Vpn Sa Monitor; Figure 95 Security > Vpn > Sa Monitor - ZyXEL Communications P-335U User Manual

P-334U/P-335U User's Guide
Table 54 Security > VPN > Rule Setup: Manual (continued)
LABEL
IPSec Protocol
Encryption
Algorithm
Encryption Key
Authentication
Algorithm
Authentication
Key
Apply
Reset

13.8 VPN SA Monitor

In the web configurator, click SECURITY > VPN > SA Monitor. Use this screen to display
and manage active VPN connections.
A Security Association (SA) is the group of security settings related to a specific VPN tunnel.
This screen displays active VPN connections. Use Refresh to display active VPN
connections.
Figure 95 Security > VPN > SA Monitor
164
DESCRIPTION
Select the security protocols used for an SA.
Both AH and ESP increase processing requirements and communications latency
(delay).
If you select ESP here, you must select options from the Encryption Algorithm
and Authentication Algorithm fields (described below).
Select which key size and encryption algorithm to use in the IKE SA. Choices are:
DES - a 56-bit key with the DES encryption algorithm
3DES - a 168-bit key with the DES encryption algorithm
The ZyXEL Device and the remote IPSec router must use the same algorithms
and keys. Longer keys require more processing power, resulting in increased
latency and decreased throughput.
This field is applicable when you select ESP in the IPSec Protocol field above.
With DES, type a unique key 8 characters long. With 3DES, type a unique key 24
characters long. Any characters may be used, including spaces, but trailing
spaces are truncated.
Select which hash algorithm to use to authenticate packet data in the IPSec SA.
Choices are SHA1 and MD5. SHA1 is generally considered stronger than MD5,
but it is also slower.
Type a unique authentication key to be used by IPSec if applicable. Enter 16
characters for MD5 authentication or 20 characters for SHA-1 authentication. Any
characters may be used, including spaces, but trailing spaces are truncated.
Click Apply to save your changes back to the ZyXEL Device.
Click Reset to begin configuring this screen afresh.
Chapter 13 IPSec VPN