ZyXEL Communications ZYWALL 35 User Manual page 564

Chapter 31 Logs Screens
Table 188 IKE Logs (continued)
LOG MESSAGE
Incoming ID Content:
<Incoming Peer ID Content>
Unsupported local ID Type:
<%d>
Build Phase 1 ID
Adjust TCP MSS to %d
Rule <%d> input idle time
out, disconnect
XAUTH succeed! Username:
<Username>
XAUTH fail! Username:
<Username>
Rule[%d] Phase 1 negotiation
mode mismatch
Rule [%d] Phase 1 encryption
algorithm mismatch
Rule [%d] Phase 1
authentication algorithm
mismatch
Rule [%d] Phase 1
authentication method
mismatch
Rule [%d] Phase 1 key group
mismatch
Rule [%d] Phase 2 protocol
mismatch
Rule [%d] Phase 2 encryption
algorithm mismatch
Rule [%d] Phase 2
authentication algorithm
mismatch
Rule [%d] Phase 2
encapsulation mismatch
Rule [%d]> Phase 2 pfs
mismatch
Rule [%d] Phase 1 ID mismatch The listed rule's IKE phase 1 ID did not match between the
Rule [%d] Phase 1 hash
mismatch
Rule [%d] Phase 1 preshared
key mismatch
Rule [%d] Tunnel built
successfully
Rule [%d] Peer's public key
not found
564
DESCRIPTION
The phase 1 ID contents do not match and the incoming
packet's ID content is displayed.
The phase 1 ID type is not supported by the router.
The router has started to build the phase 1 ID.
The router automatically changed the TCP Maximum
Segment Size value after establishing a tunnel.
The tunnel for the listed rule was dropped because there was
no inbound traffic within the idle timeout period.
The router used extended authentication to authenticate the
listed username.
The router was not able to use extended authentication to
authenticate the listed username.
The listed rule's IKE phase 1 negotiation mode did not match
between the router and the peer.
The listed rule's IKE phase 1 encryption algorithm did not
match between the router and the peer.
The listed rule's IKE phase 1 authentication algorithm did not
match between the router and the peer.
The listed rule's IKE phase 1 authentication method did not
match between the router and the peer.
The listed rule's IKE phase 1 key group did not match
between the router and the peer.
The listed rule's IKE phase 2 protocol did not match between
the router and the peer.
The listed rule's IKE phase 2 encryption algorithm did not
match between the router and the peer.
The listed rule's IKE phase 2 authentication algorithm did not
match between the router and the peer.
The listed rule's IKE phase 2 encapsulation did not match
between the router and the peer.
The listed rule's IKE phase 2 perfect forward secret (PFS)
setting did not match between the router and the peer.
router and the peer.
The listed rule's IKE phase 1 hash did not match between the
router and the peer.
The listed rule's IKE phase 1 pre-shared key did not match
between the router and the peer.
The listed rule's IPSec tunnel has been built successfully.
The listed rule's IKE phase 1 peer's public key was not found.
ZyWALL 5/35/70 Series User's Guide