NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall Reference Manual page 352

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
Table C-21. System Logs: IPsec VPN Tunnel, Client Policy, Tunnel Establishment
Messages 1 and 2
Message 3
Message 4
Message 5
Messages 6 through 18
Message 19 and 20
Messages 21 and 22
Message 23
Messages 24 and 25
C-14
2000 Jan 1 02:17:05 [SRX5308] [IKE] Adding IKE configuration with identifier
"clientpol1"_
2000 Jan 1 02:17:05 [SRX5308] [IKE] Adding IPSec configuration with identifier
"clientpol1"_
2000 Jan 1 02:23:53 [SRX5308] [IKE] Remote configuration for identifier
"srx_remote1.com" found_
2000 Jan 1 02:23:53 [SRX5308] [IKE] Received request for new phase 1
negotiation: 20.0.0.2[500]<=>20.0.0.1[500]_
2000 Jan 1 02:23:53 [SRX5308] [IKE] Beginning Aggressive mode._
2000 Jan 1 02:23:53 [SRX5308] [IKE] Received unknown Vendor ID_
2000 Jan 1 02:23:53 [SRX5308] [IKE] Received Vendor ID: DPD_
2000 Jan 1 02:23:53 [SRX5308] [IKE] DPD is Enabled_
2000 Jan 1 02:23:53 [SRX5308] [IKE] Received Vendor ID: draft-ietf-ipsraisakmp-
xauth-06.txt_
2000 Jan 1 02:23:53 [SRX5308] [IKE] Received unknown Vendor ID_
2000 Jan 1 02:23:53 [SRX5308] [IKE] Received Vendor ID: draft-ietf-ipsecnat-
t-ike-02__
2000 Jan 1 02:23:53 [SRX5308] [IKE] For 20.0.0.1[500], Selected NAT-T version:
draft-ietf-ipsec-nat-t-ike-02_
2000 Jan 1 02:23:53 [SRX5308] [IKE] Setting DPD Vendor ID_
2000 Jan 1 02:23:53 [SRX5308] [IKE] NAT-D payload matches for 20.0.0.2[500]_
2000 Jan 1 02:23:53 [SRX5308] [IKE] NAT-D payload matches for 20.0.0.1[500]_
2000 Jan 1 02:23:53 [SRX5308] [IKE] Ignore REPLAY-STATUS notification from
20.0.0.1[500]._
2000 Jan 1 02:23:53 [SRX5308] [IKE] Ignore INITIAL-CONTACT notification from
20.0.0.1[500] because it is only accepted after phase 1._
2000 Jan 1 02:23:53 [SRX5308] [IKE] NAT not detected _
2000 Jan 1 02:23:53 [SRX5308] [IKE] ISAKMP-SA established for 20.0.0.2[500]-
20.0.0.1[500] with spi:da1f2efbf0635943:4eb6fae677b2e4f4_
2000 Jan 1 02:23:53 [SRX5308] [IKE] Sending Informational Exchange: notify
payload[INITIAL-CONTACT]_
2000 Jan 1 02:23:53 [SRX5308] [IKE] Responding to new phase 2 negotiation:
20.0.0.2[0]<=>20.0.0.1[0]_
2000 Jan 1 02:23:53 [SRX5308] [IKE] Using IPsec SA configuration: 192.168.11.0/
24<->0.0.0.0/0 from srx_remote1.com_
2000 Jan 1 02:23:53 [SRX5308] [IKE] No policy found, generating the policy :
20.0.0.1/32[0] 192.168.11.2/32[0] proto=any dir=in_
2000 Jan 1 02:23:53 [SRX5308] [IKE] IPsec-SA established: ESP/Tunnel 20.0.0.1-
>20.0.0.2 with spi=248146076(0xeca689c)_
2000 Jan 1 02:23:53 [SRX5308] [IKE] IPsec-SA established: ESP/Tunnel 20.0.0.2-
>20.0.0.1 with spi=3000608295(0xb2d9a627)_
v1.0, April 2010
System Logs and Error Messages