Phase 1 Completed
|
%ASA-3-713120 |
Unknown message text. |
|
%ASA-3-713122 |
Keep-alives configured keepalive type but peer IP address support keep-alives (type = keepalive type). |
|
%ASA-3-713123 |
IKE lost contact with remote peer, deleting connection (keepalive type: keepalive type). |
|
%ASA-3-713124 |
Received DPD sequence number rcv sequence # in DPD Action, description expected seq #. |
|
%ASA-3-713125 |
Unknown message text. |
|
%ASA-3-713126 |
Unknown message text. |
|
%ASA-3-713127 |
Xauth required but selected Proposal does not support xauth, Check priorities of ike xauth proposals in ike proposal list. |
|
Level and Message Number |
Message Text |
|
%ASA-3-713128 |
Connection attempt to VCPIP redirected to VCA peer IP address via load balancing. |
|
%ASA-3-713129 |
Received unexpected Transaction Exchange payload type: payload id. |
|
%ASA-3-713132 |
Cannot obtain an IP address for remote peer. |
|
%ASA-3-713133 |
Mismatch: Overriding phase 2 DH Group (DH group DH group id) with phase 1 group (DH group DH group number). |
|
%ASA-3-713134 |
Mismatch: P1 Authentication algorithm in the crypto map entry different from negotiated algorithm for the L2L connection. |
|
%ASA-3-713138 |
Group group name not found and BASE GROUP default preshared key not configured. |
|
%ASA-3-713140 |
Split Tunneling Policy requires network list but none configured. |
|
%ASA-3-713141 |
Client-reported firewall does not match configured firewall: action tunnel. Received—Vendor: vendor(id), Product product(id), Caps: capability value. Expected—Vendor: vendor(id), Product: product(id), Caps: capability value. |
|
%ASA-3-713142 |
Client did not report firewall in use, but there is a configured firewall: action tunnel. Expected—Vendor: vendor(id), Product product(id), Caps: capability value. |
|
%ASA-3-713146 |
Could not add route for Hardware Client in network extension mode, address: IP address, mask: network mask. |
|
%ASA-3-713149 |
Hardware client security attribute attribute name was enabled but not requested. |
|
%ASA-3-713150 |
Unknown message text. |
|
%ASA-3-713151 |
Unknown message text. |
|
%ASA-3-713152 |
Unable to obtain any rules from filter ACL tag to send to client for CPP, terminating connection. |
|
%ASA-3-713153 |
Unknown message text. |
|
%ASA-3-713159 |
TCP Connection to Firewall Server has been lost, restricted tunnels are now allowed full network access. |
|
%ASA-3-713161 |
Remote user (session Id—id) network access has been restricted by the Firewall Server. |
|
%ASA-3-713162 |
Remote user (session Id—id) has been rejected by the Firewall Server. |
|
Level and Message Number |
Message Text |
|
%ASA-3-713163 |
Remote user (session Id—id) has been terminated by the Firewall Server. |
|
%ASA-3-713165 |
Unknown message text. |
|
%ASA-3-713166 |
Headend security gateway has failed our user authentication attempt—check configured username and password. |
|
%ASA-3-713167 |
Remote peer has failed user authentication—check configured username and password. |
|
%ASA-3-713168 |
Re-auth enabled, but tunnel must be authenticated interactively! |
|
%ASA-3-713174 |
Hardware Client connection rejected! Network Extension Mode is not allowed for this group! |
|
%ASA-3-713181 |
Unknown message text. |
|
%ASA-3-713182 |
IKE could not recognize the version of the client! IPSec Fragmentation Policy will be ignored for this connection! |
|
%ASA-3-713185 |
Error: Username too long—connection aborted. |
|
%ASA-3-713186 |
Invalid secondary domain name list received from the authentication server. List Received: list_text Character index (value) is illegal. |
|
%ASA-3-713188 |
Unknown message text. |
|
%ASA-3-713189 |
Attempted to assign network or broadcast IP address, removing (IP_address) from pool. |
|
%ASA-3-713191 |
Unknown message text. |
|
%ASA-3-713193 |
Received packet with missing payload, Expected payload: payload_id. |
|
%ASA-3-713194 |
IKE | IPsec Delete With Reason message: termination_reason. |
|
%ASA-3-713195 |
Tunnel rejected: Originate-Only: Cannot accept incoming tunnel yet! |
|
%ASA-3-713198 |
User Authorization failed: username User authorization failed. |
|
%ASA-3-713203 |
IKE Receiver: Error reading from socket. |
|
%ASA-3-713205 |
Could not add static route for client address: IP address. |
|
Table B-3. Severity 3 (Errors) Logging Messages |
|
|
Level and Message Number |
Message Text |
|
%ASA-3-713206 |
Tunnel Rejected: Conflicting protocols specified by tunnel-group and group-policy. |
|
%ASA-3-713208 |
Cannot create dynamic rule for Backup L2L entry rule id. |
|
%ASA-3-713209 |
Cannot delete dynamic rule for Backup L2L entry rule id. |
|
%ASA-3-713210 |
Cannot create dynamic map for Backup L2L entry rule id. |
|
%ASA-3-713212 |
Could not add route for L2L peer coming in on a dynamic map. address: IP address, mask: network mask. |
|
%ASA-3-713214 |
Could not delete route for L2L peer that came in on a dynamic map. address: IP address, mask: network mask. |
|
%ASA-3-713217 |
Skipping unrecognized rule: action: action client type: client type client version: client version. |
|
%ASA-3-713218 |
Tunnel Rejected: Client Type or Version not allowed. |
|
%ASA-3-713226 |
Connection failed with peer, no trustpoint defined in tunnel-group. |
|
%ASA-3-713902 |
Unknown message text. |
|
%ASA-3-717001 |
Querying keypair failed. |
|
%ASA-3-717002 |
Certificate enrollment failed for trustpoint trustpoint_name. |
|
%ASA-3-717009 |
Certificate validate failed. reason_string. |
|
%ASA-3-717010 |
CRL polling failed for trustpoint trustpoint_name. |
|
%ASA-3-717012 |
Failed to refresh CRL cache entry from the server for trustpoint at time_of_failure. |
|
%ASA-3-717015 |
CRL received from issuer is too large to process. |
|
%ASA-3-717017 |
Failed to query CA certificate for trustpoint from enrollment _url. |
|
%ASA-3-717018 |
CRL received from issuer has too many entries to process. |
|
%ASA-3-717019 |
Failed to insert CRL for trustpoint. |
Post a comment