr3

FortiOS Handbook
Monitoring and troubleshooting
This section provides some general maintenance and monitoring procedures for VPNs.
The following topics are included in this section:
Monitoring VPN connections
Testing VPN connections
Testing VPN connections
Logging VPN events
VPN troubleshooting tips
Monitoring VPN connections
You can use the monitor to view activity on IPsec VPN tunnels and to start or stop those
tunnels. The display provides a list of addresses, proxy IDs, and timeout information for
all active tunnels. See “IPsec Monitor” on page 37.
Monitoring connections to remote peers
The list of tunnels provides information about VPN connections to remote peers that have
static IP addresses or domain names. You can use this list to view status and IP
addressing information for each tunnel configuration. You can also start and stop
individual tunnels from the list.
To view the list of static-IP and dynamic-DNS tunnels go toVPN > Monitor > IPsec
Monitor.
Monitoring dialup IPsec connections
The list of dialup tunnels provides information about the status of tunnels that have been
established for dialup clients. The list displays the IP addresses of dialup clients and the
names of all active tunnels. The number of tunnels shown in the list can change as dialup
clients connect and disconnect.
To view the list of dialup tunnels go to VPN > Monitor > IPsec Monitor.
If you take down an active tunnel while a dialup client such as FortiClient is still
connected, FortiClient will continue to show the tunnel connected and idle. The dialup
client must disconnect before another tunnel can be initiated.
The list of dialup tunnels displays the following statistics:
The Name column displays the name of the tunnel.
The meaning of the value in the Remote gateway column changes, depending on the
configuration of the network at the far end:
FortiOS Handbook v3: IPsec VPNs
01-434-112804-20120111 235
http://docs.fortinet.com/