HP Comware 5 Debug Manual Vol 2

Usage guidelines
Table 1 describes output fields and messages for the debugging ipsec error command on devices with
multi-core CPUs.
Table 112 Output from the debugging ipsec error command (for devices with multi-core CPUs)
Field
Description
Failed to process VPN route, error code: error-code
value, event type: event-value, dest/mask:
dst-ip-net/mask, nexthop : nexthop-addr, exit
interface: interface-type interface-number with tag
tag-value preference pre-value.
IPsec RRI failed to add or delete a static route. The
value for the event type field can be 1 (add route) or 2
(delete route).
An incomplete IPsecCB. so can't add/delete route,
event type: event value.
IPsec RRI failed to add or delete routes because the
IPsec configuration is incomplete. The value for the
event type field can be 1 (add route) or 2 (delete
route).
Static rri was disabled. IPsec RRI was disabled or working in dynamic mode.
Current IPsec map is Incomplete, so can't add route.
IPsec RRI failed to add routes because the
configuration of the IPsec policy was incomplete.
Failed to process VPN route, error code: error-code
value, event type: event-value, dest/mask:
dst-ip-net/mask, nexthop : nexthop-addr, exit
interface: interface-type interface-number with tag
tag-value preference pre-value.
The value of the event type can be 1 for adding route,
or 2 for deleting route.
Current IPsec map is Incomplete, so can't add route.
IPsec RRI failed to add routes because the
configuration of the current IPsec policy was
incomplete.
Table 2 describes output fields and messages for the debugging ipsec packet command on devices with
single-core CPUs.
Table 113 Output from the debugging ipsec packet command (for devices with single-core CPUs)
Field
Description
ESP new input: Authentication succeed
ESP was used after integrity checking, and
authentication in the inbound direction succeeded.
Table 3 describes output fields and messages for the debugging ipsec packet command on devices with
multi-core CPUs.
Table 114 Output from the debugging ipsec packet command (for devices with multi-core CPUs)
Field
Description
IPsec_Packet IPsec packet output information.
IPsec Send Packet Packets sent by IPsec.
Table 4 describes output fields and messages for the debugging ipsec sa command on devices with
single-core CPUs.
147