[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Configuring VPN Global Settings—Quick Configuration (Standard VPNs)

You can use J-Web Quick Configuration to quickly configure VPN global settings. (For information about configuring global settings using the CLI editor or the standard J-Web configuration pages (not Quick Configuration pages), see Configuring VPN Global Settings (Standard VPNs).)

Before You Begin
For background information, read Virtual Private Networks (VPNs) Overview. Understanding IKE and IPsec Packet Processing. Configuring an IPsec Tunnel—Overview

Before You Begin

For background information, read

Figure 114 shows the VPN quick configuration page.

Figure 114: VPN Global Settings

Image QC_vpn_glob.gif

To configure VPN global settings with Quick Configuration:

Select Configuration > Quick Configuration > VPN > Global Settings.
Fill in the options as shown in Table 105, then click one of the following buttons:
- To apply the configuration and stay on the Quick Configuration page, click Apply.
- To apply the configuration and return to the main Configuration page, click OK.
- To cancel your entries and return to the main page, click Cancel.

Table 105: VPN Global Configuration Options

Field	Function	Action
IKE Global Settings
Response Bad SPI	Enable response to invalid IPsec Security Parameter Index (SPI) values. If the SAs between two peers of an IPsec VPN become unsynchronized, the device resets the state of a peer so that the two peers are synchronized.	Click the check box if you want the device to respond to IPsec packets with bad SPI values.
Maximum Responses	Number of times to respond to invalid SPI values per gateway	Enter a value between 1 and 30. The default is 5. Disabled by default.
IPsec Global Settings
VPN Monitor Options	Configure VPN monitoring options.	Click the check box if you want the device to monitor VPN liveliness.
Interval	Interval at which to send ICMP requests to the peer.	Enter a value from 1 through 36,000 seconds.
Threshold	The number of consecutive unsuccessful pings before the peer is declared unreachable.	Enter a value from 1 through 65,536.

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]