ZyXEL Communications Prestige 652, User Manual, Page: 207 / 521

Prestige 652 Series User’s Guide
VPN Screens 17-23
When there is outbound traffic but no inbound traffic, the SA times out
automatically after two minutes. A tunnel with no outbound or inbound traffic is
"idle" and does not timeout until the SA lifetime period expires. See section 17.6 on
keep alive to have the Prestige renegotiate an IPSec SA when the SA lifetime
expires, even if there is no traffic.
Figure 17-7 SA Monitor
The following table describes the fields in this screen.
Table 17-10 SA Monitor
LABEL DESCRIPTION
No This is the security association index number.
Name This field displays the identification name for this VPN policy.
Encapsulation This field displays Tunnel or Transport mode.
IPSec Algorithm This field displays the security protocols used for an SA.
Both AH and ESP increase Prestige processing requirements and communications
latency (delay).
Disconnect Select Disconnect next to a security association and then click Apply to stop that
security association.
Back Click Back to return to the previous screen.
Apply Click Apply to save your changes back to the Prestige.