Chapter 40 Sa Monitor; Introduction; Using Sa Monitor; Figure 40-1 Menu 27.2: Sa Monitor - ZyXEL Communications ZyWALL 5 User Manual

This chapter teaches you how to manage your SAs by using the SA Monitor in SMT menu
27.2.

40.1 Introduction

A Security Association (SA) is the group of security settings related to a specific VPN tunnel. This
menu (shown next) displays active VPN connections.
When there is outbound traffic but no inbound traffic, the SA
times out automatically after two minutes. A tunnel with no
outbound or inbound traffic is "idle" and does not timeout until the
SA lifetime period expires. See the Web configurator part on keep
alive to have the ZyWALL renegotiate an IPSec SA when the SA
lifetime expires, even if there is no traffic.

40.2 Using SA Monitor

1. Use the Refresh function to display active VPN connections.
2. Use the Disconnect function to cut off active connections.
Type 2 in Menu 27 - VPN/IPSec Setup, and then press [ENTER] to go to Menu 27.2 - SA Monitor.
#
--- --------------------------------
1 Taiwan : 3.3.3.1 – 3.3.3.3.100
2
3
4
5
6
7
8
9
10
Press ENTER to Confirm or ESC to Cancel:
FIELD
# This is the security association index number.
SA Monitor
Menu 27.2 - SA Monitor
Name
Select Command= Refresh
Select Connection= N/A

Figure 40-1 Menu 27.2: SA Monitor

Table 40-1 Menu 27.2: SA Monitor

DESCRIPTION
ZyWALL 5 Internet Security Appliance
Chapter 40
SA Monitor
Encap. IPSec ALgorithm
--------- ------------------
Tunnel ESP DES MD5
EXAMPLE
40-1