ZyXEL Communications ISG50-ISDN User Manual page 795

Table 319 myZyXEL.com Logs (continued)
LOG MESSAGE
Certification
verification failed:
Depth: %d, Error
Number(%d):%s.
Certificate issuer
name:%s.
The wrong format for
HTTP header.
Timeout for get server
response.
Download file size is
wrong.
Parse HTTP header has
failed.
Table 320 IKE Logs
LOG MESSAGE
Peer has not announced
DPD capability
[COOKIE] Invalid
cookie, no sa found
[DPD] No response from
peer. Using existing
Phase-1 SA in %u
seconds. Trying with
Phase-1 rekey.
[HASH] : Tunnel [%s]
Phase 1 hash mismatch
[HASH] : Tunnel [%s]
Phase 2 hash mismatch"
[ID] : Invalid ID
information
[ID] : Tunnel [%s]
Local IP mismatch
[ID] : Tunnel [%s] My
IP mismatch
[ID] : Tunnel [%s]
Phase 1 ID mismatch
[ID] : Tunnel [%s]
Phase 2 Local ID
mismatch
ISG50 User's Guide
DESCRIPTION
Verification of a server's certificate failed while processing an HTTPS
connection. This log identifies the reason for the failure.
1st %d: certificate chain level
2nd %d: error number
%s: error message
Verification of the specified certificate failed because the device could
not get the certificate's issuer name. %s is the certificate name.
The header format of a packet returned by a server is wrong.
After the device sent packets to a server, the device did not receive
any response from the server. The root cause may be a network delay
issue.
The file size downloaded for AS is not identical with content-length
Device can't parse the HTTP header in a response returned by a
server. Maybe some HTTP headers are missing.
DESCRIPTION
The remote IPSec router has not announced its dead peer detection
(DPD) capability to this device.
Cannot find SA according to the cookie.
The device's DPD feature has not detected a response from the
remote IPSec router. %u is the retry time.
%s is the tunnel name. When negotiating Phase-1, the exchange hash
did not match.
%s is the tunnel name. When negotiating Phase-2, the calculated
quick mode authentication hash did not match.
ID payload is not valid (in Phase-1 is local/peer ID, in Phase-2 is
local/remote policy).
%s is the tunnel name. When negotiating Phase-1, the local tunnel IP
did not match the My IP in VPN gateway.
%s is the tunnel name. When negotiating Phase-1 and selecting
matched proposal, My IP Address could not be resolved.
%s is the tunnel name. When negotiating Phase-1, the peer ID did not
match.
%s is the tunnel name. When negotiating Phase-2 and checking IPsec
SAs or the ID is IPv6 ID.
Appendix A Log Descriptions
795