ZyXEL Communications ZyWALL 5 User Manual page 532

ZyWALL 5 Internet Security Appliance
LOG MESSAGE
<Facility*8 + Severity>Mon
dd hr:mm:ss hostname
src="<srcIP:srcPort>"
dst="<dstIP:dstPort>"
msg="<msg>" note="<note>"
devID="<mac address last
three numbers>"
cat="<category>"
The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to the
RFC for detailed information on each type.
Log Commands
Go to the command interpreter interface (the Command Interpreter Appendix explains how to access
and use the commands).
Configuring What You Want the ZyWALL to Log
Use the sys logs load command to load the log setting buffer that allows you to configure
1.
which logs the ZyWALL is to record.
Use sys logs category to view a list of the log categories.
2.
P-14
Chart P-19 Syslog Logs
This message is sent by the system ("RAS" displays as the system
name if you haven't configured one) when the router generates a
syslog. The facility is defined in the web MAIN MENU->LOGS->Log
Settings page. The severity is the log's syslog class. The definition of
messages and notes are defined in the various log charts throughout
this appendix. The "devID" is the last three characters of the MAC
address of the router's LAN port. The "cat" is the same as the
category in the router's logs.
Chart P-20 RFC-2408 ISAKMP Payload Types
LOG DISPLAY
SA Security Association
PROP Proposal
TRANS Transform
KE Key Exchange
ID Identification
CER Certificate
CER_REQ Certificate Request
HASH Hash
SIG Signature
NONCE Nonce
NOTFY Notification
DEL Delete
VID Vendor ID
DESCRIPTION
PAYLOAD TYPE
Log Descriptions