Avaya Configuring IPsec Services Manual do Utilizador descarregar pdf (Página 106)

Configuring IPsec Services

C-22

308630-14.00 Rev 00

• Encryption or network addressing does not have matching values with the

remote IPsec gateway configuration.

Sample BayRS log message:

# 23: 09/02/1999 22:33:27.832 INFO SLOT 1 IKE Code: 130

No Proposal Chosen: Source 10.1.0.1, Dest 144.1.1.152

Message ID 0x0, SPI length: 4, SPI: 1165167

Sample Contivity Event log message:

09/02/1999 22:28:38 0 ISAKMP [13] Error notification (No

proposal chosen) received from 144.1.1.152

09/02/1999 22:28:38 0 Security [12] Session: IPSEC[-]:2083

logged out

• BayRS source and destination address ranges do not match Contivity’s

Branch Office remote and local network address ranges derived from the

network and mask specified. If you see the following events repeating in the

Contivity event log, this condition may be present:

09/02/1999 22:49:53 0 ISAKMP [13] Invalid key information in

message from 142.1.1.152

09/02/1999 22:49:53 0 ISAKMP [03] Deleting IPsec SAs with

140.1.1.152:

• The response time of BayRS is sluggish when using Site Manager or the

Technician Interface to manage the router.

This could be the result of misconfiguration, where PFS is enabled and IPsec

continuously and unsuccessfully attempts to establish an IPsec SA.

This could also indicate that the traffic load for the router and encryption

algorithm may be more than the router can process. If Triple DES is in use,

change it to DES where possible.

1 2 ... 101 102 103 104 105 106 107 108 109 110 111 ... 121 122

Sem comentários

Avaya Configuring IPsec Services Manual do Utilizador Página 106