Chapter 40 Sa Monitor; Introduction; Using Sa Monitor; Figure 40-1 Menu 27.2: Sa Monitor - ZyXEL Communications ZyWall 10 User Manual

This chapter teaches you how to manage your SAs by using the SA Monitor in SMT menu 27.2.

40.1 Introduction

A Security Association (SA) is the group of security settings related to a specific VPN tunnel. This menu
(shown next) displays active VPN connections.
When there is outbound traffic but no inbound traffic, the SA times out
automatically after two minutes. A tunnel with no outbound or inbound traffic is
"idle" and does not timeout until the SA lifetime period expires. See the Web
Configurator User's Guide on keep alive to have the ZyWALL renegotiate an IPSec
SA when the SA lifetime expires, even if there is no traffic.

40.2 Using SA Monitor

1. Use the Refresh function to display active VPN connections.
2. Use the Disconnect function to cut off active connections.
Type 2 in Menu 27 - VPN/IPSec Setup, and then press [ENTER] to go to Menu 27.2 - SA Monitor.
#
--- --------------------------------
001 Taiwan : 3.3.3.1 – 3.3.3.3.100
002
003
004
005
006
007
008
009
010
Press ENTER to Confirm or ESC to Cancel:
SA Monitor
Menu 27.2 - SA Monitor
Name
Select Command= Refresh
Select Connection= N/A

Figure 40-1 Menu 27.2: SA Monitor

ZyWALL 10~100 Series Internet Security Gateway
Encap. IPSec ALgorithm
--------- ----------------
Tunnel ESP DES MD5
Chapter 40
SA Monitor
40-1