ZyXEL Communications Prestige 652H series User Manual page 571

LOG MESSAGE
Start Phase 2: Quick Mode
!! IKE Negotiation is in process
!! Duplicate requests with the same
cookie
!! No proposal chosen
!! Verifying Local ID failed
!! Verifying Remote ID failed
!! Local / remote IPs of incoming
request conflict with rule <#d>
!! Invalid IP <IP start>/<IP end>
!! Remote IP <IP start> / <IP end>
conflicts
!! Active connection allowed
exceeded
!! IKE Packet Retransmit
!! Failed to send IKE Packet
Log Descriptions
Chart K-8 Sample IKE Key Exchange Logs
Prestige 652H/HW Series User's Guide
DESCRIPTION
Phase 2 negotiation is begins by using Quick Mode.
The Prestige has begun negotiation with the peer for
the connection already, but the IKE key exchange has
not finished yet.
The Prestige has received multiple requests from the
same peer but it is still processing the first IKE packet
from that peer.
The parameters configured for Phase 1 or Phase 2
negotiations don't match. Please check all protocols
and settings for these phases. For example, one party
may be using 3DES encryption, but the other party is
using DES encryption, so the connection will fail.
During IKE Phase 2 negotiation, both parties
exchange policy details, including local and remote IP
address ranges. If these ranges differ, then the
connection fails.
If the security gateway is "0.0.0.0", the Prestige will
use the peer's "Local Addr" as its "Remote Addr". If
this IP (range) conflicts with a previously configured
rule then the connection is not allowed.
The peer's "Local IP Addr" range is invalid.
If the security gateway is "0.0.0.0", the Prestige will
use the peer's "Local Addr" as its "Remote Addr". If a
peer's "Local Addr" range conflicts with other
connections, then the Prestige will not accept VPN
connection requests from this peer.
The Prestige limits the number of simultaneous Phase
2 SA negotiations. The IKE key exchange process fails
if this limit is exceeded.
The Prestige did not receive a response from the peer
and so retransmits the last packet sent.
The Prestige cannot send IKE packets due to a
network error.
K-9