ZyXEL Communications 10 - Manual (Page 383)

ZyWALL 10~100 Series Internet Security Gateway
SA Monitor 30-1
Chapter 30
SA Monitor
This chapter teaches you how to manage your SAs by using the SA Monitor in SMT menu 27.2.
30.1 Introduction
A Security Association (SA) is the group of security settings related to a specific VPN tunnel. This menu
(shown next) displays active VPN connections.
When there is outbound traffic but no inbound traffic, the SA times out
automatically after two minutes. A tunnel with no outbound or inbound traffic is
"idle" and does not timeout until the SA lifetime period expires. See section 29.3.1
on keep alive to have the ZyWALL renegotiate an IPSec SA when the SA lifetime
expires, even if there is no traffic.
30.2 Using SA Monitor
1. Use the Refresh function to display active VPN connections.
2. Use the Disconnect function to cut off active connections.
Type 2 in Menu 27 - VPN/IPSec Setup, and then press [ENTER] to go to Menu 27.2 - SA Monitor.
Figure 30-1 Menu 27.2: SA Monitor
Menu 27.2 - SA Monitor
#
Name Encap. IPSec ALgorithm
--- -------------------------------- --------- ----------------
001
Taiwan : 3.3.3.1 – 3.3.3.3.100 Tunnel ESP DES MD5
002
003
004
005
006
007
008
009
010
Select Command= Refresh
Select Connection= N/A
Press ENTER to Confirm or ESC to Cancel: