Filter
Top Products
Device Advanced
Issue 4 May 2005 207
Note:
Note: The VSU determines what type of authentication it permits, but this is dependent
upon the authentication policy last downloaded from VPNmanager (SuperUser
Password OFF or ON). Remember that if you set the SuperUser Password to
OFF you are no longer able to connect to the VSU using the SuperUser account.
The only way to recover SuperUser authentication is to change the setting to
back to ON, then do one of the following:
1. Authenticate via your LDAP user account or
2. Go to the VSU console and reset the Configuration/VPNmanager Authorization/
Authorization Provider value to SuperUser/LDAPuser, then authenticate by either your
LDAPuser account or SuperUser account.
Tunnel Persistence
This feature consists of the following radio buttons:
● Maintain VPN tunnels on device update
● Rebuild all VPN tunnels on device update
In a multiple VPN structure with tunnel persistence set to Maintain VPN tunnels on device
update, traffic is interrupted within the modified VPN only. In a multiple VPN structure with
tunnel persistence set to Rebuild All VPN tunnels on device update, all VPNs related to the
modified device are interrupted until the configuration update is complete.
Figure 63
, illustrates tunnel persistence between SGs. If Maintain VPN tunnel is enabled, the
addition of SG
D
to VPN
2
interrupts and re-establishes tunnel persistence in VPN
2
only. Because
modifications have not been made in VPN
1
(SG
A
and SG
B
), or VPN
3
(SG
B
and SG
D
) tunnels
remain persistent.