ZyXEL Communications ZyWall USG 50-H Series User Manual page 609

Table 237 IKE Logs (continued)
LOG MESSAGE
[SA] : Tunnel [%s]
Phase 2 pfs
unsupported: %d
[SA] : Tunnel [%s]
Phase 2 SA
encapsulation
mismatch
[SA] : Tunnel [%s]
Phase 2 SA protocol
mismatch
[SA] : Tunnel [%s] SA
sequence size mismatch
[XCHG] exchange type
is not IP, AGGR, or
INFO
Cannot resolve My IP
Addr %s for Tunnel
[%s]
Cannot resolve Secure
Gateway Addr %s for
Tunnel [%s]
Could not dial dynamic
tunnel "%s"
Could not dial
incomplete tunnel "%s"
Could not dial manual
key tunnel "%s"
DPD response with
invalid ID
DPD response with no
active request
IKE Packet Retransmit
Phase 1 IKE SA process
done
Recv Main Mode request
from [%s]
Recv Aggressive Mode
request from [%s]
Recv:[SA][KE][ID][CER
T][CR][HASH][SIG][NON
CE][DEL][VID][ATTR][N
OTFY:%s]
Send Main Mode request
to [%s]
Send Aggressive Mode
request to [%s]
ZyWALL USG 50-H User's Guide
DESCRIPTION
%s is the tunnel name. When negotiating Phase-2, this device does
not support the PFS specified.
%s is the tunnel name. When negotiating Phase-2, the SA
encapsulation did not match.
%s is the tunnel name. When negotiating Phase-2, the SA protocol did
not match.
%s is the tunnel name. When negotiating Phase-2, the SA sequence
size did not match.
This device is the responder and this is the initiator's first packet, but
exchange type is not IP, AGGR, or INFO and the packet is ignored.
1st %s is my ip address. 2nd %s is the tunnel name. When selecting a
matched proposal in phase-1, the engine could not get My-IP address.
1st %s is my ip address. 2nd %s is the tunnel name; When selecting a
matched proposal in phase-1, the engine could not get the correct
secure gateway address.
%s is the tunnel name. The tunnel is a dynamic tunnel and the device
cannot dial it.
%s is the tunnel name. The tunnel setting is not complete.
%s is the tunnel name. The manual key tunnel cannot be dialed.
When receiving a DPD response with invalid ID ignored.
When receiving a DPD response with no active query.
When retransmitting the IKE packets.
When Phase 1 negotiation is complete.
%s is the remote name; When receiving a request to enter Main mode.
%s is the remote name; When receiving a request to enter Aggressive
mode.
This is a combined message for incoming IKE packets
%s is the remote name. The device sent a request to enter Main Mode.
%s is the remote name. The device sent a request to enter Aggressive
Mode.
Appendix A Log Descriptions
609