196 Chapter 6 IP security and VPN300868-G15 Click OK.16 In the main Setup window, click Save and Exit.17 Click Yes to have the changes take effect immediately.18 Click Yes to test the connection (optional).The tunnel is configured. For more information on how to initiate a tunnel after ithas been configured, refer to “How a tunnel is initiated” on page 186.Troubleshooting a VPN tunnel connectionIf you have troubles establishing a VPN tunnel connection make sure to checkboth ends of the tunnel to make sure that the tunnel configuration matches. Somecommon areas that may cause problems include but are not limited to:• PFS settings• Default network settings• IP addressesInstant Internet provides several methods for testing and troubleshooting IPsec:• Use the ipsec command to view a list of active tunnels. For details, refer toReference for the BayStack Instant Internet Remote Access CommandsVersion 7.11.• View the Instant Internet unit’s IPsec log to refer to information on IPsecnegotiations. For details, refer to “Viewing a unit’s IPsec log” on page 197.You can also use the ipsec log command to activate or deactivate this log.For details, refer to Reference for the BayStack Instant Internet Remote AccessCommands Version 7.11.• Use the Instant Internet Monitor program to monitor and control the statusof individual tunnels. The interface list contains the IPsec tunnel names.When you select an IPsec interface, Monitor displays the status. You canbring the tunnel down using the line control button on the toolbar.Note: Setup also creates an alias interface.
