NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall Reference Manual page 353

Table C-21. System Logs: IPsec VPN Tunnel, Client Policy, Tunnel Establishment
Explanation
Recommended Action
Table C-22. System Logs: IPsec VPN Tunnel, Client Policy, Disconnection from the Client
Side
Message
Explanation
Recommended Action None
System Logs and Error Messages
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
Message 1–2: IPsec and IKE configurations are added with the identifier
"clientpol1."
Message 3: The remote configuration is found with an identifier instead with an IP
address.
Message 4: New phase 1 negotiation starts.
Message 5: Aggressive mode begins.
Message 6–18: Dead Peer Detection (DPD) is enabled, a proper vendor ID is
received, and DPD is set. NAT payload matching and NAT detection are done.
Message 19-20: ISAKMP-SA is established between the 2 WANs and information
is exchanged.
Message 21–22: New phase 2 negotiation starts by using the IPsec SA
configuration pertaining to the LAN hosts.
Message 23: Generating a new policy between the LAN host and the remote WAN
host.
Message 24–25: The IPsec-SA VPN tunnel is established.
None
2000 Jan 1 02:34:45 [SRX5308] [IKE] Deleting generated policy for 20.0.0.1[0]_
2000 Jan 1 02:34:45 [SRX5308] [IKE] an undead schedule has been deleted:
'pk_recvupdate'._
2000 Jan 1 02:34:45 [SRX5308] [IKE] Purged IPsec-SA with proto_id=ESP and
spi=3000608295(0xb2d9a627)._
2000 Jan 1 02:34:45 [SRX5308] [IKE] Purged IPsec-SA with proto_id=ESP and
spi=248146076(0xeca689c)._
2000 Jan 1 02:34:45 [SRX5308] [IKE] Purged ISAKMP-SA with proto_id=ISAKMP
and spi=da1f2efbf0635943:4eb6fae677b2e4f4._
2000 Jan 1 02:34:46 [SRX5308] [IKE] ISAKMP-SA deleted for 20.0.0.2[500]-
20.0.0.1[500] with spi:da1f2efbf0635943:4eb6fae677b2e4f4_
Phase 2 and phase 1 policies are deleted when the client is disconnected.
v1.0, April 2010
C-15