ZyXEL Communications Vantage Report User Manual page 614

Appendix B ZyWALL USG Series and ZyWALL 1050 Log Descriptions
Table 276 IKE Logs (continued)
LOG MESSAGE
[SA] : Tunnel [%s]
Phase 1 key group
mismatch
[SA] : Tunnel [%s]
Phase 1 negotiation
mode mismatch
[SA] : Tunnel [%s]
Phase 2 authentication
algorithm mismatch
[SA] : Tunnel [%s]
Phase 2 encapsulation
mismatch
[SA] : Tunnel [%s]
Phase 2 encryption
algorithm mismatch
[SA] : Tunnel [%s]
Phase 2 pfs mismatch
[SA] : Tunnel [%s]
Phase 2 pfs
unsupported: %d
[SA] : Tunnel [%s]
Phase 2 SA
encapsulation mismatch
[SA] : Tunnel [%s]
Phase 2 SA protocol
mismatch
[SA] : Tunnel [%s] SA
sequence size mismatch
[XCHG] exchange type
is not IP, AGGR, or
INFO
Cannot resolve My IP
Addr %s for Tunnel
[%s]
Cannot resolve Secure
Gateway Addr %s for
Tunnel [%s]
Could not dial dynamic
tunnel "%s"
Could not dial
incomplete tunnel "%s"
Could not dial manual
key tunnel "%s"
DPD response with
invalid ID
DPD response with no
active request
614
DESCRIPTION
%s is the tunnel name. When negotiating Phase-1, the DH
group of the attribute list `attrs' did not match the security
policy.
%s is the tunnel name. When negotiating Phase-1, the
negotiation mode did not match.
%s is the tunnel name. When negotiating Phase-2, the
authentication algorithm did not match.
%s is the tunnel name. When negotiating Phase-2, the
encapsulation did not match.
%s is the tunnel name. When negotiating Phase-2, the
encryption algorithm did not match.
%s is the tunnel name. When negotiating Phase-2, the PFS
specified did not match.
%s is the tunnel name. When negotiating Phase-2, this device
does not support the PFS specified.
%s is the tunnel name. When negotiating Phase-2, the SA
encapsulation did not match.
%s is the tunnel name. When negotiating Phase-2, the SA
protocol did not match.
%s is the tunnel name. When negotiating Phase-2, the SA
sequence size did not match.
This device is the responder and this is the initiator's first
packet, but exchange type is not IP, AGGR, or INFO and the
packet is ignored.
1st %s is my ip address. 2nd %s is the tunnel name. When
selecting a matched proposal in phase-1, the engine could not
get My-IP address.
1st %s is my ip address. 2nd %s is the tunnel name; When
selecting a matched proposal in phase-1, the engine could not
get the correct secure gateway address.
%s is the tunnel name. The tunnel is a dynamic tunnel and
the device cannot dial it.
%s is the tunnel name. The tunnel setting is not complete.
%s is the tunnel name. The manual key tunnel cannot be
dialed.
When receiving a DPD response with invalid ID ignored.
When receiving a DPD response with no active query.
Vantage Report User's Guide