Nortel Networks NN46110-602 manual Conn backlog reached, possible SYN attack

182 Appendix C System messages

CaAuthServerCollection: authenticate xxx cert [xxx] invalid signature by [xxx] - xxx

Description: The certificate passed in with the authentication request does not have a valid signature, based on the CA certificate configured on the VPN Router. This indicates either an incorrect certificate at the remote side (either a client or branch office), or an incorrect CA certificate installed on the VPN Router.

Action: Make sure that both sides have the correct certificates installed.

CaAuthServerCollection: authenticate xxx[xxx]:xxx bad certificate - xxx

Description: The certificate passed in with the authentication request is not a valid X.509 certificate. This error occurs if the certificate configured either at the client or the other side of the Branch Office is incorrect.

Action: Install the correct certificates.

Conn backlog reached, possible SYN attack

Description: The number of connections on a socket is reaching or has completely reached the maximum number of queued connections.

Action: The device can be under a syn attack. Notify your IS department.

Security: store new system IP address xxx failed—xxx

Description: The system IP address cannot be stored in the VPN Router

configuration LDAP entry. Possible cause: the LDAP server is not accessible.

Action: Start the LDAP server or change the external LDAP server configuration to make it accessible.

Security: store new system name xxx failed—xxx

Description: The system name cannot be stored in the VPN Router configuration LDAP entry. This can indicate that the LDAP server is not accessible.

NN46110-602