Figure 17-7 Sa Monitor; Table 17-10 Sa Monitor - ZyXEL Communications Prestige 653HWI series User Manual

When there is outbound traffic but no inbound traffic, the SA times out
automatically after two minutes. A tunnel with no outbound or inbound traffic is
"idle" and does not timeout until the SA lifetime period expires. See section 17.6 on
keep alive to have the Prestige renegotiate an IPSec SA when the SA lifetime
The following table describes the fields in this screen.
LABEL
No
Name
Encapsulation
IPSec Algorithm
Disconnect
Back
Apply
VPN Screens
expires, even if there is no traffic.

Figure 17-7 SA Monitor

Table 17-10 SA Monitor

This is the security association index number.
This field displays the identification name for this VPN policy.
This field displays Tunnel or Transport mode.
This field displays the security protocols used for an SA.
Both AH and ESP increase Prestige processing requirements and communications
latency (delay).
Select Disconnect next to a security association and then click Apply to stop that
security association.
Click Back to return to the previous screen.
Click Apply to save your changes back to the Prestige.
Prestige 653HWI Series User's Guide
DESCRIPTION
17-23