Cisco ISR 4000 series Configuration Manual page 49

Cisco ISR 4000 Family Routers Administrator Guidance
Requirement Auditable Events
FIA_X509_EXT.1 Unsuccessful
attempt to validate
a certificate
Session
establishment with
CA
Additional
Audit Record
Contents
Login failed [user: auditperson] [Source:
0.0.0.0] [localport: 0] [Reason: Login
Authentication Failed] at 23:45:43 a Sat
Apr 25 2009
See FCS_SSH_EXT.1 for remote login
audit events.
Reason for 42479:
failure 6038B31E75BFF128 - Responder SPI :
ECB6C134F5652076 Message id: 1
42478:
IKEv2:(SA ID = 1):Sending Packet [To
Entire packet
210.1.1.1:500/From 110.1.1.1:500/VRF
contents of
i0:f0]42442: *Feb
packets
IKEv2:(SA ID = 1):[PKI -> IKEv2]
transmitted/rec
Getting of cert chain for the trustpoint
eived during
PASSED
session
42441:
establishment.
IKEv2:(SA ID = 1):[IKEv2 -> PKI]
Getting cert chain for the trustpoint rahul
42440:
IKEv2:(SA ID = 1):[PKI -> IKEv2]
Retrieved trustpoint(s): 'rahul'
42439:
IKEv2:(SA ID = 1):[IKEv2 -> PKI]
Retrieving trustpoint(s) from received
certificate hash(es)
42438:
IKEv2:(SA
IKE_SA_INIT message
42437:
IKEv2:(SA ID = 1):Verify SA init
message
42436:
IKEv2:(SA
IKE_SA_INIT message
42435:
NOTIFY(NAT_DETECTION_SOURC
E_IP)
NOTIFY(NAT_DETECTION_DESTIN
ATION_IP)
NOTIFY(HTTP_CERT_LOOKUP_SU
PPORTED)
Sample Record
Initiator SPI
*Feb 5 11:10:18.749:
5 11:10:18.747:
*Feb 5 11:10:18.747:
*Feb 5 11:10:18.747:
*Feb 5 11:10:18.747:
*Feb 5 11:10:18.747:
ID = 1):Processing
*Feb 5 11:10:18.747:
*Feb 5 11:10:18.747:
ID = 1):Processing
SA KE N VID
CERTREQ
Page 49 of 66
:
VID