Netgear FVS114 User Manual download pdf (Page 86)

Reference Manual for the ProSafe VPN Firewall FVS114

5-30 Basic Virtual Private Networking

202-10098-01, April 2005

• Click Clear Log to delete all log entries.

3. Click VPN Status (Figure 5-37) to get the Current VPN Tunnels (SAs) screen (Figure 5-38).

Figure 5-38: Current VPN Tunnels (SAs) screen

This page lists the following data for each active VPN Tunnel.

• SPI—each SA has a unique SPI (Security Parameter Index) for traffic in each direction.

For Manual key exchange, the SPI is specified in the Policy definition. For Automatic key

exchange, the SPI is generated by the IKE protocol.

• Policy Name—the name of the VPN policy associated with this SA.

• Remote Endpoint—the IP address on the remote VPN Endpoint.

• Action—the action will be either a Drop or a Connect button.

• SLifeTime (Secs)—the remaining Soft Lifetime for this SA in seconds. When the Soft

Lifetime becomes zero, the SA (Security Association) will re-negotiated.

• HLifeTime (Secs)—the remaining Hard Lifetime for this SA in seconds. When the Hard

Lifetime becomes zero, the SA (Security Association) will be terminated. (It will be

re-established if required.)

Deactivating a VPN Tunnel

Sometimes a VPN tunnel must be deactivated for testing purposes. There are two ways to

deactivate a VPN tunnel:

• Policy table on VPN Policies page

• VPN Status page

Using the Policy Table on the VPN Policies Page to Deactivate a VPN Tunnel

To use the VPN Policies page to deactivate a VPN tunnel, perform the following steps:

1. Log in to the VPN Firewall.

2. Click on VPN Policies under VPN to get the VPN Policies screen below (Figure 5-39).

1 2 ... 81 82 83 84 85 86 87 88 89 90 91 ... 211 212

No comments

Netgear FVS114 User Manual Page 86