10IPsec监控及排错sec.ppt

第十章: IPsec监控和排错 概览 监控IPSec状态 Ipsec排错 第1节: 监控 IPsec 活动 监控Ipsec工具 用 IP Security Monitor监控IPsec 用高级防火墙监控IPsec 演示: 监控IPsec 监控Ipsec工具 工具 知识点 IP Security Monitor Used in Windows XP and higher MMC snap-in Administrators can monitor local and remote IPsec policy usage IPsecmon Only available in Windows 2000 Command-line tool Reduced level of information available for troubleshooting Windows Firewall with Advanced Security MMC New in Windows Vista and Windows Server 2008 Detailed IKE tracing using Netsh Trace file found in: systemroot\debug\oakley.log Enabled in Windows XP and Windows 2000 through Registry modification 用 IP Security Monitor 监控 IPsec Options for using the IP Security Monitor: Modify IPsec data refresh interval to update information in the console at a set interval Allow DNS name resolution for IP addresses to provide additionalinformation about computers connecting with IPsec Computers can monitored remotely: To enable remote management editing, the HKLM\system\currentcontrolset\services\policyagent keymust have a value of 1 To Discover the Active security policy on a computer, examine the Active Policy Node in the IP Security Monitoring MMC Main Mode Monitoring monitors initial IKE and SA: Information about the Internet Key Exchange Quick Mode Monitoring monitors subsequent key exchanges related to IPsec: Information about the IPsec driver 用高级防火墙监控IPsec Use the Connection Security Rules and Security Associations nodes to monitor IPsec connections The Connection Security Rules and Security Associations nodes will not monitor policies defined in the IP Security Policy snap-in Items that can be monitored include: Security Associations Main Mode Quick Mode 在win7和windows server 2008中高级防火墙包含IPsec Demonstration: Monitoring IPsec In this demonstration, you will see how to: Establish and monitor an IPsec connection Monitor an IPsec connection using the Windows Firewall with Advanced security MMC Lesson 2: Troubleshooting IPsec IPsec Troublesh