Page 186 / 218
Scroll up to view Page 181 - 185
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual
11-10
Monitoring System Performance
v1.0, October 2008
The
Known PCs and Devices
table lists all current entries in the LAN Groups database. For each
PC or device, the following data is displayed
Reviewing the DHCP Log
To review the most recent entries in the DHCP log:
Figure 11-5
Table 11-2. Known PCs and Devices options
Item
Description
Name
The name of the PC or device. Sometimes, this can not be determined, and will be
listed as Unknown. In this case, you can edit the entry to add a meaningful name.
IP Address
The current IP address. For DHCP clients, where the IP address is allocated by the
DHCP Server in this device, this IP address will not change. Where the IP address
is set on the PC (as a fixed IP address), you may need to update this entry
manually if the IP address on the PC is changed.
MAC Address
The MAC address of the PC. The MAC address is a low-level network identifier
which is fixed at manufacture.
Group
Each PC or device must be in a single group. The Group column indicates which
group each entry is in. By default, all entries are in the Group1.
Note:
If the VPN firewall is rebooted, the table data is lost until the VPN firewall
rediscovers the devices.
Page 187 / 218
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual
Monitoring System Performance
11-11
v1.0, October 2008
1.
Select
Network Configuration > LAN Setup
from the main/submenu, and then click the
LAN Setup tab.
The LAN Setup screen displays.
2.
Click the
DHCP Log
link to the right of the tabs. The
DHCP Log
appears in a popup window.
3.
To view the most recent entries, click
refresh
. To delete all the existing log entries, click
clear
log
.
Monitoring Active Users
The Active Users menu screen displays a list of administrators and SSL VPN users currently
logged into the device.
To display the list of active users:
Figure 11-6
Figure 11-7
Page 188 / 218
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual
11-12
Monitoring System Performance
v1.0, October 2008
1.
Select
Monitoring > Active Users
from the main/submenu. The Active Users screen is
displayed.
The active user’s username, group, and IP address are listed in the table with a timestamp
indicating the time and date that the user logged in.
2.
You can disconnect an active user by clicking
Disconnect
to the right of the user’s list entry.
Viewing Port Triggering Status
To view the status of Port Triggering:
1.
Select
Security > Port Triggering
from the main/submenu.
The Port Triggering screen displays.
2.
When the
Port Triggering
screen is displayed, click the
Status
link to the right of the tab to
display the
Port Triggering Status
.
Figure 11-8
Figure 11-9
Figure 11-10
Page 189 / 218
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual
Monitoring System Performance
11-13
v1.0, October 2008
The status window displays the following information:
Monitoring VPN Tunnel Connection Status
To review the status of current VPN tunnels:
1.
Select
VPN > Connection Status
from the main/submenu, and then select the IPsec VPN
Connection Status tab. The IPsec Connection Status screen displays.
The Active IPsec SAs table lists each active connection with the following information.
Item
Description
Rule
The name of the port triggering rule associated with this entry.
LAN IP Address
The IP address of the PC currently using this rule.
Open Ports
The Incoming ports which are associated the this rule. Incoming traffic using one
of these ports will be sent to the IP address above.
Time Remaining
The time remaining before this rule is released and made available for other
PCs. This timer is restarted whenever incoming or outgoing traffic is received.
Figure 11-11
Item
Description
Policy Name
The name of the VPN policy associated with this SA.
Endpoint
The IP address on the remote VPN endpoint.
Tx (KB)
The amount of data transmitted over this SA.
Tx (Packets)
The number of IP packets transmitted over this SA.
State
The current status of the SA. Phase 1 is Authentication phase and Phase 2 is
Key Exchange phase.
Action
Use this button to terminate/build the SA (connection) if required.
Page 190 / 218
ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual
11-14
Monitoring System Performance
v1.0, October 2008
2.
Select the
SSL VPN Connection Status
tab and the SLL VPN Connection Status screen
displays.
The active SSL VPN user’s username, group, and IP address are listed in the table with a
timestamp indicating the time and date that the user connected.
3.
You can disconnect an active SSL VPN user by clicking
Disconnect
to the right of the user’s
list entry.
Reviewing the VPN Logs
The
VPN Logs
screen gives log details for recent VPN activity.
1.
Select
Monitoring > VPN Logs
from the main/submenu, and select the IPsec VPN Logs tab.
The IPsec VPN Logs screen displays.
2.
To view the most recent entries, click
refresh log
.
3.
To delete all the existing log entries, click
clear log
.
4.
Select the
SSL VPN Logs
tab to view SSL VPN log details.
Figure 11-12
Figure 11-13
19216811.live