TMS zl Management and Configuration Guide ST.1.1.100226

C-13
Log Messages
Log Message Formats and Fields
VPN: IKEv2
Log messages from IKE version 2 (id=vpn_ikev2) may contain these fields in
addition to or instead of the VPN and IKEv1 fields:
Table C-8. VPN IKEv2 Message Family Fields
User Authentication
Messages from the user authentication system (id=user_statistics) may contain
the following fields, in this order:
Table C-9. User Authentication Family Fields
Field Name Value Format Description
exchangetype [SA_INIT | AUTH |
CHILD_SA]
The exchange type used
authmethod [Pre_sharedkey | RSA | DSA
| EAP-RSA | EAP-DSA]
IKE key exchange type
secprotocol [ESP | AH] The security protocol used in negotiation or for generation of
Informational exchanges
inintspi hex The initiator’s SPI, which is one parameter that is used to uniquely
identify an IKEv2 SPI
respspi hex The responder’s SPI, which is one parameter that is used to uniquely
identify an IKEv2 SPI
issuername text The name of the issuer of the IP certificate
certstatus text The status of the received certificate, such as EXPIRED or NOTYIELD
eapmethod EAP_RELAY The EAP method used.
Field Name Value Format Description
srczone SELF User statistics messages always apply to the Self zone only
dstzone SELF User statistics messages always apply to the Self zone only
logintime [YYYY-MM-DD HH:MM:SS] Timestamp for the user’s login
logouttime [YYYY-MM-DD HH:MM:SS] Timestamp for the user’s log out
useripaddr [x.x.x.x] IP address of the user who authenticated to the module
pktstransfered integer Number of packets transferred by user
username [manager |
operator | username]
The name of the user or manager role that has logged on to the module
usersessionid integer Session ID of the user