Chart K-8 Sample Ike Key Exchange Logs - ZyXEL Communications Prestige 652H series User Manual

Prestige 652H/HW Series User's Guide
Index:
------------------------------------------------------------
001
002
003
004
005
006
007
008
009
010
011
012
Clear IPSec Log (y/n):
This menu is useful for troubleshooting. A log index number, the date and time the log was created and a log
message are displayed.
Double exclamation marks (!!) denote an error or warning message.
The following table shows sample log messages during IKE key exchange.
LOG MESSAGE
Send <Symbol> Mode request to <IP>
Send <Symbol> Mode request to <IP>
Recv <Symbol> Mode request from
<IP>
Recv <Symbol> Mode request from
<IP>
Recv:<Symbol>
Phase 1 IKE SA process done
K-8
Date/Time:
01 Jan 08:08:07 Recv Main Mode request from <192.168.100.100>
01 Jan 08:08:07 Recv:<SA>
01 Jan 08:08:08 Send:<SA>
01 Jan 08:08:08 Recv:<KE><NONCE>
01 Jan 08:08:10 Send:<KE><NONCE>
01 Jan 08:08:10 Recv:<ID><HASH>
01 Jan 08:08:10 Send:<ID><HASH>
01 Jan 08:08:10 Phase 1 IKE SA process done
01 Jan 08:08:10 Recv:<HASH><SA><NONCE><ID><ID>
01 Jan 08:08:10 Start Phase 2: Quick Mode
01 Jan 08:08:10 Send:<HASH><SA><NONCE><ID><ID>
01 Jan 08:08:10 Recv:<HASH>
Diagram K-2 Example VPN Responder IPSec Log

Chart K-8 Sample IKE Key Exchange Logs

Log:
DESCRIPTION
The Prestige has started negotiation with the peer.
The Prestige has received an IKE negotiation request
from the peer.
IKE uses the ISAKMP protocol (refer to RFC2408 –
ISAKMP) to transmit data. Each ISAKMP packet
contains payloads of different types that show in the
log – see Chart J-10.
Phase 1 negotiation is finished.
Log Descriptions