Nortel BCM50e, Configuration

Page: 298 / 311

298 Appendix K Log descriptions
N0115789
Table 80 shows sample log messages during packet transmission.
Table 80 Sample IPSec logs during packet transmission
LOG MESSAGE DESCRIPTION
!! WAN IP changed to <IP>
If the Business Secure Router’s WAN IP
changes, all configured “My IP Addr” are
changed to “0.0.0.0”. If this field is configured as
0.0.0.0, the Business Secure Router uses the
current Business Secure Router WAN IP
address (static or dynamic) to set up the VPN
tunnel.
!! Cannot find IPSec SA
The Business Secure Router cannot find a
phase 2 SA that corresponds with the SPI of an
inbound packet (from the peer); the packet is
dropped.
!! Cannot find outbound SA for
rule <%d>
The packet matches the rule index number (#d),
but Phase 1 or Phase 2 negotiation for outbound
(from the VPN initiator) traffic is not finished yet.
!! Discard REPLAY packet
If the Business Secure Router receives a packet
with the wrong sequence number it discards it.
!! Inbound packet authentication
failed
The authentication configuration settings are
incorrect. Check them.
!! Inbound packet decryption
failed
The decryption configuration settings are
incorrect. Check them.
Rule <#d> idle time out,
disconnect
If an SA has no packets transmitted for a period
of time (configurable via CI command), the
Business Secure Router drops the connection.