Netgear SRX5308 SRX5308 Reference Manual - Page 349
Table C-17. System Logs: IPsec VPN Tunnel, SA lifetime 150 sec in phase 1; 300 sec
UPC - 606449065145
View all Netgear SRX5308 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 349 highlights
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual Table C-16. System Logs: IPsec VPN Tunnel, Tunnel Establishment (continued) Explanation Recommended Action Message 1-5: IPsec, IKE, and VPN firewall restart. Message 6-7: IPsec and IKE configurations are added with the identifier "pol1." Message 8-19: New phase 1 negotiation starts by determining the configuration for the WAN host. Dead Peer Detection (DPD) is enabled and set. NAT payload matching and NAT detection are done. Message 20-21: ISAKMP-SA is established between the 2 WANs and information is exchanged. Message 22-23: New phase 2 negotiation starts by using IPsec SA configuration pertaining to the LAN hosts. Message 24-25: IPsec-SA VPN tunnel is established. None Table C-17. System Logs: IPsec VPN Tunnel, SA lifetime (150 sec in phase 1; 300 sec in phase 2), VPN Tunnel is Reestablished Message 1 2000 Jan 1 04:32:25 [SRX5308] [IKE] Sending Informational Exchange: delete payload[]_ Messages 2 through 6 2000 Jan 1 04:32:25 [SRX5308] [IKE] purged IPsec-SA proto_id=ESP spi=181708762._ 2000 Jan 1 04:32:25 [SRX5308] [IKE] purged IPsec-SA proto_id=ESP spi=153677140._ 2000 Jan 1 04:32:25 [SRX5308] [IKE] an undead schedule has been deleted: 'pk_recvupdate'._ 2000 Jan 1 04:32:25 [SRX5308] [IKE] IPSec configuration with identifier "pol1" deleted successfully_ 2000 Jan 1 04:32:25 [SRX5308] [IKE] no phase 2 bounded._ Message 7 2000 Jan 1 04:32:25 [SRX5308] [IKE] Sending Informational Exchange: delete payload[]_ Messages 8 through 11 2000 Jan 1 04:32:25 [SRX5308] [IKE] Purged ISAKMP-SA with spi=d67f2be9ca0cb241:8a094623c6811286._ 2000 Jan 1 04:32:25 [SRX5308] [IKE] an undead schedule has been deleted: 'purge_remote'._ 2000 Jan 1 04:32:25 [SRX5308] [IKE] IKE configuration with identifier "pol1" deleted successfully_ 2000 Jan 1 04:32:25 [SRX5308] [IKE] Could not find configuration for 20.0.0.1[500]_ Explanation Message 1: Informational exchange for deleting the payload. Message 2-6: Phase 2 configuration is purged and confirms that no phase 2 is bounded. Message 7: Informational exchange for deleting the payload. Message 8-11: Phase 1 configuration. The VPN tunnel is reestablished. Recommended Action None System Logs and Error Messages v1.0, April 2010 C-11