Page 156 / 203 Scroll up to view Page 151 - 155
156
|
Chapter 9:
Monitoring System Performance
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336Gv2 Reference Manual
Monitoring the Status of WAN Ports
You can monitor the status of both of the WAN connections, the Dynamic DNS Server
connections, and the DHCP Server connections. To monitor the status of the WAN ports:
1.
Select Network Configuration > WAN Settings from the menu.
The WAN1 ISP Settings
screen is displayed.
2.
Click the
WAN Status
link in the
upper right-hand section of the
screen. The Connection Status
popup window displays a status
report on the WAN1 port.
3.
To get a status report on the WAN2
port, select Network Configuration,
click the
WAN2 ISP Settings
tab,
and then click the
WAN Status
link.
Monitoring Attached Devices
The LAN Groups screen contains a table of all IP devices that the network storage has
discovered on the local network.
To view the LAN Groups screen, select Network Configuration > LAN Settings from the
menu, and then select the LAN Groups tab.
The Known PCs and Devices database is an automatically-maintained list of
LAN-attached devices.
Page 157 / 203
Chapter 9:
Monitoring System Performance
|
157
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336Gv2 Reference Manual
PCs and other LAN devices become known by these methods:
DHCP Client Requests
. By default, the DHCP server in the VPN firewall is enabled,
and will accept and respond to DHCP client requests from PCs and other network
devices. These requests also generate an entry in the database. Because of this,
leaving the DHCP Server feature enabled (on the LAN Setup screen) is strongly
recommended.
Scanning the Network
. The local network is scanned using standard methods such
as ARP. The scan will detect active devices that are not DHCP clients. However,
sometimes the name of the PC or device cannot be accurately determined and will be
shown as unknown.
Manually Adding Devices
. You can enter information in the
Add Known PCs and
Devices
section and click
Add
to manually add a device to the database.
The
Known PCs and Devices
table lists all current entries in the LAN Groups database. For
each PC or device, the following data is displayed.
Note:
If the network storage is rebooted, the table data is lost until the
network storage rediscovers the devices.
Viewing the DHCP Log
To review the most recent entries in the DHCP log:
1.
Select Network Configuration > LAN Settings from the menu, and then click the
LAN
Setup
tab. The LAN Setup screen is displayed.
Table 9-4.
Known PCs and Devices options
Item
Description
Name
The name of the PC or device. Sometimes, this can not be determined, and will be
listed as Unknown. In this case, you can edit the entry to add a meaningful name.
IP Address
The current IP address. For DHCP clients, where the IP address is allocated by the
DHCP Server in this device, this IP address will not change. Where the IP address is
set on the PC (as a fixed IP address), you may need to update this entry manually if
the IP address on the PC is changed.
MAC Address
The MAC address of the PC. The MAC address is a low-level network identifier
which is fixed at manufacture.
Group
Each PC or device must be in a single group. The Group column indicates which
group each entry is in. By default, all entries are in the Group1.
Page 158 / 203
158
|
Chapter 9:
Monitoring System Performance
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336Gv2 Reference Manual
2.
Click the
DHCP Log
link to the right of the tabs. The
DHCP Log
appears in a popup
window.
3.
To view the most recent entries, click
refresh
. To delete all the existing log entries, click
clear log
.
Monitoring Active Users
The Active Users screen displays a list of administrators and SSL VPN users currently
logged into the device.
To display the list of active users:
1.
Select Monitoring > Active Users from the menu.
The active user’s username, group, and IP address are listed in the
Active Users
table
with a timestamp indicating the time and date that the user logged in.
2.
You can disconnect an active user by clicking
Disconnect
to the right of the user’s list
entry.
Page 159 / 203
Chapter 9:
Monitoring System Performance
|
159
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336Gv2 Reference Manual
Viewing Port Triggering Status
To view the status of port triggering:
1.
Select Security > Port Triggering from the menu.
2.
When the Port Triggering screen
is displayed, click the
Status
link
to the right of the tab to display
the Port Triggering Status
screen.
The status window displays the
information that is shown in the
following table.
Table 9-5.
Port Triggering Status Information
Item
Description
Rule
The name of the port triggering rule associated with this entry.
LAN IP Address
The IP address of the PC currently using this rule.
Open Ports
The Incoming ports which are associated the this rule. Incoming traffic using one
of these ports will be sent to the IP address above.
Time Remaining
The time remaining before this rule is released and made available for other
PCs. This timer is restarted whenever incoming or outgoing traffic is received.
Page 160 / 203
160
|
Chapter 9:
Monitoring System Performance
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336Gv2 Reference Manual
Monitoring VPN Tunnel Connection Status
To review the status of current VPN tunnels:
1.
Select VPN > Connection Status from the menu, and then select the
IPsec VPN
Connection Status
tab. The IPsec Connection Status screen is displayed.
The Active IPsec SAs table lists each active connection with the following information.
2.
Select the
SSL VPN Connection Status
tab. The SLL VPN Connection Status screen is
displayed
The active SSL VPN user’s user name, group, and IP address are listed in the table with
a timestamp indicating the time and date that the user connected. You can disconnect an
active SSL VPN user by clicking
Disconnect
to the right of the user’s list entry.
Table 9-6.
IPsec Connection Status Fields
Item
Description
Policy Name
The name of the VPN policy associated with this SA.
Endpoint
The IP address on the remote VPN endpoint.
Tx (KB)
The amount of data transmitted over this SA.
Tx (Packets)
The number of IP packets transmitted over this SA.
State
The current status of the SA. Phase 1 is Authentication phase and
Phase 2 is Key Exchange phase.
Action
Use this button to terminate/build the SA (connection) if required.

Rate

4 / 5 based on 1 vote.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top