Appendix A Log Descriptions

Table 289 IKE Logs (continued)

LOG MESSAGE

DESCRIPTION

Cannot resolve Secure

1st %s is my ip address. 2nd %s is the tunnel name; When selecting a

Gateway Addr %s for

matched proposal in phase-1, the engine could not get the correct

Tunnel [%s]

secure gateway address.

Could not dial dynamic

%s is the tunnel name. The tunnel is a dynamic tunnel and the device

tunnel "%s"

cannot dial it.

Could not dial

%s is the tunnel name. The tunnel setting is not complete.

incomplete tunnel "%s"

 

Could not dial manual

%s is the tunnel name. The manual key tunnel cannot be dialed.

key tunnel "%s"

 

DPD response with

When receiving a DPD response with invalid ID ignored.

invalid ID

 

DPD response with no

When receiving a DPD response with no active query.

active request

 

IKE Packet Retransmit

When retransmitting the IKE packets.

Phase 1 IKE SA process

When Phase 1 negotiation is complete.

done

 

Recv Main Mode request

%s is the remote name; When receiving a request to enter Main mode.

from [%s]

 

Recv Aggressive Mode

%s is the remote name; When receiving a request to enter Aggressive

request from [%s]

mode.

Recv:[SA][KE][ID][CER

This is a combined message for incoming IKE packets

T][CR][HASH][SIG][NON

 

CE][DEL][VID][ATTR][N

 

OTFY:%s]

 

Send Main Mode request

%s is the remote name. The device sent a request to enter Main Mode.

to [%s]

 

Send Aggressive Mode

%s is the remote name. The device sent a request to enter Aggressive

request to [%s]

Mode.

Send:[SA][KE][ID][CER

This is a combined message for outgoing IKE packets.

T][CR][HASH][SIG][NON

 

CE][DEL][VID][ATTR][N

 

OTFY:%s]

 

Start Phase 2: Quick

Indicates the beginning of phase 2 using quick mode.

Mode

 

The cookie pair is :

Indicates the initiator/responder cookie pair.

0x%08x%08x /

 

0x%08x%08x

 

The IPSec tunnel "%s"

%s is the tunnel name. When dialing a tunnel, the tunnel is already

is already established

dialed.

Tunnel [%s] built

%s is the tunnel name. The phase-2 tunnel negotiation is complete.

successfully

 

Tunnel [%s] Phase 1

%s is the tunnel name. When negotiating phase-1, the pre-shared key

pre-shared key

did not match.

mismatch

 

Tunnel [%s] Recving

%s is the tunnel name. The device received an IKE request.

IKE request

 

784

 

ZyWALL USG 100/200 Series User’s Guide