Viewing Sa Monitor - ZyXEL Communications P-661HNU Manual

Chapter 16 VPN
Table 59 Security > VPN > Setup > Edit > Advanced Setup (continued)
LABEL
DPD Active
Apply
Back

16.5 Viewing SA Monitor

Click Security > VPN > Monitor to open the screen as shown. Use this screen to
display and manage active VPN connections.
A Security Association (SA) is the group of security settings related to a specific
VPN tunnel. This screen displays active VPN connections. Use Refresh to display
active VPN connections. This screen is read-only. The following table describes the
fields in this tab.
When there is outbound traffic but no inbound traffic, the SA times out
automatically after two minutes. A tunnel with no outbound or inbound traffic is
"idle" and does not timeout until the SA lifetime period expires. See
16.6.6 on page 234
IPSec SA when the SA lifetime expires, even if there is no traffic.
Figure 100 Security > VPN > Monitor
The following table describes the fields in this screen.
Table 60 Security > VPN > Monitor
LABEL
No
Status
Tunnel Name
IPSec
Algorithm
228
DESCRIPTION
Select DPD (Dead Peer Protection) if you want the ZyXEL Device to
make sure the remote IPSec router is there before it transmits data.
The remote IPSec router must support DPD. If there has been no traffic
for at least 15 seconds, the ZyXEL Device sends a message to the
remote IPSec router. If the remote IPSec router responds, the ZyXEL
Device transmits the data. If the remote IPSec router does not
respond, the ZyXEL Device shuts down the SA.
Click Apply to save your changes back to the ZyXEL Device and return
to the VPN screen.
Click Back to return to the previous screen.
on keeping alive to have the ZyXEL Device renegotiate an
DESCRIPTION
This is the security association index number.
Displays whether the security association is active or not
This is the name of the new tunnel.
This field displays the encryption algorithm, and authentication algorithm
used in each VPN tunnel.
Section
P-661HNU-Fx User's Guide