ZyXEL Communications P-661H-61, Manual

Page: 228 / 404

Chapter 16 VPN
P-661HNU-Fx User’s Guide
228
16.5 Viewing SA Monitor
Click Security > VPN > Monitor to open the screen as shown. Use this screen to
display and manage active VPN connections.
A Security Association (SA) is the group of security settings related to a specific
VPN tunnel. This screen displays active VPN connections. Use Refresh to display
active VPN connections. This screen is read-only. The following table describes the
fields in this tab.
When there is outbound traffic but no inbound traffic, the SA times out
automatically after two minutes. A tunnel with no outbound or inbound traffic is
"idle" and does not timeout until the SA lifetime period expires. See
Section
16.6.6 on page 234 on keeping alive to have the ZyXEL Device renegotiate an
IPSec SA when the SA lifetime expires, even if there is no traffic.
Figure 100 Security > VPN > Monitor
The following table describes the fields in this screen.
DPD Active Select DPD (Dead Peer Protection) if you want the ZyXEL Device to
make sure the remote IPSec router is there before it transmits data.
The remote IPSec router must support DPD. If there has been no traffic
for at least 15 seconds, the ZyXEL Device sends a message to the
remote IPSec router. If the remote IPSec router responds, the ZyXEL
Device transmits the data. If the remote IPSec router does not
respond, the ZyXEL Device shuts down the SA.
Apply Click Apply to save your changes back to the ZyXEL Device and return
to the VPN screen.
Back Click Back to return to the previous screen.
Table 59 Security > VPN > Setup > Edit > Advanced Setup (continued)
LABEL DESCRIPTION
Table 60 Security > VPN > Monitor
LABEL DESCRIPTION
No This is the security association index number.
Status Displays whether the security association is active or not
Tunnel Name This is the name of the new tunnel.
IPSec
Algorithm This field displays the encryption algorithm, and authentication algorithm
used in each VPN tunnel.