Table 14-14 Sample Ipsec Logs During Packet Transmission - ZyXEL Communications Prestige 792H User Manual

LOG MESSAGE
!! Local / remote IPs of incoming
request conflict with rule <#d>
!! Invalid IP <IP start>/<IP end>
!! Remote IP <IP start> / <IP end>
conflicts
!! Active connection allowed
exceeded
!! IKE Packet Retransmit
!! Failed to send IKE Packet
!! Too many errors! Deleting SA
The following table shows sample log messages during packet transmission.

Table 14-14 Sample IPSec Logs During Packet Transmission

LOG MESSAGE
!! WAN IP changed to <IP>
!! Cannot find Phase 2 SA
!! Discard REPLAY packet
VPN Screens
Table 14-13 Sample IKE Key Exchange Logs
If the Prestige's WAN IP changes, all configured "My IP Addr" are
changed to b "0.0.0.0".. If this field is configured as 0.0.0.0, then the
Prestige will use the current Prestige WAN IP address (static or
dynamic) to set up the VPN tunnel.
The Prestige cannot find a phase 2 SA that corresponds with the
SPI of an inbound packet (from the peer); the packet is dropped.
If the Prestige receives a packet with the wrong sequence number it
will discard it.
DESCRIPTION
If the security gateway is "0.0.0.0", the Prestige will
use the peer's "Local Addr" as its "Remote Addr". If
this IP (range) conflicts with a previously configured
rule then the connection is not allowed.
The peer's "Local IP Addr" range is invalid.
If the security gateway is "0.0.0.0", the Prestige will
use the peer's "Local Addr" as its "Remote Addr". If a
peer's "Local Addr" range conflicts with other
connections, then the Prestige will not accept VPN
connection requests from this peer.
The Prestige limits the number of simultaneous Phase
2 SA negotiations. The IKE key exchange process fails
if this limit is exceeded.
The Prestige did not receive a response from the peer
and so retransmits the last packet sent.
The Prestige cannot send IKE packets due to a
network error.
The Prestige deletes an SA when too many errors
occur.
DESCRIPTION
Prestige 792H User's Guide
14-29