System > Network > VPN > IPSec VPN
In the ISAKMP SA, IPSec SA, and Dial-up User tabs, the VPN Monitor function displays the SA negotiation results of IPSec VPN Phase1 and Phase2 as well as information of dial-up users.
In the IPSec VPN page, click the IPSec VPN Monitor to view the corresponding statistics:
Items in the ISAKMP SA tab:
| Item | Description |
| Cookies |
Displays the negotiation cookies which are used to match SA Phase 1. |
| Status |
Displays the status of SA Phase1.
|
| Peer |
Displays the IP address of the peer. |
| Port |
The port number used by the SA Phase1. 500 indicates that no NAT has been found during the SA Phase 1; 4500 indicates that NAT has been detected. |
| Algorithm |
Displays the algorithm of the SA Phase1, including authentication method, encryption algorithm and verification algorithm. |
| Lifetime |
Displays the lifetime of SA Phase1. The unit is second. |
Items in the IPSec SA tab:
| Item | Description |
| ID |
Displays the tunnel ID number which is auto assigned by the system. |
| VPN Name |
Displays the name of VPN. |
| Direction |
Displays the direction of VPN. |
| Peer |
Displays the IP address of the peer. |
| Port |
The port number used by the SA Phase2. |
| Algorithm |
The algorithm used by the tunnel, including protocol type, encryption algorithm, verification algorithm and depression algorithm. |
| SPI |
Displays the local SPI and the peer SPI. The direction of inbound is local SPI, while outbound is peer SPI. |
| CPI |
Displays the compression parameter index (CPI) used by SA Phase2. |
| Lifetime (s) |
Displays the lifetime of SA Phase2 in second, i.e. SA Phase2 will restart negotiating after X seconds. |
| Lifesize (KB) |
Displays the lifetime of SA Phase2 in KB, i.e. SA Phase2 will restart negotiating after X kilobytes of data flow. |
| Status |
Displays the status of SA Phase2. |
Items in the Dial-up User tab:
| Item | Description |
| Peer |
Displays the statistic information of the peer user. Select the peer you want from the drop-down list. |
| User ID |
Displays the IKE ID of the user selected. |
| IP |
Displays the corresponding IP address. |
| Encrypted Packets |
Displays the number of encrypted packets transferred through the tunnel. |
| Encrypted Bytes |
Displays the number of encrypted bytes transferred through the tunnel. |
| Decrypted Packets |
Displays the number of decrypted packets transferred through the tunnel. |
| Decrypted Bytes |
Displays the number of decrypted bytes transferred through the tunnel. |