Table 25-2 Sample Ipsec Logs During Packet Transmission - ZyXEL Communications ZyXEL ZyWALL 50 User Manual

LOG MESSAGE
!! Local / remote IPs of incoming
request conflict with rule <#d>
!! Invalid IP <IP start>/<IP end>
!! Remote IP <IP start> / <IP end>
conflicts
!! Active connection allowed exceeded
!! IKE Packet Retransmit
!! Failed to send IKE Packet
!! Too many errors! Deleting SA
The following table shows sample log messages during packet transmission.

Table 25-2 Sample IPSec Logs During Packet Transmission

LOG MESSAGE
!! WAN IP changed to <IP>
!! Cannot find Phase 2 SA
!! Discard REPLAY packet
!! Inbound packet
authentication failed
IPSec Log
Table 25-1 Sample IKE Key Exchange Logs
If the security gateway is "0.0.0.0", the ZyWALL will
use the peer's "Local Addr" as its "Remote Addr". If this
IP (range) conflicts with a previously configured rule
then the connection is not allowed.
The peer's "Local IP Addr" range is invalid.
If the security gateway is "0.0.0.0", the ZyWALL will
use the peer's "Local Addr" as its "Remote Addr". If a
peer's "Local Addr" range conflicts with other
connections, then the ZyWALL will not accept VPN
connection requests from this peer.
The ZyWALL limits the number of simultaneous Phase
2 SA negotiations. The IKE key exchange process fails
if this limit is exceeded.
The ZyWALL did not receive a response from the peer
and so retransmits the last packet sent.
The ZyWALL cannot send IKE packets due to a
network error.
The ZyWALL deletes an SA when too many errors
occur.
If the ZyWALL's WAN IP changes, all configured "My IP Addr" are
changed to b "0.0.0.0".. If this field is configured as 0.0.0.0, then
the ZyWALL will use the current ZyWALL WAN IP address (static
or dynamic) to set up the VPN tunnel.
The ZyWALL cannot find a phase 2 SA that corresponds with the
SPI of an inbound packet (from the peer); the packet is dropped.
If the ZyWALL receives a packet with the wrong sequence number
it will discard it.
The authentication configuration settings are incorrect. Please
check them.
ZyWALL 50 Internet Security Gateway
DESCRIPTION
DESCRIPTION
25-3