华为乾坤-ALM-4285734925 IPSec隧道协商失败:告警参数
告警参数
参数名称 |
参数含义 |
OID |
该告警所对应的MIB节点的OID号。 |
Ifindex |
IPSec隧道所对应的接口索引。 |
SeqNum |
IPSec安全策略的顺序号。 |
Reason |
IPSec隧道协商失败的原因。 |
ReasonCode |
IPSec隧道协商失败原因码。
- 1:phase1 proposal mismatch
- 2:phase2 proposal or pfs mismatch
- 3:encapsulation mode mismatch
- 4:flow or peer mismatch
- 5:version mismatch
- 6:responder dh mismatch
- 7:initiator dh mismatch
- 10:ip assigned fail
- 12:peer address mismatch
- 13:config ID mismatch
- 14:construct local ID fail
- 15:authentication fail
- 16:rekey no find old sa
- 17:rekey fail
- 18:first packet limited
- 21:invalid cookie
- 24:invalid length
- 26:unsupported version
- 28:malformed payload
- 30:malformed message
- 31:cookie mismatch
- 32:exchange mode mismatch
- 33:unknown exchange type
- 34:critical drop
- 35:uncritical drop
- 36:route limit
- 39:local address mismatch
- 40:nat detection fail
- 41:ipsec tunnel number reaches limitation
- 42:dynamic peers number reaches limitation
- 43:none of user's interface is selected
- 44:in disconnect state
- 45:proposal mismatch or use sm in ikev2
- 46:flow conflict
- 47:ikev2 not support sm in ipsec proposal
- 48:netmask mismatch
- 49:no policy applied on interface
- 50:fragment packet limit
- 51:fragment packet reassemble timeout
- 52:form cert payload fail
- 53:max transmit reached
- 54:no valid local cert
|
PeerAddress |
对端的IP地址。 |
PeerPort |
对端的UDP端口号。 |
vsys-name |
IPSec策略所属的虚拟系统的名称。
|
InterfaceName |
接口名称。 |
ConnID |
安全联盟的连接索引。 |
support.huaweicloud.com/moredocuments-qiankuncs/alarm_detail_278561515_4285734925.html