User manual

Appendix A Log Descriptions
ZyWALL USG 300 User’s Guide
950
[SA] : Tunnel [%s]
Phase 1 invalid
protocol
%s is the tunnel name. When negotiating Phase-1, the packet
was not a ISKAMP packet in the protocol field.
[SA] : Tunnel [%s]
Phase 1 invalid
transform
%s is the tunnel name. When negotiating Phase-1, the
transform ID was invalid.
[SA] : Tunnel [%s]
Phase 1 key group
mismatch
%s is the tunnel name. When negotiating Phase-1, the DH
group of the attribute list `attrs' did not match the security
policy.
[SA] : Tunnel [%s]
Phase 1 negotiation
mode mismatch
%s is the tunnel name. When negotiating Phase-1, the
negotiation mode did not match.
[SA] : Tunnel [%s]
Phase 2 authentication
algorithm mismatch
%s is the tunnel name. When negotiating Phase-2, the
authentication algorithm did not match.
[SA] : Tunnel [%s]
Phase 2 encapsulation
mismatch
%s is the tunnel name. When negotiating Phase-2, the
encapsulation did not match.
[SA] : Tunnel [%s]
Phase 2 encryption
algorithm mismatch
%s is the tunnel name. When negotiating Phase-2, the
encryption algorithm did not match.
[SA] : Tunnel [%s]
Phase 2 pfs mismatch
%s is the tunnel name. When negotiating Phase-2, the PFS
specified did not match.
[SA] : Tunnel [%s]
Phase 2 pfs
unsupported: %d
%s is the tunnel name. When negotiating Phase-2, this device
does not support the PFS specified.
[SA] : Tunnel [%s]
Phase 2 SA
encapsulation
mismatch
%s is the tunnel name. When negotiating Phase-2, the SA
encapsulation did not match.
[SA] : Tunnel [%s]
Phase 2 SA protocol
mismatch
%s is the tunnel name. When negotiating Phase-2, the SA
protocol did not match.
[SA] : Tunnel [%s] SA
sequence size mismatch
%s is the tunnel name. When negotiating Phase-2, the SA
sequence size did not match.
[XCHG] exchange type
is not IP, AGGR, or
INFO
This device is the responder and this is the initiator’s first
packet, but exchange type is not IP, AGGR, or INFO and the
packet is ignored.
Cannot resolve My IP
Addr %s for Tunnel
[%s]
1st %s is my ip address. 2nd %s is the tunnel name. When
selecting a matched proposal in phase-1, the engine could not
get My-IP address.
Cannot resolve Secure
Gateway Addr %s for
Tunnel [%s]
1st %s is my ip address. 2nd %s is the tunnel name; When
selecting a matched proposal in phase-1, the engine could not
get the correct secure gateway address.
Could not dial dynamic
tunnel "%s"
%s is the tunnel name. The tunnel is a dynamic tunnel and
the device cannot dial it.
Could not dial
incomplete tunnel "%s"
%s is the tunnel name. The tunnel setting is not complete.
Table 280 IKE Logs (continued)
LOG MESSAGE DESCRIPTION