ZyXEL Communications P-661H Series, Руководство пользователя, Страница: 225 / 383

P-661H/HW Series User’s Guide
Chapter 13 VPN Screens 225
When there is outbound traffic but no inbound traffic, the SA times out automatically after two
minutes. A tunnel with no outbound or inbound traffic is "idle" and does not timeout until the
SA lifetime period expires. See
Section 13.6 on page 207 on keep alive to have the ZyXEL
Device renegotiate an IPSec SA when the SA lifetime expires, even if there is no traffic.
Figure 128 VPN: SA Monitor
The following table describes the fields in this screen.
13.17 Configuring Global Setting
To change your ZyXEL Device’s global settings, click VPN and then Global Setting . The
screen appears as shown.
Table 87 VPN: SA Monitor
LABEL DESCRIPTION
No This is the security association index number.
Name This field displays the identification name for this VPN policy.
Encapsulation This field displays Tunnel or Transport mode.
IPSec Algorithm This field displays the security protocol, encryption algorithm, and authentication
algorithm used in each VPN tunnel.
Disconnect Select one of the security associations, and then click Disconnect to stop that
security association.
Refresh Click Refresh to display the current active VPN connection(s).