ZyXEL Communications ZyWALL USG 300 User Manual page 979

Table 291 IKE Logs (continued)
LOG MESSAGE
Fall Back [<name>]
will try primary peer
gateway at the %dth
time after %d seconds
Fall Back [<name>] to
primary peer gateway
successfully at the
%dth time
Table 292 IPSec Logs
LOG MESSAGE
Corrupt packet,
Inbound transform
operation fail
Encapsulated packet
too big with length
Get inbound transform
fail
Get outbound transform
fail
Inbound transform
operation fail
Outbound transform
operation fail
Packet too big with
Fragment Off
SPI:0x%x SEQ:0x%x
Execute transform step
fail, ret=%d
SPI:0x%x SEQ:0x%x No
rule found, Dropping
packet
SPI:0x%x SEQ:0x%x
Packet Anti-Replay
detected
VPN connection %s was
disabled.
VPN connection %s was
enabled.
Due to active
connection allowed
exceeded, %s was
deleted.
ZyWALL USG 300 User's Guide
DESCRIPTION
The ZyWALL will try to fall back to the listed VPN gateway's
primary gateway for the specified time after the specified
number of seconds.
The ZyWALL successfully fell back to the listed VPN gateway's
primary gateway.
DESCRIPTION
The device received corrupt IPsec packets and could not
process them.
An outgoing packet needed to be transformed but was longer
than 65535.
When performing inbound processing for incoming IPSEC
packets and ICMPs related to them, the engine cannot obtain
the transform context.
When outgoing packet need to be transformed, the engine
cannot obtain the transform context.
After encryption or hardware accelerated processing, the
hardware accelerator dropped a packet (resource shortage,
corrupt packet, invalid MAC, and so on).
After encryption or hardware accelerated processing, the
hardware accelerator dropped a packet (e.g., resource
overflow, corrupt packet, and so on).
An outgoing packet needed to be transformed, but the
fragment flag was off and the packet was too big.
The variables represent the SPI, sequence number and the
error number. When trying to perform transforming, the
engine returned an error.
The variables represent the SPI and the sequence number.
The packet did not match the tunnel policy and was dropped.
The variables represent the SPI and the sequence number.
The device received a packet again (that it had already
received).
%s is the VPN connection name. An administrator disabled the
VPN connection.
%s is the VPN connection name. An administrator enabled the
VPN connection.
%s is the VPN connection name. The number of active
connections exceeded the maximum allowed.
Appendix A Log Descriptions
979