ZyXEL Communications ZyWall USG 2000 User Manual page 842

Appendix A Log Descriptions
Table 277 IKE Logs (continued)
LOG MESSAGE
[SA] : Tunnel [%s]
Phase 1 invalid
protocol
[SA] : Tunnel [%s]
Phase 1 invalid
transform
[SA] : Tunnel [%s]
Phase 1 key group
mismatch
[SA] : Tunnel [%s]
Phase 1 negotiation
mode mismatch
[SA] : Tunnel [%s]
Phase 2 authentication
algorithm mismatch
[SA] : Tunnel [%s]
Phase 2 encapsulation
mismatch
[SA] : Tunnel [%s]
Phase 2 encryption
algorithm mismatch
[SA] : Tunnel [%s]
Phase 2 pfs mismatch
[SA] : Tunnel [%s]
Phase 2 pfs
unsupported: %d
[SA] : Tunnel [%s]
Phase 2 SA
encapsulation
mismatch
[SA] : Tunnel [%s]
Phase 2 SA protocol
mismatch
[SA] : Tunnel [%s] SA
sequence size mismatch
[XCHG] exchange type
is not IP, AGGR, or
INFO
Cannot resolve My IP
Addr %s for Tunnel
[%s]
Cannot resolve Secure
Gateway Addr %s for
Tunnel [%s]
Could not dial dynamic
tunnel "%s"
Could not dial
incomplete tunnel "%s"
842
DESCRIPTION
%s is the tunnel name. When negotiating Phase-1, the packet
was not a ISKAMP packet in the protocol field.
%s is the tunnel name. When negotiating Phase-1, the
transform ID was invalid.
%s is the tunnel name. When negotiating Phase-1, the DH
group of the attribute list `attrs' did not match the security
policy.
%s is the tunnel name. When negotiating Phase-1, the
negotiation mode did not match.
%s is the tunnel name. When negotiating Phase-2, the
authentication algorithm did not match.
%s is the tunnel name. When negotiating Phase-2, the
encapsulation did not match.
%s is the tunnel name. When negotiating Phase-2, the
encryption algorithm did not match.
%s is the tunnel name. When negotiating Phase-2, the PFS
specified did not match.
%s is the tunnel name. When negotiating Phase-2, this device
does not support the PFS specified.
%s is the tunnel name. When negotiating Phase-2, the SA
encapsulation did not match.
%s is the tunnel name. When negotiating Phase-2, the SA
protocol did not match.
%s is the tunnel name. When negotiating Phase-2, the SA
sequence size did not match.
This device is the responder and this is the initiator's first
packet, but exchange type is not IP, AGGR, or INFO and the
packet is ignored.
1st %s is my ip address. 2nd %s is the tunnel name. When
selecting a matched proposal in phase-1, the engine could not
get My-IP address.
1st %s is my ip address. 2nd %s is the tunnel name; When
selecting a matched proposal in phase-1, the engine could not
get the correct secure gateway address.
%s is the tunnel name. The tunnel is a dynamic tunnel and
the device cannot dial it.
%s is the tunnel name. The tunnel setting is not complete.
ZyWALL USG 2000 User's Guide