VPN basics

mrmcphisto · ‎03-17-2020

Hi all,

which is the difference between vpn tunnels and users?

For example, on the same vpn device we have 10 users but 15 tunnels (so more tunnels vs users), why? What cause this difference?

We've limited 1 tunnel per user as policy

And more, why session numbers are higher vs tunnels?

Thanks

mrmcphisto · ‎03-19-2020

Hi,

no tips?

rwpatterson · ‎03-19-2020

SSL tunnels are 1-1. IPSec tunnels could have 1 user with multiple tunnels. You didn't state what type you are referring to.

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

ede_pfau · ‎03-19-2020

hi,

assuming you are talking about IPsec VPN dial-in tunnels...

1- you can have more tunnels open than users if some users connect to more than 1 network. In IPsec VPN you can see one tunnel per phase2 selector (you can, you don't have to, it's config dependent) in the 'IPsec VPN monitor'. Strictly spoken it's one tunnel, but displayed as one line per phase2.

2- one application can open dozens of sessions, i.e. browsing, to increase the download volumen and improve the user's experience. That is absolutely normal, some protocols (services) do, some don't.

Ede

"Kernel panic: Aiee, killing interrupt handler!"