Chapter 38 Sa Monitor; Introduction; Using Sa Monitor; Figure 38-1 Menu 27.2: Sa Monitor - ZyXEL Communications Internet Security Gateway ZyWALL 2 Series User Manual

This chapter teaches you how to manage your SAs by using the SA Monitor in SMT menu 27.2.

38.1 Introduction

A Security Association (SA) is the group of security settings related to a specific VPN tunnel. This menu
(shown next) displays active VPN connections.
When there is outbound traffic but no inbound traffic, the SA times out
automatically after two minutes. A tunnel with no outbound or inbound traffic is
"idle" and does not timeout until the SA lifetime period expires. See the Web
Configurator User's Guide on keep alive to have the ZyWALL renegotiate an IPSec
SA when the SA lifetime expires, even if there is no traffic.

38.2 Using SA Monitor

1. Use the Refresh function to display active VPN connections.
2. Use the Disconnect function to cut off active connections.
Type 2 in Menu 27 - VPN/IPSec Setup, and then press [ENTER] to go to Menu 27.2 - SA Monitor.
#
--- -------------------------------------
1 Taiwan : 3.3.3.1 – 3.3.3.3.100
2
Press ENTER to Confirm or ESC to Cancel:
SA Monitor
Menu 27.2 - SA Monitor
Name
Select Command= Refresh
Select Connection= N/A

Figure 38-1 Menu 27.2: SA Monitor

ZyWALL 2 Series User's Guide
SA Monitor
Encap. IPSec ALgorithm
----------- ----------------
Tunnel ESP DES MD5
Chapter 38
38-1