VPN Settings and Displays

Topics:
•
VPN Global Settings
•
VPN Policies
•
Currently Active VPN Tunnels

VPN Global Settings

The Global VPN Settings section of the VPN > Settings page displays the following information:

•
Enable VPN – Must be selected to allow VPN policies through the Dell SonicWALL security policies.
•
Unique Firewall Identifier - An identifier for this SonicWALL appliance used for configuring VPN tunnels. The default value is the serial number of the firewall. You can change the Identifier to something meaningful to you.

VPN Policies

Information about all existing VPN policies are displayed in the VPN Policies table:

 

Name

The default name or user-defined VPN policy name.

Gateway

The IP address of the remote firewall. If the wildcard IP address, 0.0.0.0, is used, it is displayed as the IP address.

Destinations

The IP addresses of the destination networks.

Crypto Suite

The type of encryption used for the VPN policy.

Enable

Whether the policy is enabled. Selecting the checkbox enables the VPN Policy. Deselecting the checkbox disables it.

Configure

For:

 
•
All VPN policies, displays an Edit icon. Clicking the Edit icon allows you to edit the VPN policy.

 
•
Added VPN policies, a Delete icon. Clicking the Delete icon deletes the VPN policy. The predefined GroupVPN policies cannot be deleted, so the Delete icons are dimmed.

 
•
GroupVPN policies, an Export icon. Clicking the Export icon exports the VPN policy configuration as a file for local installation by SonicWALL Global VPN Clients.

Below the VPN Policies table are the following buttons:

 

Add

Accesses the VPN Policy dialog to configure site-to-site VPN policies.

Delete

Deletes the selected (checked box before the VPN policy name in the Name column). You cannot delete the GroupVPN policies.

Delete All

Deletes all VPN policies in the VPN Policies table except the default GroupVPN policies.

Also below the table, for both site-to-site and GroupVPN policies, are displayed the:

•
Number of VPN policies defined.
•
Number of policies enabled.
•
Maximum number of policies allowed.

You can define up to four GroupVPN policies, one for each zone. These GroupVPN policies are listed by default in the VPN Policies table as WAN GroupVPN, LAN GroupVPN, DMZ GroupVPN, and WLAN GroupVPN. Clicking on the Edit icon in the Configure column for the GroupVPN displays the VPN Policy dialog for configuring the GroupVPN policy.

* 
NOTE: A VPN Policy cannot have two different WAN interfaces if the VPN Gateway IP is the same.
* 
NOTE: WLAN, WLAN, and wireless options are used with SonicPoints. SonicPoints are not supported in SonicOS 6.2.1 at this time.

Currently Active VPN Tunnels

A list of currently active VPN tunnels is displayed in this section. The number of supported tunnel interfaces is 1536.

Click the Renegotiate button to force the VPN Client to renegotiate the VPN tunnel.

Viewing VPN Tunnel Statistics

The Currently Active VPN Tunnels table displays these statistics for each tunnel:

•
Created – The date and time the tunnel came into existence.
•
Name – The name of the VPN Policy.
•
Local – The local LAN IP address of the tunnel.
•
Remote – The remote destination network IP address.
•
Gateway – The peer gateway IP address.
•
Statistics icon – When moused over, displays the VPN Tunnel Statistics pop-up balloon with the time stamps for the active tunnel and the number of packets/bytes/fragments sent into/out of the tunnel:

•
Left-arrow icon – When moused over, displays, for that particular active tunnel, the respective VPN policy in the middle of the VPN Policies table. If the VPN Policies table spans several pages, you can see the relevant VPN policy quickly rather than scrolling through the table to find the right one.