ZyXEL ZyWALL 5 UTM User Guide - Page 572
Logs Screens, ZyWALL 5/35/70 Series User's Guide, IKE Logs continued - zywall 5 vs
View all ZyXEL ZyWALL 5 UTM manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 572 highlights
Chapter 32 Logs Screens Table 188 IKE Logs (continued) LOG MESSAGE DESCRIPTION No proposal chosen Phase 1 or phase 2 parameters don't match. Please check all protocols / settings. Ex. One device being configured for 3DES and the other being configured for DES causes the connection to fail. Local / remote IPs of incoming request conflict with rule The security gateway is set to "0.0.0.0" and the router used the peer's "Local Address" as the router's "Remote Address". This information conflicted with static rule #d; thus the connection is not allowed. Cannot resolve Secure Gateway Addr for rule The router couldn't resolve the IP address from the domain name that was used for the secure gateway address. Peer ID: - ends of the connection. vs. My Remote - The displayed ID information did not match between the two ends of the connection. vs. My Local - ends of the connection. Send A packet was sent. Recv IKE uses ISAKMP to transmit data. Each ISAKMP packet contains many different types of payloads. All of them show in the LOG. Refer to RFC2408 - ISAKMP for a list of all ISAKMP payload types. Recv Mode request from The router received an IKE negotiation request from the peer address specified. Send Mode request to The router started negotiation with the peer. Invalid IP / The peer's "Local IP Address" is invalid. Remote IP / conflicts The security gateway is set to "0.0.0.0" and the router used the peer's "Local Address" as the router's "Remote Address". This information conflicted with static rule #d; thus the connection is not allowed. Phase 1 ID type mismatch This router's "Peer ID Type" is different from the peer IPSec router's "Local ID Type". Phase 1 ID content mismatch This router's "Peer ID Content" is different from the peer IPSec router's "Local ID Content". No known phase 1 ID type found The router could not find a known phase 1 ID in the connection attempt. ID type mismatch. Local / Peer: The phase 1 ID types do not match. ID content mismatch The phase 1 ID contents do not match. Configured Peer ID Content: The phase 1 ID contents do not match and the configured "Peer ID Content" is displayed. Incoming ID Content: The phase 1 ID contents do not match and the incoming packet's ID content is displayed. Unsupported local ID Type: The phase 1 ID type is not supported by the router. 572 ZyWALL 5/35/70 Series User's Guide