Table 123 packet filter logs table 124 icmp logs, Table 125 ppp logs – ZyXEL Communications P-2302HWUDL-P1 Series User Manual

Page 275

Advertising
background image

Chapter 23 Log

P-2302HWUDL-P1 Series User’s Guide

275

F

or type and code details, see

Table 130 on page 278

.

Exceed MAX incomplete,
sent TCP RST

The router sent a TCP reset packet when the number of

incomplete connections (TCP and UDP) exceeded the user-

configured threshold. (Incomplete count is for all TCP and UDP

connections through the firewall.)Note: When the number of

incomplete connections (TCP + UDP) > “Maximum Incomplete

High”, the router sends TCP RST packets for TCP connections

and destroys TOS (firewall dynamic sessions) until incomplete

connections < “Maximum Incomplete Low”.

Access block, sent TCP
RST

The router sends a TCP RST packet and generates this log if you

turn on the firewall TCP reset mechanism (via CI command:

sys

firewall tcprst

).

Table 123 Packet Filter Logs

LOG MESSAGE

DESCRIPTION

[ TCP | UDP | ICMP | IGMP |
Generic ] packet filter
matched (set: %d, rule: %d)

Attempted access matched a configured filter rule (denoted

by its set and rule number) and was blocked or forwarded

according to the rule.

Table 124 ICMP Logs

LOG MESSAGE

DESCRIPTION

Firewall default policy: ICMP
<Packet Direction>, <type:%d>,
<code:%d>

ICMP access matched the default policy and was

blocked or forwarded according to the user's setting.

Firewall rule [NOT] match: ICMP
<Packet Direction>, <rule:%d>,
<type:%d>, <code:%d>

ICMP access matched (or didn’t match) a firewall rule

(denoted by its number) and was blocked or forwarded

according to the rule.

Triangle route packet forwarded:
ICMP

The firewall allowed a triangle route session to pass

through.

Packet without a NAT table entry
blocked: ICMP

The router blocked a packet that didn’t have a

corresponding NAT table entry.

Unsupported/out-of-order ICMP:
ICMP

The firewall does not support this kind of ICMP packets

or the ICMP packets are out of order.

Router reply ICMP packet: ICMP

The router sent an ICMP reply packet to the sender.

Table 125 PPP Logs

LOG MESSAGE

DESCRIPTION

ppp:LCP Starting

The PPP connection’s Link Control Protocol stage has started.

ppp:LCP Opening

The PPP connection’s Link Control Protocol stage is opening.

ppp:CHAP Opening

The PPP connection’s Challenge Handshake Authentication Protocol stage is

opening.

ppp:IPCP
Starting

The PPP connection’s Internet Protocol Control Protocol stage is starting.

ppp:IPCP Opening

The PPP connection’s Internet Protocol Control Protocol stage is opening.

Table 122 TCP Reset Logs (continued)

LOG MESSAGE

DESCRIPTION

Advertising