User's Manual

Appendix A Log Descriptions
ISG50 User’s Guide
796
[ID] : Tunnel [%s]
Phase 2 Remote ID
mismatch
%s is the tunnel name. When negotiating Phase-2 and checking IPsec
SAs or the ID is IPv6 ID.
[ID] : Tunnel [%s]
Remote IP mismatch
%s is the tunnel name. When negotiating Phase-1, the peer tunnel IP
did not match the secure gateway address in VPN gateway.
[SA] : Malformed IPSec
SA proposal
When selecting a matched proposal, some protocol was given more
than once.
[SA] : No proposal
chosen
When selecting a matched proposal in phase-1 or phase-2, so
proposal was selected.
[SA] : Tunnel [%s]
Phase 1 authentication
algorithm mismatch
%s is the tunnel name. When negotiating Phase-1, the authentication
algorithm did not match.
[SA] : Tunnel [%s]
Phase 1 authentication
method mismatch
%s is the tunnel name. When negotiating Phase-1, the authentication
method did not match.
[SA] : Tunnel [%s]
Phase 1 encryption
algorithm mismatch
%s is the tunnel name. When negotiating Phase-1, the encryption
algorithm did not match.
[SA] : Tunnel [%s]
Phase 1 invalid
protocol
%s is the tunnel name. When negotiating Phase-1, the packet was
not a ISKAMP packet in the protocol field.
[SA] : Tunnel [%s]
Phase 1 invalid
transform
%s is the tunnel name. When negotiating Phase-1, the transform ID
was invalid.
[SA] : Tunnel [%s]
Phase 1 key group
mismatch
%s is the tunnel name. When negotiating Phase-1, the DH group of
the attribute list `attrs' did not match the security policy.
[SA] : Tunnel [%s]
Phase 1 negotiation
mode mismatch
%s is the tunnel name. When negotiating Phase-1, the negotiation
mode did not match.
[SA] : Tunnel [%s]
Phase 2 authentication
algorithm mismatch
%s is the tunnel name. When negotiating Phase-2, the authentication
algorithm did not match.
[SA] : Tunnel [%s]
Phase 2 encapsulation
mismatch
%s is the tunnel name. When negotiating Phase-2, the encapsulation
did not match.
[SA] : Tunnel [%s]
Phase 2 encryption
algorithm mismatch
%s is the tunnel name. When negotiating Phase-2, the encryption
algorithm did not match.
[SA] : Tunnel [%s]
Phase 2 pfs mismatch
%s is the tunnel name. When negotiating Phase-2, the PFS specified
did not match.
[SA] : Tunnel [%s]
Phase 2 pfs
unsupported: %d
%s is the tunnel name. When negotiating Phase-2, this device does
not support the PFS specified.
[SA] : Tunnel [%s]
Phase 2 SA
encapsulation
mismatch
%s is the tunnel name. When negotiating Phase-2, the SA
encapsulation did not match.
Table 320 IKE Logs (continued)
LOG MESSAGE DESCRIPTION