ZyXEL Communications Vantage Report User Manual page 613

Table 276 IKE Logs (continued)
LOG MESSAGE
[DPD] No response from
"%s:%s using existing
Phase-1 SA in %u
seconds. Trying with
Phase-1 rekey.
[HASH] : Tunnel [%s]
Phase 1 hash mismatch
[HASH] : Tunnel [%s]
Phase 2 hash mismatch"
[ID] : Invalid ID
information
[ID] : Tunnel [%s]
Local IP mismatch
[ID] : Tunnel [%s] My
IP mismatch
[ID] : Tunnel [%s]
Phase 1 ID mismatch
[ID] : Tunnel [%s]
Phase 2 Local ID
mismatch
[ID] : Tunnel [%s]
Phase 2 Remote ID
mismatch
[ID] : Tunnel [%s]
Remote IP mismatch
[SA] : Malformed IPSec
SA proposal
[SA] : No proposal
chosen
[SA] : Tunnel [%s]
Phase 1 authentication
algorithm mismatch
[SA] : Tunnel [%s]
Phase 1 authentication
method mismatch
[SA] : Tunnel [%s]
Phase 1 encryption
algorithm mismatch
[SA] : Tunnel [%s]
Phase 1 invalid
protocol
[SA] : Tunnel [%s]
Phase 1 invalid
transform
Vantage Report User's Guide
Appendix B ZyWALL USG Series and ZyWALL 1050 Log Descriptions
DESCRIPTION
%s:%s is the peer IP:Port. %u is the retry time. Dead Peer
Detection (DPD) detected no response from peer.
%s is the tunnel name. When negotiating Phase-1, the
exchange hash did not match.
%s is the tunnel name. When negotiating Phase-2, the
calculated quick mode authentication hash did not match.
ID payload is not valid (in Phase-1 is local/peer ID, in Phase-2
is local/remote policy).
%s is the tunnel name. When negotiating Phase-1, the local
tunnel IP did not match the My IP in VPN gateway.
%s is the tunnel name. When negotiating Phase-1 and
selecting matched proposal, My IP Address could not be
resolved.
%s is the tunnel name. When negotiating Phase-1, the peer ID
did not match.
%s is the tunnel name. When negotiating Phase-2 and
checking IPsec SAs or the ID is IPv6 ID.
%s is the tunnel name. When negotiating Phase-2 and
checking IPsec SAs or the ID is IPv6 ID.
%s is the tunnel name. When negotiating Phase-1, the peer
tunnel IP did not match the secure gateway address in VPN
gateway.
When selecting a matched proposal, some protocol was given
more than once.
When selecting a matched proposal in phase-1 or phase-2, so
proposal was selected.
%s is the tunnel name. When negotiating Phase-1, the
authentication algorithm did not match.
%s is the tunnel name. When negotiating Phase-1, the
authentication method did not match.
%s is the tunnel name. When negotiating Phase-1, the
encryption algorithm did not match.
%s is the tunnel name. When negotiating Phase-1, the packet
was not a ISKAMP packet in the protocol field.
%s is the tunnel name. When negotiating Phase-1, the
transform ID was invalid.
613