Cisco ASR 1004 - Page 48

Page 48 of 72
Requirement
Auditable
Events
Additional Audit
Record Contents
Sample Record
Jun 20 07:42:26.843: ISAKMP:(0):Old State =
IKE_R_MM2 New State = IKE_R_MM3
Jun 20 07:42:26.843: ISAKMP:(0): processing KE
payload. message ID = 0
Jun 20 07:42:27.055: ISAKMP:(0): processing
NONCE payload. message ID = 0
Jun 20 07:42:27.059: ISAKMP:(0):found peer pre-
shared key matching 100.1.1.5
 Termination of IPSEC session (outbound-
initiated)
.Jun 19 21:09:49.619: IPSEC(delete_sa): deleting
SA,
(sa) sa_dest= 100.1.1.5, sa_proto= 50,
sa_spi= 0x3C81B171(1015132529),
sa_trans= esp-aes esp-sha-hmac , sa_conn_id=
62
sa_lifetime(k/sec)= (4608000/28800),
(identity) local= 100.1.1.1:0, remote= 100.1.1.5:0,
local_proxy= 10.1.1.0/255.255.255.0/256/0,
remote_proxy= 12.1.1.0/255.255.255.0/256/0
Jun 19 21:10:37.575: ISAKMP:(2034):purging node -
506111676
.Jun 19 21:10:39.615:
ISAKMP:(2034):purging node -22679511
.Jun 20 04:46:14.789:
IPSEC(lifetime_expiry): SA lifetime threshold
reached, expiring in 1412 seconds
 Failure of an established IPSEC session
(outbound-initiated)
Jun 19 11:12:33.905: %CRYPTO-5-
IKMP_AG_MODE_DISABLED: Unable to initiate
or respond to Aggressive Mode while disabled
Configuration of IPsec:
1/3
1/1
3
8:2
6:3
2
Inf
o
Jan 30 18:56:50 10.104.49.55 Time set to Jan 30
18:56:50, from server 10.104.49.22.
1/3
0/1
3
11:
04:
42
No
tic
e
131: *Jan 30 2013 05:20:15: %PARSER-5-
CFGLOG_LOGGEDCMD: User:console logged
command:logging trap 7