Appendix B Log Descriptions

Table 242 IKE Logs (continued)

LOG MESSAGE

DESCRIPTION

Cannot resolve My IP

1st %s is my ip address. 2nd %s is the tunnel name. When selecting a

Addr %s for Tunnel

matched proposal in phase-1, the engine could not get My-IP address.

[%s]

 

Cannot resolve Secure

1st %s is my ip address. 2nd %s is the tunnel name; When selecting a

Gateway Addr %s for

matched proposal in phase-1, the engine could not get the correct

Tunnel [%s]

secure gateway address.

Could not dial dynamic

%s is the tunnel name. The tunnel is a dynamic tunnel and the device

tunnel "%s"

cannot dial it.

Could not dial

%s is the tunnel name. The tunnel setting is not complete.

incomplete tunnel "%s"

 

Could not dial manual

%s is the tunnel name. The manual key tunnel cannot be dialed.

key tunnel "%s"

 

DPD response with

When receiving a DPD response with invalid ID ignored.

invalid ID

 

DPD response with no

When receiving a DPD response with no active query.

active request

 

IKE Packet Retransmit

When retransmitting the IKE packets.

Phase 1 IKE SA process

When Phase 1 negotiation is complete.

done

 

Recv Main Mode request

%s is the remote name; When receiving a request to enter Main mode.

from [%s]

 

Recv Aggressive Mode

%s is the remote name; When receiving a request to enter Aggressive

request from [%s]

mode.

Recv DPD request from

%s:%s is peer IP:Port. The device received a Dead Peer Detection

"%s:%s"

request.

Recv DPD response from

%s:%s is peer IP:Port. The device received a Dead Peer Detection

"%s:%s"

response.

Recv:[SA]%s[KE]%s[ID]

This is a combined message for incoming IKE packets.

%s[CERT]%s[CR]%s[HASH

 

]%s[SIG]%s[NONCE]%s[D

 

EL]%s[VID]%s[ATTR]%s

 

Send Main Mode request

%s is the remote name. The device sent a request to enter Main Mode.

to [%s]

 

Send Aggressive Mode

%s is the remote name. The device sent a request to enter Aggressive

request to [%s]

Mode.

Send DPD request to

%s:%s is peer IP:Port. The device sent a Dead Peer Detection request

"%s:%s"

to the peer.

Send DPD response to

%s:%s is peer IP:Port. The device sent a DPD response sent to the

"%s:%s"

peer.

Send:[ID]%s[SA]%s[KE]

This is a combined message for outgoing IKE packets.

%s[ID]%s[CERT]%s[CR]%

 

s[HASH]%s[SIG]%s[NONC

 

E]%s[DEL]%s[VID]%s[AT

 

TR]%s[

 

Start Phase 2: Quick

Indicates the beginning of phase 2 using quick mode.

Mode

 

 

677

ZyWALL USG 1000 User’s Guide