Skip to main content
gakshay
Staff
Staff
April 22, 2020

Technical Tip: Xauth user name connected by dial-up IPsec tunnel

  • April 22, 2020
  • 0 replies
  • 2718 views

Description


This article describes how to check the monitored Xauth users from the GUI.

 

Scope

 

FortiGate.

Solution

For GUI:

 

Go to dashboard -> Network -> IPSec Monitor. IPsec Monitor can also be added directly in the Dashboard: Technical Tip: How to add IPsec monitor on dashboard widget.

To show the XAUTH user of the IPSEC VPN tunnel, select the settings icon 'Configure Table' or right-click on the columns to add the XAUTH column.

 

column ipsec vpn.PNG

 

xauth appears.PNG

 

Or under VPN -> IPSec Tunnels.

 

After, select the 'dialup connection(s)' to show the connected users.

 

Pic1.JPG

 

Pic2.JPG

From the CLI:

 

MP # diagnose vpn ike gateway list | grep xauth-user

xauth-user: user01

xauth-user: user02

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.