ZyXEL Communications ZyXEL ZyWALL 35 - Manual (Page 264)

ZyWALL 35 User’s Guide
262 Chapter 14 VPN Screens
14.15 Viewing SA Monitor
In the web configurator, click VPN and the SA Monitor tab. Use this screen to display and
manage active VPN connections.
A Security Association (SA) is the group of security settings related to a specific VPN tunnel.
This screen displays active VPN connections. Use Refresh to display active VPN
connections. This screen is read-only. The following table describes the fields in this tab.
Figure 122 SA Monitor
The following table describes the labels in this screen.
Encryption Key
(Only with ESP)
With DES, type a unique key 8 characters long. With 3DES, type a unique key 24
characters long. Any characters may be used, including spaces, but trailing spaces
are truncated.
Authentication
Key
Type a unique authentication key to be used by IPSec if applicable. Enter 16
characters for MD5 authentication or 20 characters for SHA-1 authentication. Any
characters may be used, including spaces, but trailing spaces are truncated.
Apply Click Apply to save your changes back to the ZyWALL.
Cancel Click Cancel to exit this screen without saving.
Table 79 VPN Manual Setup
LABEL DESCRIPTION
Note: When there is outbound traffic but no inbound traffic, the
SA times out automatically after two minutes. A tunnel with no
outbound or inbound traffic is "idle" and does not timeout until
the SA lifetime period expires.
See the Keep Alive section on
keep alive to have the ZyWALL renegotiate an IPSec SA when
the SA lifetime expires, even if there is no traffic.
Table 80 SA Monitor
LABEL DESCRIPTION
# This is the security association index number.
Name This field displays the identification name for this VPN policy.
Encapsulation This field displays Tunnel or Transport mode.