Netgear Netgar VPN FIrewall FVS336Gv2 Reference Manual
Here you can view all the pages of manual Netgear Netgar VPN FIrewall FVS336Gv2 Reference Manual. The Netgear manuals for Router are available online for free. You can easily download all the documents as PDF.
Page 651
![Page 651
System Logs and Error Messages
649 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
•PPTP idle time-out logs
•PPP authentication logs
Table 26. System logs: WAN status, PPTP idle time-out
Message Nov 29 11:19:02 [FVS336Gv2] [pppd] Starting connection
Nov 29 11:19:05 [FVS336Gv2] [pppd] CHAP authentication succeeded
Nov 29 11:19:05 [FVS336Gv2] [pppd] local IP address 192.168.200.214
Nov 29 11:19:05 [FVS336Gv2] [pppd] remote IP address 192.168.200.1
Nov 29 11:19:05 [FVS336Gv2] [pppd] primary DNS...](http://img.usermanuals.tech/thumb/55/58038/w300_d_1487666138-netgar-vpn-firewall-fvs336gv2-reference-manual_d-650.png "Page 651
System Logs and Error Messages
649 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
•PPTP idle time-out logs
•PPP authentication logs
Table 26. System logs: WAN status, PPTP idle time-out
Message Nov 29 11:19:02 [FVS336Gv2] [pppd] Starting connection
Nov 29 11:19:05 [FVS336Gv2] [pppd] CHAP authentication succeeded
Nov 29 11:19:05 [FVS336Gv2] [pppd] local IP address 192.168.200.214
Nov 29 11:19:05 [FVS336Gv2] [pppd] remote IP address 192.168.200.1
Nov 29 11:19:05 [FVS336Gv2] [pppd] primary DNS...")
System Logs and Error Messages 649 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 •PPTP idle time-out logs •PPP authentication logs Table 26. System logs: WAN status, PPTP idle time-out Message Nov 29 11:19:02 [FVS336Gv2] [pppd] Starting connection Nov 29 11:19:05 [FVS336Gv2] [pppd] CHAP authentication succeeded Nov 29 11:19:05 [FVS336Gv2] [pppd] local IP address 192.168.200.214 Nov 29 11:19:05 [FVS336Gv2] [pppd] remote IP address 192.168.200.1 Nov 29 11:19:05 [FVS336Gv2] [pppd] primary DNS...
Page 652
System Logs and Error Messages 650 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 Resolved DNS Names This section describes the logs of DNS name resolution messages. VPN Log Messages This section explains logs that are generated by IPSec VPN and SSL VPN policies. These logs are generated automatically and do not need to be enabled. •IPSec VPN Logs •SSL VPN Logs IPSec VPN Logs This section describes the log messages generated by IPSec VPN policies. Note:The same IPSec VPN log messages can...
Page 653
![Page 653
System Logs and Error Messages
651 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Table 29. System logs: IPSec VPN tunnel, tunnel establishment
Messages 1 through 5
Messages 6 and 7
Messages 8 through 19
Messages 20 and 21
2000 Jan 1 04:01:39 [FVS336Gv2] [wand] [IPSEC] IPSEC Restarted
2000 Jan 1 04:02:09 [FVS336Gv2] [wand] [FW] Firewall Restarted
2000 Jan 1 04:02:29 [FVS336Gv2] [IKE] IKE stopped_
2000 Jan 1 04:02:31 [FVS336Gv2] [IKE] IKE started_
2000 Jan 1 04:02:31 [FVS336Gv2]...](http://img.usermanuals.tech/thumb/55/58038/w300_d_1487666138-netgar-vpn-firewall-fvs336gv2-reference-manual_d-652.png "Page 653
System Logs and Error Messages
651 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Table 29. System logs: IPSec VPN tunnel, tunnel establishment
Messages 1 through 5
Messages 6 and 7
Messages 8 through 19
Messages 20 and 21
2000 Jan 1 04:01:39 [FVS336Gv2] [wand] [IPSEC] IPSEC Restarted
2000 Jan 1 04:02:09 [FVS336Gv2] [wand] [FW] Firewall Restarted
2000 Jan 1 04:02:29 [FVS336Gv2] [IKE] IKE stopped_
2000 Jan 1 04:02:31 [FVS336Gv2] [IKE] IKE started_
2000 Jan 1 04:02:31 [FVS336Gv2]...")
System Logs and Error Messages 651 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 Table 29. System logs: IPSec VPN tunnel, tunnel establishment Messages 1 through 5 Messages 6 and 7 Messages 8 through 19 Messages 20 and 21 2000 Jan 1 04:01:39 [FVS336Gv2] [wand] [IPSEC] IPSEC Restarted 2000 Jan 1 04:02:09 [FVS336Gv2] [wand] [FW] Firewall Restarted 2000 Jan 1 04:02:29 [FVS336Gv2] [IKE] IKE stopped_ 2000 Jan 1 04:02:31 [FVS336Gv2] [IKE] IKE started_ 2000 Jan 1 04:02:31 [FVS336Gv2]...
Page 654
![Page 654
System Logs and Error Messages
652 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Recommended action None
Table 30. System logs: IPSec VPN tunnel, SA lifetime (150 sec in phase 1; 300 sec in phase 2), VPN tunnel is reestablished
Message 1
Messages 2 through 6
Message 7
Messages 8 through 11
2000 Jan 1 04:32:25 [FVS336Gv2] [IKE] Sending Informational Exchange: delete
payload[]_
2000 Jan 1 04:32:25 [FVS336Gv2] [IKE] purged IPSec-SA proto_id=ESP spi=...](http://img.usermanuals.tech/thumb/55/58038/w300_d_1487666138-netgar-vpn-firewall-fvs336gv2-reference-manual_d-653.png "Page 654
System Logs and Error Messages
652 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Recommended action None
Table 30. System logs: IPSec VPN tunnel, SA lifetime (150 sec in phase 1; 300 sec in phase 2), VPN tunnel is reestablished
Message 1
Messages 2 through 6
Message 7
Messages 8 through 11
2000 Jan 1 04:32:25 [FVS336Gv2] [IKE] Sending Informational Exchange: delete
payload[]_
2000 Jan 1 04:32:25 [FVS336Gv2] [IKE] purged IPSec-SA proto_id=ESP spi=...")
System Logs and Error Messages 652 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 Recommended action None Table 30. System logs: IPSec VPN tunnel, SA lifetime (150 sec in phase 1; 300 sec in phase 2), VPN tunnel is reestablished Message 1 Messages 2 through 6 Message 7 Messages 8 through 11 2000 Jan 1 04:32:25 [FVS336Gv2] [IKE] Sending Informational Exchange: delete payload[]_ 2000 Jan 1 04:32:25 [FVS336Gv2] [IKE] purged IPSec-SA proto_id=ESP spi=...
Page 655
![Page 655
System Logs and Error Messages
653 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Table 31. System logs: IPSec VPN tunnel, SA lifetime (150 sec in phase 1; 300 sec in phase 2), VPN tunnel not reestablished
Message 2000 Jan 1 04:52:33 [FVS336Gv2] [IKE] Using IPSec SA configuration:
192.168.11.0/24192.168.10.0/24_
2000 Jan 1 04:52:33 [FVS336Gv2] [IKE] Configuration found for 20.0.0.1._
2000 Jan 1 04:52:59 [FVS336Gv2] [IKE] Phase 1 negotiation failed due to time up...](http://img.usermanuals.tech/thumb/55/58038/w300_d_1487666138-netgar-vpn-firewall-fvs336gv2-reference-manual_d-654.png "Page 655
System Logs and Error Messages
653 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Table 31. System logs: IPSec VPN tunnel, SA lifetime (150 sec in phase 1; 300 sec in phase 2), VPN tunnel not reestablished
Message 2000 Jan 1 04:52:33 [FVS336Gv2] [IKE] Using IPSec SA configuration:
192.168.11.0/24192.168.10.0/24_
2000 Jan 1 04:52:33 [FVS336Gv2] [IKE] Configuration found for 20.0.0.1._
2000 Jan 1 04:52:59 [FVS336Gv2] [IKE] Phase 1 negotiation failed due to time up...")
System Logs and Error Messages 653 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 Table 31. System logs: IPSec VPN tunnel, SA lifetime (150 sec in phase 1; 300 sec in phase 2), VPN tunnel not reestablished Message 2000 Jan 1 04:52:33 [FVS336Gv2] [IKE] Using IPSec SA configuration: 192.168.11.0/24192.168.10.0/24_ 2000 Jan 1 04:52:33 [FVS336Gv2] [IKE] Configuration found for 20.0.0.1._ 2000 Jan 1 04:52:59 [FVS336Gv2] [IKE] Phase 1 negotiation failed due to time up...
Page 656
![Page 656
System Logs and Error Messages
654 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Table 33. System logs: IPSec VPN tunnel, Dead Peer Detection and keep-alive
(default 30 sec), VPN tunnel torn down
Message 1
Message 2
Message 32000 Jan 1 06:01:18 [FVS336Gv2] [VPNKA] Keep alive to peer 192.168.10.2
failed 3 consecutive times and 5 times cumulative_
2000 Jan 1 06:01:19 [FVS336Gv2] [IKE] DPD R-U-THERE sent to
20.0.0.1[500]_
2000 Jan 1 06:01:19 [FVS336Gv2] [IKE]...](http://img.usermanuals.tech/thumb/55/58038/w300_d_1487666138-netgar-vpn-firewall-fvs336gv2-reference-manual_d-655.png "Page 656
System Logs and Error Messages
654 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Table 33. System logs: IPSec VPN tunnel, Dead Peer Detection and keep-alive
(default 30 sec), VPN tunnel torn down
Message 1
Message 2
Message 32000 Jan 1 06:01:18 [FVS336Gv2] [VPNKA] Keep alive to peer 192.168.10.2
failed 3 consecutive times and 5 times cumulative_
2000 Jan 1 06:01:19 [FVS336Gv2] [IKE] DPD R-U-THERE sent to
20.0.0.1[500]_
2000 Jan 1 06:01:19 [FVS336Gv2] [IKE]...")
System Logs and Error Messages
654 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Table 33. System logs: IPSec VPN tunnel, Dead Peer Detection and keep-alive
(default 30 sec), VPN tunnel torn down
Message 1
Message 2
Message 32000 Jan 1 06:01:18 [FVS336Gv2] [VPNKA] Keep alive to peer 192.168.10.2
failed 3 consecutive times and 5 times cumulative_
2000 Jan 1 06:01:19 [FVS336Gv2] [IKE] DPD R-U-THERE sent to
20.0.0.1[500]_
2000 Jan 1 06:01:19 [FVS336Gv2] [IKE]...
Page 657
![Page 657
System Logs and Error Messages
655 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
SSL VPN Logs
This section describes the log messages that are generated by SSL VPN policies.
Table 35. System logs: IPSec VPN tunnel, client policy behind a NAT device
Message 3
Message 62000 Jan 1 01:54:21 [FVS336Gv2] [IKE] Floating ports for NAT-T with peer
20.0.0.1[4500]_
2000 Jan 1 01:54:21 [FVS336Gv2] [IKE] NAT-D payload matches for
20.0.0.2[4500]_
2000 Jan 1 01:54:21 [FVS336Gv2] [IKE] NAT-D...](http://img.usermanuals.tech/thumb/55/58038/w300_d_1487666138-netgar-vpn-firewall-fvs336gv2-reference-manual_d-656.png "Page 657
System Logs and Error Messages
655 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
SSL VPN Logs
This section describes the log messages that are generated by SSL VPN policies.
Table 35. System logs: IPSec VPN tunnel, client policy behind a NAT device
Message 3
Message 62000 Jan 1 01:54:21 [FVS336Gv2] [IKE] Floating ports for NAT-T with peer
20.0.0.1[4500]_
2000 Jan 1 01:54:21 [FVS336Gv2] [IKE] NAT-D payload matches for
20.0.0.2[4500]_
2000 Jan 1 01:54:21 [FVS336Gv2] [IKE] NAT-D...")
System Logs and Error Messages 655 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 SSL VPN Logs This section describes the log messages that are generated by SSL VPN policies. Table 35. System logs: IPSec VPN tunnel, client policy behind a NAT device Message 3 Message 62000 Jan 1 01:54:21 [FVS336Gv2] [IKE] Floating ports for NAT-T with peer 20.0.0.1[4500]_ 2000 Jan 1 01:54:21 [FVS336Gv2] [IKE] NAT-D payload matches for 20.0.0.2[4500]_ 2000 Jan 1 01:54:21 [FVS336Gv2] [IKE] NAT-D...
Page 658
System Logs and Error Messages 656 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 Traffic Meter Logs Routing Logs The following sections provide information about routing log messages: •LAN to WAN Logs •LAN to DMZ Logs •DMZ to WAN Logs •WAN to LAN Logs •DMZ to LAN Logs •WAN to DMZ Logs These sections explain the logging messages for the various network segments (such as LAN to WAN) for debugging purposes. These logs might generate a significant volume of messages. Table 38. System logs:...
Page 659
![Page 659
System Logs and Error Messages
657 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
LAN to WAN Logs
LAN to DMZ Logs
DMZ to WAN Logs
WAN to LAN Logs
Table 40. Routing logs: LAN to WAN
Message Nov 29 09:19:43 [FVS336Gv2] [kernel] LAN2WAN[ACCEPT] IN=LAN OUT=WAN
SRC=192.168.10.10 DST=72.14.207.99 PROTO=ICMP TYPE=8 CODE=0
Explanation
• This packet from LAN to WAN is allowed by the firewall.
• For other settings, see Table 13 on page 642.
Recommended action None
Table 41. Routing logs: LAN to DMZ...](http://img.usermanuals.tech/thumb/55/58038/w300_d_1487666138-netgar-vpn-firewall-fvs336gv2-reference-manual_d-658.png "Page 659
System Logs and Error Messages
657 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
LAN to WAN Logs
LAN to DMZ Logs
DMZ to WAN Logs
WAN to LAN Logs
Table 40. Routing logs: LAN to WAN
Message Nov 29 09:19:43 [FVS336Gv2] [kernel] LAN2WAN[ACCEPT] IN=LAN OUT=WAN
SRC=192.168.10.10 DST=72.14.207.99 PROTO=ICMP TYPE=8 CODE=0
Explanation
• This packet from LAN to WAN is allowed by the firewall.
• For other settings, see Table 13 on page 642.
Recommended action None
Table 41. Routing logs: LAN to DMZ...")
System Logs and Error Messages 657 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 LAN to WAN Logs LAN to DMZ Logs DMZ to WAN Logs WAN to LAN Logs Table 40. Routing logs: LAN to WAN Message Nov 29 09:19:43 [FVS336Gv2] [kernel] LAN2WAN[ACCEPT] IN=LAN OUT=WAN SRC=192.168.10.10 DST=72.14.207.99 PROTO=ICMP TYPE=8 CODE=0 Explanation • This packet from LAN to WAN is allowed by the firewall. • For other settings, see Table 13 on page 642. Recommended action None Table 41. Routing logs: LAN to DMZ...
Page 660
System Logs and Error Messages 658 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 DMZ to LAN Logs WAN to DMZ Logs Other Event Logs The following sections provide information about other event messages: •Session Limit Logs •Source MAC Filter Logs •Bandwidth Limit Logs These sections describe the log messages generated by other events such source MAC filtering, session limiting, and bandwidth limiting. For information about how to select these logs, see Manage Logging, Alerts, and Event...