VPN Global Settings Configuration Page Options
- Select Configure>IPSec VPN>Global Settings in
the J-Web user interface.
The VPN Global Settings configuration page appears. Table 107 explains the contents of this page.
- Click one:
- Save—Applies changes to the configuration. Enter information as specified in Table 108.
- Reset—Resets the configuration without saving changes.
Table 107: VPN Global Configuration Options
Field | Function |
|---|---|
| IKE Global Settings | |
Response Bad SPI | Displays the response to invalid IPsec SPI values . |
Maximum Responses | Displays the number of times to respond to invalid SPI values per gateway |
| IPsec Global Settings | |
VPN Monitor Options | Displays whether or not VPN monitoring options is selected. |
Interval | Displays the interval at which ICMP requests are sent to the peer. |
Threshold | Displays the number of consecutive unsuccessful pings before the peer is declared unreachable. |
| Internal SA | |
Internal SA | Allows you to enable or disable internal SA for a secure login. If the check box is selected, the Key Format and Key options are made available. You can also delete the internal SA configuration by clearing the check box; the Key Format and Key options will be unavailable. |
Key Format | Select the key format for the encryption. The following options are available:
|
Key | Enter the encryption key. |
Refresh | To ensure that the configuration takes effect, click Refresh after committing the configuration. |
Table 108: Add VPN Global Configuration Details
Field | Function | Action |
|---|---|---|
| IKE Global Settings | ||
Response Bad SPI | Provides response to invalid IPsec security parameter index values. If the SAs between two peers of an IPsec VPN become unsynchronized, the device resets the state of a peer so that the two peers are synchronized. | Select the check box if you want the device to respond to IPsec packets with bad SPI values. |
Maximum Responses | Specifies the number of times to respond to invalid SPI values per gateway. | Enter a value from 1 through 30. The default is 5. This option is available when Response Bad SPI is selected. |
| IPSec Global Settings | ||
VPN Monitor Options | Provides VPN monitoring options. | Select the check box if you want the device to monitor VPN liveliness. |
Interval | Specifies the interval at which ICMP requests are sent to the peer. | Enter a value from 1 through 36,000 seconds. |
Threshold | Specifies the number of consecutive unsuccessful pings before the peer is declared unreachable. | Enter a value from 1 through 65,536. |