Chapter 6 Monitor

Each field is described in the following table.

Table 33 Monitor > VPN Monitor > IPSec

LABEL

DESCRIPTION

Name

Enter the name of a IPSec SA here and click Search to find it (if it is associated).

 

You can use a keyword or regular expression. Use up to 30 alphanumeric and

 

_+-.()!$*^:?{}[]<>/ characters. See Section 6.11.1 on page 98 for more

 

details.

 

 

Policy

Enter the IP address(es) or names of the local and remote policies for an IPSec

 

SA and click Search to find it. You can use a keyword or regular expression. Use

 

up to 30 alphanumeric and _+-.()!$*^:?{}[]<>/ characters. See Section

 

6.11.1 on page 98 for more details.

 

 

Search

Click this button to search for an IPSec SA that matches the information you

 

specified above.

 

 

Disconnect

Select an IPSec SA and click this button to disconnect it.

 

 

Total Connection

This field displays the total number of associated IPSec SAs.

 

 

connection per page

Select how many entries you want to display on each page.

 

 

Page x of x

This is the number of the page of entries currently displayed and the total

 

number of pages of entries. Type a page number to go to or use the arrows to

 

navigate the pages of entries.

 

 

#

This field is a sequential value, and it is not associated with a specific SA.

 

 

Name

This field displays the name of the IPSec SA.

 

 

Encapsulation

This field displays how the IPSec SA is encapsulated.

 

 

Policy

This field displays the content of the local and remote policies for this IPSec SA.

 

The IP addresses, not the address objects, are displayed.

 

 

Algorithm

This field displays the encryption and authentication algorithms used in the SA.

 

 

Up Time

This field displays how many seconds the IPSec SA has been active. This field

 

displays N/A if the IPSec SA uses manual keys.

 

 

Timeout

This field displays how many seconds remain in the SA life time, before the

 

ZyWALL automatically disconnects the IPSec SA. This field displays N/A if the

 

IPSec SA uses manual keys.

 

 

Inbound (Bytes)

This field displays the amount of traffic that has gone through the IPSec SA from

 

the remote IPSec router to the ZyWALL since the IPSec SA was established.

 

 

Outbound (Bytes)

This field displays the amount of traffic that has gone through the IPSec SA from

 

the ZyWALL to the remote IPSec router since the IPSec SA was established.

 

 

Refresh

Click Refresh to update the information in the display.

 

 

6.11.1 Regular Expressions in Searching IPSec SAs

A question mark (?) lets a single character in the VPN connection or policy name vary. For example, use “a?c” (without the quotation marks) to specify abc, acc and so on.

Wildcards (*) let multiple VPN connection or policy names match the pattern. For example, use “*abc” (without the quotation marks) to specify any VPN connection or policy name that ends with “abc”. A VPN connection named “testabc” would match. There could be any number (of any type) of characters in front of the “abc” at the end and the VPN connection or policy name would still match. A VPN connection or policy name named “testacc” for example would not match.

A * in the middle of a VPN connection or policy name has the ZyWALL check the beginning and end and ignore the middle. For example, with “abc*123”, any VPN connection or policy name starting with “abc” and ending in “123” matches, no matter how many characters are in between.

98

 

ZyWALL 110/310/1100 Series User’s Guide