VPN Global Settings Configuration Page Options

  1. Select Configure>IPSec VPN>Global Settings in the J-Web user interface.

    The VPN Global Settings configuration page appears. Table 106 explains the contents of this page.

  2. Click one:
    • Save—Applies changes to the configuration. Enter information as specified in Table 107.
    • Reset—Resets the configuration without saving changes.

Table 106: VPN Global Configuration Options

Field

Function

IKE Global Settings

Response Bad SPI

Displays the response to invalid IPsec SPI values .

Maximum Responses

Displays the number of times to respond to invalid SPI values per gateway

IPsec Global Settings

VPN Monitor Options

Displays whether or not VPN monitoring options is selected.

Interval

Displays the interval at which ICMP requests are sent to the peer.

Threshold

Displays the number of consecutive unsuccessful pings before the peer is declared unreachable.

Internal SA

Internal SA

Allows you to enable or disable internal SA for a secure login. If the check box is selected, the Key Format and Key options are made available. You can also delete the internal SA configuration by clearing the check box; the Key Format and Key options will be unavailable.

Key Format

Select the key format for the encryption. The following options are available:

  • ASCII
  • Hexadecimal

Key

Enter the encryption key.

Refresh

To ensure that the configuration takes effect, click Refresh after committing the configuration.

Table 107: Add VPN Global Configuration Details

Field

Function

Action

IKE Global Settings

Response Bad SPI

Provides response to invalid IPsec security parameter index values. If the SAs between two peers of an IPsec VPN become unsynchronized, the device resets the state of a peer so that the two peers are synchronized.

Select the check box if you want the device to respond to IPsec packets with bad SPI values.

Maximum Responses

Specifies the number of times to respond to invalid SPI values per gateway.

Enter a value from 1 through 30. The default is 5. This option is available when Response Bad SPI is selected.

IPSec Global Settings

VPN Monitor Options

Provides VPN monitoring options.

Select the check box if you want the device to monitor VPN liveliness.

Interval

Specifies the interval at which ICMP requests are sent to the peer.

Enter a value from 1 through 36,000 seconds.

Threshold

Specifies the number of consecutive unsuccessful pings before the peer is declared unreachable.

Enter a value from 1 through 65,536.

Related Documentation