Waters Network Systems ProSwitch-Quad Series Especificaciones Pagina 440
- Pagina / 469
- Tabla de contenidos
- SOLUCIÓN DE PROBLEMAS
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
System Logs and Error Messages
440
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
Messages 22 and 23
Messages 24 and 25
2000 Jan 1 04:13:40 [SRX5308] [IKE] Responding to new phase 2 negotiation:
20.0.0.2[0]<=>20.0.0.1[0]_
2000 Jan 1 04:13:40 [SRX5308] [IKE] Using IPSec SA configuration:
192.168.11.0/24<->192.168.10.0/24_
2000 Jan 1 04:13:41 [SRX5308] [IKE] IPSec-SA established: ESP/Tunnel
20.0.0.1->20.0.0.2 with spi=34046092(0x207808c)_
2000 Jan 1 04:13:41 [SRX5308] [IKE] IPSec-SA established: ESP/Tunnel
20.0.0.2->20.0.0.1 with spi=87179451(0x53240bb)_
Explanation Message 1–5: IPSec, IKE, and VPN firewall restart.
Message 6–7: IPSec and IKE configurations are added with the identifier “pol1.”
Message 8–19: New phase 1 negotiation starts by determining the configuration for
the WAN host. Dead Peer Detection (DPD) is enabled and set. NAT payload
matching and NAT detection are done.
Message 20–21: ISAKMP-SA is established between the 2 WANs and information
is exchanged.
Message 22–23: New phase 2 negotiation starts by using IPSec SA configuration
pertaining to the LAN hosts.
Message 24–25: IPSec-SA VPN tunnel is established.
Recommended action None
Table 123. System logs: IPSec VPN tunnel, SA lifetime (150 sec in phase 1;
300 sec in phase 2), VPN tunnel is reestablished
Message 1
Messages 2 through 6
Message 7
Messages 8 through 11
2000 Jan 1 04:32:25 [SRX5308] [IKE] Sending Informational Exchange: delete
payload[]_
2000 Jan 1 04:32:25 [SRX5308] [IKE] purged IPSec-SA proto_id=ESP spi=
181708762._
2000 Jan 1 04:32:25 [SRX5308] [IKE] purged IPSec-SA proto_id=ESP spi=
153677140._
2000 Jan 1 04:32:25 [SRX5308] [IKE] an undead schedule has been deleted:
'pk_recvupdate'._
2000 Jan 1 04:32:25 [SRX5308] [IKE] IPSec configuration with identifier "pol1"
deleted successfully_
2000 Jan 1 04:32:25 [SRX5308] [IKE] no phase 2 bounded._
2000 Jan 1 04:32:25 [SRX5308] [IKE] Sending Informational Exchange: delete
payload[]_
2000 Jan 1 04:32:25 [SRX5308] [IKE] Purged ISAKMP-SA with spi=
d67f2be9ca0cb241:8a094623c6811286._
2000 Jan 1 04:32:25 [SRX5308] [IKE] an undead schedule has been deleted:
'purge_remote'._
2000 Jan 1 04:32:25 [SRX5308] [IKE] IKE configuration with identifier "pol1"
deleted successfully_
2000 Jan 1 04:32:25 [SRX5308] [IKE] Could not find configuration for
20.0.0.1[500]_
Table 122. System logs: IPSec VPN tunnel, tunnel establishment (continued)
- ProSAFE Gigabit Quad WAN SSL 1
- VPN Firewall SRX5308 1
- Trademarks 2
- Revision History 2
- Contents 4
- Chapter 3 LAN Configuration 5
- Chapter 10 Troubleshooting 8
- Introduction 11
- Firewall SRX5308? 12
- Key Features and Capabilities 12
- Balancing 13
- Security Features 15
- Extensive Protocol Support 15
- Maintenance and Support 17
- Package Contents 17
- Hardware Features 17
- Figure 1 18
- Table 1. LED descriptions 18
- Rear Panel 19
- Figure 3 20
- Log In to the VPN Firewall 21
- Figure 5 22
- Figure 8 24
- Figure 9 25
- Settings 26
- Complete these tasks: 27
- Classical Routing 30
- Figure 11 31
- Figure 12 32
- Figure 13 34
- Figure 14 34
- Figure 15 35
- Figure 16 36
- Figure 17 37
- Figure 18 38
- Figure 19 39
- Interfaces 40
- IPv4 Interfaces 41
- Figure 21 42
- Figure 22 43
- To edit a protocol binding: 44
- Figure 24 46
- Configure Dynamic DNS 49
- To configure DDNS: 50
- Figure 26 51
- Figure 27 51
- Figure 28 54
- Connection 55
- Figure 30 56
- Figure 31 57
- Figure 32 58
- Figure 33 59
- Figure 34 60
- Figure 35 61
- Figure 36 62
- Figure 37 65
- Figure 38 66
- Figure 39 66
- To edit an ISATAP tunnel: 67
- Figure 40 67
- To configure SIIT: 68
- Figure 41 68
- Figure 42 69
- Figure 43 70
- Figure 44 71
- Figure 45 72
- Figure 46 73
- Configure WAN QoS Profiles 76
- Figure 47 77
- Figure 48 78
- Figure 49 80
- What to Do Next 82
- Port-Based VLANs 85
- Figure 50 86
- VLAN DHCP Options 87
- Configure a VLAN Profile 88
- Figure 52 89
- Figure 54 95
- Manage the Network Database 97
- Figure 56 100
- Figure 57 101
- Manage the IPv6 LAN 102
- DHCPv6 Server Options 103
- Configure the IPv6 LAN 104
- LAN Configuration 105
- IPv6 LAN Address Pools 106
- Figure 59 107
- To add an IPv6 prefix: 108
- Figure 60 108
- To edit a prefix: 108
- Figure 61 110
- Figure 62 112
- Default VLAN 113
- DMZ Port for IPv4 Traffic 115
- Figure 64 116
- DMZ Port for IPv6 Traffic 118
- Figure 65 119
- IPv6 DMZ Address Pools 121
- Figure 67 124
- Figure 68 126
- Manage Static IPv4 Routing 127
- Figure 70 128
- Figure 71 129
- IPv4 Static Route Example 131
- Manage Static IPv6 Routing 132
- Firewall Protection 134
- About Firewall Protection 135
- Order of Precedence for Rules 144
- Configure LAN WAN Rules 145
- Figure 76 146
- IPv4 LAN WAN Outbound Rules 147
- IPv6 LAN WAN Outbound Rules 148
- Figure 78 149
- Figure 79 150
- IPv6 LAN WAN Inbound Rules 151
- Configure DMZ WAN Rules 152
- Figure 82 153
- Figure 83 154
- Figure 84 155
- Figure 85 156
- Figure 86 157
- Configure LAN DMZ Rules 158
- Figure 88 159
- Figure 89 160
- Figure 90 161
- Figure 91 162
- Figure 92 163
- Examples of Firewall Rules 164
- Figure 94 165
- Figure 95 166
- Figure 96 167
- Figure 97 168
- FTP Site on the Internet 169
- Attack Checks 170
- IPv6 Attack Checks 172
- Set Limits for IPv4 Sessions 173
- Figure 103 175
- To enable ALG for SIP: 176
- Figure 104 176
- Add Customized Services 177
- Figure 105 178
- To edit a service: 178
- Create IP Groups 179
- Figure 108 180
- To edit an IP group: 180
- Create Bandwidth Profiles 181
- Profile screen displays: 182
- To create a QoS profile: 184
- Figure 111 184
- Figure 112 185
- Configure Content Filtering 186
- Figure 113 188
- Enable Source MAC Filtering 190
- Figure 115 191
- Set Up IP/MAC Bindings 192
- IPv4/MAC Bindings 193
- To edit an IP/MAC binding: 194
- Figure 117 194
- IPv6/MAC Bindings 195
- Figure 119 196
- Configure Port Triggering 197
- Figure 120 198
- Figure 122 199
- Figure 121 199
- To configure UPnP: 199
- IPSec and L2TP Connections 201
- Configurations 203
- Figure 125 204
- Figure 126 204
- Figure 127 205
- Figure 128 207
- Figure 129 207
- Figure 130 208
- Figure 131 208
- Figure 132 209
- Figure 133 211
- Figure 134 211
- Figure 135 212
- Figure 136 213
- Figure 137 215
- Figure 138 216
- Figure 139 217
- Figure 140 217
- Figure 141 218
- Figure 142 218
- Figure 143 220
- Figure 144 221
- Figure 145 221
- Figure 146 222
- The Advanced pane displays: 223
- Figure 148 225
- Figure 149 226
- Information 227
- Figure 151 228
- Figure 152 228
- Figure 153 228
- Figure 154 228
- Figure 155 229
- Figure 156 229
- Figure 157 230
- Manage IPSec VPN Policies 231
- Figure 158 232
- Figure 159 233
- To edit an IKE policy: 237
- Manage VPN Policies 238
- Figure 160 239
- Setting Description 241
- To edit a VPN policy: 245
- User Database Configuration 247
- Figure 163 248
- Mode Config Operation 250
- Figure 164 251
- Figure 165 251
- Figure 166 254
- Operation 257
- Figure 167 258
- Figure 168 258
- Figure 169 259
- Figure 171 262
- Figure 172 263
- Figure 173 264
- Figure 174 264
- Figure 175 265
- Configure Keep-Alives 266
- Configure Dead Peer Detection 267
- Figure 177 268
- Configure the PPTP Server 269
- Figure 179 270
- View the Active PPTP Users 271
- Configure the L2TP Server 272
- View the Active L2TP Users 273
- Item Description 274
- SSL Connections 275
- SSL VPN Portal Options 276
- Create the Portal Layout 277
- Figure 185 279
- To edit a portal layout: 281
- Add Servers and Port Numbers 282
- Add a New Host Name 283
- Configure the SSL VPN Client 284
- Add New Network Resources 288
- Figure 189 289
- To edit network resources: 289
- Figure 190 290
- View Policies 292
- To add an SSL VPN policy: 293
- To edit an SSL VPN policy: 296
- Figure 196 298
- Figure 197 298
- Figure 198 299
- Figure 199 300
- To display the SSL VPN log: 300
- Figure 200 300
- VPN Certificates 301
- Configure Domains 303
- Create Domains 304
- Figure 202 305
- Configure Groups 307
- Create Groups 308
- Figure 204 309
- Configure User Accounts 310
- To create a user account: 311
- Figure 205 311
- Figure 206 312
- Set User Login Policies 313
- Figure 208 314
- Figure 209 316
- Figure 210 317
- Figure 211 319
- VPN Certificates Screen 321
- Manage VPN CA Certificates 322
- Figure 213 323
- Figure 215 325
- To delete one or more SCRs: 326
- To delete one or more CRLs: 327
- Network and System Management 328
- Performance Management 329
- Features That Reduce Traffic 330
- Content Filtering 331
- Source MAC Filtering 332
- Port Triggering 334
- DMZ Port 334
- Exposed Hosts 334
- VPN, L2TP, and PPTP Tunnels 335
- Set QoS Priorities 335
- Assign Bandwidth Profiles 335
- System Management 336
- Figure 217 337
- Figure 218 337
- About Remote Access 341
- To access the CLI: 342
- Figure 221 343
- Figure 222 345
- Figure 223 345
- Figure 224 346
- Manage the Configuration File 347
- Back Up Settings 348
- Restore Settings 349
- Upgrade the Firmware 350
- Figure 226 352
- Monitor System Access and 355
- Performance 355
- Figure 227 356
- Figure 228 358
- Figure 229 359
- Figure 230 359
- Figure 231 360
- Figure 232 361
- Figure 233 362
- Figure 234 366
- Figure 235 366
- Configure Gateway 1 at Site 1 367
- Configure Gateway 2 at Site 2 368
- View Status Screens 369
- Figure 236 370
- Router Statistics Screen 371
- Detailed Status Screen 372
- Figure 238 373
- VLAN Status Screen 376
- Tunnel Status Screen 377
- Figure 241 378
- Figure 242 378
- Figure 243 379
- Figure 244 379
- View the VPN Logs 380
- Figure 246 381
- Figure 247 381
- View the WAN Port Status 382
- Figure 249 383
- Figure 250 383
- IPv6 WAN Port Status 384
- Figure 252 385
- View the Attached Devices 386
- View the DHCP Log 387
- Diagnostics Utilities 388
- Send a Ping Packet 389
- Trace a Route 390
- Look Up a DNS Address 390
- Display the Routing Tables 390
- Capture Packets in Real Time 391
- Troubleshooting 392
- Basic Functioning 393
- LAN or WAN Port LEDs Not On 394
- Figure 258 398
- Figure 259 399
- Figure 260 399
- Figure 261 402
- Specifications 404
- Factory Default Settings 405
- Figure 263 418
- Inbound Traffic 419
- Figure 265 420
- Figure 266 420
- Virtual Private Networks 421
- Figure 268 422
- Figure 269 422
- Figure 270 423
- Figure 271 423
- Figure 272 424
- Figure 273 424
- VPN Gateway-to-Gateway 425
- Figure 275 426
- Figure 276 426
- Figure 277 427
- Figure 278 427
- Figure 279 428
- Figure 280 428
- Figure 281 429
- Log Message Terms 431
- System Log Messages 431
- Login/Logout 432
- System Startup 433
- Firewall Restart 433
- IPSec Restart 434
- WAN Status 435
- PPP Logs 436
- • PPPoE Idle Timeout Logs 437
- • PPTP Idle T 437
- Resolved DNS Names 438
- VPN Log Messages 439
- SSL VPN Logs 443
- Routing Logs 444
- LAN to WAN Logs 445
- LAN to DMZ Logs 445
- DMZ to WAN Logs 445
- WAN to LAN Logs 445
- Other Event Logs 446
- DHCP Logs 447
- Table 143. DHCP logs 448
- Two-Factor Authentication 449
- Figure 282 451
- Figure 283 452
- Figure 284 452
- Notification of Compliance 453
- Numerics 455
Relacionado con productos y manuales para Los conmutadores de red Waters Network Systems ProSwitch-Quad Series
(92 paginas)
(21 paginas)© 2020, manymanuals.es. Todos los derechos reservados | 0.065 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales