ZyXEL Communications ZyWALL 5 User Manual page 527

LOG MESSAGE
Rule [%d] Phase 2
encapsulation mismatch
Rule [%d]> Phase 2 pfs
mismatch
Rule [%d] Phase 1 ID
mismatch
Rule [%d] Phase 1 hash
mismatch
Rule [%d] Phase 1 preshared
key mismatch
Rule [%d] Tunnel built
successfully
Rule [%d] Peer's public key
not found
Rule [%d] Verify peer's
signature failed
Rule [%d] Sending IKE
request
Rule [%d] Receiving IKE
request
Swap rule to rule [%d]
Rule [%d] Phase 1 key length
mismatch
Rule [%d] phase 1 mismatch
Rule [%d] phase 2 mismatch
Rule [%d] Phase 2 key length
mismatch
LOG MESSAGE
Enrollment successful
Enrollment failed
Failed to resolve <SCEP
CA server url>
Enrollment successful
Enrollment failed
Log Descriptions
Chart P-13 IKE Logs
The listed rule's IKE phase 2 encapsulation did not match between the
router and the peer.
The listed rule's IKE phase 2 perfect forward secret (pfs) setting did
not match between the router and the peer.
The listed rule's IKE phase 1 ID did not match between the router and
the peer.
The listed rule's IKE phase 1 hash did not match between the router
and the peer.
The listed rule's IKE phase 1 pre-shared key did not match between
the router and the peer.
The listed rule's IPSec tunnel has been built successfully.
The listed rule's IKE phase 1 peer's public key was not found.
The listed rule's IKE phase 1verification of the peer's signature failed.
IKE sent an IKE request for the listed rule.
IKE received an IKE request for the listed rule.
The router changed to using the listed rule.
The listed rule's IKE phase 1 key length (with the AES encryption
algorithm) did not match between the router and the peer.
The listed rule's IKE phase 1 did not match between the router and the
peer.
The listed rule's IKE phase 2 did not match between the router and the
peer.
The listed rule's IKE phase 2 key lengths (with the AES encryption
algorithm) did not match between the router and the peer.
Chart P-14 PKI Logs
The SCEP online certificate enrollment was successful. The Destination field
records the certification authority server IP address and port.
The SCEP online certificate enrollment failed. The Destination field records
the certification authority server's IP address and port.
The SCEP online certificate enrollment failed because the certification
authority server's address cannot be resolved.
The CMP online certificate enrollment was successful. The Destination field
records the certification authority server's IP address and port.
The CMP online certificate enrollment failed. The Destination field records the
certification authority server's IP address and port.
ZyWALL 5 Internet Security Appliance
DESCRIPTION
DESCRIPTION
P-9