ZyXEL Communications 792H manual Viewing IPSec Log, VPN Responder IPSec Log

Prestige 792H G.SHDSL Router

37.3 Viewing IPSec Log

To view the IPSec and IKE connection log, type 3 in menu 27 and press [ENTER] to display the IPSec log as shown next. The following figure shows a typical log from the initiator of a VPN connection.

Index:		Date/Time:	Log:
------------------------------------------------------------
001	01	Jan 08:02:22	Send Main Mode request to <192.168.100.101>
002	01	Jan 08:02:22	Send:<SA>
003	01	Jan 08:02:22	Recv:<SA>
004	01	Jan 08:02:24	Send:<KE><NONCE>
005	01	Jan 08:02:24	Recv:<KE><NONCE>
006	01	Jan 08:02:26	Send:<ID><HASH>
007	01	Jan 08:02:26	Recv:<ID><HASH>
008	01	Jan 08:02:26	Phase 1 IKE SA process done
009	01	Jan 08:02:26	Start Phase 2: Quick Mode
010	01	Jan 08:02:26	Send:<HASH><SA><NONCE><ID><ID>
011	01	Jan 08:02:26	Recv:<HASH><SA><NONCE><ID><ID>
012	01	Jan 08:02:26	Send:<HASH>

Clear IPSec Log (y/n):

Figure 37-2 Example VPN Initiator IPSec Log

37.3.1 VPN Responder IPSec Log

The following figure shows a typical log from the VPN connection peer.

Index:		Date/Time:	Log:
------------------------------------------------------------
001	01	Jan 08:08:07	Recv Main Mode request from <192.168.100.100>
002	01	Jan 08:08:07	Recv:<SA>
003	01	Jan 08:08:08	Send:<SA>
004	01	Jan 08:08:08	Recv:<KE><NONCE>
005	01	Jan 08:08:10	Send:<KE><NONCE>
006	01	Jan 08:08:10	Recv:<ID><HASH>
007	01	Jan 08:08:10	Send:<ID><HASH>
008	01	Jan 08:08:10	Phase 1 IKE SA process done
009	01	Jan 08:08:10	Recv:<HASH><SA><NONCE><ID><ID>
010	01	Jan 08:08:10	Start Phase 2: Quick Mode
011	01	Jan 08:08:10	Send:<HASH><SA><NONCE><ID><ID>
012	01	Jan 08:08:10	Recv:<HASH>

Clear IPSec Log (y/n):

Diagram 37-1 Example VPN Responder IPSec Log

This menu is useful for troubleshooting. A log index number, the date and time the log was created and a log message is displayed.

Double exclamation marks (!!) denote an error or warning message.

SA Monitor 37-3