User manual

6.8. IPsec Status
List VPN Interfaces
This option (the default) shows all the currently established VPN tunnels (also known as VPN
interfaces). An example of this display is shown below.
List all active IKE SAs
An IKE Security Association (SA) is an entity that defines the encryption methods and other
parameters that will be used for data flowing from one end of an IPsec tunnel to the other. SAs are
set up after the two ends of a VPN tunnel use the Internet Exchange Protocol (IKE) to agree how
they will communicate. A single SA applies to data flowing in only one direction and for that reason
an IPsec tunnel usually has two SAs set up.
An example of the SA status display is shown below.
6.8. IPsec Status Chapter 6. The Status Menu
82