Cisco Cisco ISA550 Integrated Security Appliance Anleitung Für Quick Setup
© 2012 Cisco Systems, Inc. All rights reserved.
Page 12 of 12
Step 4.
Choose Device Management > Logs > View Logs to view the logging information. This
example shows the logs that were generated from the IPsec Remote Access server side.
example shows the logs that were generated from the IPsec Remote Access server side.
-VPN Connection is successfully established
13:45:18 - Debug - Site-to-Site VPN: msg=find_host_connection returns
EZVPN_TeleworkerGroup1; (pluto)
13:45:18 - Info - IPsec Remote Access: msg=[IPsec Remote Access][pluto] User
ddiep: Attempting to login; (pluto)
13:45:18 - Info - IPsec Remote Access: msg=[IPsec Remote Access][pluto] User
ddiep: Authentication Successful; (pluto)
13:45:18 - Info - IPsec Remote Access: msg=[IPsec Remote Access][pluto] Assign
a virtual IP address (192.168.101.1)
13:45:19 - Info - IPsec Remote Access: msg=[IPsec Remote Access][pluto] IPsec
SA established tunnel mode; (pluto)
-Fail to authenticate User credential.
Solution: ensure username or password matched from both sides.
14:45:00 - Err - IPsec Remote Access: msg=[IPsec Remote Access][pluto] User
ddiep1: Authentication Failed: Incorrect Username or Password; (pluto)
14:45:00 - Info - User: user from=ezvpn;result=fail (pluto)
14:45:00 - Info - IPsec Remote Access: msg=[IPsec Remote Access][pluto] User
ddiep1: Attempting to login; (pluto)
-VPN connection failed b/c IPSec Remote Access server has an existing “Client”
group (andrpham1) that was having same IP subnet (192.168.100.x) as current
Teleworker remote IP subnet. This only happen when Teleworker connection is
using “NEM” mode.
Solution: From IPSec Remote Access server, delete “andrpham1” group or change
it to use different subnet other than 192.168.100.x.
17:00:35 - Warning - IPsec Remote Access: msg=Virtual IP 192.168.100.0/24
overlaps with connection EZVPN_andrpham1"" (kind=CK_TEMPLATE) '@andrpham1';
(pluto)
For More Information
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view
a list of Cisco trademarks, go to this URL:
a list of Cisco trademarks, go to this URL:
. Third-party trademarks mentioned are the property of their
respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company.
(1110R)
(1110R)
© 2012 Cisco Systems, Inc. All rights reserved.78-20962-01
Product Resources
Location
Product Documentation
Cisco Small Business Support Community
Cisco Small Business Support and Resources
Phone Support Contacts
Firmware Downloads
Cisco Partner Central for Small Business
(Partner Login Required)
(Partner Login Required)
Cisco Small Business Home