topic Re: VPN tu in SASE and Remote Access

VPN tu

Brianpiraty_Ale — Mon, 02 Jul 2018 20:08:10 GMT

what does that mean output of VPN tu shows as (i=0)

INBOUND:
                        1. xxxxxxxx    (i: 0)
                OUTBOUND:
                        1. xxxxxxxxx (i: 0)

Re: VPN tu

Timothy_Hall — Tue, 03 Jul 2018 11:49:54 GMT

For each IPSec tunnel, there are two Security Associations (SAs) formed: inbound and outbound. Although we tend to refer to this VPN Tunnel in the singular, it actually consists of two "flows" of encrypted data: inbound and outbound. A similar concept is employed in the state table element "connections" where each connection is tracked as two separate flows referred to as c2s (client to server - outbound) and s2c (server to client - inbound).

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

Re: VPN tu

Brianpiraty_Ale — Tue, 03 Jul 2018 14:40:55 GMT

thanks. what does it mean by i:0

Re: VPN tu

Timothy_Hall — Tue, 03 Jul 2018 14:51:43 GMT

I believe on an R80.10+ gateway the i:0 indicates the CoreXL Firewall Worker Instance number (in this case instance #0) that is handling that SA.

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

Re: VPN tu

Brianpiraty_Ale — Tue, 03 Jul 2018 15:46:02 GMT

it is a standalone firewall, I see for other tunnels different numbers . I would say 1-9