Firewall And Nat Alarms And Reports - Enterasys Security Router X-PeditionTM User Manual

Firewall and NAT Alarms and Reports

Table A-8 Low Severity Alarms/Events (continued)
Module Message
SERIAL Serial a/b - DSR Up CTS Down (MUX_UP)
SERIAL Serial a/b - DSR/CTS Down (MUX_UP)
FR serial a/b:d, un-configured DLCI nnn reported
active by LMI
FR serial a/b:d, packet arrived on unconfigured
DLCI nnn
Firewall and NAT Alarms and Reports
The XSR reports logging messages for firewall and NAT functionality as listed below. Low
system-level logging messages are classified at Levels 4 or 6 while Medium system-level alarms
are classified at Level 3. The format codes used in report text are defined as follows:
–
–
–
–
–
–
–
–
Table A-9 Firewall and NAT Alarms
Severity
0 - EMERG
0 - EMERG
1 - ALERT
1 - ALERT
1 - ALERT
1 - ALERT
1 - ALERT
2 - CRIT
3 - ERROR
A-14 Alarms/Events, System Limits, and Standard ASCII Table
%CMD - ACTIVEX, JAVA or CLS application commands
%IP1 - Source IP address. E.g.: 192.168.1.1
%IP2 - Source IP address -> Destination IP address. E.g.: 192.168.1.1 -> 10.10.10.1
%IP_P2 - Source IP address and port # ->Destination IP address and port #. E.g.:
192.168.1.1(12352) -> 10.10.10.1(21)
%IP_TC - Source IP address with type x & code x. E.g.: 192.168.1.1 type 8 (echo) code 2
(subset)
%IP2_ICMP - Source IP address -> Destination IP address with type x and code x. E.g.:
192.168.1.1 -> 10.10.10.1 type 8 code 0
%IP2_X - Source IP address -> Destination IP address with protocol # (0-255) (in
hexidecimal format). E.g.: 192.168.1.1 -> 10.10.10.1 protocol 7
%POL - Name of the firewall policy that causes this report, that is: allow log, TCP, or UDP
Report Text
Bad NAT entry pointer passed to freeAddrTransEntry()
Init: Failed to allocate memory for NAT cache
DHCP module resolved a new IP Address for NAT: %IP1
DHCP module resolved a new IP Mask for NAT: %IP1
DHCP module resolved a new router's IP address: %IP1
NAT: Attempt made to bypass NAT by a GRE packet, %IP2
NAT: Attempt made to bypass NAT, %IP_P2
Init: Error reading NAT Mapper table
NAT: No NAT entry found, %IP_P2
Description
Serial port has detected an EIA transition which will cause an
interface up condition. This alarm is additional to the high
severity Interface <interface name>, changed state to up}
Serial port has detected an EIA transition which will cause an
interface up condition. This alarm is additional to the high
severity Interface <interface name>, changed state to up}
FR switch reports that the DLCI nn is active but the Dlci is not
configured on the interface.