ZyXEL Communications 200 Series User Manual page 783

Table 289 IKE Logs (continued)
LOG MESSAGE
[SA] : Tunnel [%s]
Phase 1 authentication
method mismatch
[SA] : Tunnel [%s]
Phase 1 encryption
algorithm mismatch
[SA] : Tunnel [%s]
Phase 1 invalid
protocol
[SA] : Tunnel [%s]
Phase 1 invalid
transform
[SA] : Tunnel [%s]
Phase 1 key group
mismatch
[SA] : Tunnel [%s]
Phase 1 negotiation
mode mismatch
[SA] : Tunnel [%s]
Phase 2 authentication
algorithm mismatch
[SA] : Tunnel [%s]
Phase 2 encapsulation
mismatch
[SA] : Tunnel [%s]
Phase 2 encryption
algorithm mismatch
[SA] : Tunnel [%s]
Phase 2 pfs mismatch
[SA] : Tunnel [%s]
Phase 2 pfs
unsupported: %d
[SA] : Tunnel [%s]
Phase 2 SA
encapsulation
mismatch
[SA] : Tunnel [%s]
Phase 2 SA protocol
mismatch
[SA] : Tunnel [%s] SA
sequence size mismatch
[XCHG] exchange type
is not IP, AGGR, or
INFO
Cannot resolve My IP
Addr %s for Tunnel
[%s]
ZyWALL USG 100/200 Series User's Guide
DESCRIPTION
%s is the tunnel name. When negotiating Phase-1, the authentication
method did not match.
%s is the tunnel name. When negotiating Phase-1, the encryption
algorithm did not match.
%s is the tunnel name. When negotiating Phase-1, the packet was not
a ISKAMP packet in the protocol field.
%s is the tunnel name. When negotiating Phase-1, the transform ID
was invalid.
%s is the tunnel name. When negotiating Phase-1, the DH group of the
attribute list `attrs' did not match the security policy.
%s is the tunnel name. When negotiating Phase-1, the negotiation
mode did not match.
%s is the tunnel name. When negotiating Phase-2, the authentication
algorithm did not match.
%s is the tunnel name. When negotiating Phase-2, the encapsulation
did not match.
%s is the tunnel name. When negotiating Phase-2, the encryption
algorithm did not match.
%s is the tunnel name. When negotiating Phase-2, the PFS specified
did not match.
%s is the tunnel name. When negotiating Phase-2, this device does
not support the PFS specified.
%s is the tunnel name. When negotiating Phase-2, the SA
encapsulation did not match.
%s is the tunnel name. When negotiating Phase-2, the SA protocol did
not match.
%s is the tunnel name. When negotiating Phase-2, the SA sequence
size did not match.
This device is the responder and this is the initiator's first packet, but
exchange type is not IP, AGGR, or INFO and the packet is ignored.
1st %s is my ip address. 2nd %s is the tunnel name. When selecting a
matched proposal in phase-1, the engine could not get My-IP address.
Appendix A Log Descriptions
783