ZyXEL Communications 1100 Network Router User Manual


 
Chapter 6 Monitor
ZyWALL 110/310/1100 Series User’s Guide
98
Each field is described in the following table.
6.11.1 Regular Expressions in Searching IPSec SAs
A question mark (?) lets a single character in the VPN connection or policy name vary. For example,
use “a?c” (without the quotation marks) to specify abc, acc and so on.
Wildcards (*) let multiple VPN connection or policy names match the pattern. For example, use
“*abc” (without the quotation marks) to specify any VPN connection or policy name that ends with
“abc”. A VPN connection named “testabc” would match. There could be any number (of any type) of
characters in front of the “abc” at the end and the VPN connection or policy name would still match.
A VPN connection or policy name named “testacc” for example would not match.
A * in the middle of a VPN connection or policy name has the ZyWALL check the beginning and end
and ignore the middle. For example, with “abc*123”, any VPN connection or policy name starting
with “abc” and ending in “123” matches, no matter how many characters are in between.
Table 33 Monitor > VPN Monitor > IPSec
LABEL DESCRIPTION
Name Enter the name of a IPSec SA here and click Search to find it (if it is associated).
You can use a keyword or regular expression. Use up to 30 alphanumeric and
_+-.()!$*^:?|{}[]<>/ characters. See Section 6.11.1 on page 98 for more
details.
Policy Enter the IP address(es) or names of the local and remote policies for an IPSec
SA and click Search to find it. You can use a keyword or regular expression. Use
up to 30 alphanumeric and _+-.()!$*^:?|{}[]<>/ characters. See Section
6.11.1 on page 98 for more details.
Search Click this button to search for an IPSec SA that matches the information you
specified above.
Disconnect Select an IPSec SA and click this button to disconnect it.
Total Connection This field displays the total number of associated IPSec SAs.
connection per page
Select how many entries you want to display on each page.
Page x of x This is the number of the page of entries currently displayed and the total
number of pages of entries. Type a page number to go to or use the arrows to
navigate the pages of entries.
# This field is a sequential value, and it is not associated with a specific SA.
Name This field displays the name of the IPSec SA.
Encapsulation This field displays how the IPSec SA is encapsulated.
Policy This field displays the content of the local and remote policies for this IPSec SA.
The IP addresses, not the address objects, are displayed.
Algorithm This field displays the encryption and authentication algorithms used in the SA.
Up Time This field displays how many seconds the IPSec SA has been active. This field
displays N/A if the IPSec SA uses manual keys.
Timeout This field displays how many seconds remain in the SA life time, before the
ZyWALL automatically disconnects the IPSec SA. This field displays N/A if the
IPSec SA uses manual keys.
Inbound (Bytes) This field displays the amount of traffic that has gone through the IPSec SA from
the remote IPSec router to the ZyWALL since the IPSec SA was established.
Outbound (Bytes) This field displays the amount of traffic that has gone through the IPSec SA from
the ZyWALL to the remote IPSec router since the IPSec SA was established.
Refresh Click Refresh to update the information in the display.