Technical Tip: How to modify IPsec VPN log generation interval

anoushiravan · ‎01-29-2023

Description

This article describes that the IPsec VPN log provides statistics of the received and transferred traffic over the tunnel and also tunnel information regarding the local and remote gateway and etc.

This information is usually used to track the bandwidth used by the clients or the tunnel.

Scope

FortiGate.

Solution

The below setting is used to set a desired interval for IPsec VPN log generation, the interval can be set between 60 to 86400 seconds.

The default value is 600 seconds.

# config system settings
set vpn-stats-log ipsec
set vpn-stats-period 100
end

For instance, in the above setting, a VPN log is generated every 100 seconds.

The same setting can be used for PPTP, L2TP, and SSL VPN:

# config system settings
set vpn-stats-log ipsec/pptp/l2tp/ssl
set vpn-stats-period 600
end

Example of IPsec stat log:

date=2023-01-30 time=02:37:23 eventtime=1675042643533198368 tz="+0100" logid="0101037141" type="event" subtype="vpn" level="notice" vd="root"
logdesc="IPsec tunnel statistics" msg="IPsec tunnel statistics" action="tunnel-stats" remip=10.109.16.186 locip=10.109.17.4 remport=500 locport=500
outintf="wan1" cookies="ba1c042b1d5e6c81/5192227d7758abcf" user="N/A" group="N/A" useralt="N/A" xauthuser="N/A" xauthgroup="N/A" assignip=N/A
vpntunnel="dialup-client" tunnelip=N/A tunnelid=2063828758 tunneltype="ipsec" duration=483 sentbyte=13112 rcvdbyte=16344 nextstat=600 advpnsc=0

Note.

nextstat shows the value of the vpn-stats-period.