HP LaserJet Enterprise, HP PageWide Enterprise - HP Security Event Logging Messaging Reference (white paper)

Chapter 2 – Enhanced security event logging 21
Table 2-3 <reason for failure> variable contained within messages generated for unsuccessful IKE negotiations
Variable
Description
• CRL_decoding_failed
• CRL_is_not_currently_valid_but_in_the_future
• CRL_contains_duplicate_serial_numbers
• Time_interval_is_not_continuous
• Time_Informationalrmation_not_available
• Database_method_failed_due_to_timeout
• Database_method_failed
• Path_was_not_verified
• Maximum_path_length_reached
• No_IPsec_rules_configured
• Peer_IP_address_mismatch
• Local_IP_address_mismatch
• CA_not_trusted
• Access_group_mismatch
• Local_Traffic_Selector_mismatch
• Remote_Traffic_Selector_mismatch
• Local_ID_mismatch
• Remote_ID_mismatch
• Lost_on_simultaneous_SA_rekey_arbitration
• IKE_version_mismatch
• Protocol_mismatch_with_NAT-T
• Algorithm_did_not_match_policy
• Unsupported_algorithm
• Authentication_method_mismatch
• Unsupported_authentication_method
• Encapsulation_mode_mismatch
• Out_of_memory
• Encryption_algorithm_mismatch
• PRF_algorithm_mismatch
• Integrity_algorithm_mismatch
• DH_group_mismatch
• Extended_Sequence_Number_mismatch
• IKE_transform_attribute_mismatch(possible_key_size_mismatch)
• ESP_NULL_NULL_proposed
• Authentication_failed:
• No_proposal_chosen:
• Timed_out
• Internal_error
IKEv1 phase 1 negotiations
Message:
<device type>: IPsec IKEv1 phase 1 negotiation; time="<timestamp>"
authentication_option=<authentication option> item=printer_role value=Responder
source_IP="<IPsec peer IP address>" destination_IP="<local device IP address>" outcome=success
Interface(s):
IPsec
Syslog severity:
Warning
Explanation:
IKEv1 phase 1 negotiations initiated by the IPsec peer were successful.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<authentication option> - Authentication method that was used by both the local device and the
IPsec peer to perform mutual authentication. Possible values are:
• Certificates
• Pre-shared_key
• Kerberos