ZyXEL Communications ISG50 Network Router User Manual


 
Chapter 10 Monitor
ISG50 User’s Guide
212
Each field is described in the following table.
10.11.1 Regular Expressions in Searching IPSec SAs
A question mark (?) lets a single character in the VPN connection or policy name vary. For example,
use “a?c” (without the quotation marks) to specify abc, acc and so on.
Wildcards (*) let multiple VPN connection or policy names match the pattern. For example, use
“*abc” (without the quotation marks) to specify any VPN connection or policy name that ends with
“abc”. A VPN connection named “testabc” would match. There could be any number (of any type) of
characters in front of the “abc” at the end and the VPN connection or policy name would still match.
A VPN connection or policy name named “testacc” for example would not match.
A * in the middle of a VPN connection or policy name has the ISG50 check the beginning and end
and ignore the middle. For example, with “abc*123”, any VPN connection or policy name starting
with “abc” and ending in “123” matches, no matter how many characters are in between.
Table 45 Monitor > VPN Monitor > IPSec
LABEL DESCRIPTION
Name Enter the name of a IPSec SA here and click Search to find it (if it is associated). You
can use a keyword or regular expression. Use up to 30 alphanumeric and _+-
.()!$*^:?|{}[]<>/ characters. See Section 10.11.1 on page 212 for more details.
Policy Enter the IP address(es) or names of the local and remote policies for an IPSec SA and
click Search to find it. You can use a keyword or regular expression. Use up to 30
alphanumeric and _+-.()!$*^:?|{}[]<>/ characters. See Section 10.11.1 on page 212
for more details.
Search Click this button to search for an IPSec SA that matches the information you specified
above.
Disconnect Select an IPSec SA and click this button to disconnect it.
Total Connection This field displays the total number of associated IPSec SAs.
connection per
page
Select how many entries you want to display on each page.
Page x of x This is the number of the page of entries currently displayed and the total number of
pages of entries. Type a page number to go to or use the arrows to navigate the pages of
entries.
# This field is a sequential value, and it is not associated with a specific SA.
Name This field displays the name of the IPSec SA.
Encapsulation This field displays how the IPSec SA is encapsulated.
Policy This field displays the content of the local and remote policies for this IPSec SA. The IP
addresses, not the address objects, are displayed.
Algorithm This field displays the encryption and authentication algorithms used in the SA.
Up Time This field displays how many seconds the IPSec SA has been active. This field displays
N/A if the IPSec SA uses manual keys.
Timeout This field displays how many seconds remain in the SA life time, before the ISG50
automatically disconnects the IPSec SA. This field displays N/A if the IPSec SA uses
manual keys.
Inbound (Bytes) This field displays the amount of traffic that has gone through the IPSec SA from the
remote IPSec router to the ISG50 since the IPSec SA was established.
Outbound (Bytes) This field displays the amount of traffic that has gone through the IPSec SA from the
ISG50 to the remote IPSec router since the IPSec SA was established.
Refresh Click Refresh to update the information in the display.