VMware VSHIELD MANAGER 4.1.0 UPDATE 1 - API Manuel d'utilisateur Page 142

  • Télécharger
  • Ajouter à mon manuel
  • Imprimer
  • Page
    / 162
  • Table des matières
  • DEPANNAGE
  • MARQUE LIVRES
  • Noté. / 5. Basé sur avis des utilisateurs
Vue de la page 141
vShield Administration Guide
142 VMware, Inc.
000 #1: "s1-c1":500 STATE_MAIN_I4 (ISAKMP SA established); EVENT_SA_REPLACE in 27623s; newest
ISAKMP; lastdpd=0s(seq in:0 out:0); idle; import:admin initiate
Cisco
ciscoasa# show crypto isakmp sa detail
Active SA: 1
Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)
Total IKE SA: 1
1 IKE Peer: 10.20.129.80
Type : L2L Role : responder
Rekey : no State : MM_ACTIVE
Encrypt : 3des Hash : SHA
Auth : preshared Lifetime: 28800
Lifetime Remaining: 28379
Phase 1 Policy Not Matching
vShield Edge
vShieldEdgehangsinSTATE_MAIN_I1state.Lookin/var/log/messagesforinformationshowingthat,the
peersentbackanIKEmessagewithʺNO_PROPOSAL_CHOSENʺset.
000 #1: "s1-c1":500 STATE_MAIN_I1 (sent MI1, expecting MR1); EVENT_RETRANSMIT in 7s; nodpd; idle;
import:admin initiate
000 #1: pending Phase 2 for "s1-c1" replacing #0
Aug 26 12:31:25 weiqing-desktop pluto[6569]: | got payload 0x800(ISAKMP_NEXT_N) needed: 0x0 opt:
0x0
Aug 26 12:31:25 weiqing-desktop pluto[6569]: | ***parse ISAKMP Notification Payload:
Aug 26 12:31:25 weiqing-desktop pluto[6569]: | next payload type: ISAKMP_NEXT_NONE
Aug 26 12:31:25 weiqing-desktop pluto[6569]: | length: 96
Aug 26 12:31:25 weiqing-desktop pluto[6569]: | DOI: ISAKMP_DOI_IPSEC
Aug 26 12:31:25 weiqing-desktop pluto[6569]: | protocol ID: 0
Aug 26 12:31:25 weiqing-desktop pluto[6569]: | SPI size: 0
Aug 26 12:31:25 weiqing-desktop pluto[6569]: | Notify Message Type: NO_PROPOSAL_CHOSEN
Aug 26 12:31:25 weiqing-desktop pluto[6569]: "s1-c1" #1: ignoring informational payload, type
NO_PROPOSAL_CHOSEN msgid=00000000
Cisco
Ifdebugcryptoisenabled,errormessageisprintedtoshowthatnoproposalswereaccepted.
ciscoasa# Aug 26 18:17:27 [IKEv1]: IP = 10.20.129.80, IKE_DECODE RECEIVED Message (msgid=0) with
payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 148
Aug 26 18:17:27 [IKEv1 DEBUG]: IP = 10.20.129.80, processing SA payload
Aug 26 18:17:27 [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group
Description: Rcv'd: Group 5 Cfg'd: Group 2
Aug 26 18:17:27 [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group
Description: Rcv'd: Group 5 Cfg'd: Group 2
Aug 26 18:17:27 [IKEv1]: IP = 10.20.129.80, IKE_DECODE SENDING Message (msgid=0) with payloads :
HDR + NOTIFY (11) + NONE (0) total length : 124
Aug 26 18:17:27 [IKEv1 DEBUG]: IP = 10.20.129.80, All SA proposals found unacceptable
Aug 26 18:17:27 [IKEv1]: IP = 10.20.129.80, Error processing payload: Payload ID: 1
Aug 26 18:17:27 [IKEv1 DEBUG]: IP = 10.20.129.80, IKE MM Responder FSM error history (struct
&0xd8355a60) <state>, <event>: MM_DONE, EV_ERROR-->MM_START,
EV_RCV_MSG-->MM_START, EV_START_MM-->MM_START, EV_START_MM-->MM_START,
EV_START_MM-->MM_START, EV_START_MM-->MM_START, EV_START_MM-->MM_START,
EV_START_MM
Aug 26 18:17:27 [IKEv1 DEBUG]: IP = 10.20.129.80, IKE SA MM:9e0e4511 terminating: flags
0x01000002, refcnt 0, tuncnt 0
Aug 26 18:17:27 [IKEv1 DEBUG]: IP = 10.20.129.80, sending delete/delete with reason message
Vue de la page 141
1 2 ... 137 138 139 140 141 142 143 144 145 146 147 ... 161 162

Commentaires sur ces manuels

Pas de commentaire