NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall - Page 351

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
System Logs and Error Messages C-13
v1.0, April 2010
Table C-20. System Logs: IPsec VPN Tunnel, Dead Peer Detection and Keepalive (Default
30 sec), VPN Tunnel Torn Down
Message 1
Message 2
Message 3
2000 Jan 1 06:01:18 [SRX5308] [VPNKA] Keep alive to peer 192.168.10.2
failed 3 consecutive times and 5 times cumulative_
2000 Jan 1 06:01:19 [SRX5308] [IKE] DPD R-U-THERE sent to
"20.0.0.1[500]"_
2000 Jan 1 06:01:19 [SRX5308] [IKE] DPD R-U-THERE-ACK received from
"20.0.0.1[500]"_
Explanation Message 1: When the remote host connection is removed and when there are
no packets from the remote host, the VPN firewall sends packets to keep the
remote host alive. As the connection itself is removed, keepalive fails.
Message 2: The VPN firewall sends packets to check whether the peer is dead.
Message 3: The VPN firewall receives an acknowledgment that the peer is
dead. The connection is removed.
Recommended Action None