ZyXEL Communications Prestige 202H Series, Руководство пользователя

Страница: 294 / 309

Prestige 202H User’s Guide
28-4 IPSec Log
The following table shows sample log messages during packet transmission.
Table 28-2 Sample IPSec Logs During Packet Transmission
LOG MESSAGE DESCRIPTION
!! WAN IP changed to <IP> If the Prestige’s WAN IP changes, all configured “My IP Addr” are
changed to b “0.0.0.0”.. If this field is configured as 0.0.0.0, then
the Prestige will use the current Prestige WAN IP address (static or
dynamic) to set up the VPN tunnel.
!! Cannot find Phase 2 SA The Prestige cannot find a phase 2 SA that corresponds with the
SPI of an inbound packet (from the peer); the packet is dropped.
!! Discard REPLAY packet If the Prestige receives a packet with the wrong sequence number
it will discard it.
!! Inbound packet authentication failed The authentication configuration settings are incorrect. Please
check them.
!! Inbound packet decryption failed The decryption configuration settings are incorrect. Please check
them.
Rule <#d> idle time out, disconnect If an SA has no packets transmitted for a period of time
(configurable via CI command), the Prestige drops the connection.
The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to the RFC
for detailed information on each type.
Table 28-3 RFC-2408 ISAKMP Payload Types
LOG DISPLAY PAYLOAD TYPE
SA Security Association
PROP Proposal
TRANS Transform
KE Key Exchange
ID Identification
CER Certificate
CER_REQ Certificate Request
HASH Hash
SIG Signature