Compatible Systems 5.4 manual VPN Client Tunnels 111 Inactivity Timeout, MinimumVersion

Chapter 7 - VPN Client Tunnels 111

Inactivity Timeout

This is the number of seconds the device will wait without receiving any traffic from a client belonging to this VPN Group configuration before ending the tunnel session.

Keep-alive packets and ICMP (ping) traffic do not affect this timeout. This prevents users from using ping to keep their tunnels up. The range is 1 to 65535 seconds. The default of 0 seconds means there is no timeout.

MinimumVersion

This places a limit on the VPN Client Software version number which will be allowed.

•A value of 0 or 1 will allow any software version number.

•A value of 2 will prevent Compatible’s older STAMP Clients from having access.

•A value of 3 will prevent both older STAMP Clients and any other Clients with version numbers less than 3.0.

•A value greater than three will prevent all clients from having access.

ϖNote: The Allow L2TP and PPTP boxes should be left unchecked. These protocols are not currently implemented.

Exclude Local LAN

This checkbox specifies whether remote client LAN traffic will be tunneled.

•If checked, remote LAN traffic will not be tunneled when a wildcard of 0.0.0.0/0 has been used as the Local IPNet. (specified on the IP Connec- tion Tab.)

ϖNote: The user login in the VPN Client software must also have the Exclude Local LAN from Tunnel checkbox checked.

SLA Enable Client

This checkbox specifies that Service Level Agreement (SLA) information will be gathered for tunnel sessions using this VPN Group Configuration. SLA measures the speed of traffic across the tunnel and can be used to ensure that service guarantees are met.

SNMP is used to display the gathered information. This requires that SNMP be enabled in the Advanced SNMP Dialog Box. Refer to Chapter 14 - General for more information on SNMP Configuration.