日志ie缓存位置

Sheet1"日志标题","日志模块","日志名称","日志级别","日志信息","日志含义","日志参数","可能原因","处理步骤""AAA/6/TAC_ATTRIBUTECHANGE_SUCCESS","AAA","TAC_ATTRIBUTECHANGE_SUCCESS","6","Userattributehasbeenchanged.
(Attribute=password,OperatorName=[STRING],OperatorIPAddress=[STRING],UserName=[STRING],ServerIPAddress=[STRING],VPNName=[STRING])","用户属性被修改.
","Attribute:用户属性,这里是密码.
OperatorName:操作者名称.
OperatorIPAddress:操作者地址.
UserName:被修改的用户名称.
ServerIPAddress:HWTACACS服务器的IP地址.
VPNName:用户所属VPN实例名称,如果用户在公网,可能为空.
","HWTACACS用户登录设备后,执行命令hwtacacs-userchange-passwordhwtacacs-servertemplate-name修改用户属性成功.
","1.
正常运行信息,无需处理.
""AAA/6/TAC_ATTRIBUTECHANGE_FAIL","AAA","TAC_ATTRIBUTECHANGE_FAIL","6","Failedtochangeuserattribute.
(Attribute=password,OperatorName=[STRING],OperatorIPAddress=[STRING],UserName=[STRING],ServerIPaddress=[STRING],VPNName=[STRING])","修改用户属性失败.
","Attribute:用户属性,这里是密码.
OperatorName:操作者名称.
OperatorIPAddress:操作者地址.
UserName:被修改的用户名称.
ServerIPAddress:HWTACACS服务器的IP地址.
VPNName:用户所属VPN实例名称,如果用户在公网,可能为空.
","HWTACACS用户登录设备后,修改用户属性失败.
","1.
重新执行命令hwtacacs-userchange-passwordhwtacacs-servertemplate-name,并且输入正确的信息.
""AAPT/4/CONNECT_OK","AAPT","CONNECT_OK","4","Sandbox[sandbox-name]wasconnected.
","连接沙箱成功.
","sandbox-name:沙箱名称.
","FW与沙箱连接成功.
","1.
正常运行信息,无需处理.
""AAPT/4/CONNECT_FAIL","AAPT","CONNECT_FAIL","4","Failedtoconnecttosandbox[sandbox-name].
","连接沙箱失败.
","sandbox-name:沙箱名称.
","FW与沙箱连接异常中断.
","1.
检查FW与沙箱之间的连接.
""AAPT/4/SCAN_RESULT","AAPT","SCAN_RESULT","4","Sandboxscan-result.
(SyslogId=[syslog-id],VSys=[vsys-name],Policy=[policy-name],SrcIp=[source-ip],DstIp=[destination-ip],SrcPort=[source-port],DstPort=[destination-port],SrcZone=[source-zone],DstZone=[destination-zone],User=[user-name],Protocol=[protocol],Application=[application-name],Profile=[profile-name],FileName=[file-name],Type=[file-type],Size=[file-size],Direction=[direction],SandboxType=[sandbox-type],SubTime=[time],ScanResult=[file-scan-result],RiskLevel=[risk-level],Hash=[file-hash-value])","沙箱的扫描结果.
","syslog-id:日志序号.
vsys-name:虚拟系统名称.
policy-name:安全策略名称.
source-ip:源IP地址.
destination-ip:目的IP地址.
source-port:源端口.
destination-port:目的端口.
source-zone:源安全区域.
destination-zone:目的安全区域.
user-name:用户名.
protocol:协议名称.
application-name:应用名称.
profile-name:配置文件名称.
file-name:文件名称.
file-type:文件类型.
file-size:文件大小.
direction:流量传播方向.
sandbox-type:沙箱类型,本地沙箱或云沙箱.
time:样本提交时间.
file-scan-result:样本扫描结果,恶意或可疑.
risk-level:威胁等级.
包括high-risk、middle-risk、low-risk,分别对应高危、中危、低危三个等级.
file-hash-value:文件哈希值.
","当报文命中APT防御配置文件后,会进行未知文件还原,还原后的文件通过配置的沙箱类型会提交到相应的沙箱(本地沙箱或云沙箱)进行检测,当沙箱检测的结果为恶意或者可疑时会报该日志.

","1.
正常运行信息,无需处理.
""ACL/4/CONFGCNFLCT","ACL","CONFGCNFLCT","4","AnACLgroupnumberconflictoccurredwhentheconfigurationfilewasbeingread.
(GroupNumber=[ULONG])","正在读配置文件,ACL组号冲突.
","GroupNumber:组号","正在读配置文件,ACL组号冲突.
","1.
修改配置,更改起冲突的ACL6组号.
""ACL/4/RULECNFLCT","ACL","RULECNFLCT","4","AnACLruleconflictoccurredwhentheconfigurationfilewasbeingread.
(RuleNumber=[ULONG])","读配置文件时,ACL规则组下的规则号存在多条,导致冲突.
","RuleNumber:规则号","读配置文件时,ACL规则组下的规则使用同一规则号,导致冲突.
","1.
修改配置,更改规则号.
""ACL6/2/GET_CFG_FAIL","ACL6","GET_CFG_FAIL","2","FailedtogenerateACL6configurationsbecauseofinsufficientmemoryresources.
","内存不足,导致ACL6配置无法保存.
","无:无","内存不足.
","1.
关注内存使用情况,降低内存使用量.
""ACL6/3/RPC_FAILED","ACL6","RPC_FAILED","3","FailedtosynchronizeACL6configurations.
(ErrorCode=[ULONG])","ACL6配置下发失败.
","ULONG:错误码","设备正忙.
","1.
请稍后重试.
""ACL6/3/INIT_ERR","ACL6","INIT_ERR","3","TheACL6componentfailedtobeinitialized.
Restartthedeviceandre-initializetheACL6component.
","某种错误导致ACL6组件没有被初始化.
","无:无","设备启动异常,可能是内存不足.
","1.
重启设备,重新初始化ACL6组件.
""ACLPDT/4/ACLRULENUMTOOMUCH","ACLPDT","ACLRULENUMTOOMUCH","4","TheACLrulenumberhasreachedtheupperlimit.
(ErrorCode=[ULONG])","此ACL视图下的规则数量超出规格,配置失败.
","ULONG:错误码.
","此ACL视图下的规则数量超出规格,配置失败.
","1.
在此ACL视图下,去使能部分规则或在系统视图下,创建新的ACL后再进行配置.
""ACLPDT/4/ADDRULEERROR","ACLPDT","ADDRULEERROR","4","TheACLgrouptypeisnotintherange.
(ErrorFunction=[STRING],ErrorCode=[ULONG])","ACL组类型不存在,配置失败.
","STRING:函数标识.
ULONG:错误码.
","ACL组类型不存在,配置失败.
","1.
配置ACL组的类型在指定范围内.
""ACLPDT/4/CONFGCNFLCT","ACLPDT","CONFGCNFLCT","4","Failedtorecover[acl-command]becauseoftherecoveryofthegroup.
","规则组已被恢复过.
","acl-command:acl命令行.
","规则组已被恢复.
","1.
关注该命令行是否配置成功.
""ACLPDT/4/DELTNODEFAIL","ACLPDT","DELTNODEFAIL","4","Failedtodelete[string]becausetherulenodedoesnotexist.
","该配置不存在,删除失败.
","string:规则节点命令行.
","该配置不存在,删除失败.
","1.
配置不存在,无需删除.
""ACLPDT/4/HAFAIL","ACLPDT","HAFAIL","4","Hotbackupisinprocess.
(ErrorFunction=[STRING],ErrorCode=[ULONG])","设备正在热备份,不能进行配置,请稍后再试.
","STRING:函数标识.
ULONG:错误码.
","设备正在热备份,不能进行配置.
","1.
热备份结束后再进行配置.
""ACLPDT/4/MALLOCNODEFAIL","ACLPDT","MALLOCNODEFAIL","4","FailedtocreateanACLruleduetoinsufficientmemoryresources.
(ErrorFunction=[STRING],ErrorCode=[ULONG])","创建ACL规则时,内存不足导致创建失败.
","STRING:函数标识.
ULONG:错误码.
","创建ACL规则时,内存不足.
","1.
稍后重试.
""ACLPDT/4/RULETOOLARGE","ACLPDT","RULETOOLARGE","4","Failedtoconfigure[string]becausetherulecontainsmorethan256characters.
","规则名称过长,不允许配置.
","string:命令行.
","规则名称过长,不允许配置","1.
配置的名称长度不超过256个字符.
""ADDR/4/COLLISION_CNT_EXCEED","ADDR","COLLISION_CNT_EXCEED","4","CollisioncountreachedmaximumvalueforIPv6CGAaddress[ip-address]oninterface[interface-name].
","CGAIPv6地址冲突检测次数达到了接口允许的最大值.
","ip-address:IPv6CGA地址.
interface-name:IPv6CGA地址的接口名称.
","接口上配置相同的IPv6CGA地址导致冲突的次数达到限制的最大值.
","1.
请管理员重新配置不同的IP地址,比如不同的IP前缀.
""ARP/4/ARP_DUPLICATE_IPADDR","ARP","ARP_DUPLICATE_IPADDR","4","ReceivedanARPpacketwithaduplicateIPaddressfromtheinterface.
(IpAddress=[IPADDR],InterfaceName=[STRING1],MacAddress=[STRING2])","从接口上接收到IP地址冲突的ARP报文.
","IPADDR:冲突的IP地址.
STRING1:接口名称.
STRING2:MAC地址.
","原因1:网络上存在源IP地址与接口IP地址相同的设备.
原因2:网络上存在恶意攻击.
原因3:配置了NATServer或者NAT地址池地址与接口IP地址冲突.
","1.
检查网络中是否存在与接口相同的IP地址,并执行命令ipaddress,修改接口IP地址或与之冲突的设备的IP地址,确保两者IP地址不一致.
2.
检查网络中是否存在恶意攻击.
如果修改接口IP地址多次后,设备仍打印此日志,且日志提示相同的源MAC地址,此情况可判定为网络中存在恶意攻击.
此时,可启用ARP欺骗攻击防御.
3.
检查NATServer和NAT地址池的配置,修改NATServer公网地址或者NAT地址池地址,确保与接口IP地址不一致.
""ARP/4/ARP_LOG_DUPLICATE_IPADDR_DETECT","ARP","ARP_LOG_DUPLICATE_IPADDR_DETECT","4","DetectedanIPaddresscollision.
(IpAddress=[IpAddress],LocalMacAddress=[LocalMacAddress],LocalInterfaceName=[LocalInterfaceName],LocalVlanId=[LocalVlanId],ReceiveMacAddress=[ReceiveMacAddress],ReceiveInterfaceName=[ReceiveInterfaceName],ReceiveVlanId=[ReceiveVlanId])","设备检测到IP地址冲突.
","IpAddress:冲突的IP地址.
LocalMacAddress:本地ARP表项的MAC地址.
LocalInterfaceName:本地ARP表项中记录的接口名称.
LocalVlanId:本地ARP表项中记录的VLANID.
ReceiveMacAddress:接收到的ARP报文中的MAC地址.
ReceiveInterfaceName:接收到的ARP报文的接口名称.
ReceiveVlanId:接收到的ARP报文的VLANID.
","设备收到非免费ARP报文时,发现本端已经保存了该报文中的IP地址对应的ARP表项,但是该ARP表项的MAC地址和ARP报文中的源MAC地址不同.
","1.
执行displayarpip-conflicttrack命令,检查网络中是否存在IP地址配置冲突.
·Y=>2·N=>32.
请用户根据自身需求,修改网络中相关设备的IP地址,并确认是否还会产生该日志.
·Y=>3·N=>43.
请联系华为技术支持工程师.
4.
结束.
""ARP/6/ARPIGNORETC","ARP","ARPIGNORETC","6","Theuserchooses[Y/N]whendecidingwhethertoignoretopologychange.
","当决定是否忽略拓扑变化时,用户选择了[Y/N].
","[Y/N]:当决定是否忽略拓扑变化时,用户选择了是或否.
","在系统视图下执行命令arptopology-changedisable时,用户需要决定是否忽略拓扑变化.
","1.
检查拓扑变化后,ARP表项是否更新.
""ARP/6/ARP_LOG_BROADCAST_DISABLE","ARP","ARP_LOG_BROADCAST_DISABLE","6","Theuserchooses[Y/N]whendecidingwhethertodisablethesendingofARPbroadcastpackets.
","当决定是否去使能ARP报文广播发送时,用户选择了[Y/N].
","[Y/N]:确认是否去使能ARP报文广播发送时,用户输入的字符.
","执行去使能ARP报文广播发送的命令时,输出提示信息请用户确认是否继续,并记录用户的确认结果.
","1.
正常运行信息,无需处理.
""ARP/6/ARP_LOG_CONFIRM","ARP","ARP_LOG_CONFIRM","6","Theuserchose[Y/N]whendecidingwhethertoexecutethecommand"[command]".
","当决定是否执行交互式命令时,用户选择了[Y/N].
","[Y/N]:确认是否执行交互式命令时,用户输入的字符.
[command]:需要确认是否执行的交互式命令.
","执行ARP扫描或者ARP固化等交互式命令时,输出提示信息请用户确认是否继续,并记录用户的确认结果.
","1.
正常运行信息,无需处理.
""ARP/6/RSTARPALL","ARP","RSTARPALL","6","Theuserchooses[operation-type]whendecidingwhethertoresetarpall.
","提示用户是否确认删除所有ARP表项.
","[operation-type]:用户选择的操作类型.
","执行命令前需要用户确认.
","1.
正常运行信息,无需处理.
""ARP/6/RSTARPSTATIC","ARP","RSTARPSTATIC","6","Theuserchooses[operation-type]whendecidingwhethertoresetarpstatic.
","提示用户确认是否删除静态ARP表项.
","[operation-type]:用户选择的操作类型.
","执行命令前需要用户确认.
","1.
正常运行信息,无需处理.
""ADMIN/6/ADDGRPNETPL","ADMIN","ADDGRPNETPL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="ThestartIPaddressofthevirtualIPaddresspoolboundtonewgroup[group-name]was[new-start-ip].
"","新增组group-name绑定的虚拟IP地址池的起始IP地址为new-start-ip.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志group-name:组名.
new-start-ip:新绑定的虚拟IP地址池起始地址.
","添加本地或外部映射组绑定的网络扩展虚拟IP地址池的起始IP地址.
","1.
正常运行信息,无需处理.
""ADMIN/6/ALLUSERKICK","ADMIN","ALLUSERKICK","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Kickedoffallonlineuser.
"","强制所有用户下线.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","强制所有用户下线.
","1.
正常运行信息,无需处理.
""ADMIN/6/BACKINTERST","ADMIN","BACKINTERST","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[vgname]user="[username]"src=[srcip]type=[type]service=[service-type]msg="Thebackupremindingintervalwassetto[time-interval]"","启用备份提醒功能.
","sysname:记录类型.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
user-name:管理员账号.
srcip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志time-interval:时间间隔(范围1-365天,默认为10天).
","管理员进行了设置备份提醒间隔时间的操作.
","1.
正常运行信息,无需处理.
""ADMIN/6/GROUPADDRES","ADMIN","GROUPADDRES","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Added[resource-type]resource[resource-name]togroup[group-name].
"","将Web代理资源加入Web代理资源组.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志resource-type:资源类型.
resource-name:Web代理资源名称.
group-name:Web代理资源组名称.
","将Web代理资源加入Web代理资源组.
","1.
正常运行信息,无需处理.
""ADMIN/6/LOGOUPLD","ADMIN","LOGOUPLD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[user-name]"src=[source-ip]type=[type]service=[service-type]msg="Succeededinimportingthelogofile.
(filename="[filename]")"","上传虚拟网关Logo文件filename.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
virtual-gateway-name:虚拟网关名.
user-name:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志filename:虚拟网关logo文件名.
","上传虚拟网关Logo.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTSETCLTAU","ADMIN","CRTSETCLTAU","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Enabledclientcertificateauthentication.
"","配置客户端证书认证.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
virtual-gateway-name:虚拟网关名.
user-name:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","管理员配置客户端证书认证.
","1.
正常运行信息,无需处理.
""ADMIN/6/CUSTFIRST","ADMIN","CUSTFIRST","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Page[index.
asp]isspecifiedastheloginpageof[devicetype].
"","管理员在虚拟网关Web页面的定制文件列表中成功指定登录首页.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志index.
asp:登录首页名.
devicetype:设备名称.
","管理员在虚拟网关Web页面的定制文件列表中成功指定登录首页.
","1.
正常运行信息,无需处理.
""ADMIN/6/CUSTHOME","ADMIN","CUSTHOME","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Page[url]isspecifiedasthehomepageof[devicename].
"","指定虚拟网关主页的url.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志url:虚拟网关主页的URL.
devicename:设备名称.
","指定虚拟网关主页的url.
","1.
正常运行信息,无需处理.
""ADMIN/6/DEFPUBRST","ADMIN","DEFPUBRST","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Restoredthedefaultmaxconcurrentusernumbertodefaultvalue.
"","成功将虚拟网关每个账号的默认最大在线数恢复为默认值.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","成功将虚拟网关每个账号的默认最大在线数恢复为默认值.
","1.
正常运行信息,无需处理.
""ADMIN/6/DEFPUBSET","ADMIN","DEFPUBSET","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Setthedefaultmaxconcurrentusernumberto[number-info].
"","成功设置虚拟网关每个账号的默认最大在线数为number-info.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志number-info:虚拟网关每个账号的默认最大在线数.
","成功设置虚拟网关每个账号的默认最大在线数为number-info.
","1.
正常运行信息,无需处理.
""ADMIN/6/EXTERNALSER","ADMIN","EXTERNALSER","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="NetworkextensionclientsweresettoobtaintheirvirtualIPaddressesfromtheexternalserver.
"","启用网络扩展的客户端IP分配方式为外部服务器获取.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","启用网络扩展的客户端IP分配方式为外部服务器获取.
","1.
正常运行信息,无需处理.
""ADMIN/6/PUBUSER","ADMIN","PUBUSER","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="[operation]publicaccountfunction.
"","管理员启用/禁用公共账号功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vsys-name:虚拟系统名称.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志operation:操作.
包括:·Configured:启用公共账号功能·Cancelled:禁用公共账号功能","管理员启用/禁用公共账号功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/TITLEUPLD","ADMIN","TITLEUPLD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[user-name]"src=[source-ip]type=[type]service=[service-type]msg="Succeededinimportingthetitlefile.
(filename="[filename]")"","上传虚拟网关标题文件filename.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
virtual-gateway-name:虚拟网关名.
user-name:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志filename:虚拟网关标题文件名.
","上传虚拟网关标题.
","1.
正常运行信息,无需处理.
""ADMIN/6/USERCONADD","ADMIN","USERCONADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Setthemaxconcurrentusernumberofuser[user-name]to[number-info].
"","成功设置使用用户账号[user-name]登录虚拟网关的最大在线数为[number-info].
","time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志user-name:用户名.
number-info:最大在线数.
","成功设置使用用户账号[user-name]登录虚拟网关的最大在线数为[number-info].
","1.
正常运行信息,无需处理.
""ADMIN/6/VTIPSVPNUMAX","ADMIN","VTIPSVPNUMAX","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="ThenumberofonlineSSLVPNusersreachedtheupperlimit[upper-limit]supportedbythevirtualgateway.
"","IPSecVPN在线用户数达到虚拟网关支持的该类用户的上限.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
virtual-gateway-name:虚拟网关名.
user-name:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志upper-limit:虚拟网关支持的IPSecVPN在线用户数的上限.
","IPSecVPN在线用户数达到该虚拟网关支持的该类用户的上限.
","1.
正常运行信息,无需处理.
""ADMIN/6/USERCONDEL","ADMIN","USERCONDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Restoredthemaxconcurrentusernumberofuser[user-name]todefaultvalue.
"","成功将使用用户账号user-name登录虚拟网关的最大在线数恢复为默认值.
","time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志user-name:用户名.
","成功将使用用户账号user-name登录虚拟网关的最大在线数恢复为默认值.
","1.
正常运行信息,无需处理.
""ADMIN/6/WELCUPLD","ADMIN","WELCUPLD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[user-name]"src=[source-ip]type=[type]service=[service-type]msg="Succeededinimportingthewelcomemessagefile.
(filename="[filename]")"","上传虚拟网关欢迎辞文件filename.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
virtual-gateway-name:虚拟网关名.
user-name:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志filename:虚拟网关欢迎辞文件名.
","上传虚拟网关欢迎辞.
","1.
正常运行信息,无需处理.
""ADMIN/6/ANTINESTRDC","ADMIN","ANTINESTRDC","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="TheEPSanti-remoteloginfunctionwas[state].
"","启用/关闭防二次跳转功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志state:状态类型.
参数值含义:·enabled:启用·disabled:关闭vsys-name:虚拟系统名称.
","管理员启用/关闭防二次跳转功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/ANTIPS","ADMIN","ANTIPS","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="TheEPSanti-print-screenfunctionwas[state].
"","启用/关闭防截屏功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志state:状态类型.
参数值含义:·enabled:启用·disabled:关闭vsys-name:虚拟系统名称.
","管理员启用/关闭防截屏功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/BINDWPRESGROUP","ADMIN","BINDWPRESGROUP","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Associatedrole[role-name]withwebproxyresourcegroup[resource-group-name].
"","关联角色role-name和Web代理资源组resource-group-name.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role-name:角色名.
resource-group-name:资源组名.
","关联角色和Web代理资源组.
","1.
正常运行信息,无需处理.
""ADMIN/6/CCADDFILE","ADMIN","CCADDFILE","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Theclean-upitem[filename]wasadded.
"","添加文件或文件夹的清理项.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志filename:需要进行清理的文件或文件夹.
vsys-name:虚拟系统名称.
","添加文件或文件夹的清理项.
","1.
正常运行信息,无需处理.
""ADMIN/6/CCADDRCOMPEN","ADMIN","CCADDRCOMPEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thedisableauto-completeaddressfunctionwasenabled.
"","启用"禁用IE地址栏自动完成功能".
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用"禁用IE地址栏自动完成功能".
","1.
正常运行信息,无需处理.
""ADMIN/6/CCADDRCOMPUN","ADMIN","CCADDRCOMPUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thedisableauto-completeaddressfunctionwasdisabled.
"","禁用"禁用IE地址栏自动完成功能".
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用"禁用IE地址栏自动完成功能".
","1.
正常运行信息,无需处理.
""ADMIN/6/CCAUTOCOMEN","ADMIN","CCAUTOCOMEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thedisableauto-completeformfunctionwasenabled.
"","启用"禁用IE表单自动完成功能".
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用"禁用IE表单自动完成功能".
","1.
正常运行信息,无需处理.
""ADMIN/6/CCAUTOCOMUN","ADMIN","CCAUTOCOMUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thedisableauto-completeformfunctionwasdisabled.
"","禁用"禁用IE表单自动完成功能".
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用"禁用IE表单自动完成功能".
","1.
正常运行信息,无需处理.
""ADMIN/6/CCBRWSRTMPEN","ADMIN","CCBRWSRTMPEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="ThecleantemporaryInternet-Filesfunctionwasenabled.
"","启用"浏览器缓存清理功能".
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用"浏览器缓存清理功能".
","1.
正常运行信息,无需处理.
""ADMIN/6/CCBRWSRTMPUN","ADMIN","CCBRWSRTMPUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="ThecleantemporaryInternet-Filesfunctionwasdisabled.
"","禁用"浏览器缓存清理功能".
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用"浏览器缓存清理功能".
","1.
正常运行信息,无需处理.
""ADMIN/6/CCCOOKIEEN","ADMIN","CCCOOKIEEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thecookie-cleanfunctionwasenabled.
"","启用"清理Cookie功能".
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用"清理Cookie功能".
","1.
正常运行信息,无需处理.
""ADMIN/6/CCCOOKIEUN","ADMIN","CCCOOKIEUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thecookie-cleanfunctionwasdisabled.
"","禁用"清理Cookie功能".
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用"清理Cookie功能".
","1.
正常运行信息,无需处理.
""ADMIN/6/CCDELFILE","ADMIN","CCDELFILE","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Theclean-upitem[filename]wasdeleted.
"","删除文件或文件夹的清理项.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志filename:文件名.
vsys-name:虚拟系统名称.
","删除文件或文件夹的清理项.
","1.
正常运行信息,无需处理.
""ADMIN/6/CCEN","ADMIN","CCEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thecache-cleanerfunctionwasenabled.
"","启用缓存清理.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用缓存清理.
","1.
正常运行信息,无需处理.
""ADMIN/6/CCHISTEN","ADMIN","CCHISTEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thecleanhistoryrecordsfunctionwasenabled.
"","启用"清除历史记录功能".
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用"清除历史记录功能".
","1.
正常运行信息,无需处理.
""ADMIN/6/CCHISTUN","ADMIN","CCHISTUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thecleanhistoryrecordsfunctionwasdisabled.
"","禁用"清除历史记录功能".
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用"清除历史记录功能".
","1.
正常运行信息,无需处理.
""ADMIN/6/CCPWDEN","ADMIN","CCPWDEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thecleanauto-savepasswordfunctionwasenabled.
"","启用"清除浏览器自动保存密码的功能".
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用"清除浏览器自动保存的密码功能".
","1.
正常运行信息,无需处理.
""ADMIN/6/CCPWDUN","ADMIN","CCPWDUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thecleanauto-savepasswordfunctionwasdisabled.
"","禁用"清除浏览器自动保存的密码功能".
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用"清除浏览器自动保存的密码功能".
","1.
正常运行信息,无需处理.
""ADMIN/6/CCRECYEN","ADMIN","CCRECYEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thecleanrecycleandrecentdocfunctionwasenabled.
"","启用"清空回收站和最近打开文件列表功能".
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用"清空回收站和最近打开文件列表功能".
","1.
正常运行信息,无需处理.
""ADMIN/6/CCRECYUN","ADMIN","CCRECYUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thecleanrecycleandrecentdocfunctionwasdisabled.
"","禁用"清空回收站和最近打开文件列表功能".
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用"清空回收站和最近打开文件列表功能".
","1.
正常运行信息,无需处理.
""ADMIN/6/CCUN","ADMIN","CCUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thecache-cleanerfunctionwasdisabled.
"","禁用缓存清理功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用缓存清理功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/CPSSET","ADMIN","CPSSET","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="SetSSLciphersuiteto[cipher-suite].
"","设置加密套件信息为[cipher-suite].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志cipher-suite:加密套件信息.
vsys-name:虚拟系统名称.
","设置加密套件信息.
","1.
正常运行信息,无需处理.
""ADMIN/6/CPSUNSET","ADMIN","CPSUNSET","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="SettheSSLciphersuitetothedefaultciphersuiteAES256-SHA:AES128-SHA:AES256-SHA256:AES128-SHA256.
"","取消SSL加密套件设置.
虚拟网关将恢复SSL加密套件设置为默认设置.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","取消SSL加密套件设置.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTADDFLT","ADMIN","CRTADDFLT","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Addedthecertificatefieldfilterpolicy,masterfieldwas[masterfield],subfieldwas[subfiled],valuewas[value].
"","添加证书字段过滤策略,主过滤字段为[masterfield],从过滤字段为[subfiled],过滤字段值为[value].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志masterfield:主过滤字段.
subfiled:从过滤字段.
value:过滤字段值.
vsys-name:虚拟系统名称.
","添加证书字段过滤策略.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTCADEL","ADMIN","CRTCADEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="SucceededindeletingtheCAcertificate[file]fromthevirtualgateway.
"","删除文件名为[file]的CA证书.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志file:CA证书文件名称.
vsys-name:虚拟系统名称.
","删除文件名为[file]的CA证书.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTCAIMP","ADMIN","CRTCAIMP","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="SucceededinimportingtheCAcertificate.
"","成功导入CA证书.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","成功导入CA证书.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTDELFLT","ADMIN","CRTDELFLT","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Deletedthecertificatefieldfilterpolicy,masterfieldwas[masterfield],subfieldwas[subfield],valuewas[value].
"","删除证书字段过滤策略,主过滤字段为[masterfield],从过滤字段为[subfield],过滤字段值为[value].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志masterfield:主过滤字段.
subfield:从过滤字段.
value:过滤字段值.
vsys-name:虚拟系统名称.
","删除证书字段过滤策略.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTDEVDEL","ADMIN","CRTDEVDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Setthe[gateway-type]devicecertificatetothedefaultcertificate.
"","删除设备证书.
当前生效的设备证书为默认证书.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志gateway-type:网关类型.
vsys-name:虚拟系统名称.
","删除设备证书.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTDEVIMP","ADMIN","CRTDEVIMP","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Succeededinimportingthe[gateway-type]devicecertificate.
"","导入设备证书.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志gateway-type:虚拟网关类型.
","导入设备证书.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTFLTADDISS","ADMIN","CRTFLTADDISS","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Succeededinaddingissuer[issuer]toclientcertificatefilterconfiguration.
"","管理员设置证书过滤中客户端证书的有效颁发者.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志issuer:颁发者.
vsys-name:虚拟系统名称.
","管理员设置证书过滤中客户端证书的有效颁发者.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTFLTALWALL","ADMIN","CRTFLTALWALL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Configuredcertificatefieldfilteringpolicywasallowedalluserstoaccess.
"","设置证书字段过滤规则策略为允许所有用户访问.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","设置证书字段过滤规则策略为允许所有用户访问.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTFLTALWPRT","ADMIN","CRTFLTALWPRT","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Configuredcertificatefieldfilteringpolicywasalloweduserstoaccesswhichthemultipleconditionsmet.
"","设置证书字段过滤规则策略为允许部分用户访问.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","设置证书字段过滤规则策略为允许部分用户访问.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTFLTDELEVT","ADMIN","CRTFLTDELEVT","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Succeededindeletingtheendvaliditytimeofclientcertificatefilterconfiguration.
"","管理员删除证书过滤中客户端证书的有效终止时间.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","管理员删除证书过滤中客户端证书的有效终止时间.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTFLTDELISS","ADMIN","CRTFLTDELISS","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Succeededindeletingtheissuer[issuer]ofclientcertificatefilterconfiguration.
"","管理员删除证书过滤中客户端证书的有效颁发者.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志issuer:颁发者.
vsys-name:虚拟系统名称.
","管理员删除证书过滤中客户端证书的有效颁发者.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTFLTDELSVT","ADMIN","CRTFLTDELSVT","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Succeededindeletingthestartvaliditytimeofclientcertificatefilterconfiguration.
"","管理员删除证书过滤中客户端证书的起始生效时间.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","管理员删除证书过滤中客户端证书的起始生效时间.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTFLTFBDPRT","ADMIN","CRTFLTFBDPRT","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Configuredcertificatefieldfilteringpolicywasforbideduserstoaccesswhichthemultipleconditionsmet.
"","设置证书字段过滤规则策略为禁止部分用户访问.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","设置证书字段过滤规则策略为禁止部分用户访问.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTFLTSETEVT","ADMIN","CRTFLTSETEVT","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Succeededinsettingtheendvaliditytimeofclientcertificatefilterconfigurationto[end-time].
"","管理员设置证书过滤中客户端证书的有效终止时间为[end-time].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志end-time:结束时间.
vsys-name:虚拟系统名称.
","管理员设置证书过滤中客户端证书的有效终止时间.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTFLTSETSVT","ADMIN","CRTFLTSETSVT","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Succeededinsettingthestartvaliditytimeofclientcertificatefilterconfigurationto[start-time].
"","管理员设置证书过滤中客户端证书的起始生效时间为[start-time].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志start-time:起始时间.
vsys-name:虚拟系统名称.
","管理员设置证书过滤中客户端证书的起始生效时间.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTFLTSETUSG","ADMIN","CRTFLTSETUSG","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Succeededinsettingthekeyusageofclientcertificatefilterconfigurationto[key-usage].
"","管理员设置证书过滤中客户端证书的密钥用法.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志key-usage:密钥用法.
vsys-name:虚拟系统名称.
","管理员设置证书过滤中客户端证书的密钥用法.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTSETANOFLT","ADMIN","CRTSETANOFLT","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Configuredcert-Anonymoususerfilterfield:masterfieldwas[usermasterfield],subfieldwas[usersubfield].
Groupfilterfield:masterfieldwas[groupmasterfield],subfieldwas[groupsubfield].
"","配置认证方式为证书匿名的证书过滤字段,用户过滤主字段为[usermasterfield],用户过滤从字段为[usersubfield],组过滤主字段为[groupmasterfield],组过滤从字段为[groupsubfield].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志usermasterfield:用户过滤主字段.
usersubfield:用户过滤从字段.
groupmasterfield:组过滤主字段.
groupsubfield:组过滤从字段.
vsys-name:虚拟系统名称.
","配置认证方式为证书匿名的证书过滤字段.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTSETCLGFLT","ADMIN","CRTSETCLGFLT","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Configuredcert-challengeuserfilterfield:masterfieldwas[masterfield],subfieldwas[subfield].
"","配置认证方式为证书挑战的证书过滤字段,主过滤字段为[masterfield],从过滤字段为[subfield].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志masterfield:主过滤字段.
subfiled:从过滤字段.
vsys-name:虚拟系统名称.
","配置认证方式为证书挑战的证书过滤字段.
","1.
正常运行信息,无需处理.
""ADMIN/6/CRTUNCLTAU","ADMIN","CRTUNCLTAU","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Disabledclientcertificateauthentication.
"","取消客户端证书认证.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","取消客户端证书认证.
","1.
正常运行信息,无需处理.
""ADMIN/6/CUSTDEL","ADMIN","CUSTDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsysname]vpn=[vgname]user="[username]"src=[srcip]type=[type]service=[service-type]msg="Customfile[filename]isdeleted.
"","用户删除自定义页面.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vsysname:虚拟系统名.
vgname:虚拟网关名.
username:虚拟网关用户名.
srcip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志filename:文件名","用户删除自定义页面.
","1.
正常运行信息,无需处理.
""ADMIN/6/CUSTRESTORE","ADMIN","CUSTRESTORE","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsysname]vpn=[vgname]user="[username]"src=[srcip]type=[type]service=[service-type]msg="ThedefaultloginpageofPCisrestored.
"","恢复缺省登录首页.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vsysname:虚拟系统名.
vgname:虚拟网关名.
username:虚拟网关用户名srcip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","管理员恢复缺省登录首页.
","1.
正常运行信息,无需处理.
""ADMIN/6/CUSTUPLD","ADMIN","CUSTUPLD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsysname]vpn=[vgname]user="[username]"src=[srcip]type=[type]service=[service-type]msg="Customfile[filename]isimported.
(filename=[filename])"","用户导入自定义页面.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vsysname:虚拟系统名.
vgname:虚拟网关名.
username:虚拟网关用户名.
srcip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志filename:文件名","用户导入自定义页面.
","1.
正常运行信息,无需处理.
""ADMIN/6/DELGRPNETPL","ADMIN","DELGRPNETPL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="ThevirtualIPaddresspoolboundtogroup[group-name]wascleared.
"","清除组[group-name]绑定的虚拟IP地址池成功.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志group-name:组名.
","删除组绑定的网络扩展虚拟IP地址池.
","1.
正常运行信息,无需处理.
""ADMIN/6/DNSADD1","ADMIN","DNSADD1","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="SpecifiedoneDNSserver.
TheIPofserverwas[ip-address].
"","设置一个DNS服务器的IP地址,DNS服务器的IP地址为[ip-address].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志ip-address:DNS服务器的IP地址.
vsys-name:虚拟系统名称.
","设置一个DNS服务器的IP地址.
","1.
正常运行信息,无需处理.
""ADMIN/6/DNSADD2","ADMIN","DNSADD2","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="SpecifiedtwoDNSservers.
ThefirstIPofserverwas[ip-address1],andthesecondIPofserverwas[ip-address2].
"","设置二个DNS服务器的IP地址.
第一个服务器的IP地址是[ip-address1],第二个服务器的IP地址是[ip-address2].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志ip-address1:首选DNS服务器IP地址.
ip-address2:备选DNS服务器的IP地址.
vsys-name:虚拟系统名称.
","设置二个DNS服务器的IP地址.
","1.
正常运行信息,无需处理.
""ADMIN/6/DNSADD3","ADMIN","DNSADD3","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="SpecifiedthreeDNSservers.
ThefirstIPofserverwas[ip-address1],thesecondIPofserverwas[ip-address2],andthethirdIPofserverwas[ip-address3].
"","设置三个DNS服务器的IP地址.
第一个服务器的IP地址是[ip-address1],第二个服务器的IP地址是[ip-address2],第三个服务器的IP地址是[ip-address3].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志ip-address1:首选DNS服务器IP地址.
ip-address2:备选DNS服务器的IP地址.
ip-address3:备选DNS服务器的IP地址.
vsys-name:虚拟系统名称.
","设置三个DNS服务器的IP地址.
","1.
正常运行信息,无需处理.
""ADMIN/6/DNSCACHECLEAR","ADMIN","DNSCACHECLEAR","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[user-name]"src=[srcip]type=[type]service=[service-type]msg="FlushedthelocalDNScacheofvirtualgatewayof[vgname].
"","清除DNS缓存.
","sysname:记录类型.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
virtual-gateway-name:虚拟网关名.
user-name:管理员账号.
srcip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vgname:虚拟网关名称.
","清除DNS缓存.
","1.
正常运行信息,无需处理.
""ADMIN/6/DNSDEL","ADMIN","DNSDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="DeletedDNSserver.
TheIPaddresswas[ip-address].
"","删除设置的DNS服务器的IP地址.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志ip-address:DNS服务器的IP地址.
vsys-name:虚拟系统名称.
","删除设置的DNS服务器的IP地址.
","1.
正常运行信息,无需处理.
""ADMIN/6/DNSDOMAINDEL","ADMIN","DNSDOMAINDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="DeletedthedomainnameofDNSserver.
Thedomainnamewas[domain-name].
"","删除DNS服务器域名[domain-name].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志domain-name:DNS服务器域名.
vsys-name:虚拟系统名称.
","删除DNS服务器域名.
","1.
正常运行信息,无需处理.
""ADMIN/6/DNSDOMAINSET","ADMIN","DNSDOMAINSET","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="SetDNSserverdomain.
Thedomainnamewas[domain-name].
"","设置DNS服务器域名为[domain-name].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志domain-name:DNS服务器域名.
vsys-name:虚拟系统名称.
","设置DNS服务器域名.
","1.
正常运行信息,无需处理.
""ADMIN/6/EPSADD","ADMIN","EPSADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="EPSpolicy[policyname]wasadded.
"","添加主机检查策略[policyname].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志policyname:主机检查策略名.
vsys-name:虚拟系统名称.
","添加主机检查策略.
","1.
正常运行信息,无需处理.
""ADMIN/6/EPSDEL","ADMIN","EPSDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="EPSpolicy[policyname]wasdeleted.
"","删除主机检查策略[policyname].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志policyname:主机检查策略名.
vsys-name:虚拟系统名称.
","删除主机检查策略.
","1.
正常运行信息,无需处理.
""ADMIN/6/EPSEN","ADMIN","EPSEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="TheEPSstate-checkfunctionwasenabled.
"","启用主机检查.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用主机检查.
","1.
正常运行信息,无需处理.
""ADMIN/6/EPSMODDESC","ADMIN","EPSMODDESC","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="ThedescriptionofEPSpolicy[policyname]wasmodified.
"","修改主机检查策略的描述.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志description:描述信息.
policyname:策略名.
vsys-name:虚拟系统名称.
","修改主机检查策略的描述.
","1.
正常运行信息,无需处理.
""ADMIN/6/EPSUN","ADMIN","EPSUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="TheEPSstate-checkfunctionwasdisabled.
"","禁用主机检查.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用主机检查.
","1.
正常运行信息,无需处理.
""ADMIN/6/FILEPROC","ADMIN","FILEPROC","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="[ruleType]rule[rulename]wasconfigured,[rule-info].
"","配置指定文件检查规则.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志ruleType:规则类型.
参数值含义:·Antivirus-check:杀毒软件检查·Firewall-check:防火墙检查·OS-check:操作系统检查·Port-check:端口检查·Process-check:进程检查·File-check:文件检查·Registry-check:注册表检查rulename:规则名.
filename:文件名.
rule-info:规则信息.
vsys-name:虚拟系统名称.
","配置文件检查规则的内容和行为.
","1.
正常运行信息,无需处理.
""ADMIN/6/FSEN","ADMIN","FSEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Enabledfilesharingfunction.
"","启用文件共享功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用文件共享功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/FSNFSADD","ADMIN","FSNFSADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="AddedormodifiedNFSresource[resource-name]offilesharing.
Thepathnamewas[resource-path-name].
"","添加或者修改文件共享NFS(NetworkFileSystem)资源[resource-name],资源路径名为[resource-path-name].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志resource-name:资源名.
resource-path-name:资源路径名.
vsys-name:虚拟系统名称.
","添加或者修改文件共享NFS资源.
","1.
正常运行信息,无需处理.
""ADMIN/6/FSRESDEL","ADMIN","FSRESDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Deletedresource[resource-name]offilesshare.
"","删除文件共享资源[resource-name].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志resource-name:资源名.
vsys-name:虚拟系统名称.
","删除文件共享资源.
","1.
正常运行信息,无需处理.
""ADMIN/6/FSSMBADD","ADMIN","FSSMBADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="AddedormodifiedSMBresource[resource-name]offilesharing.
Thepathnamewas[resource-path-name].
"","添加或者修改文件共享SMB(ServerMessageBlock)资源[resource-name].
资源路径名为[resource-path-name].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志resource-name:资源名.
resource-path-name:资源路径名.
vsys-name:虚拟系统名称.
","添加或者修改文件共享SMB资源.
","1.
正常运行信息,无需处理.
""ADMIN/6/FSUN","ADMIN","FSUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Disabledfilesharingfunction.
"","禁用文件共享功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用文件共享功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/GROUPADD","ADMIN","GROUPADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Addedgroup[group-name]tovirtualgateway[virtual-gateway-name].
"","给虚拟网关[virtual-gateway-name]添加组[group-name].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志group-type:组类型.
group-name:组名.
virtual-gateway-name:虚拟网关名.
vsys-name:虚拟系统名称.
","为虚拟网关添加组.
","1.
正常运行信息,无需处理.
""ADMIN/6/GROUPDEL","ADMIN","GROUPDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Deletedgroup[group-name]fromvirtualgateway[virtual-gateway-name].
"","从虚拟网关[virtual-gateway-name]删除组[group-name].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志virtual-gateway-name:虚拟网关名.
group-name:组名.
vsys-name:虚拟系统名称.
","从虚拟网关删除组.
","1.
正常运行信息,无需处理.
""ADMIN/6/GROUPDELRES","ADMIN","GROUPDELRES","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Deletedwebproxyresource[resource-name]fromgroup.
"","将Web代理资源从Web代理资源组中删除.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志resource-name:Web代理资源名称.
","将Web代理资源从Web代理资源组中删除.
","1.
正常运行信息,无需处理.
""ADMIN/6/GROUPIDSET","ADMIN","GROUPIDSET","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Changedthegidofgroup[group-name]into[group-id].
"","设置组[group-name]的GID为[group-id].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志group-name:组名.
group-id:组ID.
vsys-name:虚拟系统名称.
","设置组[group-name]的GID.
","1.
正常运行信息,无需处理.
""ADMIN/6/LINKBACKUPEN","ADMIN","LINKBACKUPEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[vgname]user="[username]"src=[srcip]type=[type]service=[service-type]msg="Thelinkbackupfunctionwasenabled.
"","链路备份功能开启.
","sysname:记录类型.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
user-name:管理员账号.
srcip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","管理员进行了链路备份功能开启的操作.
","1.
正常运行信息,无需处理.
""ADMIN/6/LINKBACKUPUN","ADMIN","LINKBACKUPUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[vgname]user="[username]"src=[srcip]type=[type]service=[service-type]msg="Thelinkbackupfunctionwasdisabled.
"","链路备份功能关闭.
","sysname:记录类型.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
user-name:管理员账号.
srcip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","管理员进行了链路备份功能关闭的操作.
","1.
正常运行信息,无需处理.
""ADMIN/6/LOGORESTORE","ADMIN","LOGORESTORE","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Restoredthedefaultlogoconfiguration.
"","恢复虚拟网关默认的欢迎辞设置.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","恢复默认Logo设置.
","1.
正常运行信息,无需处理.
""ADMIN/6/LOGOSET","ADMIN","LOGOSET","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[vgname]user="[username]"src=[srcip]type=[type]service=[service-type]msg="Succeededinsettingthelogofile.
(filename="[filename]")"","成功设置虚拟网关Logo文件filename.
","sysname:记录类型.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
user-name:管理员账号.
srcip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志filename:Logo文件名.
","管理员设置了虚拟网关Logo文件.
","1.
正常运行信息,无需处理.
""ADMIN/6/MD5ADD","ADMIN","MD5ADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="MD5value[value]wasaddedto[ruleType]rule[rulename].
"","向指定文件检查规则[rulename]中添加MD5值[value].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志value:MD5值.
ruleType:规则类型.
参数值含义:·Antivirus-check:杀毒软件检查·Firewall-check:防火墙检查·OS-check:操作系统检查·Port-check:端口检查·Process-check:进程检查·File-check:文件检查·Registry-check:注册表检查rulename:规则名.
vsys-name:虚拟系统名称.
","向指定文件检查规则中添加MD5值.
","1.
正常运行信息,无需处理.
""ADMIN/6/MD5DEL","ADMIN","MD5DEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="MD5value[value]wasdeletedfrom[ruleType]rule[rulename].
"","向指定文件检查规则[rulename]中删除MD5值[value].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志value:MD5值.
ruleType:规则类型.
参数值含义:·Antivirus-check:杀毒软件检查·Firewall-check:防火墙检查·OS-check:操作系统检查·Port-check:端口检查·Process-check:进程检查·File-check:文件检查·Registry-check:注册表检查rulename:规则名.
vsys-name:虚拟系统名称.
","从指定文件检查规则中删除MD5值.
","1.
正常运行信息,无需处理.
""ADMIN/6/MODFGRPNETPL","ADMIN","MODFGRPNETPL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="StartIPaddress[start-ip]ofthevirtualIPaddresspoolboundtogroup[group-name]wasmodifiedto[new-start-ip].
"","修改组[group-name]绑定的虚拟IP地址池的起始IP地址[start-ip]为[new-start-ip].
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志group-name:组名.
start-ip:原虚拟IP地址池起始地址.
new-start-ip:新绑定的虚拟IP地址池起始地址.
","修改本地或外部映射组绑定的网络扩展虚拟IP地址池的起始IP地址.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMEN","ADMIN","NEMEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Enablednetworkextensionfunction.
"","启用网络扩展功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用网络扩展功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMENLOG","ADMIN","NEMENLOG","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[vgname]user="[username]"src=[srcip]type=[type]service=[service-type]msg="Enablednetworkextensionlog.
"","启用网络扩展日志功能.
","sysname:记录类型.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
user-name:管理员账号.
srcip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志filename:Logo文件名.
","启用网络扩展日志功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMKAEN","ADMIN","NEMKAEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Enablednetworkextensionkeepalivefunction.
"","启用网络扩展中的保持连接功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用网络扩展中的保持连接功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMKATIME","ADMIN","NEMKATIME","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[vgname]user="[username]"src=[srcip]type=[type]service=[service-type]msg="Configuredthekeepaliveintervalofnetworkextensionas[keep-alive-time]seconds.
"","配置网络扩展保活报文的发送时间间隔.
","sysname:记录类型.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
user-name:管理员账号.
srcip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志keep-alive-time:保活报文发送时间间隔.
","配置网络扩展保活报文的发送时间间隔.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMKAUN","ADMIN","NEMKAUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Disablednetworkextensionkeepalivefunction.
"","禁用网络扩展保持连接功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用网络扩展保持连接功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMMANUALADD","ADMIN","NEMMANUALADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Addedanetworkforthenetworkextensionmanualmode,theIPaddresswas[ip-address]andthesubnetmaskwas[mask].
"","网络扩展手动模式下添加一个网段,IP地址为[ip-address],子网掩码为[mask].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志ip-address:新增网段的IP地址.
mask:子网掩码.
vsys-name:虚拟系统名称.
","网络扩展手动模式下添加一个网络.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMMANUALDEL","ADMIN","NEMMANUALDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Deletedanetworkforthenetworkextensionmanualmode,theIPaddresswas[ip-address]andthesubnetmaskwas[mask].
"ADMIN/6/NEMMANUALDEL(l):id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thenetworksconfiguredforthemanualmodearealldeleted.
"","网络扩展手动模式下删除一个网段,IP地址为[ip-address],子网掩码为[mask].
删除网络扩展手动模式下所有网段.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志ip-address:删除网段的IP地址.
mask:子网掩码.
vsys-name:虚拟系统名称.
","删除网络扩展手动模式的一个网络.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMMODDHCP","ADMIN","NEMMODDHCP","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[vpn]service=[service-type]msg="EnabledtheDHCPservermodetoassigntheIPaddressinnetworkextension.
SettheDHCPserverIPto[ip-address],and[action]usersvirtualIPconfigurations.
"","启用网络扩展的客户端IP分配方式为DHCP方式,设置DHCP服务器地址为ip-address,用户虚拟IP处理方式为action.
","sysname:记录类型.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
vpn:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志ip-address:IP地址.
action:用户虚拟IP处理方式.
主要有以下两种:·cleared:清除所有用户虚拟IP.
·reserved:表示保留所有用户虚拟IP.
","启用网络扩展的客户端IP分配方式为DHCP方式.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMMODFULL","ADMIN","NEMMODFULL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Configuredthenetworkextensionmodeasfullgatewaymode.
"","设置网络扩展的路由模式为全路由模式.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","设置网络扩展的路由模式为全路由模式.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMMODIPPOOL","ADMIN","NEMMODIPPOOL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[vpn]service=[servicetype]msg="EnabledtheaddresspoolmodetoassigntheIPaddressinnetworkextension.
"","启用网络扩展使用地址池方式分配IP地址.
","sysname:记录类型.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
vpn:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志servicetype:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志start-ip-address:IP地址池的起始地址.
end-ip-address:IP地址池的结束地址.
subnet-mask:子网掩码.
action:用户虚拟IP处理方式:·clearedinvalid:清除不在新地址范围内的用户虚拟IP.
·clearedall:清除所有用户虚拟IP.
·reservedall:保留所有用户虚拟IP.
","启用网络扩展使用地址池方式分配IP地址.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMMODMANUAL","ADMIN","NEMMODMANUAL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Configuredthenetworkextensionmodeasmanualgatewaymode.
"","设置网络扩展的路由模式为手动模式.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","设置网络扩展的路由模式为手动模式.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMMODSPLIT","ADMIN","NEMMODSPLIT","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Configuredthenetworkextensionmodeassplitgatewaymode.
"","设置网络扩展的路由模式为分离模式.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","设置网络扩展的路由模式为分离模式.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMP2PEN","ADMIN","NEMP2PEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Enablednetworkextensionpointtopointfunction.
"","启用网络扩展中的点对点通讯功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用网络扩展中的点对点通讯功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMP2PUN","ADMIN","NEMP2PUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Disablednetworkextensionpointtopointfunction.
"","禁用网络扩展中的点对点通讯功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用网络扩展中的点对点通讯功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMPOOLADD","ADMIN","NEMPOOLADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="AnewIPaddresspool,startIP:[start-ip-address],endIP:[end-ip-address],mask:[subnet-mask]wasadded.
"","网络扩展功能中,管理员为虚拟网关添加虚拟IP地址池段.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志start-ip-address:IP地址池的起始地址.
end-ip-address:IP地址池的结束地址.
subnet-mask:子网掩码.
vsys-name:虚拟系统名称.
","网络扩展功能中,管理员为虚拟网关添加虚拟IP地址池段.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMPOOLDEL","ADMIN","NEMPOOLDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[vpn]service=[service-type]msg="TheIPaddresspool,startIP:[start-ip],endIP:[end-ip],mask:[mask]wasdeleted,and[Virtual-IP-Process]usersvirtualIPconfigurations.
"","删除一个IP地址池,起始IP地址为[start-ip],终止IP地址为[end-ip],掩码为[mask],虚拟IP地址的处理方式为[Virtual-IP-Process].
","sysname:记录类型.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
vpn:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志start-ip:地址池的起始IP地址.
end-ip:地址池的终止IP地址.
mask:地址池的掩码.
Virtual-IP-Process:用户的虚拟IP地址的处理方式.
","删除一个IP地址池并配置用户的虚拟IP地址处理方式.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMPOOLMOD","ADMIN","NEMPOOLMOD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[vpn]service=[service-type]msg="TheIPaddresspool(startIP:[start-ip1],endIP:[endipend-ip1],mask:[mask1])waschangedto(startIP:[start-ip2],endIP:[end-ip2],mask:[mask2]),and[Virtual-IP-Process]usersvirtualIPconfigurations.
"","修改一个IP地址池,原来的起始IP地址为[start-ip1],终止IP地址为[end-ip1],掩码为[mask1],修改后的起始IP地址为[start-ip2],终止IP地址为[end-ip2],掩码为[mask2].
虚拟IP地址的处理方式为[Virtual-IP-Process].
","sysname:记录类型.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
username:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志start-ip1:修改前的地址池的起始IP地址.
end-ip1:修改前的地址池的终止IP地址.
mask1:修改前的地址池的掩码.
start-ip2:修改后的地址池的起始IP地址.
end-ip2:修改后的地址池的终止IP地址.
mask2:修改后的地址池的掩码.
Virtual-IP-Process:用户的虚拟IP地址的处理方式.
","修改IP地址池并配置用户的虚拟IP地址处理方式.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMUDPMSSL","ADMIN","NEMUDPMSSL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[vgname]user="[username]"src=[srcip]type=[type]service=[service-type]msg="ConfiguredthenetworkextensionUDPtransmissionmodeasSSL.
"","配置网络扩展UDP传输模式为SSL.
","sysname:记录类型.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
user-name:管理员账号.
srcip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","配置网络扩展UDP传输模式为SSL.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMUDPMUDP","ADMIN","NEMUDPMUDP","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[vgname]user="[username]"src=[srcip]type=[type]service=[service-type]msg="ConfiguredthenetworkextensionUDPtransmissionmodeasUDP.
"","配置网络扩展UDP传输模式为UDP.
","sysname:记录类型.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
user-name:管理员账号.
srcip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","配置网络扩展UDP传输模式为UDP.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMUDPMUDPS","ADMIN","NEMUDPMUDPS","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[vgname]user="[username]"src=[srcip]type=[type]service=[service-type]msg="ConfiguredthenetworkextensionUDPtransmissionmodeasUDPS.
"","配置网络扩展UDP传输模式为UDPS.
","sysname:记录类型.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
user-name:管理员账号.
srcip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","配置网络扩展UDP传输模式为UDPS.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMUN","ADMIN","NEMUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Disablednetworkextensionfunction.
"","禁用网络扩展功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用网络扩展功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/NEMUNLOG","ADMIN","NEMUNLOG","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[vgname]user="[username]"src=[srcip]type=[type]service=[service-type]msg="Disablednetworkextensionlog.
"","关闭网络扩展日志.
","sysname:记录类型.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
user-name:管理员账号.
srcip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","关闭网络扩展日志.
","1.
正常运行信息,无需处理.
""ADMIN/6/NETPOOLALIAS","ADMIN","NETPOOLALIAS","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Succeededin[function-mode]thealiasofnetworkextensionaddresspool[start-ip]to[alias-name].
"","管理员配置网络扩展地址池别名.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志function-mode:操作.
·setting:配置·deleting:删除配置start-ip:网络扩展地址池起始IP地址.
alias-name:网络扩展地址池别名.
","管理员配置网络扩展地址池别名.
","1.
正常运行信息,无需处理.
""ADMIN/6/NETPOOLDEF","ADMIN","NETPOOLDEF","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Succeededinsetting[netpool-info]asthedefault.
"","管理员配置网络扩展的地址池为默认地址池.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志function-mode:操作.
·setting:配置·deleting:删除配置netpool-info:网络扩展地址池信息.
","管理员配置网络扩展的地址池别名为默认地址池.
","1.
正常运行信息,无需处理.
""ADMIN/6/NRMD5ADD","ADMIN","NRMD5ADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="MD5checksum[md5-value]wasaddedtotheanti-remoteloginrule[rule-name].
"","添加防二次跳转规则rule-name的MD5校验值md5-value.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志md5-value:MD5校验值.
rule-name:防二次跳转规则名称.
vsys-name:虚拟系统名称.
","管理员添加了防二次跳转规则的MD5校验值.
","1.
正常运行信息,无需处理.
""ADMIN/6/NRMD5DEL","ADMIN","NRMD5DEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="MD5checksum[md5-value]wasdeletedfromtheanti-remoteloginrule[rule-name].
"","删除防二次跳转规则rule-name的MD5校验值md5-value.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志md5-value:MD5校验值.
rule-name:防二次跳转规则名称.
vsys-name:虚拟系统名称.
","管理员删除了防二次跳转规则的MD5校验值.
","1.
正常运行信息,无需处理.
""ADMIN/6/NRPORTADD","ADMIN","NRPORTADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Theportinvolvedinanti-remoteloginrule[rule-name]wassetto[port-number].
"","添加防二次跳转规则rule-name的端口号port-number.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志rule-name:防二次跳转规则名.
port-number:端口号.
vsys-name:虚拟系统名称.
","管理员添加了防二次跳转规则端口.
","1.
正常运行信息,无需处理.
""ADMIN/6/NRPORTDEL","ADMIN","NRPORTDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Theport[port-number]wasdeletedfromtheanti-remoteloginrule[rule-name].
"","删除防二次跳转规则rule-name的端口号port-number.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志port-number:端口号.
rule-name:防二次跳转规则名.
vsys-name:虚拟系统名称.
","管理员删除了防二次跳转规则端口.
","1.
正常运行信息,无需处理.
""ADMIN/6/NRWINNAMEADD","ADMIN","NRWINNAMEADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Windowname[win-name]ofanti-remoteloginrule[rule-name]wasadded.
"","添加了防二次跳转规则rule-name的应用程序窗口win-name.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志win-name:应用程序窗口名称.
rule-name:防二次跳转规则名称.
vsys-name:虚拟系统名称.
","管理员添加了防二次跳转规则的应用程序窗口.
","1.
正常运行信息,无需处理.
""ADMIN/6/NRWINNAMEDEL","ADMIN","NRWINNAMEDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Windowname[win-name]ofanti-remoteloginrule[rule-name]wasdeleted.
"","删除了防二次跳转规则rule-name的应用程序窗口win-name.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志rule-name:防二次跳转规则名称.
win-name:应用程序窗口名称.
vsys-name:虚拟系统名称.
","管理员删除了防二次跳转规则的应用程序窗口.
","1.
正常运行信息,无需处理.
""ADMIN/6/OSADD","ADMIN","OSADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="OS[OSname]SP[SPname]wasaddedtoOS-checkrule[rulename].
"","向指定操作系统检查规则中添加需要检查的操作系统.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志OSname:操作系统版本.
SPname:操作系统补丁版本.
ignore表示不检查补丁版本.
rulename:规则名称.
","向指定操作系统检查规则中添加需要检查的操作系统.
","1.
正常运行信息,无需处理.
""ADMIN/6/OSDEL","ADMIN","OSDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="OS[OSname]wasdeletedfromOS-checkrule[rulename].
"","从指定操作系统检查规则中删除不需要进行检查的操作系统.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志OSname:操作系统版本.
rulename:规则名称.
vsys-name:虚拟系统名称.
","从指定操作系统检查规则中删除不需要进行检查的操作系统.
","1.
正常运行信息,无需处理.
""ADMIN/6/PFMASEN","ADMIN","PFMASEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Enabledportforwardingautostartfunction.
"","启用端口转发客户端自动启动功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用端口转发客户端自动启动功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/PFMASUN","ADMIN","PFMASUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Disabledportforwardingautostartfunction.
"","禁用端口转发客户端自动启动功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用端口转发客户端自动启动功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/PFMDMRESADD","ADMIN","PFMDMRESADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Addedormodifiedresource[resource-name]ofportforwarding.
Thedomainnamewas[domain-name]andtheportwas[port].
"","添加或修改端口转发资源[resource-name],域名为[domain-name],端口号为[port].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志resource-name:端口转发资源名.
domain-name:端口转发资源的域名.
port:端口转发资源的端口号.
vsys-name:虚拟系统名称.
","添加或修改域名类型的端口转发资源.
","1.
正常运行信息,无需处理.
""ADMIN/6/PFMEN","ADMIN","PFMEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Enabledportforwardingfunction.
"","启用端口转发功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用端口转发功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/PFMIPRESADD","ADMIN","PFMIPRESADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Addedormodifiedresource[resource-name]ofportforwarding.
TheIPaddresswas[ip-address]andtheportwas[port].
"","添加或者修改端口转发资源[resource-name],IP地址为[ip-address],端口为[port].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志resource-name:资源名.
ip-address:端口转发资源的IP地址.
port:端口转发资源的端口号.
vsys-name:虚拟系统名称.
","添加或者修改IP地址类型的端口转发资源.
","1.
正常运行信息,无需处理.
""ADMIN/6/PFMKAEN","ADMIN","PFMKAEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Enabledportforwardingkeepalivefunction.
"","启用端口转发保持连接功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用端口转发保持连接功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/PFMKAUN","ADMIN","PFMKAUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Disabledportforwardingkeepalivefunction.
"","禁用端口转发保持连接功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用端口转发保持连接功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/PFMRESDEL","ADMIN","PFMRESDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Deletedresource[resource-name]ofportforwarding.
"","删除端口转发资源[resource-name].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志resource-name:资源名.
vsys-name:虚拟系统名称.
","删除端口转发资源.
","1.
正常运行信息,无需处理.
""ADMIN/6/PFMUN","ADMIN","PFMUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Disabledportforwardingfunction.
"","禁用端口转发功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用端口转发功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/PLCYPASS","ADMIN","PLCYPASS","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Setthepolicy[policyname]'spassconditionas[passType][expression].
"","配置主机检查策略的通过条件.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志policyname:策略名.
passType:通过类型.
包括:·all-rule-passed:所有规则都满足才能通过检查.
·any-rule-passed:以上所有规则都满足就可以通过检查.
·user-defined:自定义.
expression:[passType]为user-defined时,设置的策略通过的条件表达式.
vsys-name:虚拟系统名称.
","配置主机检查策略的通过条件.
","1.
正常运行信息,无需处理.
""ADMIN/6/PORTCONFIG","ADMIN","PORTCONFIG","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Port-checkrule[rulename]wasconfigured,portlist:[portlist],action:[actiontype].
"","配置指定端口检查规则.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志rulename:规则名.
portlist:端口列表.
actiontype:行为类型,分Deny或者Required两种.
vsys-name:虚拟系统名称.
","配置指定端口检查规则、端口列表和行为.
","1.
正常运行信息,无需处理.
""ADMIN/6/PSMD5ADD","ADMIN","PSMD5ADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="MD5checksum[md5-value]wasaddedtotheanti-printscreenrule[rule-name].
"","添加防截屏规则rule-name的MD5校验值md5-value.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志md5-value:MD5校验值.
rule-name:防截屏规则名称.
vsys-name:虚拟系统名称.
","管理员添加了防截屏规则的MD5校验值.
","1.
正常运行信息,无需处理.
""ADMIN/6/PSMD5DEL","ADMIN","PSMD5DEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="MD5checksum[md5-value]wasdeletedfrom[rule-type]rule[rule-name].
"","删除防截屏规则rule-name的MD5校验值md5-value.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志md5-value:MD5校验值.
rule-type:防截屏规则类型.
rule-name:防截屏规则名称.
vsys-name:虚拟系统名称.
","管理员删除了防截屏规则的MD5校验值.
","1.
正常运行信息,无需处理.
""ADMIN/6/PSWINNAMEADD","ADMIN","PSWINNAMEADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="[name-info]of[rule-type]rule[rule-name]wasadded.
"","添加了防截屏规则rule-name的应用程序窗口或进程name-info.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志name-info:应用程序窗口名称或进程名称.
rule-type:防截屏规则类型.
·anti-printscreen-whitelist·anti-printscreenrule-name:防截屏规则名称.
vsys-name:虚拟系统名称.
","管理员添加了防截屏规则的应用程序窗口.
","1.
正常运行信息,无需处理.
""ADMIN/6/PSWINNAMEDEL","ADMIN","PSWINNAMEDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="[name-info]of[rule-type]rule[rulename]wasdeleted.
"","删除了防截屏规则rule-name的应用程序窗口或进程name-info.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志name-info:应用程序窗口或进程名称.
rule-type:防截屏规则类型.
rule-name:防截屏规则名称.
vsys-name:虚拟系统名称.
","管理员删除了防截屏规则的应用程序窗口.
","1.
正常运行信息,无需处理.
""ADMIN/6/REGITEMTYPE","ADMIN","REGITEMTYPE","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Registry-checkrule[rulename]wasconfigured,item:[itemname],type:[type].
"","配置终端注册表项检查规则和表项值类型.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志rulename:规则名.
itemname:注册表项名.
type:表项值的类型.
vsys-name:虚拟系统名称.
","配置终端注册表项检查规则和表项值类型.
","1.
正常运行信息,无需处理.
""ADMIN/6/REGKEY","ADMIN","REGKEY","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Registry-checkrule[rulename]wasconfigured,key:[keyname].
"","配置终端注册表项检查规则的键值.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志rulename:规则名.
keyname:注册表键值.
vsys-name:虚拟系统名称.
","配置终端注册表项检查规则的键值.
","1.
正常运行信息,无需处理.
""ADMIN/6/REGVALUE","ADMIN","REGVALUE","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Registry-checkrule[rulename]wasconfigured,Keyvalue:[value].
[modify-info]"","配置终端注册表项检查规则的表项值.
如果用户PC的注册表项与设定的值不同,强制修改注册表项为设定的值.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志rulename:规则名.
value:注册表项值.
modify-info:修改注册表项信息.
vsys-name:虚拟系统名称.
","配置终端注册表项检查规则的表项值.
如果用户PC的注册表项与设定的值不同,强制修改注册表项为设定的值.
","1.
正常运行信息,无需处理.
""ADMIN/6/RESTHOME","ADMIN","RESTHOME","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsysname]vpn=[vgname]user="[username]"src=[srcip]type=[type]service=[service-type]msg="ThedefaulthomepageofPCisrestored.
"","恢复缺省登录主页.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vsysname:虚拟系统名.
vgname:虚拟网关名.
username:虚拟网关用户名srcip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","恢复缺省登录主页.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEADD","ADMIN","ROLEADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Role[role1]wascreated.
"","创建一个角色role1.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
","添加角色.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEAEPS","ADMIN","ROLEAEPS","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Role[role1]wasassociatedwithendpointsecuritypolicy[eps1].
"","关联角色role1和终端安全策略eps1.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
eps1:终端安全策略名.
","关联角色和终端安全策略.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEAFS","ADMIN","ROLEAFS","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Role[role1]wasassociatedwithfile-sharingresource[resource1].
"","关联角色[role1]和文件共享资源[resource1].
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
resource1:资源名.
","关联角色和文件共享资源.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEAGROUP","ADMIN","ROLEAGROUP","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Role[role1]wasassociatedwithgroup[group1].
"","关联角色和组.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
group1:组名.
","关联角色和组.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEAPF","ADMIN","ROLEAPF","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Role[role1]wasassociatedwithport-forwardingresource[resource1].
"","关联角色role1和端口转发资源resource1.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
resource1:资源名.
","关联角色和端口转发资源.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEAUSER","ADMIN","ROLEAUSER","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Role[role1]wasassociatedwithuser[user1].
"","将角色role1和用户user1关联.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
user1:用户名.
","关联角色和用户.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEAWL","ADMIN","ROLEAWL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Role[role1]wasassociatedwithwebproxyresource[resource1].
"","关联角色role1和Web代理资源resource1.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
resource1:资源名.
","关联角色和Web代理资源.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEDEL","ADMIN","ROLEDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Role[role1]wasdeleted.
"","删除一个角色[role1].
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
","删除角色.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEDEPS","ADMIN","ROLEDEPS","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Associationbetweenrole[role1]andendpointsecuritypolicy[eps1]wascancelled.
"","取消关联角色role1和终端安全策略eps1.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
eps1:终端安全策略名.
","取消关联角色和终端安全策略.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEDFS","ADMIN","ROLEDFS","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Associationbetweenrole[role1]andfile-sharingresource[resource1]wascancelled.
"","取消关联角色role1和文件共享资源resource1.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
resource1:资源名.
","取消关联角色和文件共享资源.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEDGROUP","ADMIN","ROLEDGROUP","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Associationbetweenrole[role1]andgroup[group1]wascancelled.
"","取消关联角色role1和组group1.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
group1:组名.
","取消关联角色和组.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEDPF","ADMIN","ROLEDPF","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Associationbetweenrole[role1]andport-forwardingresource[resource1]wascancelled.
"","取消关联角色role1和端口转发资源resource1.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
resource1:资源名.
","取消关联角色和端口转发资源.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEDUSER","ADMIN","ROLEDUSER","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Associationbetweenrole[role1]anduser[user1]wascancelled.
"","取消关联角色[role1]和用户[user1].
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
user1:用户名.
","取消关联角色和用户.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEDWL","ADMIN","ROLEDWL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Associationbetweenrole[role1]andwebproxyresource[resource1]wascancelled.
"","取消关联角色role1和Web代理资源resource1.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
resource1:资源名.
","取消关联角色和Web代理资源.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEENFS","ADMIN","ROLEENFS","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Thefile-sharingfunctionforrole[role1]wasenabled.
"","启用角色role1的文件共享功能.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
","启用角色的文件共享功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEENNE","ADMIN","ROLEENNE","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Thenetworkextensionfunctionforrole[role1]wasenabled.
"","启用角色role1的网络扩展功能.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
","启用角色的网络扩展功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEENPF","ADMIN","ROLEENPF","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Theport-forwardingfunctionforrole[role1]wasenabled.
"","启用角色[role1]的端口转发服务.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
","启用角色的端口转发服务.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEENWP","ADMIN","ROLEENWP","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="TheWebproxyfunctionforrole[role1]wasenabled.
"","启用角色role1的Web代理功能.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
","启用角色的Web代理功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEHPAGEEN","ADMIN","ROLEHPAGEEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Directingrole[role-name]towebpage[page-name]wasenabled.
"","角色配置可跳转页面功能开启.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role-name:角色名.
page-name:网页名.
","管理员进行了开启角色配置可跳转页面功能的操作.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEHPAGEUN","ADMIN","ROLEHPAGEUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Directingrole[role-name]towebpagewasdisabled.
"","角色配置可跳转页面功能关闭.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role-name:角色名.
","管理员进行了关闭角色配置可跳转页面功能的操作.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEPASS","ADMIN","ROLEPASS","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Settherole[role1]'spassconditionas[passcondition].
"","设置角色role1的通过条件为passcondition.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
passcondition:通过条件.
参数值含义:·all:通过所有关联的终端安全策略检查,才允许该角色接入虚拟网关·any:通过任一关联的终端安全策略检查,即允许该角色接入虚拟网关","设置角色的通过条件.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEUNFS","ADMIN","ROLEUNFS","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Thefile-sharingfunctionforrole[role1]wasdisabled.
"","禁用角色[role1]的文件共享服务.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
","禁用角色的文件共享服务.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEUNNE","ADMIN","ROLEUNNE","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Thenetworkextensionfunctionforrole[role1]wasdisabled.
"","禁用角色role1的网络扩展服务.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
","禁用角色的网络扩展服务.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEUNPF","ADMIN","ROLEUNPF","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Theport-forwardingfunctionforrole[role1]wasdisabled.
"","禁用角色[role1]的端口转发服务.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
","禁用角色的端口转发服务.
","1.
正常运行信息,无需处理.
""ADMIN/6/ROLEUNWP","ADMIN","ROLEUNWP","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="TheWebproxyfunctionforrole[role1]wasdisabled.
"","禁用角色role1的WebProxy功能.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role1:角色名.
","禁用角色的Web代理功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/RULEADD","ADMIN","RULEADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="[ruletype]rule[rulename]ofEPSpolicy[policyname]wasadded.
"","添加终端安全策略[policyname]下的规则.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志ruletype:规则类型.
参数值含义:·Antivirus-check:杀毒软件检查·Firewall-check:防火墙检查·OS-check:操作系统检查·Port-check:端口检查·Process-check:进程检查·File-check:文件检查·Registry-check:注册表检查rulename:规则名.
policyname:终端安全策略名.
vsys-name:虚拟系统名称.
","添加终端安全策略下的规则.
","1.
正常运行信息,无需处理.
""ADMIN/6/RULEDEL","ADMIN","RULEDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Rule[rulename]ofEPSpolicy[policyname]wasdeleted.
"","删除终端安全策略[policyname]下的规则.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志rulename:规则名.
policyname:终端安全策略名.
vsys-name:虚拟系统名称.
","删除终端安全策略下的规则.
","1.
正常运行信息,无需处理.
""ADMIN/6/SOFTADD","ADMIN","SOFTADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Software[softwarename]wasaddedto[ruleType]rule[rulename].
"","向[ruleType]类型的检查规则[rulename]中添加需要进行检查的软件[softwarename].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志ruleType:规则类型.
参数值含义:·Antivirus-check:杀毒软件检查·Firewall-check:防火墙检查·OS-check:操作系统检查·Port-check:端口检查·Process-check:进程检查·File-check:文件检查·Registry-check:注册表检查rulename:规则名.
softwarename:软件名.
vsys-name:虚拟系统名称.
","向防火墙检查规则中添加需要进行检查的软件.
","1.
正常运行信息,无需处理.
""ADMIN/6/SOFTDEL","ADMIN","SOFTDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Software[softwarename]wasdeletedfrom[ruleType]rule[rulename].
"","从[ruleType]类型的检查规则[rulename]中删除不需要检查的软件[softwarename].
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志ruleType:规则类型.
参数值含义:·Antivirus-check:杀毒软件检查·Firewall-check:防火墙检查·OS-check:操作系统检查·Port-check:端口检查·Process-check:进程检查·File-check:文件检查·Registry-check:注册表检查rulename:规则名.
softwarename:软件名.
vsys-name:虚拟系统名称.
","从检查规则中删除不需要检查的软件.
","1.
正常运行信息,无需处理.
""ADMIN/6/SSLDEFEXP","ADMIN","SSLDEFEXP","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="SettheSSLtimeoutperiodtodefault[time]minute(s).
"","恢复SSL会话超时时间为默认设置[time]分钟.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志time:默认SSL会话超时时间.
vsys-name:虚拟系统名称.
","恢复SSL会话超时时间为默认设置.
","1.
正常运行信息,无需处理.
""ADMIN/6/SSLDEFLIFE","ADMIN","SSLDEFLIFE","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="SettheSSLlifecycletodefault[time]minute(s).
"","恢复SSL生命周期为默认设置[time]分钟.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志time:默认SSL生命周期.
vsys-name:虚拟系统名称.
","恢复SSL生命周期为默认设置.
","1.
正常运行信息,无需处理.
""ADMIN/6/SSLDEFVER","ADMIN","SSLDEFVER","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="SettheSSLversionconfigurationtothedefaultversionsTLSV1.
1andTLSV1.
2.
"","取消SSL版本设置,SSL版本恢复成默认设置,即支持TLS1.
1和TLS1.
2.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","取消SSL版本设置,SSL版本恢复成默认设置,即支持TLS1.
1和TLS1.
2.
","1.
正常运行信息,无需处理.
""ADMIN/6/SSLEXPSET","ADMIN","SSLEXPSET","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="SettheSSLtimeoutperiodto[time]minute(s).
"","设置SSL会话超时时间为[time]分钟.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志time:SSL会话超时时间.
vsys-name:虚拟系统名称.
","设置SSL会话超时时间.
","1.
正常运行信息,无需处理.
""ADMIN/6/SSLLIFESET","ADMIN","SSLLIFESET","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="SetthelifecycleoftheSSLto[time]minute(s).
"","设置SSL生命周期为[time]分钟.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志time:SSL生命周期.
vsys-name:虚拟系统名称.
","设置SSL生命周期.
","1.
正常运行信息,无需处理.
""ADMIN/6/SSLLIFEUNLIM","ADMIN","SSLLIFEUNLIM","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="SetthelifecycleoftheSSLunlimited.
"","设置SSL生命周期无限制.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","设置SSL生命周期无限制.
","1.
正常运行信息,无需处理.
""ADMIN/6/SSLREUSEEN","ADMIN","SSLREUSEEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="EnabledSSLsessionreusing.
"","启用SSL会话复用.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用SSL会话复用.
","1.
正常运行信息,无需处理.
""ADMIN/6/SSLREUSEUN","ADMIN","SSLREUSEUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="DisabledSSLsessionreusing.
"","禁用SSL会话复用.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用SSL会话复用.
","1.
正常运行信息,无需处理.
""ADMIN/6/SSLVERSET","ADMIN","SSLVERSET","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="ConfiguredtheSSLversionto[ssl-version].
"","设置SSL的版本为[ssl-version].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志ssl-version:SSL版本信息.
vsys-name:虚拟系统名称.
","设置SSL的版本.
","1.
正常运行信息,无需处理.
""ADMIN/6/STARTIPDEF","ADMIN","STARTIPDEF","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Succeededinsettingnetworkextensionaddresspool[start-ip]asthedefault.
"","管理员配置网络扩展地址池的首地址作为默认地址池的名称.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志start-ip:网络扩展地址池的首地址.
","管理员配置网络扩展地址池的首地址作为默认地址池的名称.
","1.
正常运行信息,无需处理.
""ADMIN/6/TITLESET","ADMIN","TITLESET","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[vgname]user="[username]"src=[srcip]type=[type]service=[service-type]msg="Succeededinsettingthetitlefile.
(filename="[filename]")"","成功设置虚拟网关标题文件filename.
","sysname:记录类型.
sysname:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志filename:标题文件名.
","管理员通过命令行成功设置了虚拟网关标题文件.
","1.
正常运行信息,无需处理.
""ADMIN/6/TITLERESTORE","ADMIN","TITLERESTORE","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Restoredthedefaulttitleconfiguration.
"","恢复虚拟网关默认的标题设置.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","恢复虚拟网关默认的标题设置.
","1.
正常运行信息,无需处理.
""ADMIN/6/UNBINDWPRESGROUP","ADMIN","UNBINDWPRESGROUP","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="Cancelledtheassociationbetweenrole[role-name]andwebproxyresourcegroup[resource-group-name].
"","取消角色role-name和Web代理资源组resource-group-name的关联关系.
","sysname:设备名称.
time:本地时间.
hostname:设备名称.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志role-name:角色名.
resource-group-name:资源组名.
","取消角色和Web代理资源组的关联关系.
","1.
正常运行信息,无需处理.
""ADMIN/5/USRADD","ADMIN","USRADD","5","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Addeduser[user-name]tovirtualgateway[virtual-gateway-name].
"","为虚拟网关[virtual-gateway-name]添加用户[user-name].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志user-name:用户名.
virtual-gateway-name:虚拟网关名.
vsys-name:虚拟系统名称.
","为虚拟网关添加用户.
","1.
正常运行信息,无需处理.
""ADMIN/5/USRDEL","ADMIN","USRDEL","5","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Deleteduser[user-name]fromvirtualgateway[virtual-gateway-name].
"","从虚拟网关[virtual-gateway-name]中删除用户[user-name].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志user-name:用户名.
virtual-gateway-name:虚拟网关名.
vsys-name:虚拟系统名称.
","从虚拟网关中删除用户.
","1.
正常运行信息,无需处理.
""ADMIN/6/USRKCKOFF","ADMIN","USRKCKOFF","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Kickedofftheonlineusernamed[user-name]using[auth-type]authentication.
"","身份认证方式为auth-type,用户名为user-name的用户被强制下线.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志user-name:用户名.
auth-type:认证类型.
vsys-name:虚拟系统名称.
","强制在线用户下线.
","1.
正常运行信息,无需处理.
""ADMIN/6/USRUIDGIDM","ADMIN","USRUIDGIDM","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Changedthegidanduidofuser[user-name]to[group-id]and[user-id].
"","修改虚拟网关用户[user-name]的组ID为[group-id],用户ID为[user-id].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志user-name:用户名.
group-id:组ID.
user-id:用户ID.
vsys-name:虚拟系统名称.
","修改用户的用户ID和组ID.
","1.
正常运行信息,无需处理.
""ADMIN/6/USRVIPDEL","ADMIN","USRVIPDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="ClearedthevirtualIPaddressinnetworkextensionof[user-name].
"","删除用户[user-name]的网络扩展虚拟IP地址.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志user-name:用户名.
vsys-name:虚拟系统名称.
","删除用户的网络扩展虚拟IP地址.
","1.
正常运行信息,无需处理.
""ADMIN/6/USRVIPM","ADMIN","USRVIPM","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="ChangedthenetworkextensionvirtualIPaddressofuser[user-name]from[old-ip-address]to[new-ip-address].
"","修改用户[user-name]的网络扩展虚拟IP地址.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志user-name:用户名.
old-ip-address:旧的虚拟IP地址.
new-ip-address:新的虚拟IP地址.
vsys-name:虚拟系统名称.
","修改用户的网络扩展虚拟IP地址.
","1.
正常运行信息,无需处理.
""ADMIN/6/VGPLYDFL","ADMIN","VGPLYDFL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Succeededinsettingthedefaultactionforpolicy'policy-default-actionvt-src-ip[action]'.
"","设置虚拟网关源IP策略的默认行为为[action].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志action:默认行为,分deny和permit两种.
vsys-name:虚拟系统名称.
","设置虚拟网关源IP策略的默认行为.
","1.
正常运行信息,无需处理.
""ADMIN/6/VGSIPSPLYADD","ADMIN","VGSIPSPLYADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Apolicywasaddedonthevirtualgateway:Theactionintheaddedpolicyis[action],andthesourceIPaddressesrangefrom[start-ip-address]to[end-ip-address].
"","添加虚拟网关的源IP地址段策略.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志action:行为,分deny或者permit两种.
start-ip-address:起始IP地址.
end-ip-address:结束IP地址.
","添加虚拟网关的源IP地址段策略.
","1.
正常运行信息,无需处理.
""ADMIN/6/VGSIPSPLYDEL","ADMIN","VGSIPSPLYDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[vpn]service=[servicetype]msg="Apolicyonthevirtualgatewaywasdeleted:Theactioninthedeletedpolicyis[action],andthesourceIPaddressesrangefrom[start-ip-address]to[end-ip-address].
"","删除虚拟网关的源IP地址段策略.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
srcip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志action:行为,分deny或者permit两种.
start-ip-address:起始IP地址.
end-ip-address:结束IP地址.
","删除虚拟网关的源IP地址段策略.
","1.
正常运行信息,无需处理.
""ADMIN/6/WACTIVEXADD","ADMIN","WACTIVEXADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="AnActiveXparameterrewriterulewasadded:CLSIDis[class-id],andtheparameteris[parameter-name].
"","添加Web代理ActiveX参数改写规则的功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志class-id:Active控件Class-id.
parameter-name:属性值.
","添加Web代理ActiveX参数改写规则的功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WACTIVEXDEL","ADMIN","WACTIVEXDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="AnActiveXparameterrewriterulewasdeleted:CLSIDis[class-id],andtheparameteris[parameter-name].
"","删除Web代理ActiveX参数改写规则.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志class-id:ActiveX控件的Class-id.
parameter-name:属性值.
","删除Web代理ActiveX参数改写规则.
","1.
正常运行信息,无需处理.
""ADMIN/6/WBASELOGST","ADMIN","WBASELOGST","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Theloglevelforwebproxywassettobasic.
"","设置web代理日志级别为基本.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","设置web代理日志级别为基本.
","1.
正常运行信息,无需处理.
""ADMIN/6/WBBYPRULEADD","ADMIN","WBBYPRULEADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Theexceptionrewritingrule[rule]forwebproxywasadded.
"","添加Web代理例外改写规则的功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志rule:例外改写规则.
","添加Web代理例外改写规则的功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WBBYPRULEDEL","ADMIN","WBBYPRULEDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Theexceptionrewritingrule[rule]forwebproxywasdeleted.
"","删除Web代理例外改写规则的功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志rule:例外改写规则.
","删除Web代理例外改写规则的功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WBCLOSE","ADMIN","WBCLOSE","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thewebproxyloggingfunctionwasdisabled.
"","关闭当前虚拟网关的Web代理日志功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","关闭当前虚拟网关的Web代理日志功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WBOPEN","ADMIN","WBOPEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thewebproxyloggingfunctionwasenabled.
"","开启当前虚拟网关的Web代理日志功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志resource-name:Web代理资源名称.
","开启当前虚拟网关的Web代理日志功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WDETAILLOGST","ADMIN","WDETAILLOGST","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Theloglevelforwebproxywassettodetail.
"","设置web代理日志级别为详细.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","设置web代理日志级别为详细.
","1.
正常运行信息,无需处理.
""ADMIN/6/WEBGZIPEN","ADMIN","WEBGZIPEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thecompressingfunctionforwebproxywasenabled.
"","启动Web代理资源压缩功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","启动Web代理资源压缩功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WEBGZIPUN","ADMIN","WEBGZIPUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thecompressingfunctionforwebproxywasdisabled.
"","关闭Web代理资源压缩功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志resource-name:Web代理资源名称.
","关闭Web代理资源压缩功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WEBRULEADD","ADMIN","WEBRULEADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="AUser-definedwebproxyrewriterulewasadded,theobjectis[object-name],andthepropertyis[property-name].
"","添加Web代理自定义改写规则的功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志object-name:对象名称.
property-name:属性名称.
","添加Web代理自定义改写规则的功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WEBRULEDEL","ADMIN","WEBRULEDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="AUser-definedwebproxyrewriterulewasdeleted,theobjectis[object-name],andthepropertyis[property-name].
"","删除Web代理自定义改写规则的功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志object-name:对象名称.
property-name:属性名称.
","删除Web代理自定义改写规则的功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WELCSET","ADMIN","WELCSET","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[vgname]user="[username]"src=[srcip]type=[type]service=[service-type]msg="Succeededinsettingthewelcomemessagefile.
(filename="[filename]")"","成功设置虚拟网关欢迎辞文件filename.
","sysname:记录类型.
sysname:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
virtual-gateway-name:虚拟网关名.
username:管理员账号.
source-ip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志filename:欢迎辞文件名.
","管理员通过命令行成功设置了虚拟网关欢迎辞文件.
","1.
正常运行信息,无需处理.
""ADMIN/6/WELRESTORE","ADMIN","WELRESTORE","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Restoredthedefaultwelcomemessageconfiguration.
"","恢复虚拟网关默认的欢迎辞.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","恢复虚拟网关默认的欢迎辞.
","1.
正常运行信息,无需处理.
""ADMIN/6/WFLASHEN","ADMIN","WFLASHEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Theflashrewritingfunctionforwebproxywasenabled.
"","开启Web代理flash改写功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","开启Web代理flash改写功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WFLASHUN","ADMIN","WFLASHUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Theflashrewritingfunctionforwebproxywasdisabled.
"","关闭Web代理flash改写功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","关闭Web代理flash改写功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WJAPPEN","ADMIN","WJAPPEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thejavaappletrewritingfunctionforwebproxywasenabled.
"","开启Web代理javaapplet改写功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","开启Web代理javaapplet改写功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WJAPPUN","ADMIN","WJAPPUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thejavaappletrewritingfunctionforwebproxywasdisabled.
"","关闭Web代理javaapplet改写功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志resource-name:Web代理资源名称.
","关闭Web代理javaapplet改写功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WJSCATEEN","ADMIN","WJSCATEEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="TheJavaappletsignaturecertificateforwebproxywasactivated.
"","激活web代理JavaApplet签名证书.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","激活web代理JavaApplet签名证书.
","1.
正常运行信息,无需处理.
""ADMIN/6/WJSCATEUN","ADMIN","WJSCATEUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="TheJavaappletsignaturecertificateforwebproxywasrevoked.
"","撤销web代理JavaApplet签名证书.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","取消Web代理资源的自动预解析功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WPDFEN","ADMIN","WPDFEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="ThePDFrewritingfunctionforwebproxywasenabled.
"","开启Web代理pdf改写功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","开启Web代理pdf改写功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WPDFUN","ADMIN","WPDFUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="ThePDFrewritingfunctionforwebproxywasdisabled.
"","关闭Web代理pdf改写功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","关闭Web代理pdf改写功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WPMADDRESGROUP","ADMIN","WPMADDRESGROUP","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Addedresourcegroup[group-name]ofwebproxy.
Setthedisplayedpriorityto[priority].
"","创建名称为group-name的Web代理资源组.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
group-name:Web代理资源组名.
priority:Web代理资源组的优先级.
","成功创建Web资源组.
","1.
正常运行信息,无需处理.
""ADMIN/6/WPMDELPARSE","ADMIN","WPMDELPARSE","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="CancelledIPparseflagofresource[resource-name]ofwebproxy.
"","取消Web代理资源的自动预解析功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志resource-name:Web代理资源名称.
","取消Web代理资源的自动预解析功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WPMDELRESGROUP","ADMIN","WPMDELRESGROUP","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Deletedresourcegroup[group-name]ofwebproxy.
"","删除资源组[group-name].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志group-name:Web代理资源组名.
","成功删除Web代理资源组.
","1.
正常运行信息,无需处理.
""ADMIN/6/WPMDELSET","ADMIN","WPMDELSET","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="CancelledIPparseflagofresource[resource-name]ofwebproxy.
"","取消Web代理资源的自动预解析功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志resource-name:Web代理资源名称.
","取消Web代理资源的自动预解析功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WPMEN","ADMIN","WPMEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Enabledwebproxyfunction.
"","启用Web代理功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用Web代理功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WPMLINKEN","ADMIN","WPMLINKEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Enabledweblinkfunction.
"","启用Web-link功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用Web-link功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WPMLINKUN","ADMIN","WPMLINKUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Disabledweblinkfunction.
"","禁用Web-link功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用Web-link功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WPMMODRES","ADMIN","WPMMODRES","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Modifiedthedescriptionofresource[resource-name]ofwebproxy.
"","修改Web代理资源[resource-name].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志resource-name:Web代理资源名.
","成功修改Web代理资源.
","1.
正常运行信息,无需处理.
""ADMIN/6/WPMMODRESGROUP","ADMIN","WPMMODRESGROUP","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Modifiedresourcegroup[group-name]ofwebproxy.
"","修改名称为group-name的资源组.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","成功修改资源组.
","1.
正常运行信息,无需处理.
""ADMIN/6/WPMPARSEIP","ADMIN","WPMPARSEIP","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="ConfiguredIPparseflagofresource[resource-name]ofwebproxy.
"","启用Web代理资源的自动预解析功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志resource-name:Web代理资源名称.
","启用Web代理资源的自动预解析功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WPMRESADD","ADMIN","WPMRESADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Addedormodifiedresource[resource-name]ofwebproxy.
TheURLwas[resource-url].
"","添加或者修改Web代理资源[resource-name],资源URL为[resource-url].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志resource-name:Web代理资源名.
resource-url:Web代理资源URL.
vsys-name:虚拟系统名称.
","添加或者修改Web代理资源成功.
","1.
正常运行信息,无需处理.
""ADMIN/6/WPMRESDEL","ADMIN","WPMRESDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Deletedresource[resource-name]ofwebproxy.
"","删除Web代理资源[resource-name].
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志resource-name:Web代理资源名.
vsys-name:虚拟系统名称.
","成功删除Web代理资源.
","1.
正常运行信息,无需处理.
""ADMIN/6/WPMSETIP","ADMIN","WPMSETIP","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="ConfiguredIPparseflagofresource[resource-name]ofwebproxy.
"","启用Web代理资源的自动预解析功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志resource-name:Web代理资源名称.
","启用Web代理资源的自动预解析功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WPMUN","ADMIN","WPMUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Disabledwebproxyfunction.
"","禁用Web代理功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用Web代理功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WPMURLREWTEN","ADMIN","WPMURLREWTEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="EnabledwebproxyURLrewritefunction.
"","启用Web代理的URL加密功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","启用Web代理的URL加密功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WPMURLREWTUN","ADMIN","WPMURLREWTUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="DisabledwebproxyURLrewritefunction.
"","禁用Web代理的URL加密功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","禁用Web代理的URL加密功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WURLEN","ADMIN","WURLEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="TheURLhidingfunctionforwebproxywasenabled.
"","开启Web代理URL隐藏功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","开启了当前虚拟网关的Web代理URL隐藏功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WURLUN","ADMIN","WURLUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vsys=[vsys-name]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[servicetype]msg="TheURLhidingfunctionforwebproxywasdisabled.
"","禁用Web代理URL隐藏功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","关闭了Web代理URL隐藏功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WUSRAGENTADD","ADMIN","WUSRAGENTADD","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="AUser-Agentmatchingrulewasadded.
Thematchingstringis[matchstring]andthetypeis[uatype].
"","添加User-Agent匹配规则.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志matchstring:匹配的字符串.
uatype:终端类型.
·PC:个人电脑·Mobile:移动终端","添加User-Agent匹配规则.
","1.
正常运行信息,无需处理.
""ADMIN/6/WUSRAGENTDEL","ADMIN","WUSRAGENTDEL","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="AUser-Agentmatchingrulewasdeleted.
Thematchingstringis[matchstring]andthetypeis[uatype].
"","删除User-Agent匹配规则.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志matchstring:匹配的字符串.
uatype:终端类型.
·1:个人电脑·2:移动终端","删除User-Agent匹配规则.
","1.
正常运行信息,无需处理.
""ADMIN/6/WWCACHEEN","ADMIN","WWCACHEEN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thewebresourcecachefunctionforwebproxywasenabled.
"","开启web代理web资源缓存功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","开启web代理web资源缓存功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/WWCACHEUN","ADMIN","WWCACHEUN","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]vpn=[virtual-gateway-name]user="[username]"src=[source-ip]type=[type]service=[service-type]msg="Thewebresourcecachefunctionforwebproxywasdisabled.
"","关闭web代理web资源缓存功能.
","sysname:设备名称.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
vgname:虚拟网关名.
username:管理员账号.
source-ip:管理员登录设备的源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志vsys-name:虚拟系统名称.
","关闭web代理web资源缓存功能.
","1.
正常运行信息,无需处理.
""ADMIN/6/DVSVPNUMAX","ADMIN","DVSVPNUMAX","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]user="[username]"src=[srcip]type=[vpn]service=[service-type]msg="ThenumberofonlineSSLVPNusersonvirtualgateway[virtual-gateway-name]was[user-num]andhasreachedtheupperlimitoftheavailablelicensecapacity.
"","本虚拟网关SSLVPN在线用户数达到设备License支持的该类用户剩余人数上限.
","sysname:记录类型.
sysname:本地时间.
fw:产生日志的设备标识、IP地址或机器名.
pri:日志级别.
user:管理员账号.
src:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志virtual-gateway-name:虚拟网关名.
user-num:当前虚拟网关的SSLVPN在线用户数.
","新SSLVPN用户登录成功,SSLVPN在线用户数加1.
本虚拟网关SSLVPN在线用户数达到设备License支持的该类用户剩余人数上限.
","1.
更换支持更大SSLVPN并发用户数的License.
""ADMIN/6/VTSVPNUMAX","ADMIN","VTSVPNUMAX","6","id=[sysname]time="[time]"fw=[hostname]pri=[level]user="[username]"src=[srcip]type=[type]service=[service-type]msg="ThenumberofonlineIPSecVPNusersreachedtheupperlimit[upper-limit]supportedbythevirtualgateway.
"","SSLVPN在线用户数达到虚拟网关支持的.
","sysname:记录类型.
time:本地时间.
hostname:产生日志的设备标识、IP地址或机器名.
level:日志级别.
username:管理员账号.
srcip:源IP地址.
type:事件类型.
参数值含义:·mgmt:管理员日志·vpn:虚拟网关用户日志service-type:服务类型.
参数值含义:·1:网络扩展业务日志·2:文件共享业务日志·3:端口转发业务日志·4:Web代理业务日志·5:用户本次会话日志·6:虚拟网关管理日志·7:系统管理日志·11:终端标识码日志","SSLVPN在线用户数达到虚拟网关支持的.
","1.
设置虚拟网关支持更大SSLVPN并发用户数.
""AM/4/AM_RECLAIM_IPADDR","AM","AM_RECLAIM_IPADDR","4","Theuserchose[STRING]whendecidingwhethertoreclaimtheIPaddressesthatarebeingused.
","用户确认是否回收使用中的IP地址.
","STRING:用户选择的操作:·Y:是.
·N:否.
","用户需要确认是否回收使用中的IP地址.
","1.
正常运行信息,无需处理.
""AM/4/IP6ALLOCFAIL","AM","IP6ALLOCFAIL","4","FailedtoallocateanIPv6address.
(PoolName=[STRING1],ClientId=[STRING2],Reason=[STRING3],UserType=[STRING4])","DHCPv6服务器为客户端分配IPv6地址失败.
","PoolName:地址池名称.
ClientId:客户端ID.
Reason:分配IPv6地址失败的原因.
UserType:用户类型.
","·地址池中没有可供分配的IPv6地址.
·地址池被锁定.
·DHCPv6用户上线速率超规格.
","1.
按可能原因处理如下:·地址池中没有可供分配的IPv6地址:地址池视图下执行命令addressprefixipv6-prefix/ipv6-prefix-length,扩充地址池可用地址范围.
·地址池被锁定:确认管理员锁定地址池的原因,在地址池视图下执行命令undolock解锁.
·DHCPv6用户上线速率超规格:请联系技术支持人员.
""AM/4/PREFALLOCFAIL","AM","PREFALLOCFAIL","4","FailedtoallocateanIPv6prefix.
(PoolName=[STRING1],ClientId=[STRING2],Reason=[STRING3],UserType=[STRING4])","DHCPv6服务器为客户端分配IPv6前缀失败.
","PoolName:地址池的名称.
ClientId:客户端的ID.
Reason:DHCPv6服务器为客户端分配IPv6前缀失败的原因.
UserType:客户端的用户类型.
","·地址池内前缀耗尽.
·地址池被锁定.
","1.
按可能原因处理如下:·地址池内前缀耗尽:地址池视图下执行命令addressprefixipv6-prefix/ipv6-prefix-length,扩充地址池可用前缀范围.
·地址池被锁定:确认管理员锁定地址池的原因,在地址池视图下执行命令undolock解锁.
""AM/6/IPALLOCOK","AM","IPALLOCOK","6","AnIPaddresswasallocated.
(PoolName=[STRING],ClientId=[STRING],IpAddress=[IPADDR],LeaseTime=[ULONG],UserType=[STRING])","DHCP服务器为客户端分配IP地址成功.
","PoolName:地址池名称.
ClientId:DHCP客户端的ID.
IpAddress:分配给客户端的IP地址.
LeaseTime:IP地址的租期.
UserType:DHCP客户端的用户类型.
","DHCP服务器为客户端分配IP地址成功.
","1.
正常运行信息,无需处理.
""AM/4/IPALLOCFAIL","AM","IPALLOCFAIL","4","FailedtoallocateanIPaddress.
(PoolName=[STRING],ClientId=[STRING],Reason=[STRING],UserType=[STRING])","DHCP服务器为客户端分配IP地址失败.
","PoolName:地址池名称.
ClientId:DHCP客户端的ID.
Reason:分配IP地址失败的原因,包括:·NoidleIPaddress:地址池中没有可供分配的IP地址.
·Poolislocked:地址池被锁定.
·Exceptionoccured:系统异常错误.
UserType:DHCP客户端的用户类型.
","·地址池中没有可供分配的IP地址.
·地址池被锁定.
·系统异常错误.
","1.
根据绑定的Reason信息进行处理:·地址池中没有可供分配的IP地址:地址池视图下执行命令networkip-address[mask{mask|mask-length}]或接口视图下执行命令ipaddressip-address{mask|mask-length},通过调节掩码长度参数mask或mask-length,扩充地址池可用地址范围.
·地址池被锁定:确认管理员锁定地址池的原因,在地址池视图下执行命令undolock解锁.
·系统异常错误:联系技术支持人员进行处理.
""AM/6/IPRENEWOK","AM","IPRENEWOK","6","AnIPaddresswasrenewed.
(PoolName=[STRING],ClientId=[STRING],IpAddress=[IPADDR],LeaseTime=[ULONG],UserType=[STRING])","客户端续租IP地址成功.
","PoolName:地址池名称.
IpAddress:续租的IP地址.
LeaseTime:IP地址的租期.
UserType:DHCP客户端的用户类型.
","客户端续租IP地址成功.
","1.
正常运行信息,无需处理.
""AM/4/IPRENEWFAIL","AM","IPRENEWFAIL","4","FailedtorenewanIPaddress.
(PoolName=[STRING],ClientId=[STRING],IpAddress=[IPADDR],Reason=[STRING],UserType=[STRING])","客户端续租IP地址失败.
","PoolName:地址池名称.
ClientID:客户端的ID.
IpAddress:续租失败的IP地址.
Reason:续租失败的原因,包括:·BadrequestedIPaddress:续租的IP地址和地址池分配给客户端的地址不一致.
·Withouttheclient'slease:没有该客户端的租约.
·Poolislocked:地址池被锁定.
UserType:客户端的用户类型.
","·续租的IP地址和地址池分配给客户端的地址不一致.
·没有该客户端的租约.
·地址池被锁定.
","1.
根据绑定的Reason信息进行处理:·续租的IP地址和地址池分配给客户端的地址不一致:通过以下操作,释放客户端原有地址,重新发起申请地址请求.
设备作为DHCP客户端时,先在接口视图下执行命令undoipaddressdhcp-alloc,再在接口视图下执行命令ipaddressdhcp-alloc.
设备作为Bootp客户端时,先在接口视图下执行命令ipaddressbootp-alloc,再在接口视图下执行命令undoipaddressbootp-alloc.
PC作为客户端时,操作系统不同命令会有所不同.
–在用户PC机的Windows7环境下使用ipconfig/release命令来主动释放IP地址;–在Windows98MS-DOS界面下执行winipcfg/release来主动释放IP地址.
·没有该客户端的租约:释放客户端原有地址,重新发起申请地址请求.
·地址池被锁定:确认管理员锁定地址池的原因,在地址池视图下通过命令undolock解锁.
""AM/6/IPRELEASE","AM","IPRELEASE","6","TheIPaddresswasreleased.
(PoolName=[STRING],ClientId=[STRING],IpAddress=[IPADDR],Reason=[STRING],UserType=[STRING])","IP地址被释放.
","PoolName:地址池名称.
ClientID:客户端的ID.
IpAddress:被释放的IP地址.
Reason:释放IP地址的原因,包括:·Clientrelease:客户端主动释放.
·Leaseexpired:租约过期.
·Administratorreset:管理员重置.
UserType:客户端的用户类型.
","·客户端主动释放.
·租约过期.
·管理员重置.
","1.
正常运行信息,无需处理.
""AM/4/IPCONFLICTRPT","AM","IPCONFLICTRPT","4","TheclientdetectedanIPaddressconflict.
(PoolName=[STRING],ClientId=[STRING],IpAddress=[IPADDR],UserType=[STRING])","DHCP服务器收到客户端探测的IP地址冲突信息.
","PoolName:地址池名称.
ClientID:客户端的ID.
IpAddress:冲突的IP地址.
UserType:客户端的用户类型","·客户端向服务器上报IP地址冲突.
","1.
检查客户端是否已经分到了可用的IP地址.
如果可用,无需关注该日志;如果不可用,请联系技术支持人员进行处理.
""AM/4/IPCONFLICTDTC","AM","IPCONFLICTDTC","4","ThedevicedetectedanIPaddressconflict.
(PoolName=[STRING],MacAddress=[STRING],IpAddress=[IPADDR])","服务器探测到IP地址冲突.
","PoolName:地址池名称.
MacAddress:客户端的MAC地址.
IpAddress:冲突的IP地址.
","服务器探测到IP地址冲突.
","1.
查看该客户端是否申请到可用地址.
如果可用,无需关注该日志;如果不可用,请联系技术支持人员进行处理.
""AM/6/IPCONFLICTRESET","AM","IPCONFLICTRESET","6","AconflictingIPaddresswasreclaimed.
(PoolName=[STRING],IpAddress=[IPADDR],Reason=[STRING])","回收冲突的IP地址.
","PoolName:地址池名称.
IpAddress:冲突的IP地址.
Reason:冲突的IP地址被重置为空闲的原因,包括:·NoidleIPaddress:地址池中没有可供分配的IP地址.
·Administratorreset:管理员重置.
","·地址池中没有可供分配的IP地址.
·管理员重置.
","1.
正常运行信息,无需处理.
""AM/4/IPPOOL_BACKUPERR","AM","IPPOOL_BACKUPERR","4","Receivedwrongbackupdata.
(PoolName=[STRING],BackUpData=[STRING],Reason=[STRING])","IP地址池数据备份错误.
","PoolName:IP地址池的名称.
BackUpData:IP地址池的备份数据.
Reason:IP地址池数据备份错误的原因.
","主备设备的IP地址池配置不一致.
","1.
检查主备设备之间的IP地址池配置是否一致.
""AM/4/AM_DATABASE_SAVEERR","AM","AM_DATABASE_SAVEERR","4","TheDHCPserverfailedtosavedatatolocaldevice.
(Data=[STRING],Reason=[STRING])","DHCP服务器将数据保存到本地设备失败.
","Data:数据文件.
Reason:数据保存到本地设备失败的原因.
","DHCP服务器存储空间不足.
","1.
清理储存空间.
""AGILE/4/AUTHFAIL","AGILE","AUTHFAIL","4","Failedtoconnecttocontroller[ip-address],duetofailureofauthentication.
Pleasechecktheagilenetworkconfiguration.
","Controller服务器认证FW失败.
","ip-address:Controller服务器的IP地址.
","FW上配置的认证密码与Controller服务器上的认证密码不一致.
","1.
请检查Controller服务器上为FW分配的密码是否与FW上使用的认证密码一致.
""AGILE/6/CFGSUCC","AGILE","CFGSUCC","6","SucceededinsavingtheconfigurationoftheControllerat[ip-address].
","设备成功保存Controller下发的配置信息.
","ip-address:Controller的IP地址.
","Controller下发配置成功.
","1.
正常运行信息,无需处理.
""AGILE/6/CONNECTED","AGILE","CONNECTED","6","Succeededinconnectingtocontroller[ip-address].
","设备连接Controller成功.
","ip-address:Controller的IP地址.
","设备连接Controller成功.
","1.
正常运行信息,无需处理.
""AGILE/4/CONNFAIL","AGILE","CONNFAIL","4","Failedtoconnecttocontroller[ip-address].
Pleasecheckthenetworkenvironment.
","设备与Controller服务器建立连接请求失败.
","ip-address:Controller服务器的IP地址.
","设备与Controller建立连接请求失败.
","1.
检查设备与Controller之间的链路是否可达,相关配置是否一致.
""AGILE/4/DISCONN","AGILE","DISCONN","4","Disconnectedfromcontroller[ip-address].
","设备与Controller服务器建立的连接断开.
","ip-address:Controller服务器的IP地址.
","设备与Controller之间的连接断开.
","1.
检查设备与Controller之间的网络是否正常.
""AGILE/5/GREFAIL","AGILE","GREFAIL","5","TheControllerat[ip-address]failedtoconfiguretunnels.
","FW执行Controller下发的GRE隧道配置命令失败.
","ip-address:Controller的IP地址.
","FW执行Controller下发的GRE隧道配置命令失败.
","1.
检查Controller下发的配置信息格式、内容是否正确.
""AGILE/6/GRESUCC","AGILE","GRESUCC","6","TheControllerat[ip-address]successfullyconfiguredtunnels.
","NGFW执行Controller下发的GRE隧道配置命令成功.
","ip-address:Controller的IP地址.
","NGFW执行Controller下发的GRE隧道配置命令成功.
","1.
正常运行信息,无需处理.
""AGILE/5/INNFAIL","AGILE","INNFAIL","5","TheControllerat[ip-address]successfullyconfiguredtunnels.
","FW执行Controller下发的配置内网地址命令失败.
","ip-address:Controller的IP地址.
","FW执行Controller下发的配置内网地址命令失败.
","1.
检查Controller下发的配置信息格式、内容是否正确.
""AGILE/6/INNSUCC","AGILE","INNSUCC","6","TheControllerat[ip-address]successfullyconfiguredaprivateIPaddress.
","FW执行Controller下发的配置内网地址命令成功.
","ip-address:Controller的IP地址.
","FW执行Controller下发的配置内网地址命令成功.
","1.
正常运行信息,无需处理.
""AGILE/5/SUGFAIL","AGILE","SUGFAIL","5","TheControllerat[ip-address]failedtodeliverthesecuritygroupconfiguration.
","FW执行Controller下发的配置敏捷安全组命令失败.
","ip-address:Controller的IP地址.
","FW执行Controller下发的配置敏捷安全组命令失败.
","1.
检查Controller下发的配置信息格式、内容是否正确.
""AGILE/6/SUGSUCC","AGILE","SUGSUCC","6","TheControllerat[ip-address]successfullydeliveredthesecuritygroupconfiguration.
","FW执行Controller下发的配置敏捷安全组命令成功.
","ip-address:Controller的IP地址.
","FW执行Controller下发的配置敏捷安全组命令成功.
","1.
正常运行信息,无需处理.
""AGILE/5/UGIPFAIL","AGILE","UGIPFAIL","5","TheControllerat[ip-address]failedtoconfiguretheIPaddressforthesecuritygroup.
","FW执行Controller下发的配置敏捷安全组IP地址命令失败.
","ip-address:Controller的IP地址.
","FW执行Controller下发的配置敏捷安全组IP地址命令失败.
","1.
检查Controller下发的配置信息格式、内容是否正确.
""AGILE/6/UGIPSUCC","AGILE","UGIPSUCC","6","TheControllerat[ip-address]successfullyconfiguredtheIPaddressforthesecuritygroup.
","FW执行Controller下发的配置敏捷安全组IP地址命令成功.
","ip-address:Controller的IP地址.
","FW执行Controller下发的配置敏捷安全组IP地址命令成功.
","1.
正常运行信息,无需处理.
""AGILE/5/UGPFAIL","AGILE","UGPFAIL","5","TheControllerat[ip-address]failedtoconfigurethesecuritypolicy.
","FW执行Controller下发的配置安全策略命令失败.
","ip-address:Controller的IP地址.
","FW执行Controller下发的配置安全策略命令失败.
","1.
检查Controller下发的配置信息格式、内容是否正确.
""AGILE/6/UGPSUCC","AGILE","UGPSUCC","6","TheControllerat[ip-address]successfullyconfiguredthesecuritypolicy.
","FW执行Controller下发的配置安全策略命令成功.
","ip-address:Controller的IP地址.
","FW执行Controller下发的配置安全策略命令成功.
","1.
正常运行信息,无需处理.
""AGILE/4/VERIFYFAIL","AGILE","VERIFYFAIL","4","Failedtoconnecttocontroller[ip-address],duetofailureofverifyingCAcertificateoftheserver.
PleasechecktheCAcertificateoftheserver.
","FW校验Controller的CA证书失败,导致Controller无法与FW建立连接.
","ip-address:Controller的IP地址.
","证书配置错误,请检查FW在敏捷网络功能下的证书配置.
","1.
执行xmppsecurityserver-certificate命令,配置Controller服务器的CA证书.
2.
执行xmppverifycaenable命令,配置FW校验Controller服务器的CA证书功能.
""AGILE/5/VIPFAIL","AGILE","VIPFAIL","5","TheControllerat[ip-address]failedtoconfiguretheVIPsecuritygroup.
","FW执行Controller下发的配置VIP敏捷安全组命令失败.
","ip-address:Controller的IP地址.
","FW执行Controller下发的配置VIP敏捷安全组命令失败.
","1.
检查Controller下发的配置信息格式、内容是否正确.
""AGILE/6/VIPSUCC","AGILE","VIPSUCC","6","TheControllerat[ip-address]succeededinconfiguringtheVIPsecuritygroup.
","FW执行Controller下发的配置VIP敏捷安全组命令成功.
","ip-address:Controller的IP地址.
","FW执行Controller下发的配置VIP敏捷安全组命令成功.
","1.
正常运行信息,无需处理.
""AGILE/5/OBJFAIL","AGILE","OBJFAIL","5","TheControllerat[ip-address]failedtoconfigurethesecurityobject.
","Controller配置安全对象失败.
","ip-address:Controller的IP地址.
","Controller下发安全对象配置失败.
","1.
检查Controller下发的配置信息格式,内容是否正确.
""AGILE/6/OBJSUCC","AGILE","OBJSUCC","6","TheControllerat[ip-address]successfullyconfiguredthesecurityobject.
","Controller配置安全对象成功.
","ip-address:Controller的IP地址.
","Controller下发安全对象配置成功.
","1.
正常运行信息,无需处理.
""AGILE/5/QOSFAIL","AGILE","QOSFAIL","5","TheControllerat[ip-address]failedtoconfigurethetrafficpolicy.
","Controller配置带宽策略失败.
","ip-address:Controller的IP地址.
","Controller配置带宽策略失败.
","1.
检查Controller下发的配置信息格式,内容是否正确.
""AGILE/6/QOSSUCC","AGILE","QOSSUCC","6","TheControllerat[ip-address]successfullyconfiguredthetrafficpolicy.
","Controller配置带宽策略成功.
","ip-address:Controller的IP地址.
","Controller下发带宽策略配置成功.
","1.
正常运行信息,无需处理.
""API/3/AUTH_FAIL","API","AUTH_FAIL","3","Callhomeauthenticationfailed.
(UserName=[user-name],Vsys=[vsys-name],IP=[ip-address],Failed_Reason=[failed_reason])","FW和NETCONF客户端建立callhome连接时认证失败.
","user-name:NETCONF客户端发起连接时使用的用户名.
vsys-name:虚拟系统名称.
ip-address:NETCONF客户端的IP地址.
failed_reason:认证失败的原因.
·Failedtoloadlocaldevicecertificate:加载本地设备证书失败.
·Userauthoricationfailed:用户授权认证失败.
·ClientdevicecertificatedoesnotmatchserverCAcertificate:客户端设备证书和服务器CA证书不匹配.
·Someothererrors:其他错误.
","参考failed_reason参数含义.
","1.
根据失败原因提示处理:·更新设备证书.
·确认客户端使用的用户为15级的API管理员.
·确认客户端是否合法,如果合法请更新CA证书.
2.
如处理后还不能恢复正常,请联系技术支持工程师.
""API/5/AUTH_PASS","API","AUTH_PASS","5","Callhomeauthenticationsucceeded.
(UserName=[user-name],Vsys=[vsys-name],IP=[ip-address])","FW和NETCONF客户端建立callhome连接时认证成功.
","user-name:NETCONF客户端发起连接时使用的用户名.
vsys-name:虚拟系统名称.
ip-address:NETCONF客户端的IP地址.
","FW和NETCONF客户端建立callhome连接时认证成功.
","1.
正常运行信息,无需处理.
""API/5/DOWNLOAD","API","DOWNLOAD","5","TheuserdownloadthefiletodevicethroughtheAPIinterface.
(UserName=[user-name],FileName=[file-name],ServerIP=[server-ip-address])","API用户连接到设备,通过API接口下发指令,让设备从远程服务器下载文件成功.
","user-name:用户名.
file-name:下载文件名.
server-ip-address:服务器IP地址.
","API用户连接到设备,通过API接口下发指令,让设备从远程服务器下载文件成功.
","1.
正常运行信息,无需处理.
""API/5/DOWNLOADFAIL","API","DOWNLOADFAIL","5","TheuserfailedtodownloadthefiletodevicethroughtheAPIinterface.
(UserName=[user-name],FileName=[file-name],ServerIP=[server-ip-address])","API用户连接到设备,通过API接口下发指令,让设备从远程服务器下载文件,下载失败.
","user-name:用户名.
file-name:下载文件名.
server-ip-address:服务器IP地址.
","API用户连接到设备,通过API接口下发指令,让设备从远程服务器下载文件,下载失败.
","1.
请通过API接口获取操作结果,确认失败原因.
详细操作请参考.
""API/5/NET_CLOSECONN","API","NET_CLOSECONN","5","TheconnectionthroughNETCONFClosed.
(UserName=[user-name],Vsys=[vsys-name],IP=[ip-address],Result=[result])","NETCONF连接断开.
","user-name:用户名.
vsys-name:虚拟系统名称.
ip-address:IP地址.
result:操作是否成功.
","·API用户断开与设备的连接.
·NETCONF连接超时后连接断开.
","1.
检查NETCONF客户端与设备间的网络连通性.
""API/5/NET_CONNECTED","API","NET_CONNECTED","5","SucceededinconnectingtoNETCONFclient[ip-address].
","FW主动连接NETCONF客户端成功.
","ip-address:NETCONF客户端IP地址.
","FW主动连接NETCONF客户端成功.
","1.
正常运行信息,无需处理.
""API/5/NET_CONNFAIL","API","NET_CONNFAIL","5","FailedtoconnecttoNETCONFclient[ip-address].
Pleasecheckthenetworkenvironment.
","FW主动连接NETCONF客户端失败.
","ip-address:NETCONF客户端IP地址.
","FW与NETCONF客户端之间的网络异常.
","1.
检查FW与NETCONF客户端之间网络状况,确认NETCONF客户端的IP地址正确.
""API/5/NET_CONNSUCC","API","NET_CONNSUCC","5","TheuseraccessedthedevicethroughNETCONFsuccessfully.
(UserName=[user-name],Vsys=[vsys-name],IP=[ip-address],SessionId=[session-id])","API用户通过NETCONF连接设备成功.
","user-name:用户名.
vsys-name:虚拟系统名称.
ip-address:IP地址.
session-id:会话ID.
","API用户通过NETCONF连接设备成功.
","1.
正常运行信息,无需处理.
""API/5/NET_DISCONN","API","NET_DISCONN","5","DisconnectedfromNETCONFclient[ip-address].
","FW与NETCONF客户端的连接断开.
","ip-address:NETCONF客户端IP地址.
","·FW主动断开与NETCONF客户端的连接.
·NETCONF客户端主动断开与FW的连接.
·网络断开.
","1.
检查FW与NETCONF客户端之间网络状况.
2.
检查认证(证书认证或者密码认证)是否验证通过.
""API/5/NET_KILLCONN","API","NET_KILLCONN","5","TheuserkilledtheconnectionthroughNETCONF.
(UserName=[user-name],Vsys=[vsys-name],IP=[ip-address],SessionId=[session-id],Result=[result])","API用户通过NETCONF关闭指定连接.
","user-name:用户名.
vsys-name:虚拟系统名称.
ip-address:IP地址.
session-id:被关闭的会话ID.
result:操作是否成功.
","API用户通过NETCONF关闭指定连接.
","1.
正常运行信息,无需处理.
""API/5/NET_OPERATERESULT","API","NET_OPERATERESULT","5","TheuseroperatedtheresourcethroughNETCONF.
(UserName=[user-name],Vsys=[vsys-name],IP=[ip-address],Operation=[operation-type],Result=[result])","API用户通过NETCONF操作设备上的资源.
","user-name:用户名.
vsys-name:虚拟系统名称.
ip-address:IP地址.
operation-type:操作类型.
result:操作是否成功.
有两种结果:·successfully:成功.
·failed:失败.
","API用户通过NETCONF操作设备上的资源.
","1.
正常运行信息,无需处理.
""API/5/RES_CONNFAIL","API","RES_CONNFAIL","5","TheuserfailedtoaccessthedevicethroughRESTCONF.
(UserName=[user-name],Vsys=[vsys-name],IP=[ipaddr],Reason=[reason])","用户通过RESTCONF连接设备失败.
","user-name:用户名.
vsys-name:虚拟系统名称.
ipaddr:用户IP地址.
reason:连接失败的原因.
","·用户名或密码输入错误.
·用户没有通过RESTCONF连接的权限.
·客户端用户接入超过最大限制.
","1.
根据失败原因对应进行处理.
""API/5/RES_CONNSUCC","API","RES_CONNSUCC","5","TheuseraccessedthedevicethroughRESTCONFsuccessfully.
(UserName=[user-name],Vsys=[vsys-name],IP=[ipaddr])","用户通过RESTCONF连接设备成功.
","user-name:用户名.
vsys-name:虚拟系统名称.
ipaddr:用户IP地址.
","用户通过RESTCONF连接设备成功.
","1.
正常运行信息,无需处理.
""API/5/RES_OPERATERESULT","API","RES_OPERATERESULT","5","TheuseroperatedtheresourcethroughtheRESTCONF.
(UserName=[user-name],Vsys=[vsys-name],IP=[ipaddr],Method=[method],URL=[url],Result=[result],Detail=[detail])","用户通过RESTCONF操作设备.
","user-name:用户名.
vsys-name:虚拟系统名称.
ipaddr:用户IP地址.
method:用户请求方法,可能的取值如下:·GET:查询业务.
·POST:创建业务.
·PUT:创建或修改业务.
·DELETE:删除业务.
·INVALID:不支持的请求方法.
url:用户请求URL.
result:操作结果.
有两种结果:·succeeded:成功.
·failed:失败.
失败可能原因如下:–用户已经上线或者上线用户已达到最大值.
–请求或配置的资源超出限制.
–不允许删除预定义的安全域.
–用户没有权限访问目标资源.
–目标资源不存在.
–HTTP方法不支持.
–键值不存在或元素值不对.
–XML格式非法.
detail:详细信息.
","用户通过RESTCONF接口操作设备.
","1.
根据日志参数中的detail描述信息对应进行处理.
""API/5/RES_USERDISCONN","API","RES_USERDISCONN","5","TheconnectionthroughRESTCONFclosed.
(UserName=[user-name],Vsys=[vsys-name],IP=[ipaddr],Reason=[reason])","RESTCONF连接断开.
","user-name:用户名.
vsys-name:虚拟系统名称.
ipaddr:用户IP地址.
reason:连接失败的原因.
","·用户主动断开连接.
·用户长时间未操作,超过会话超时时间.
","1.
正常运行信息,无需处理.
""APPCTL/4/BEHAVIORCTL","APPCTL","BEHAVIORCTL","4","Theapplicationbehaviorcontrolpolicywasmatched.
(SyslogId=[syslog-id],VSys=[vsys-name],Policy=[policy-name],SrcIp=[source-ip-address],DstIp=[destination-ip-address],SrcPort=[source-port],DstPort=[destination-port],SrcZone=[source-zone],DstZone=[destination-zone],User=[user-name],Protocol=[protocol],Application=[application-name],Profile=[profile-name],Direction=[direction],Behavior=[behavior],Action=[action])","用户行为命中应用行为控制策略,对用户的应用行为进行控制.
","syslog-id:日志序号.
vsys-name:虚拟系统名称.
policy-name:会话命中的安全策略名称.
source-ip-address:报文的源地址.
destination-ip-address:报文的目的地址.
source-port:源端口.
destination-port:目的端口.
source-zone:报文的源安全区域.
destination-zone:报文目的安全区域.
user-name:用户名.
protocol:承载应用数据的协议.
application-name:报文的应用协议.
profile-name:配置文件的名称.
direction:文件传输的方向.
方向有:·upload:上传.
·download:下载.
behavior:用户的应用行为.
行为有:·HTTPFileUpload:HTTP文件上传.
·HTTPFileDownload:HTTP文件下载.
·HTTPPosting:HTTPPOST操作.
·InternetAccessThroughHTTPProxy:HTTP代理上网.
·HTTPWebBrowsing:HTTP浏览网页.
·SizeoftheHTTPFiletobeUploaded:HTTP文件上传大小.
·SizeoftheHTTPFiletobeDownloaded:HTTP文件下载大小.
·FTPFileUpload:FTP文件上传.
·FTPFileDownload:FTP文件下载.
·FTPFileDeletion:FTP文件删除.
·SizeoftheFTPFiletobeUploaded:FTP文件上传大小.
·SizeoftheFTPFiletobeDownloaded:FTP文件下载大小.
action:事件的响应动作.
响应动作有:·Alert:告警.
·Block:阻断.
","用户行为命中应用行为控制策略,需要对行为进行控制.
","1.
正常运行信息,无需处理.
""ASPF/5/FTP_BLOCK_LOG","ASPF","FTP_BLOCK_LOG","5","[ip-address1]->[ip-address2]ftpgetorputcommandisblocked!
","阻断FTPGET或FTPPUT的访问操作.
","ip-address1:客户端IP地址.
ip-address2:服务器端IP地址.
","由于域间配置了深度检测服务组,当FTPGET或FTPPUT访问时会被阻断.
","1.
检查是否需要阻断.
2.
如果不需要阻断,则在对应的安全域间视图下,取消深度检测服务组的配置.
""ASPF/5/HTTP_A_LOG","ASPF","HTTP_A_LOG","5","[ip-address1]->[ip-address2]ActiveXisblocked!
","阻断ActiveX的访问操作.
","ip-address1:客户端IP地址.
ip-address2:服务器端IP地址.
","由于配置了命令detectactivex-blocking,当ActiveX访问HTTP时,会被阻断.
","1.
如果不期待阻断,则在对应的安全域间视图下,执行命令undodetectactivex-blocking取消检测activex-blocking的配置.
""ASPF/5/HTTP_JA_LOG","ASPF","HTTP_JA_LOG","5","[ip-address1]->[ip-address2]JavaAppletisblocked!
","阻断JavaApplet的访问操作.
","ip-address1:客户端IP地址.
ip-address2:服务器端IP地址.
","由于配置了命令detectjava-blocking,当JavaApplet访问HTTP时,会被阻断.
","1.
如果不需要阻断,则在对应的安全域间视图下,执行命令undodetectjava-blocking取消检测java-blocking的配置.
""ASSOC/4/ATTACK","ASSOC","ATTACK","4","Anassociatedintrusionwasdetected.
(SyslogId=[syslog-id],VSys=[vsys-name],Policy=[policy-name],SrcIp=[source-ip],DstIp=[destination-ip],SrcPort=[source-port],DstPort=[destination-port],SrcZone=[source-zone],DstZone=[destination-zone],User=[user-name],Protocol=[protocol],Application=[application-name],Profile=[profile-name],SignName=[signature-name],SignId=[signature-id],EventNum=[event-number],Target=[target],Severity=[severity],Os=[operating-system],Category=[category],Action=[action])","系统检测到一个关联威胁事件,日志中描述了该关联威胁事件的详细信息.
","syslog-id:日志序号.
vsys-name:虚拟系统名称.
policy-name:安全策略名称.
source-ip:报文的源IP地址.
destination-ip:报文的目的IP地址.
source-port:报文的源端口(对于ICMP报文,该字段为0).
destination-port:报文的目的端口(对于ICMP报文,该字段为0).
source-zone:报文的源安全域.
destination-zone:报文的目的安全域.
user-name:用户名.
protocol:签名检测到的报文所属协议.
application-name:签名检测到的报文所属应用.
profile-name:配置文件的名称.
signature-name:签名的名称.
signature-id:签名的ID.
event-number:日志归并引入字段,是否归并需根据归并频率及日志归并条件来确定,不发生归并则为1.
target:签名所检测的报文所攻击对象.
具体情况如下:·server:攻击对象为服务端.
·client:攻击对象为客户端.
·both:攻击对象为服务端和客户端.
severity:签名所检测的报文所造成攻击的严重性.
具体情况如下:·information:表示严重性为提示.
·low:表示严重性为低.
·medium:表示严重性为中.
·high:表示严重性为高.
operating-system:签名所检测的报文所攻击的操作系统.
具体情况如下:·all:表示所有系统.
·android:表示安卓系统.
·ios:表示苹果系统.
·unix-like:表示Unix系统.
·windows:表示Windows系统.
·other:表示其他系统.
category:签名检测到的报文攻击特征所属的威胁分类.
action:签名动作.
具体情况如下:·alert:签名动作为告警.
·block:签名动作为阻断.
·allow:签名动作为允许.
","检测到了关联威胁事件.
","1.
正常运行信息,无需处理.
""AUDIT/6/BRD","AUDIT","BRD","6","Thebankreminderauditpolicywasmatched.
(SyslogId=[syslog-id],VSys=[vsys-name],AuditPolicy=[policy-name],SrcIp=[source-ip-address],DstIp=[destination-ip-address],SrcPort=[source-port],DstPort=[destination-port],SrcZone=[source-zone],DstZone=[destination-zone],User=[user-name],Protocol=[protocol],Application=[application-name],Profile=[profile-name],AuditType=[audit-type],IDCard=[id-card],UserID=[user-id])","命中银行催缴审计策略.
","syslog-id:日志序号.
vsys-name:虚拟系统名称.
policy-name:安全策略的名称.
source-ip-address:报文的源IP地址.
destination-ip-address:报文的目的IP地址.
source-port:报文的源端口.
destination-port:报文的目的端口.
source-zone:报文的源安全区域.
destination-zone:报文的目的安全区域.
user-name:用户名.
protocol:协议名称.
application-name:应用名称.
profile-name:配置文件的名称.
audit-type:审计的类型:·催账·登录·添加备注·查询账户信息·查询交易信息·查询账单信息id-card:用户身份证号码.
user-id:用户编号.
","用户在银行催缴系统中的行为命中了设备配置的银行催缴审计策略.
","1.
正常运行信息,无需处理.
""AUDIT/6/FTP","AUDIT","FTP","6","TheFTPauditpolicywasmatched.
(SyslogId=[syslog-id],VSys=[vsys-name],AuditPolicy=[policy-name],SrcIp=[source-ip-address],DstIp=[destination-ip-address],SrcPort=[source-port],DstPort=[destination-port],SrcZone=[source-zone],DstZone=[destination-zone],User=[user-name],Protocol=[protocol],Application=[application-name],Profile=[profile-name],AuditType=[audit-type],EventNum=[event-num],Direction=[direction],Command=[command-content],FileName=[filename],FileSize=[filesize])","命中了FTP行为审计策略.
","syslog-id:日志序号.
vsys-name:虚拟系统名称.
policy-name:安全策略的名称.
source-ip-address:报文的源IP地址.
destination-ip-address:报文的目的IP地址.
source-port:报文的源端口.
destination-port:报文的目的端口.
source-zone:报文的源安全区域.
destination-zone:报文的目的安全区域.
user-name:用户名.
protocol:协议名称.
application-name:应用名称.
profile-name:配置文件的名称.
audit-type:审计的类型,包括以下两种:·用户执行命令·FTP传输文件event-num:审计事件归并计数.
direction:文件传输的方向,包括上传和下载两种.
command-content:FTP执行的命令.
filename:审计的文件名称.
filesize:审计的文件大小.
","用户的FTP行为命中了设备配置的FTP行为审计策略.
","1.
正常运行信息,无需处理.
""AUDIT/6/HTTP","AUDIT","HTTP","6","TheHTTPauditpolicywasmatched.
(SyslogId=[syslog-id],VSys=[vsys-name],AuditPolicy=[policy-name],SrcIp=[source-ip-address],DstIp=[destination-ip-address],SrcPort=[source-port],DstPort=[destination-port],SrcZone=[source-zone],DstZone=[destination-zone],User=[user-name],Protocol=[protocol],Application=[application-name],Profile=[profile-name],AuditType=[audit-type],EventNum=[event-num],Direction=[direction],URL=[url],Subject=[web-subject],Content=[audit-content],FileName=[filename],FileSize=[filesize],URLCategory=[url-category])","命中了HTTP行为审计策略.
","syslog-id:日志序号.
vsys-name:虚拟系统名称.
policy-name:安全策略的名称.
source-ip-address:报文的源IP地址.
destination-ip-address:报文的目的IP地址.
source-port:报文的源端口.
destination-port:报文的目的端口.
source-zone:报文的源安全区域.
destination-zone:报文的目的安全区域.
user-name:用户名.
protocol:协议名称.
application-name:应用名称.
profile-name:配置文件的名称.
audit-type:审计的类型,包括:·网页浏览·HTTP传输文件·BBS发帖·微博发帖·搜索关键字event-num:审计事件归并计数.
direction:文件传输的方向,包括上传和下载两种.
url:审计的网页URL.
web-subject:审计的网页标题.
audit-content:BBS、微博发帖、搜索关键字的内容.
filename:审计的文件名称.
filesize:审计的文件大小.
url-category:审计的URL所属的类别名称.
","用户的HTTP行为命中了设备配置的HTTP行为审计策略.
","1.
正常运行信息,无需处理.
""AUDIT/6/IM","AUDIT","IM","6","TheIMauditpolicywasmatched.
(SyslogId=[syslog-id],VSys=[vsys-name],AuditPolicy=[policy-name],SrcIp=[source-ip-address],DstIp=[destination-ip-address],SrcPort=[source-port],DstPort=[destination-port],SrcZone=[source-zone],DstZone=[destination-zone],User=[user-name],Protocol=[protocol],Application=[application-name],Profile=[profile-name],AuditType=[audit-type],Account=[account],Date=[date],Time=[time])","命中了QQ行为审计策略.
","syslog-id:日志序号.
vsys-name:虚拟系统名称.
policy-name:安全策略的名称.
source-ip-address:报文的源IP地址.
destination-ip-address:报文的目的IP地址.
source-port:报文的源端口.
destination-port:报文的目的端口.
source-zone:报文的源安全区域.
destination-zone:报文的目的安全区域.
user-name:用户名.
protocol:协议名称.
application-name:应用名称.
profile-name:配置文件的名称.
audit-type:审计的类型,包括以下两种:·online·offlineaccount:QQ账号date:用户上线或下线的日期.
time:用户上线或下线的时间.
","用户的QQ行为命中了设备配置的QQ行为审计策略.
","1.
正常运行信息,无需处理.
""AUDIT/6/MAIL","AUDIT","MAIL","6","TheE-Mailauditpolicywasmatched.
(SyslogId=[syslog-id],VSys=[vsys-name],AuditPolicy=[policy-name],SrcIp=[source-ip-address],DstIp=[destination-ip-address],SrcPort=[source-port],DstPort=[destination-port],SrcZone=[source-zone],DstZone=[destination-zone],User=[user-name],Protocol=[protocol],Application=[application-name],Profile=[profile-name],AuditType=[audit-type],Sender=[mail-sender-address],Receiver=[mail-receiver-address],Subject=[mail-subject],AttachmentName=[attachment-name],AttachmentNum=[attachment-number])","命中了邮件行为审计策略.
","syslog-id:日志序号.
vsys-name:虚拟系统名称.
policy-name:安全策略的名称.
source-ip-address:报文的源IP地址.
destination-ip-address:报文的目的IP地址.
source-port:报文的源端口.
destination-port:报文的目的端口.
source-zone:报文的源安全区域.
destination-zone:报文的目的安全区域.
user-name:用户名.
protocol:协议名称.
application-name:应用名称.
profile-name:配置文件的名称.
audit-type:审计的类型,包括以下两种:·发送邮件·接收邮件mail-sender-address:发件人的邮件地址.
mail-receiver-address:收件人的邮件地址.
mail-subject:邮件的主题.
attachment-name:邮件中的名称.
多个之间使用/分隔.
attachment-number:邮件中的个数.
","用户收发邮件的行为命中了设备配置的邮件行为审计策略.
","1.
正常运行信息,无需处理.
""AV/4/VIRUS","AV","VIRUS","4","Aviruswasdetected.
(SyslogId=[syslog-id],VSys=[vsys-name],Policy=[policy-name],SrcIp=[source-ip-address],DstIp=[destination-ip-address],SrcPort=[source-port],DstPort=[destination-port],SrcZone=[source-zone],DstZone=[destination-zone],User=[user-name],Protocol=[protocol],Application=[application-name],Profile=[profile-name],EventNum=[event-number],SignatureId=[signature-id],ViruName=[virus-name],DetectionType=[detection-type],Direction=[direction],FileName=[file-name],FileType=[file-type],Action=[action])","进行病毒检测时发现病毒.
","syslog-id:日志序号.
vsys-name:虚拟系统名称.
policy-name:安全策略名称.
source-ip-address:源IP地址.
destination-ip-address:目的IP地址.
source-port:源端口.
destination-port:目的端口.
source-zone:源安全区域.
destination-zone:目的安全区域.
user-name:用户名.
protocol:协议.
application-name:应用.
profile-name:配置文件的名称.
event-number:事件计数.
signature-id:特征序号.
virus-name:病毒名称.
detection-type:检测类型:·virusdetect:病毒检测·heuristicdetect:启发式检测·file-reputationdetect:文件信誉检测direction:传输方向.
file-name:文件名.
file-type:文件类型.
action:动作.
","进行病毒扫描时,发现了病毒.
","1.
系统已自动处理,无需手动操作.
""BFD/3/ADDFSM_ERR","BFD","ADDFSM_ERR","3","Slotfailedtoaddsessionstatusmachinetable!
(SlotNumber=[STRING],Discriminator=[ULONG])","接口板增加会话状态机表项失败!
","SlotNumber:接口板号.
Discriminator:会话标识符.
","增加状态机表项失败.
","1.
查看会话配置信息和会话信息,尝试重新建立会话.
""BFD/3/ADDRCV_ERR","BFD","ADDRCV_ERR","3","Slotfailedtoaddsessionreceivaltable!
(SlotNumber=[STRING],Discriminator=[ULONG])","接口板增加会话接收表项失败!
","SlotNumber:接口板号.
Discriminator:会话标识符.
","增加接收表项失败.
","1.
查看会话配置信息和会话信息,尝试重新建立会话.
""BFD/3/BACKUPCFG_ERR","BFD","BACKUPCFG_ERR","3","Failedtobackupconfigurationdata!
(BfdName=[STRING],ErrCode=[ULONG])","热备份创建配置结构数据时发生错误,错误码:1:参数错误.
2:会话绑定接口未使能BFD.
8:配置达到上限.
9:配置索引分配失败.
10:配置没有创建.
11:会话绑定类型错误.
21:配置已经被创建","BFDName:发生错误的会话配置名称.
ErrCode:错误码.
","热备份创建配置结构数据时发生错误.
","1.
检查配置,重新提交.
2.
在会话绑定的接口下使能BFD.
3.
删除一些配置,重新尝试提交.
4.
检查配置,重新提交.
5.
检查配置,重新提交.
6.
检查会话绑定类型.
7.
查看已有配置,进行修改或删除重建.
""BFD/6/CARD_PLUGIN_SMOOTH","BFD","CARD_PLUGIN_SMOOTH","6","Thecardwaspluggedintheboardduringdatasmooth.
(SlotNumber=[STRING],CardId=[ULONG])","数据平滑处理时卡插入.
","SlotNumber:板号.
CardID:子卡号.
","数据平滑处理时卡插入.
","1.
正常运行信息,无需处理.
""BFD/6/CARD_PLUGIN_WAIT","BFD","CARD_PLUGIN_WAIT","6","Theprocessingoftheplug-ineventontheboarddidnotfinish,sotheprocessingoftheplug-ineventofthecardoftheboardneedstowait,andthetimerstarts.
(SlotNumber=[STRING],CardId=[ULONG],WaitValue=[ULONG],Result=[STRING])","板插入处理时收到该板上的卡插入事件,卡插入事件等待板插入事件处理完成后再处理.
","SlotNumber:板号.
CardID:子卡号.
WaitValue:等待时间.
Result:定时器启动结果,取值为succeeded或failed.
","板插入处理时又收到该板上的卡插入事件.
","1.
正常运行信息,无需处理.
""BFD/6/CARD_PLUGOUT","BFD","CARD_PLUGOUT","6","Theprocessingofcardpull-outeventontheboardwasaborted.
(SlotNumber=[STRING],CardId=[ULONG],GlobalCapability=[ULONG])","由于不需处理或BFD需要使能但未使能而中止卡拔出处理.
","SlotNumber:板号.
CardID:子卡号.
GlobalCapability:BFD全局能力值.
","原因1:拔出的不是接口板上的卡.
原因2:在卡拔出时进行备板上卡拔出处理.
原因3:BFD全局能力为不使能.
","1.
正常运行信息,无需处理.
""BFD/6/CARD_PLUGOUT_END","BFD","CARD_PLUGOUT_END","6","Theprocessingofthecardpull-outeventontheboardwascompleted.
(SlotNumber=[STRING],CardId=[ULONG])","卡拔出处理结束.
","SlotNumber:板号.
CardID:子卡号.
","卡拔出处理结束.
","1.
正常运行信息,无需处理.
""BFD/6/CARD_PLUGOUT_SMOOTH","BFD","CARD_PLUGOUT_SMOOTH","6","Thecardoftheboardwaspluggedoutduringdatasmooth.
(SlotNumber=[STRING],CardId=[ULONG])","数据平滑处理时卡拔出.
","SlotNumber:板号.
CardID:子卡号.
","数据平滑处理时卡拔出.
","1.
正常运行信息,无需处理.
""BFD/6/CARD_PLUGOUT_WAIT","BFD","CARD_PLUGOUT_WAIT","6","Theprocessingoftheplug-ineventontheboarddidnotfinish,sotheprocessingofthepull-outeventofthecardoftheboardneedstowait,andstartsthetimer.
(SlotNumber=[STRING],CardId=[ULONG],WaitValue=[ULONG],Result=[STRING])","板插入处理时收到该板上的卡拔出事件,卡拔出事件等待板插入事件处理完成后再处理.
","SlotNumber:板号.
CardID:子卡号.
WaitValue:等待时间.
Result:定时器启动结果,取值为succeeded或failed.
","板插入处理时又收到该板上的卡拔出事件.
","1.
正常运行信息,无需处理.
""BFD/4/CFG_LIMIT","BFD","CFG_LIMIT","4","ThenumberofBFDCFGhasreachedthelimitofPAF/License.
","当前BFD配置数达到PAF/License中最大配置数目限制.
","无:无","配置太多的BFD会话.
","1.
不能再配置.
""BFD/4/CFG_PERTNL_LIMIT","BFD","CFG_PERTNL_LIMIT","4","ThenumberofBFDCFGhasreachedthelimitperLSPofPAF/License.
","(静态LSP):当前BFD配置数目到达PAF/License中每条隧道最大配置数目的限制.
","无:无","一条静态LSP配置太多的会话.
","1.
不能再配置.
""BFD/6/CREATE_SESS_ERR","BFD","CREATE_SESS_ERR","6","FailedtocreateBFDsession.
Itwillbecreatedagainlater.
(ConfigurationName=[STRING])","BFD创建会话失败,后面会尝试重新创建.
","ConfigurationName:BFD配置名称.
","创建BFD会话的过程中出现错误,导致创建会话失败.
失败的原因可能是:1、选择主处理板失败;2、达到paf限制的上限.
","1.
通过命令displaybfdsession,检查会话是否已经建立.
1)若建立=>5.
2)若未建立=>2.
2.
通过命令displaybfdstatistics,检查BFD会话数量是否达到上限.
1)若数量达到上限,请将无用的会话删除.
2)若配置没有问题=>3.
3.
通过命令displaydevice检查接口板类型,确认是否支持bfd.
1)若支持=>4.
2)若不支持,请增加支持bfd功能的接口板.
4.
请联系技术支持工程师.
5.
结束.
""BFD/6/CRTSESS","BFD","CRTSESS","6","TheBFDsessionhasbeencreatedsuccessfully.
(Discriminator=[ULONG],ConfigurationName=[STRING],Applications=[STRING],PeerIp=[STRING],SessionType=[STRING],BindIFName=[STRING],BindVpnName=[STRING])","BFD会话创建成功.
","Discriminator:BFD会话的本地标识符.
ConfigurationName:BFD会话的配置名称.
Applications:BFD会话绑定的应用.
PeerIp:BFD会话的目的地址.
SessionType:BFD会话的类型.
BindIFName:BFD会话绑定的接口名称.
BindVpnName:BFD会话绑定的VPN名称.
","BFD会话创建成功.
","1.
正常运行信息,无需处理.
""BFD/6/CRTSESS_AGE","BFD","CRTSESS_AGE","6","Theoperationofcreatingsessionagingended.
(SlotNumber=[STRING],Discriminator=[ULONG],Result=[STRING])","接口板处理老化创建会话是否成功.
","Discriminator:会话标识符.
SlotNumber:接口板板号.
Result:处理结果","接口板处理老化创建会话是否成功.
","1.
如果老化处理成功,属正常流程.
如果老化处理失败,查看会话配置信息和会话信息,尝试手动创建会话.
""BFD/3/DELCFG_ERR_SYS","BFD","DELCFG_ERR_SYS","3","Failedtodeleteconfigurationentrywhensystemwasrecovering!
(BfdName=[STRING])","在系统处于热恢复状态时删除配置指针失败!
","BfdName:BFD配置名字.
","在系统处于热恢复状态时删除配置指针失败!
","1.
分析失败原因.
""BFD/3/DELFSM_ERR","BFD","DELFSM_ERR","3","Slotfailedtodeletesessionstatusmachinetable!
(SlotNumber=[STRING],Discriminator=[ULONG])","接口板删除会话状态机表项失败!
","SlotNumber:接口板号.
Discriminator:会话标识符.
","删除状态机表项失败.
","1.
查看会话配置信息和会话信息,尝试重新删除会话.
""BFD/3/DELIF_ERR","BFD","DELIF_ERR","3","Erroroccurredwhenslotgotinterfaceentry!
(SlotNumber=[STRING],InterfaceEntry=[STRING])","全局删除BFD能力时,查找BFD接口失败.
","SlotNumber:发生错误的接口板板号,如果发生在主控板,则为主控板板号.
InterfaceEntry:接口名称.
","全局删除BFD能力时,查找BFD接口失败.
","1.
尝试重新进行删除,如果失败,请联系技术支持工程师.
""BFD/3/DELRCV_ERR","BFD","DELRCV_ERR","3","Slotfailedtodeletesessionreceivalentry!
(SlotNumber=[STRING],Discriminator=[ULONG])","接口板删除会话接收表项失败!
","SlotNumber:接口板号.
Discriminator:会话标识符.
","删除接收表项失败.
","1.
查看会话配置信息和会话信息,尝试重新删除会话.
""BFD/3/DELRCV_ERR_ADD","BFD","DELRCV_ERR_ADD","3","Slotfailedtodeletesessionreceivalentrywhenaddingsession!
(SlotNumber=[STRING],Discriminator=[ULONG])","接口板在增加会话时删除会话接收表项失败!
","SlotNumber:接口板号.
Discriminator:会话标识符.
","删除接收表项失败.
","1.
查看会话配置信息和会话信息,尝试重新建立会话.
""BFD/5/DELSESS","BFD","DELSESS","5","Deletingsession.
(Discriminator=[ULONG],Result=[STRING])","BFD会话被删除.
","Discriminator:BFD会话的本地标识符.
Result:BFD会话是否删除成功.
有两种结果:·成功.
·失败.
","BFD会话被删除","1.
正常运行信息,无需处理.
""BFD/6/DELSESS_AGE","BFD","DELSESS_AGE","6","Theoperationofdeletingsessionforagingended.
(SlotNumber=[STRING],Discriminator=[ULONG],Result=[STRING])","接口板处理老化删除会话是否成功.
","Discriminator:会话标识符.
SlotNumber:接口板板号.
Result:处理结果.
","接口板处理老化删除会话是否成功.
","1.
如老化处理成功,属正常流程.
如老化处理失败,查看会话配置信息和会话信息,尝试手动删除会话.
""BFD/4/DELSESS_ERR_SMB","BFD","DELSESS_ERR_SMB","4","Failedtodeletesessioninslaveboard!
(MIndex=[ULONG],Discriminator=[ULONG])","备板删除会话失败.
","Mindex:会话索引.
Discriminator:会话标识符.
","实时备份时,备板删除会话失败,主要由于BFD接口数据错误.
","1.
请联系技术支持工程师.
""BFD/3/DISCR_DIFF","BFD","DISCR_DIFF","3","Thecurrentsessiondiscriminatorwasnotequaltothereceiveddiscriminator!
(CurrentDiscirminator=[ULONG],ReceivedDiscriminator=[ULONG])","当前会话表项中的标识符与接收到的报文中的标识符不一致.
","CurrentDiscirminator:当前会话表项中的标识符.
ReceivedDiscriminator:接收到的会话标识符.
","当前会话表项中的标识符与接收到的报文中的标识符不一致.
","1.
检查两端会话配置信息及会话信息,尝试重新建立会话.
""BFD/4/FSM_EXIST","BFD","FSM_EXIST","4","Thesessionstatusmachinealreadyexistedwhencreatingstatusmachineontheslot!
(SlotNumber=[STRING],Discriminator=[ULONG],DownloadDiscriminator=[ULONG],MIndex=[ULONG])","接口板创建状态机时,发现对应会话的状态机已存在.
","SlotNumber:接口板板号.
Discriminator:已存在的会话标识符.
DownloadDiscriminator:下发的会话标识符.
Mindex:会话索引.
","接口板创建状态机时,发现对应会话的状态机已存在.
","1.
查看接口板上会话信息,查看该标识符的会话在该板上是否存在.
""BFD/3/GETPKT_FAIL","BFD","GETPKT_FAIL","3","Sessionfailedtoconstructcontrolpacket!
(Discriminator=[ULONG],Status=[STRING])","会话构造报文失败!
","Discriminator:会话标识符.
Status:会话状态","构造报文失败.
","1.
查看会话配置信息和会话信息,尝试重新进行操作或重新建立会话.
""BFD/3/GETPKT_UPDATE_FAIL","BFD","GETPKT_UPDATE_FAIL","3","Sessionfailedtoconstructcontrolpacketwhenupdateparameter!
(Discriminator=[ULONG],Status=[STRING])","动态修改会话参数时,会话构造报文失败!
","Discriminator:会话标识符.
Status:会话状态.
","构造报文失败.
","1.
查看会话配置信息和会话信息,尝试重新进行操作或重新建立会话.
""BFD/6/GLOBALCAP_DEL","BFD","GLOBALCAP_DEL","6","BFDglobalcapabilityisbeingdeleted.
Pleasewait.
","去除BFD的全局能力.
","无:无","全局配置会话较多时,如去使能全局BFD能力,会占用较长时间.
在处理尚未完成时,执行了其它BFD操作,如数据平滑.
","1.
正常运行信息,无需处理.
BFD正在全局去使能,稍待片该,待去使能完成,再执行其它BFD处理.
""BFD/6/IFCAP_DEL","BFD","IFCAP_DEL","6","TheBFDcapabilityofinterfaceisbeingdeleted.
(Interface=[STRING])","接口下的bfd能力被删除,指明了接口名称.
","Interface:接口名称.
","去使能接口下检测端口类型的BFD.
","1.
在去使能检测端口的BFD.
""BFD/4/IO_NOENABLE","BFD","IO_NOENABLE","4","BFDRPC:Slot'sBFDcapabilitydoesn'tenablewhendownloadevent.
(SlotNumber=[STRING],Event=[STRING])","接口板在处理下发事件时接口板BFD能力未使能.
","SlotNumber:接口板号.
Event:事件类型.
","接口板在处理下发的事件时BFD能力未使能.
","1.
进行全局使能BFD操作后重新尝试操作.
""BFD/4/IO_REACH_SESSLMT","BFD","IO_REACH_SESSLMT","4","Thenumberofsessionsontheslothadreachedupperlimit,newsessionboundonthisinterfaceboardcouldnotbecreated!
(SlotNumber=[STRING])","接口板已经到达会话上限,绑定这个接口的会话不能再创建!
","SlotNumber:接口板号.
","接口板已经到达会话上限,绑定这个接口的会话不能再创建!
","1.
不再创建绑定这个接口板上接口的会话,或者删除部分无用的绑定这个接口板上的接口的会话.
""BFD/6/IORCV_EVNT","BFD","IORCV_EVNT","6","Slotbegantoprocesstheevent.
(SlotNumber=[STRING],Event=[STRING])","接口板开始处理接口板事件.
","SlotNumber:接口板板号.
Event:事件类型.
","接口板开始处理接口板事件.
","1.
正常运行信息,无需处理.
""BFD/4/IPCERR_STACHG","BFD","IPCERR_STACHG","4","IPCerror,sendthemassageofstatuschangetomainboardagain.
","接口板向主控板发送IPC消息失败,再次向主控板发送接口板会话状态.
","无:无","接口板向主控板发送IPC消息失败,再次向主控板发送接口板会话状态.
","1.
会话状态改变时,IPC繁忙.
""BFD/6/NO_SESSUP_EVENT","BFD","NO_SESSUP_EVENT","6","TheCFGentrywithoutsessioncanonlyprocesstheeventofsessionup.
(CfgName=[STRING])","除了会话建立事件,没有绑定会话的配置表项不处理其他任何事件(配置表项名称).
","CfgName:配置表项名称.
","没有绑定会话的配置表项只能处理会话事件.
","1.
正常运行信息,无需处理.
""BFD/3/NOMEM","BFD","NOMEM","3","FailedtoallocatememorytosendIPCmessagefortheeventofundobindport!
","发送ipc消息时分配内存失败.
","无:无","接口板内存分配失败.
","1.
内存分配失败,返回错误,不再发送.
""BFD/3/NOMEM_CRTSESS","BFD","NOMEM_CRTSESS","3","SlotfailedtoallocatememoryforBFDsessionentrywhencreatingsession!
(SlotNumber=[STRING],MIndex=[ULONG])","根据索引创建会话表项失败.
","SlotNumber:事件发生的板号.
Mindex:会话索引.
","根据索引创建会话表项失败.
","1.
检查BFD会话配置信息和会话信息,重新尝试建立会话.
2.
检查内存使用情况,删除一些配置,尝试重新建立.
""BFD/3/NOMEM_DELMSG","BFD","NOMEM_DELMSG","3","Failedtoallocatememoryforsendingthemessageofdeletingsession!
(Size=[ULONG],Number=[ULONG])","接口板删除会话表项,申请内存下发适配删除消息时,申请内存失败.
","Size:申请内存的大小.
Number:下发适配的会话个数.
","接口板删除会话表项,申请内存下发适配删除消息时,申请内存失败.
","1.
查看内存使用情况,删除配置尝试重新进行操作.
2.
请联系技术支持工程师.
""BFD/3/NORCV_DEL","BFD","NORCV_DEL","3","Slotcannotgetreceivalentrybydiscriminatorwhendeletingthesession!
(SlotNumber=[STRING],Discriminator=[ULONG])","删除会话表项时,接口板无法根据会话标识符查找到对应表项.
","SlotNumber:接口板板号.
Discriminator:会话标识符.
","删除会话表项时,接口板无法根据会话标识符查找到对应表项.
","1.
查看接口板上会话信息,查看该标识符的会话在该板上是否存在.
""BFD/3/NOSESS","BFD","NOSESS","3","CouldnotfindBFDsession!
(MIndex=[ULONG])","无法查找到指定的BFD会话.
","Mindex:会话索引.
","无法查找到指定的BFD会话.
","1.
尝试重新建立会话.
""BFD/4/NOSESS_DEL","BFD","NOSESS_DEL","4","Currentsessionnumberwaszerowhendeletingsessionentry!
","删除会话表项时,当前会话数为0.
","无:无","删除会话表项时,当前会话数为0.
","1.
查看bfd统计信息,确认当前该板上是否会话为0;为0则无需处理,不为0尝试重新进行删除操作.
""BFD/4/NOSESS_DEL_IO","BFD","NOSESS_DEL_IO","4","Thesessiondidnotexistinslotwhendeletingsession!
(SlotNumber=[STRING],MIndex=[ULONG],Discriminator=[ULONG])","接口板删除会话表项时,该会话已经不存在.
","SlotNumber:接口板板号.
Mindex:会话索引.
Discriminator:会话标识符.
","接口板删除会话表项时,该会话已经不存在.
","1.
查看接口板上会话信息,查看该标识符的会话在该板上是否存在.
""BFD/3/PKTLEN_ERR_CFG","BFD","PKTLEN_ERR_CFG","3","Thelengthofreceivedpacketwasnotequaltotheacademiclengthofpacketwhenrouterbackupedconfigurationdata!
(RcvDataLen=[ULONG],RcvDataNum=[ULONG],CfgEntryLen=[ULONG])","在备份配置数据时,发现实际收到的报文长度与应该收到的长度不符.
","RcvDateLen:为收到的报文长度.
RcvDataNum:为收到的接口数目.
CfgEntryLen:为理论配置表项数据长度.
","在批量备份配置数据时,发现实际收到的报文长度与应该收到的长度不符.
","1.
请联系技术支持工程师.
""BFD/3/PKTLEN_ERR_IF","BFD","PKTLEN_ERR_IF","3","Thelengthofreceivedpacketwasnotequaltotheexpectedlengthofthepacketwhenrouterbackupedinterfacedata!
(RcvDataLen=[ULONG],RcvDataNum=[ULONG],IfEntryLen=[ULONG])","在备份接口数据时,发现实际收到的报文长度与应该收到的长度不符.
","RcvDateLen:为收到的报文长度.
RcvDataNum:为收到的接口数目.
IfEntryLen:为理论每接口数据长度.
","在批量备份接口数据时,发现实际收到的报文长度与应该收到的长度不符.
","1.
请联系技术支持工程师.
""BFD/3/PKTLEN_ERR_SESS","BFD","PKTLEN_ERR_SESS","3","Thelengthofreceivedpacketwasnotequaltotheacademiclengthofpacketwhenrouterbackupedsessiondata!
(RcvDataLen=[ULONG],RcvDataNum=[ULONG],SessEntryLen=[ULONG])","在备份会话数据时,发现实际收到的报文长度与应该收到的长度不符.
","RcvDateLen:收到的报文长度.
RcvDataNum:收到的会话数目.
SessEntryLen:理论上的每接口数据长度.
","在批量备份会话数据时,发现实际收到的报文长度与应该收到的长度不符.
","1.
请联系技术支持工程师.
""BFD/6/PLUGIN","BFD","PLUGIN","6","ProcessingoftheslotPLUG-INeventended.
(SlotNumber=[STRING],Capability=[ULONG])","处理接口板插入事件.
","SlotNumber:接口板号.
Capability:当前BFD的全局能力.
","正常运行信息,无需处理.
","1.
接口板插入事件处理完成.
""BFD/6/PLUGIN_END","BFD","PLUGIN_END","6","ProcessofslotPLUG-INeventended.
(SlotNumber=[STRING])","处理接口板插入事件结束.
","SlotNumber:插入的接口板板号.
","处理接口板插入事件结束.
","1.
正常运行信息,无需处理.
""BFD/6/PLUGIN_SMOOTH","BFD","PLUGIN_SMOOTH","6","Plug-Ineventoccurredonslotwhenperformingdatasmoothing.
(SlotNumber=[STRING])","在处理平滑时发生了接口板插入事件,当前处理到的会话位置.
","SlotNumber:插入的接口板板号.
","主备倒换后,BFD仍在处理平滑时,插入了接口板.
","1.
正常运行信息,无需处理.
""BFD/6/PLUGOUT","BFD","PLUGOUT","6","ProcessingoftheslotPLUG-OUTeventended.
(SlotNumber=[STRING],Capability=[ULONG])","处理接口板拔出事件.
","SlotNumber:拔出的接口板板号.
Capability:当前BFD的全局能力.
具体情况如下:·0:全局去使能.
·1:全局使能.
","处理接口板拔出事件.
","1.
正常运行信息,无需处理.
""BFD/6/PLUGOUT_END","BFD","PLUGOUT_END","6","ProcessoftheslotPLUG-OUTeventended.
(SlotNumber=[STRING])","处理接口板拔出事件结束.
","SlotNumber:拔出的接口板板号.
","处理接口板拔出事件结束.
","1.
正常运行信息,无需处理.
""BFD/6/PLUGOUT_SMOOTH","BFD","PLUGOUT_SMOOTH","6","Plug-Outeventoccurredonslotwhenperformingdatasmoothing.
(SlotNumber=[STRING])","在处理平滑时发生了接口板拔出事件,当前处理到的会话位置.
","SlotNumber:拔出的接口板板号.
","主备倒换后,BFD仍在处理平滑时,拔出了接口板.
","1.
正常运行信息,无需处理.
""BFD/6/PLUGOUT_WAIT","BFD","PLUGOUT_WAIT","6","Processingofdeletingslotnotended,waitingtimerwasstarted.
(SlotNumber=[STRING],TimerVlaue=[ULONG]ms,Result=[STRING])","收到接口板插入事件时,接口板拔出事件尚未处理完成,需等待一段时间后再处理插入事件.
","SlotNumber:当前处理到拔出事件的接口板板号.
TimerValue:需要等待的时间.
Result:启动等待定时器是否成功.
","收到接口板插入事件时,接口板拔出事件尚未处理完成,需等待一段时间后再处理插入事件.
","1.
正常运行信息,无需处理.
""BFD/6/PROC_VRF_CREATE","BFD","PROC_VRF_CREATE","6","WhenBFDVRFwasbeingdeleted.
VRFwasbeingcreated.
(VrfName=[STRING])","当BFDVRF正在删除时,处理VRF创建.
","VrfName:VRF名称.
","当BFDVRF正在删除时,处理VRF创建.
","1.
正常运行信息,无需处理.
""BFD/6/RCV_CARD_EVENT","BFD","RCV_CARD_EVENT","6","Theboardbegantoprocessevent.
(SlotNumber=[STRING],Event=[STRING],CardId=[ULONG])","收到卡插拔事件开始处理.
","SlotNumber:板号.
Event:卡插拔事件,包括plugin或plugout.
CardID:子卡号.
","收到卡插拔事件.
","1.
正常运行信息,无需处理.
""BFD/4/REACH_IF_LIM","BFD","REACH_IF_LIM","4","ThenumberoftheinterfacesboundwiththesessionhadreachedtheupperlimitsetinthePAF/Licensefile!
","会话绑定接口数抵达PAF/License文件设置上限!
","无:无","接口板上配置的BFD会话数目达到上限.
","1.
正常运行信息,无需处理.
""BFD/4/REACH_SESSLIM","BFD","REACH_SESSLIM","4","AlltheIOboardshadreachedsessionlimit,thenewsessioncouldnotbecreated!
","所有的接口板都已经达到会话上限,会话不能再创建!
","无:无","所有的接口板都已经达到会话上限,会话不能再创建!
","1.
不再创建会话,或删除部分无用的会话.
""BFD/3/REALTIME_CFG_ERR","BFD","REALTIME_CFG_ERR","3","Failedtobackuptheconfigurationentryinrealtime!
(BfdName=[STRING],ErrorCode=[ULONG])","实时备份配置指针失败(错误码:成功时返回0,错误时返回错误类型)!
","BfdName:BFD配置名字.
ErrorCode:错误码.
","实时备份配置指针失败.
","1.
分析失败原因.
""BFD/3/SESSSTA_ERR","BFD","SESSSTA_ERR","3","Thedownloadedsessionstatuswasinvalid!
(SlotNumber=[STRING],Discriminator=[ULONG],MIndex=[ULONG])","接口板创建会话表项时,会话状态非法.
","Discriminator:会话标识符.
Mindex:会话索引.
SlotNumber:接口板板号.
","接口板创建会话表项时,会话状态非法.
","1.
查看会话配置信息和会话信息,尝试重新建立会话.
""BFD/6/SND_STAT_TO_MAIN","BFD","SND_STAT_TO_MAIN","6","IPCerror.
Thechangedstatushadbeensenttomainboardagain.
","向主控板发送BFD状态变化消息失败.
","无:无","发送同步IPC失败.
","1.
发送同步IPC消息失败,进行重传,5次失败后不再发送.
""BFD/3/SNDMSG_FAIL","BFD","SNDMSG_FAIL","3","Failedtosendmessagetomainboardfortheeventofundobindport!
(PhyInterfaceIdx=[ULONG],LogiInterfaceIdx=[ULONG])","接口板向主控板发送接口去绑定事件的消息失败!
","PhyInterfaceIdx:物理接口索引名称.
LogiInterfaceIdx:逻辑接口索引名称.
","发送同步IPC失败.
","1.
发送同步IPC消息失败,进行重传,5次失败后不再发送.
""BFD/4/STACHG_DWNTOUP","BFD","STACHG_DWNTOUP","4","BFDsessionchangedfromDowntoUp.
(SlotNumber=[STRING],Discriminator=[ULONG],Applications=[STRING],BindInterfaceName=[STRING],ProcessPST=[STRING])","配置wtr定时器,某接口板的某个BFD会话的状态从Down转变为UP","SlotNumber:发生BFD会话状态变化的接口板号.
Discriminator:发生状态变化的会话标识符.
Applications:BFD会话绑定的应用.
BindInterfaceName:绑定接口名称.
ProcessPST:修改端口状态表标志位.
","会话两端通过协商建立起了会话.
","1.
正常运行信息,无需处理.
""BFD/4/STACHG_TODWN","BFD","STACHG_TODWN","4","BFDsessionchangedtoDown.
(SlotNumber=[STRING],Discriminator=[ULONG],Diagnostic=[STRING],Applications=[STRING],ProcessPST=[STRING],BindInterfaceName=[STRING],InterfacePhysicalState=[STRING],InterfaceProtocolState=[STRING])","接口板的某个BFD会话的状态转变为Down.
","SlotNumber:接口板板号.
Discriminator:会话标识符.
Diagnostic:down的类型,包括AdminDown、ReceiveAdminDown、DetectDown、NeighborDown.
Applications:BFD会话绑定的应用.
ProcessPST:修改端口状态表标志位.
BindInterfaceName:绑定接口名称.
InterfacePhysicalState:接口物理状态.
InterfaceProtocalState:接口协议状态.
","接口板的某个BFD会话在检测时间内没有收到对应的BFD报文,会话DOWN.
","1.
通过命令displaybfdsessionall,检查会话状态是否自动恢复.
1)若恢复=>6.
2)若未恢复=>2.
2.
通过命令displaycurrent-configurationconfigurationbfd,检查两端是否有一端未使能BFD功能.
1)若未使能,请使能BFD,然后=>1.
2)若已使能=>3.
3.
通过命令displaybfdsessionall检查两端是否BFD会话被删除.
1)若删除=>5.
2)若未被删除=>4.
4.
通过命令pingip-addr,检查是否BFD会话所检测的链路转发不通.
1)若不通=>5.
2)若通=>6.
5.
请联系技术支持工程师.
6.
结束.
""BFD/4/STACHG_TOUP","BFD","STACHG_TOUP","4","BFDsessionchangedtoUp.
(SlotNumber=[STRING],Discriminator=[ULONG],FormerStatus=[STRING],Applications=[STRING],BindInterfaceName=[STRING],ProcessPST=[STRING])","某接口板的某个BFD会话的状态从其他状态(AdminDown、Down、Init)转变为UP.
","SlotNumber:发生BFD会话状态变化的接口板号.
Discriminator:发生状态变化的会话标识符.
FormerStatus:其他状态,包括AdminDown、Down、Init.
Applications:BFD会话绑定的应用.
BindInterfaceName:绑定接口名称.
ProcessPST:修改端口状态表标志位.
","会话两端通过协商建立起了会话.
","1.
正常运行信息,无需处理.
""BFD/6/VRF_PROCDEL_SMOOTH","BFD","VRF_PROCDEL_SMOOTH","6","VRFbeganprocessdeletingwhendatasmoothed.
(VrfName=[STRING],VrfNumber=[ULONG])","在处理平滑时发生了VRF删除.
","VrfName:VRF名称.
VrfNumber:VRF配置表项的个数.
","正常运行信息,无需处理.
","1.
在处理平滑时发生了VRF删除.
""BGP/4/ASPATH_EXCEED_MAXNUM","BGP","ASPATH_EXCEED_MAXNUM","4","ThenumberofAS-PATHsexceededthelimit([limit-value]).
(Operation=[STRING])","AS-PATH的数量超出了限制值.
","[limit-value]:AS-PATH数量限制值.
Operation:相应的操作.
常见的操作有丢弃路由、策略不生效、聚合命令失败.
·丢弃路由:TheNLRIwillbetreatedasWithdraw.
·不带as-set聚合:Itwillaggregatewithoutas-set.
·策略不生效:Thepolicyapplywillnotwork.
","AS-PATH的数量超出了限制值.
","1.
正常运行信息,无需处理.
""BGP/4/CANNOT_FIND_PEER","BGP","CANNOT_FIND_PEER","4","WhenthesystembackeduptheGRcapability,BGPcouldnotfindthepeer[STRING].
(AFI=[USHORT],SAFI=[USHORT])","系统在备份GR能力数据时,BGP找不到Peer.
","[STRING]:邻居IP地址.
AFI:邻居的地址族.
SAFI:邻居的子地址族.
","主备板的配置不一致.
","1.
备板使用与主板相同的配置文件重新启动.
""BGP/6/CONFIRM_N","BGP","CONFIRM_N","6","Auserinput"No"torejecttheoperation.
","等待用户确认时,用户输入了N.
","BGP改变与连接有关的配置时,需要重置连接,因此需要用户输入确认信息,用户输入N退出该操作.
","BGP/6/CONFIRM_TIMEOUT","1.

正常运行信息,无需处理.
""CONFIRM_TIMEOUT","BGP","Whenauserdidnotinputanywordin[timeout-time]s,thesystemexitedfromtheoperationautomatically.
","6","等待用户确认时,用户在n秒内没有任何输入,系统自动退出.
","[timeout-time]:从系统开始等待用户确认到用户最终确认的最大等待秒数.
","BGP改变与连接有关的配置时,需要重置连接,因此需要用户输入确认信息,用户在n秒内没有任何输入,系统缺省认为不执行并退出该确认.
","BGP/6/CONFIRM_Y","1.

正常运行信息,无需处理.
""CONFIRM_Y","BGP","Auserinput"Yes"toconfirmtheoperation.
","6","等待用户确认时,用户输入了Y.
","BGP改变与连接有关的配置时,需要重置连接,因此需要用户输入确认信息,用户输入Y执行操作.
","BGP改变与连接有关的配置时,需要重置连接,因此需要用户输入确认信息,用户输入N退出该操作.
","BGP/6/GR_NOTIFY_ENTER","1.

正常运行信息,无需处理.
""GR_NOTIFY_ENTER","BGP","BGPenteredtheGRstatus.
","6","BGP协议进入GR状态.
","BGP/6/GR_NOTIFY_EXIT","BGP改变与连接有关的配置时,需要重置连接,因此需要用户输入确认信息,用户输入N退出该操作.
","BGP/6/GR_NOTIFY_EXIT","1.

正常运行信息,无需处理.
""GR_NOTIFY_EXIT","BGP","BGPexitedfromtheGRstatus.
","6","BGP协议退出GR状态.
","BGP协议退出gracefulrestart状态.
","BGP改变与连接有关的配置时,需要重置连接,因此需要用户输入确认信息,用户输入N退出该操作.
","BGP/6/INST_EXIT_GR","1.

正常运行信息,无需处理.
""INST_EXIT_GR","BGP","TheBGPinstance[vpn-instance]exitedfromGRandnotifiedtheRM.
","6","BGP实例退出GR,并通知RM.
","[vpn-instance]:VPN实例.
","GR正常流程,某BGP实例退出GR时触发.
","BGP/4/IPV4_ROUTE_LCS_EXC","1.
正常运行信息,无需处理.
""IPV4_ROUTE_LCS_EXC","BGP","ThenumberofIPv4routesreachedthemaximumvalue[max-route-value]definedintheLicensefile.
","4","IPv4路由数量达到license文件中规定的最大值.
","[max-route-value]:License文件中规定的IPv4路由最大数目.
","IPv4路由数目超过了license许可的最大值.
","1.
检查网络拓扑和配置,确认路由量超限是实际应用需求还是错误的拓扑配置导致.
2.
如果是实际应用需求,请扩容LICENSE.
","BGP/3/IPV6_ROUTE_LCS_EXCD""IPV6_ROUTE_LCS_EXCD","BGP","ThenumberofIPv6routesreachedthemaximumvalue[max-route-value]definedintheLicensefile.
","3","IPv6路由数量达到license文件中规定的最大值.
","[max-route-value]:License文件中规定的IPv6路由最大数目.
","IPv6路由数目超过了license许可的最大值.
","BGP/3/MEMORY_RESTORE","BGP/3/IPV6_ROUTE_LCS_EXCD""MEMORY_RESTORE","BGP","ThemessagethatmemorywasrestoredwasreceivedfromtheRM.
","3","从RM接收到内存恢复消息.
","路由器的内存使用率从MEMORYSHORTAGE状态重新降低到阈值以下.
","BGP改变与连接有关的配置时,需要重置连接,因此需要用户输入确认信息,用户输入N退出该操作.
","BGP/6/RECV_NOTIFY","1.

请联系技术支持工程师.
""RECV_NOTIFY","BGP","TherouterreceivedNOTIFICATIONmessagefrompeer[neighbor-address].
(ErrorCode=[ULONG],SubErrorCode=[ULONG],BgpAddressFamily=[STRING],ErrorData=[STRING])","6","路由器收到BGP邻居发来的NOTIFICATION报文.
","[neighbor-address]:邻居路由器的IP地址.
ErrorCode:NOTIFICATION报文中携带的错误码.
SubErrorCode:NOTIFICATION报文中携带的错误子码.
BgpAddressFamily:BGP地址族标志.
分为PUBLIC和VPN两种.
ErrorData:NOTIFICATION报文中携带的错误数据摘要.
","路由器收到BGP邻居发来Notification报文,包括错误码和错误子码内容.
","1.
请确认BGP邻居断连的原因,是否执行了resetbgp命令.
2.
错误码和错误子码的描述和可能原因,请参考BGP维护手册.
3.
请联系技术支持工程师.
","BGP/3/RECV_UNSPT_AFI""RECV_UNSPT_AFI","BGP","TheUPDATEmessagereceivedfrompeer[peer-address]containedunknownaddressfamily[address-family-attribute]inpathattributeofmulti-protocolunreachablenetworklayerreachableinformation.
","3","从BGP邻居收到的UPDATE报文中,多协议不可达路由信息的路由属性包含未知的地址族属性.
","[peer-address]:对等体IP地址.
[address-family-attribute]:地址族属性值.
","Update报文中多协议不可达路由信息的路由属性包含未知的地址族属性.
","1.
查看两端是否为不同厂商设备,支持的功能范围是否有所不同.
2.
请联系华为技术支持工程师.
","BGP/3/ROUTEADD_REACHLMT""ROUTEADD_REACHLMT","BGP","Failedtoupdatetherouteinthe[flag]instancebecausethenumberofroutesreachedthemaximum.
","3","在实例中路由更新失败,原因是路由量达到上限.
","[flag]:BGP地址族标志.
分为PUBLIC和VPN.
","路由量超过了路由表阈值,导致BGP路由添加失败.
","1.
检查网络拓扑和配置,确认路由量超阈值是实际应用需求还是错误的拓扑配置导致.
2.
如果是实际应用需求,请扩容LICENSE.
","BGP/3/ROUTPRIX_EXCEED""ROUTPRIX_EXCEED","BGP","Routesreceivedfrompeer[neighbor-address]includingthenumberofprefix[receive-prefix-number]exceededthemaxnumberofprefix[max-prefix-number].
(BgpAddressFamily=[STRING])","3","从一个邻居路由器收到的前缀数目超过了设定的最大值.
","[neighbor-address]:邻居路由器的IP地址.
[receive-prefix-number]:从邻居路由器收到的前缀个数.
[max-prefix-number]:最大的前缀个数.
BgpAddressFamily:BGP地址族标志.
分为PUBLIC和VPN两种.
","从一个邻居路由器收到路由数目超过了设定的最大值.
","1.
检查网络拓扑和配置,确认路由量超限是实际应用需求还是错误的拓扑配置导致.
2.
如果是实际应用需求,请修改peerroute-limit的配置.
","BGP/3/ROUTTHRD_REACHED""ROUTTHRD_REACHED","BGP","Thenumberofroutesreceivedfrompeer[neighbor-address]reachedroutethresholdvalue[threshold-value].
(BgpAddressFamily=[STRING],CurrentRouteNumber=[ULONG],MaxRouteNumber=[ULONG])","3","从一个邻居路由器收到路由数目超过了设定的阈值.
","[neighbor-address]:邻居路由器的IP地址.
[threshold-value]:路由数阈值.
BgpAddressFamily:BGP地址簇.
CurrentRouteNumber:当前路由数;MaxRouteNumber:最大的路由数.
","1.
检查网络拓扑和配置,确认路由量超阈值是实际应用需求还是错误的拓扑配置导致.
2.
如果是实际应用需求,请修改Peerroute-limit配置.
","[neighbor-address]:邻居路由器的IP地址.
[threshold-value]:路由数阈值.
BgpAddressFamily:BGP地址簇.
CurrentRouteNumber:当前路由数;MaxRouteNumber:最大的路由数.
","BGP/6/SEND_NOTIFY""SEND_NOTIFY","BGP","TheroutersentaNOTIFICATIONmessagetopeer[peer-address].
(ErrorCode=[ULONG],SubErrorCode=[ULONG],BgpAddressFamily=[STRING],ErrorData=[STRING])","6","路由器向BGP邻居发送NOTIFICATION报文.
","[peer-address]:对等体的IP地址.
ErrorCode:发送报文中携带的错误码.
SubErrorCode:错误子码的值.
BgpAddressFamily:BGP地址族标志.
分为PUBLIC和VPN两种.
ErrorData:发送报文中携带的错误数据摘要.
","路由器向BGP邻居发送Notification报文,包括错误码和子错误码内容.
","1.
请确认BGP邻居断连的原因,是否执行了resetbgp命令.
2.
错误码和错误子码的描述和可能原因,请参考BGP维护手册.
3.
请联系技术支持工程师.
","BGP/6/SNMP_PEER_SHUTDOWN""SNMP_PEER_SHUTDOWN","BGP","AnSNMPcommandwasreceivedtoshutdowntheBGPconnectionbetweenpeers.
(BgpAddressFamily=Public)","6","接收到了一个SNMP命令,peer将要shutdown.
","通过MIB软件设定stop,断连接.
","BGP改变与连接有关的配置时,需要重置连接,因此需要用户输入确认信息,用户输入N退出该操作.
","BGP/4/SPEC_RT_EXCD","1.

正常运行信息,无需处理.
""SPEC_RT_EXCD","BGP","ThenumberofBGP[route-type]routesreachedthemaximumvalue[max-route-value].
","4","BGP的某种路由数量达到最大值.
","[route-type]:路由类型.
[max-route-value]:路由数量最大值.
","1.
检查网络拓扑和配置,确认路由量超限是实际应用需求还是错误的拓扑配置导致.
2.
如果是实际应用需求,请联系华为技术支持工程师进行扩容.
","[route-type]:路由类型.
[max-route-value]:路由数量最大值.
","BGP/4/SPEC_RT_EXCD_THLD""SPEC_RT_EXCD_THLD","BGP","ThenumberofBGP[route-type]routesreachedthethresholdvalue[threshold-value].
","4","BGP的某种路由数量达到阈值.
","[route-type]:BGP路由类型.
·IPv4:IPv4路由,包括IPv4公网路由和IPv4私网路由·IPv4Public:IPv4公网路由·IPv4VRF:IPv4私网路由·IPv6:IPv6路由,包括IPv6公网路由和IPv6私网路由·IPv6Public:IPv6公网路由·IPv6VRF:IPv6私网路由·L2AD:BGPL2VPN-AD路由[threshold-value]:BGP的某种路由数量的阈值.
","BGP的某种路由数量达到阈值上限值.
","1.
检查网络拓扑和配置,确认路由数量超限是实际应用需求还是异常配置导致.
2.
如果是实际应用需求,请联系工程师进行扩容.
","BGP/3/STATE_CHG_UPDOWN""STATE_CHG_UPDOWN","BGP","Thestatusofthepeer[peer-address]changedfrom[previous-state]to[current-state].
(BgpAddressFamily=[STRING])","3","邻居状态改变.
","[peer-address]:BGP对等体的IP地址.
[previous-state]:前一状态.
[current-state]:当前状态.
BgpAddressFamily:地址族名称.
","BGP连接状态发生切换.
","BGP/4/UNKNOWN_TYPE","1.
正常运行信息,无需处理.
""UNKNOWN_TYPE","BGP","Typeofthebackupdatawasunknown.
(ID=[USHORT],Length=[USHORT])","4","主板的备份信息在备板无法被识别.
","ID:备份数据的ID.
Length:备份数据的长度.
","主备板的版本不一致.
","1.
备板使用与主板相同的版本重新启动.
","BLACKLIST/4/ADDOK""BLACKLIST","ADDOK","Ablacklistentrywasadded.
(SyslogId=[syslog-id],IpVersion=[ip-version],SrcIp=[source-ip-address],DstIp=[destination-ip-address],SrcPort=[source-port],DstPort=[destination-port],Protocol=[protocol],User=[user-name],VSysId=[vsys-id],VSys=[vsys],Reason=[reason],Timeout=[timeout]min)","4","黑名单添加成功.
","syslog-id:表示日志序号.
ip-version:表示IP地址版本号.
取值包括IPv4和IPv6.
source-ip-address:表示源IP地址.
destination-ip-address:表示目的IP地址.
source-port:表示源端口.
destination-port:表示目的端口.
protocol:表示协议.
user-name:表示用户名.
vsys-id:表示虚拟系统ID.
vsys:表示虚拟系统名称.
reason:表示添加黑名单的原因,可能的取值如下:·ManualInsert:手动插入·LoginFailed:登录失败·Ddosdetect:Ddos检测·IDSInteract:IDS联动·IPSweep:IP地址扫描·PortScan:端口扫描·Getfloodattack:Getflood攻击·IllegalSessionattack:异常会话攻击·IllegalAccessattack:非法访问攻击·SYNSourcedetect:SYN源探测·HTTPSourcedetect:HTTP源探测·SIPSourcedetect:源探测·IPSAttack:IPS攻击·IPSAssociate:IPS关联检测·Unknowreason:不明原因timeout:表示黑名单超时时间.
","原因1:管理员手动创建一条黑名单.
原因2:设备自动生成一条黑名单.
","BLACKLIST/4/DELALLOK","1.
正常运行信息,无需处理.
""DELALLOK","ADDOK","Allblacklistentriesweredeleted.
(SyslogId=[syslog-id],VSysId=[vsys-id],VSys=[vsys])","4","删除所有黑名单成功.
","syslog-id:表示日志序号.
vsys-id:表示虚拟系统ID.
vsys:表示虚拟系统名称.
","成功删除所有黑名单.
","BLACKLIST/4/DELOK","1.
正常运行信息,无需处理.
""DELOK","ADDOK","Ablacklistentrywasdeleted.
(SyslogId=[syslog-id],IpVersion=[ip-version],SrcIp=[source-ip-address],DstIp=[destination-ip-address],SrcPort=[source-port],DstPort=[destination-port],Protocol=[protocol],User=[user-name],VSysId=[vsys-id],VSys=[vsys])","4","删除一条黑名单成功.
","syslog-id:表示日志序号.
ip-version:表示IP地址版本号.
取值包括IPv4和IPv6.
source-ip-address:表示源IP地址.
destination-ip-address:表示目的IP地址.
source-port:表示源端口.
destination-port:表示目的端口.
protocol:表示协议.
user-name:表示用户名.
vsys-id:表示虚拟系统ID.
vsys:表示虚拟系统名称.
","原因1:管理员手动删除一条黑名单.
原因2:黑名单超时时间结束后,设备动态删除一条黑名单.
","BULKSTAT/5/BULK_DISABLE_NO","1.
正常运行信息,无需处理.
""BULKSTAT","BULK_DISABLE_NO","Whenbeingaskedwhethertocommitthecommand"undobulk-statenable",theuserchoseN.
","5","当去使能BULK模块时,打入命令"undobulk-statenable"后,选择是NO.
","去使能BULK模块.
","无:无","BULKSTAT/5/BULK_DISABLE_YES","1.
正常运行信息,无需处理.
""BULK_DISABLE_YES","BULK_DISABLE_NO","Whenbeingaskedwhethertocommitthecommand"undobulk-statenable",theuserchoseY.
","5","当去使能BULK模块时,打入命令"undobulk-statenable"后,选择是YES.
","BULKSTAT/4/BULK_TRANSFER_FILE","无:无","BULKSTAT/5/BULK_DISABLE_YES","1.
正常运行信息,无需处理.
""BULK_TRANSFER_FILE","BULK_DISABLE_NO","TheBULKstatisticsfilewastransferredthrough[TFTP/FTP/SFTP].
(UserName=[STRING],OperateType=[STRING],SrcFile=[STRING],DstFile=[STRING],DstHost=[STRING],VPN=[STRING],ErrCode=[LONG])","4","当使用TFTP/FTP/SFTP上传BULK文件后,记录上传文件日志.
","TFTP/FTP/SFTP:上传统计文件的协议.
UserName:用户名称.
OperateType:操作类型.
SrcFile:源文件.
DstFile:目标文件.
DstHost:目标主机.
VPN:VPN实例名称.
ErrCode:错误编码.
","BULK自动上传统计文件.
","BULKSTAT/3/CONNECTION_FAILED","1.
正常运行信息,无需处理.
""CONNECTION_FAILED","BULK_DISABLE_NO","OID[oid]FailedtouploadtheURL.
(FileIndex=[integer],FileName=[octet],PrimaryUrl=[octet],SecondaryUrl=[octet])","3","当向主URL和备URL传输文件都失败时,通过Trap告知网管主备上传链路发生故障.
","oid:OID值.
FileIndex:文件索引.
FileName:文件名.
PrimaryUrl:主URL地址.
SecondaryUrl:备份URL地址.
","原因1:上传的主备链路是否全部断开.
原因2:主备链路是否不存在.
","1.
重新配置一条有效的主用链路或备用链路.
","BULKSTAT/5/CONNECTION_RESUME""CONNECTION_RESUME","BULK_DISABLE_NO","OID[oid]SucceededinuploadingtheURL.
(FileIndex=[integer],FileName=[octet],PrimaryUrl=[octet],SecondaryUrl=[octet])","5","当向主URL或备URL重传成功后,通过发送Trap告知网管上传链路故障已经恢复.
","上传链路恢复正常.
","原因1:上传的主备链路是否全部断开.

原因2:主备链路是否不存在.
","BULKSTAT/3/FILE_DISCARD","1.
正常运行信息,无需处理.
""FILE_DISCARD","BULK_DISABLE_NO","OID[oid]Thefilewasdiscardedbecauseoftransferfailure.
(FileIndex=[integer],FileName=[octet],LastTransferFailTime=[integer])","3","统计文件的保存时间结束时,文件仍然没有上传成功.
设备将中止上传链接,删除内存中的压缩文件,并发送此Trap.
","oid:OID值.
FileIndex:文件索引.
FileName:文件名.
LastTransferFailTime:上一次文件传输失败的时间.
","原因1:上传的主备链路是否全部断开或者主备链路是否不存在.
原因2:上传时间超过了文件的保存时间.
","1.
重新配置一条主用链路或备用链路.
2.
减少配置的统计对象或者增大上传链路的带宽.
3.
结束.
","BWM/4/SESS_DEDIC""BWM","SESS_DEDIC","Thenumberofconcurrentsessionsexceededthethreshold.
(vsys=[vsys-name],policy=[policy-name],direction=[direction],profile=[profile-name],peakrate=[peak-rate],sessioncountthreshold=[session-count-threshold],congestiontimeproportion=[congestion-time-proportion]%)","4","在独占型带宽通道中,显示整体最大连接数限制丢弃的报文信息.
","vsys-name:虚拟系统名称.
policy-name:带宽策略名称.
direction:带宽通道的方向.
profile-name:带宽通道名称.
peak-rate:连接数峰值.
session-count-threshold:整体最大连接数.
congestion-time-proportion:拥塞时间比例.
","实际连接数超过配置的整体最大连接数,FW产生丢包.
","1.
正常运行信息,无须处理.
","BWM/4/SESS_IP""SESS_IP","SESS_DEDIC","Thenumberofconcurrentsessionsexceededthethreshold.
(vsys=[vsys-name],policy=[policy-name],direction=[direction],IPaddress=[ip-address],peakrate=[peak-rate],sessioncountthreshold=[session-count-threshold],congestiontimeproportion=[congestion-time-proportion]%)","4","显示每IP最大连接数限制丢弃的报文信息.
","vsys-name:虚拟系统名称.
policy-name:带宽策略名称.
direction:带宽通道的方向.
ip-address:被限制连接数的IP地址.
peak-rate:连接数峰值.
session-count-threshold:每IP最大连接数.
congestion-time-proportion:拥塞时间比例.
","实际连接数超过配置的每IP最大连接数,FW产生丢包.
","BWM/4/SESS_SHARED","BWM/4/SESS_IP""SESS_SHARED","SESS_DEDIC","Thenumberofconcurrentsessionsexceededthethreshold.
(vsys=[vsys-name],profile=[profile-name],peakrate=[peak-rate],sessioncountthreshold=[session-count-threshold],congestiontimeproportion=[congestion-time-proportion]%)","4","在共享型带宽通道中,显示整体最大连接数限制丢弃的报文信息.
","vsys-name:虚拟系统名称.
profile-name:带宽通道名称.
peak-rate:连接数峰值.
session-count-threshold:整体最大连接数.
congestion-time-proportion:拥塞时间比例.
","BWM/4/SESS_USER","1.
正常运行信息,无须处理.
","BWM/4/SESS_IP""SESS_USER","SESS_DEDIC","Thenumberofconcurrentsessionsexceededthethreshold.
(vsys=[vsys-name],policy=[policy-name],direction=[direction],user=[user-name],peakrate=[peak-rate],sessioncountthreshold=[session-count-threshold],congestiontimeproportion=[congestion-time-proportion]%)","4","显示每用户最大连接数限制丢弃的报文信息.
","vsys-name:虚拟系统名称.
policy-name:带宽策略名称.
direction:带宽通道的方向.
user-name:被限制连接数的用户名.
peak-rate:连接数峰值.
session-count-threshold:每用户最大连接数.
congestion-time-proportion:拥塞时间比例.
","实际连接数超过配置的每用户最大连接数,FW产生丢包.
","BWM/4/SESS_RATE_DEDIC","BWM/4/SESS_IP""SESS_RATE_DEDIC","SESS_DEDIC","Thesessioncreationrateexceededthethreshold.
(vsys=[vsys-name],policy=[policy-name],direction=[direction],profile=[profile-name],peakrate=[peak-rate],sessioncreationratethreshold=[session-creation-rate-threshold],congestiontimeproportion=[congestion-time-proportion]%)","4","在独占型带宽通道中,显示整体新建连接速率限制丢弃的报文信息.
","vsys-name:虚拟系统名称.
policy-name:带宽策略名称.
direction:带宽通道的方向.
profile-name:带宽通道名称.
peak-rate:新建连接速率峰值.
session-creation-rate-threshold:配置的整体新建连接速率.
congestion-time-proportion:拥塞时间比例.
","实际新建连接速率超过配置的整体新建连接速率,FW产生丢包.
","BWM/4/SESS_RATE_IP","BWM/4/SESS_IP""SESS_RATE_IP","SESS_DEDIC","Thesessioncreationrateexceededthethreshold.
(vsys=[vsys-name],policy=[policy-name],direction=[direction],IPaddress=[ip-address],peakrate=[peak-rate],sessioncreationratethreshold=[session-creation-rate-threshold],congestiontimeproportion=[congestion-time-proportion]%)","4","显示每IP新建连接速率限制丢弃的报文信息.
","vsys-name:虚拟系统名称.
policy-name:带宽策略名称.
direction:带宽通道的方向.
ip-address:被限制新建连接速率的IP地址.
peak-rate:新建连接速率峰值.
session-creation-rate-threshold:配置的每IP新建连接速率.
congestion-time-proportion:拥塞时间比例.
","实际新建连接速率超过配置的每IP新建连接速率,FW产生丢包.
","BWM/4/SESS_RATE_SHARED","BWM/4/SESS_IP""SESS_RATE_SHARED","SESS_DEDIC","Thesessioncreationrateexceededthethreshold.
(vsys=[vsys-name],profile=[profile-name],peakrate=[peak-rate],sessioncreationratethreshold=[session-creation-rate-threshold],congestiontimeproportion=[congestion-time-proportion]%)","4","在共享型带宽通道中,显示整体新建连接速率限制丢弃的报文信息.
","vsys-name:虚拟系统名称.
profile-name:带宽通道名称.
peak-rate:新建连接速率峰值.
session-creation-rate-threshold:配置的整体新建连接速率.
congestion-time-proportion:拥塞时间比例.
","BWM/4/SESS_RATE_USER","BWM/4/SESS_RATE_IP","BWM/4/SESS_IP""SESS_RATE_USER","SESS_DEDIC","Thesessioncreationrateexceededthethreshold.
(vsys=[vsys-name],policy=[policy-name],direction=[direction],user=[user-name],peakrate=[peak-rate],sessioncreationratethreshold=[session-creation-rate-threshold],congestiontimeproportion=[congestion-time-proportion]%)","4","显示每用户新建连接速率限制丢弃的报文信息.
","vsys-name:虚拟系统名称.
policy-name:带宽策略名称.
direction:带宽通道的方向.
user-name:被限制新建连接速率的用户名.
peak-rate:新建连接速率峰值.
session-creation-rate-threshold:配置的每用户新建连接速率.
congestion-time-proportion:拥塞时间比例.
","实际新建连接速率超过配置的每用户新建连接速率,FW产生丢包.
","BWM/4/TRAF_DEDIC","BWM/4/SESS_IP""TRAF_DEDIC","SESS_DEDIC","Trafficexceededthebandwidththreshold.
(vsys=[vsys-name],policy=[policy-name],direction=[direction],profile=[profile-name],peakrate=[peak-rate]Kbps,bandwidththreshold=[bandwidth-threshold]Kbps,congestiontimeproportion=[congestion-time-proportion]%)","4","在独占型带宽通道中,显示整体最大带宽限制丢弃的报文信息.
","vsys-name:虚拟系统名称.
policy-name:带宽策略名称.
direction:带宽通道的方向.
profile-name:带宽通道名称.
peak-rate:带宽峰值.
bandwidth-threshold:每用户最大带宽值.
congestion-time-proportion:拥塞时间比例.
","实际带宽超过配置的整体最大带宽,FW产生丢包.
","BWM/4/TRAF_IP","BWM/4/SESS_IP""TRAF_IP","SESS_DEDIC","Trafficexceededthebandwidththreshold.
(vsys=[vsys-name],policy=[policy-name],direction=[direction],IPaddress=[ip-address],peakrate=[peak-rate]Kbps,bandwidththreshold=[bandwidth-threshold]Kbps,congestiontimeproportion=[congestion-time-proportion]%)","4","显示每IP带宽限制丢弃的报文信息.
","vsys-name:虚拟系统名称.
policy-name:带宽策略名称.
direction:带宽通道的方向.
ip-address:被限制带宽的IP地址.
peak-rate:带宽峰值.
bandwidth-threshold:每IP最大带宽值.
congestion-time-proportion:拥塞时间比例.
","实际带宽超过配置的每IP最大带宽,FW产生丢包.
","BWM/4/TRAF_SHARED","BWM/4/SESS_IP""TRAF_SHARED","SESS_DEDIC","Trafficexceededthebandwidththreshold.
(vsys=[vsys-name],profile=[profile-name],peakrate=[peak-rate]Kbps,bandwidththreshold=[bandwidth-threshold]Kbps,congestiontimeproportion=[congestion-time-proportion]%)","4","在共享型带宽通道中,显示整体最大带宽限制丢弃的报文信息.
","vsys-name:虚拟系统名称.
profile-name:带宽通道名称.
peak-rate:带宽峰值.
bandwidth-threshold:每用户最大带宽值.
congestion-time-proportion:拥塞时间比例.
","BWM/4/TRAF_USER","BWM/4/TRAF_IP","BWM/4/SESS_IP""TRAF_USER","SESS_DEDIC","Trafficexceededthebandwidththreshold.
(vsys=[vsys-name],policy=[policy-name],direction=[direction],user=[user-name],peakrate=[peak-rate]Kbps,bandwidththreshold=[bandwidth-threshold]Kbps,congestiontimeproportion=[congestion-time-proportion]%)","4","显示每用户带宽限制丢弃的报文信息.
","vsys-name:虚拟系统名称.
policy-name:带宽策略名称.
direction:带宽通道的方向.
user-name:被限制带宽的用户名.
peak-rate:带宽峰值.
bandwidth-threshold:每用户最大带宽值.
congestion-time-proportion:拥塞时间比例.
","实际带宽超过配置的每用户最大带宽,FW产生丢包.
","CASA/4/CASA","BWM/4/SESS_IP""CASA","Thecloudaccesssecurityawarenesspolicywasmatched.
(SyslogId=[syslog-id],VSys=[vsys-name],Policy=[policy-name],SrcIp=[source-ip-address],DstIp=[destination-ip-address],SrcPort=[source-port],DstPort=[destination-port],SrcZone=[source-zone],DstZone=[destination-zone],User=[user-name],Protocol=[protocol],Application=[application-name],Profile=[profile-name],Action=[action])","Thecloudaccesssecurityawarenesspolicywasmatched.
(SyslogId=[syslog-id],VSys=[vsys-name],Policy=[policy-name],SrcIp=[source-ip-address],DstIp=[destination-ip-address],SrcPort=[source-port],DstPort=[destination-port],SrcZone=[source-zone],DstZone=[destination-zone],User=[user-name],Protocol=[protocol],Application=[application-name],Profile=[profile-name],Action=[action])","4","命中云接入安全感知策略,对用户行为进行控制.
","syslog-id:日志序号.
vsys-name:虚拟系统名称.
policy-name:安全策略名称.
source-ip-address:源IP地址.
destination-ip-address:目的IP地址.
source-port:源端口.
destination-port:目的端口.
source-zone:源安全区域.
destination-zone:目的安全区域.
user-name:用户名.
protocol:协议.
application-name:应用.
profile-name:配置文件的名称.
action:动作.
","用户对云应用的访问命中云接入安全感知策略,需要对云应用的访问进行控制.
","CFM/4/B2S_BACKUP_FAILED","1.
正常运行信息,无需处理.
""CFM","B2S_BACKUP_FAILED","Failedtotransfertheconfigurationfiletoserver[server-ip]through[transport-type]whenautomaticallybackinguptheconfiguration.
","4","备份配置文件到服务器的时候,传送配置数据失败.
","[server-ip]:服务器IP地址.
[transport-type]:文件传输方式,如FTP、TFTP、SFTP等.
","1.
用户名不存在或者密码不正确2.
服务器路径不存在3.
传输过程中由于网络原因,服务器不可达","1.
测试服务器是否可达,使用ping命令查看客户端与服务器之间是否可以ping通.
2.
将设备做为客户端,访问服务器.
3.
如果服务器路径配置错误,请重新配置相应参数.
4.
如果出现一次文件传输失败,可以不用处理,可能和当时网络状态有关.
如果出现多次文件传输失败,请检查设备和服务器的链路情况.
","CFM/4/CFM_CLEARINTERFACECFG""CFM_CLEARINTERFACECFG","B2S_BACKUP_FAILED","Whendecidingwhethertoclearconfiguration(s)oftheinterface[interface-name],theuserchose[Y/N].
","4","当决定是否清除接口的配置时,需要用户确认.
","interface-name:接口名称.
Y/N:用户确认的字符Y/N.
","执行命令过程中需要用户确认是否清除接口的配置.
","CFM/4/CFM_INCONSISTENT_FILE_IMG","1.
正常运行信息,无需处理.
""CFM_INCONSISTENT_FILE_IMG","B2S_BACKUP_FAILED","Iftheimagefileinmasterandslaveboardisinconsistentwhensystemreboot,theslaveboardwillfailtoregister.
(Fileinmaster=[STRING],Fileinslave=[STRING])","4","系统重启时,如果主用主控板和备用主控板镜像文件不一致,将导致备用主控板注册失败.
","Fileinmaster:主用主控板文件名称.
Fileinslave:备用主控板文件名称.
","主用主控板和备用主控板镜像文件不一致.
","1.
确保主用主控板和备用主控板镜像文件一致.
","CFM/4/CFM_INCONSISTENT_FILE_CFG""CFM_INCONSISTENT_FILE_CFG","B2S_BACKUP_FAILED","Iftheconfigurationfileinmasterandslaveboardisinconsistentwhensystemreboot,theconfigurationinmasterboardmaylose.
(Fileinmaster=[Fileinmaster],Fileinslave=[Fileinslave],Reason=[Reason])","4","系统重启时,如果主用主控板和备用主控板配置文件不一致,将导致主用主控板的配置文件丢失.
","Fileinmaster:主用主控板配置文件名称.
Fileinslave:备用主控板配置文件名称.
Reason:主用主控板和备用主控板配置文件不一致的原因:·1:配置文件的大小不一致·2:其他原因","主用主控板和备用主控板配置文件不一致.
","1.
确保主用主控板和备用主控板配置文件一致.
","CFM/6/CFM_OVERWRITESOFTWARE""CFM_OVERWRITESOFTWARE","B2S_BACKUP_FAILED","Whendecidingwhethertooverwritethesystemsoftwarefile,theuserchose[Y/N].
","6","当决定是否覆盖系统文件时,用户选择了Y或者N进行确认.
","Y/N:用户确认是否覆盖系统文件:·Y:覆盖系统文件·N:不覆盖系统文件","用户在设置下次启动系统文件时,如果备用主控板上存在相同名称的系统文件,系统会提示用户是否覆盖系统文件.
","CFM/3/CFM_SLAVERUNCMDFAIL","1.

正常运行信息,无需处理.
""CFM_SLAVERUNCMDFAIL","B2S_BACKUP_FAILED","Failedtoexecutecommandonslaveboard.
(Taskname=[STRING],IPaddress=[STRING],Username=[STRING],Command=[STRING])","3","在备用主控板上执行命令失败.
","Taskname:任务名称.
IPaddress:登录的IP地址.
当设备无法获取IP地址时,使用"**"记录.
例如通过Console口或Aux口登录用户的场景.
Username:登录的用户名.
当设备无法获取用户名时,使用"**"记录.
例如通过密码认证登录用户的场景.
Command:执行的命令.
","命令在主用主控板上成功配置,实时备份到备用主控板后执行失败.
","1.
请收集相关配置信息、日志,联系华为技术支持工程师.
","CFM/4/CFM_SYNCFGFILEFAIL""CFM_SYNCFGFILEFAIL","B2S_BACKUP_FAILED","Failedtosynchronizethenextstartupconfigurationfiletoslaveboard.
(FileName=[FileName],SlotNum=[SlotNum])","4","同步下次启动配置文件到备用主控板失败.
","FileName:下次启动配置文件的名称.
SlotNum:备用主控板所在的槽位号.
","备用主控板同步主用主控板的下次启动配置文件失败.
","1.
主用主控板和备用主控板的下次启动配置文件可能不一致,建议用户在设备完成启动之后在备用主控板上手动同步主用主控板的下次启动配置文件.
","CFM/6/CFM_UNDO_SCHEDULE_NO""CFM_UNDO_SCHEDULE_NO","B2S_BACKUP_FAILED","Whenbeingaskedwhethertoundoschedulerebootfunction,theuserchoseN.
","6","当用户选择是否取消定时重启功能时,用户选择了N.
","设置启动系统软件或配置文件时,如已设置定时重启功能,会提示用户是否需要取消定时重启功能.
·如果选择Y,则取消定时重启功能,并继续启动系统软件或配置文件的设置过程.
·如果选择N,则中断设置流程.
此时用户选择了N.
","无:无","CFM/6/CFM_UNDO_SCHEDULE_YES","1.
正常运行信息,无需处理.
""CFM_UNDO_SCHEDULE_YES","B2S_BACKUP_FAILED","Whenbeingaskedwhethertoundoschedulerebootfunction,theuserchoseY.
","6","当用户选择是否取消定时重启功能时,用户选择了Y.
","设置启动系统软件或配置文件时,如已设置定时重启功能,会提示用户是否需要取消定时重启功能.
·如果选择Y,则取消定时重启功能,并继续启动系统软件或配置文件的设置过程.
·如果选择N,则中断设置流程.
此时用户选择了Y.
","无:无","CFM/4/CLEAR","1.
正常运行信息,无需处理.
""CLEAR","B2S_BACKUP_FAILED","Whendecidingwhethertoclearinactiveconfigurationofslot[STRING],theuserchose[STRING].
","4","执行命令清除不在位板卡上的配置前用户的选择情况.
","[STRING]:槽位名称.
[STRING]:用户选择的操作类型.
","CFM/4/CRC_CHK","[STRING]:槽位名称.
[STRING]:用户选择的操作类型.
","1.
正常运行信息,无需处理.
""CRC_CHK","B2S_BACKUP_FAILED","Theuserchose[STRING]whendecidingwhethertocheckCRCoftheresourcefile.
","4","用户确认是否对资源文件进行CRC检查.
","[STRING]:用户输入的字符.
具体情况如下:1)Y:选择源文件校验.
2)N:不选择源文件校验.
","执行命令前用户确认.
","CFM/5/FILE_NOTEXIST","1.
正常运行信息,无需处理.
""FILE_NOTEXIST","B2S_BACKUP_FAILED","Failedtosetthe[object]becausethesystemfiledoesnotexiston[slot-id].
","5","设置多框的下次启动系统文件时,发现文件不存在.
","[object]:设置对象.
·startupfile:启动大包·paffile:PAF文件·licensefile:License文件·configurationfile:配置文件[slot-id]:单板名.
","执行startup命令时,指定文件在对应的单板上不存在.
","1.
执行命令dir,查看startup命令设置失败的单板上的文件是否存在.
·Y=>3·N=>22.
上传对应的文件,执行startup命令再次进行配置.
检查是否配置成功.
·Y=>4·N=>33.
执行displaydiagnostic-information命令,保存显示结果,并联系华为技术支持工程师.
4.
结束.
","CFM/4/FILELENGTH_NOTMATCH""FILELENGTH_NOTMATCH","B2S_BACKUP_FAILED","Failedtosetthe[object]becausethesizeofthesystemfileisinconsistentwiththatofthehomonymousfileon[slot-id].
","4","因为文件大小不一致导致设置对象时失败.
","指定文件在对应的单板上存在的大小不一致.
","执行startup命令时,指定文件在对应的单板上不存在.
","1.

执行命令dir,查看startup命令设置失败的单板上的文件是否和系统主控板上的文件大小一致.
·Y=>3·N=>22.
将设置失败单板上的对应文件删除,并重新上传文件,执行startup命令再次进行配置.
检查是否配置成功.
·Y=>4·N=>33.
执行displaydiagnostic-information命令,保存显示结果,并联系华为技术支持工程师.
4.
结束.
","CFM/4/OVERWRITE_FILE""OVERWRITE_FILE","B2S_BACKUP_FAILED","Whendecidingwhethertooverwritetheconfigurationfile[STRING],theuserchose[STRING].
","4","[STRING]:用户保存配置的文件名.
[STRING]:用户选择的操作类型.
","CFM/5/FILE_NOTEXIST","CFM/3/RECOVERCMDFAIL","CFM/5/FILE_NOTEXIST","1.
正常运行信息,无需处理.
""RECOVERCMDFAIL","B2S_BACKUP_FAILED","Failedtorecoverconfiguration[command]underview[view].
","3","配置恢复某一视图下的某一命令失败.
","[command]:命令字符串.
[view]:视图名.
","配置恢复过程中,配置恢复命令失败.
","1.
请联系华为技术支持工程师.
","CFM/4/RST_CFG""RST_CFG","B2S_BACKUP_FAILED","Theuserchose[Y/N]whendecidingwhethertoresetthesavedconfiguration.
","4","用户确认是否重置保存的配置.
","[Y/N]:用户选择的操作类型.
","CFM/4/SAVE","CFM/5/FILE_NOTEXIST","1.
正常运行信息,无需处理.
""SAVE","B2S_BACKUP_FAILED","Theuserchose[Y/N]whendecidingwhethertosavetheconfigurationtothedevice.
","4","用户确认是否保存配置至设备.
","CFM/4/SAVE_FILE","CFM/4/SAVE","CFM/4/SAVE_FILE","1.

正常运行信息,无需处理.
""SAVE_FILE","B2S_BACKUP_FAILED","Whendecidingwhethertosavetheconfigurationtothefile[STRING],theuserchose[STRING].
","4","用户确认是否保存配置至文件.
","CFM/5/SAVE_FILE_RECORD","CFM/3/RECOVERCMDFAIL","CFM/5/SAVE_FILE_RECORD","1.

正常运行信息,无需处理.
""SAVE_FILE_RECORD","B2S_BACKUP_FAILED","Thesystemautomaticallysavedthecurrentconfigurationtothefile.
(FileName=[STRING])","5","系统自动将当前配置保存到文件.
","FileName:用户保存配置的文件名.
","使用ISSU期间或开启自动保存功能时,系统自动将当前配置保存到文件.
","CFM/5/SAVECFG_NO","1.
正常运行信息,无需处理.
""SAVECFG_NO","B2S_BACKUP_FAILED","Whenbeingaskedwhethertosavecurrentconfiguration,theuserchoseN.
","5","系统重启前,提示用户选择是否保存配置,用户选择了否.
","系统重启前,用户选择不保存当前配置.
","无:无","CFM/5/SAVECFG_YES","1.
正常运行信息,无需处理.
""SAVECFG_YES","B2S_BACKUP_FAILED","Whenbeingaskedwhethertosavecurrentconfiguration,theuserchoseY.
","5","系统重启前,提示用户选择是否保存配置,用户选择了是.
","系统重启前,用户选择保存当前配置.
","无:无","CFM/5/SUMRULECANCEL","1.
正常运行信息,无需处理.
""SUMRULECANCEL","B2S_BACKUP_FAILED","Thedaylight-saving-timeconfigiscanceled.
","5","取消夏令时的配置.
","执行undoclockdaylight-saving-time命令进行取消系统夏令时配置.
","无:无","CFM/5/SUMRULECHG","1.
正常运行信息,无需处理.
""SUMRULECHG","B2S_BACKUP_FAILED","Thedaylight-saving-timeconfigischanged.
(DstName=[STRING],Mode=[STRING],StartConfigType=[STRING],StartDate=[STRING],StartWeek=[STRING],StartTime=[STRING],EndConfigType=[STRING],EndDate=[STRING],EndWeek=[STRING],EndTime=[STRING],OffsetTime=[STRING])","5","当系统时间因为夏令时配置发生变化的时候,记录配置的相应规则信息.
","DstName:夏令时名称.
Mode:夏令时模式.
StartConfigType:夏令时开始规则.
StartDate:夏令时开始日期.
StartWeek:夏令时开始星期.
StartTime:夏令时开始时间.
EndConfigType:夏令时结束规则.
EndDate:夏令时结束日期.
EndWeek:夏令时结束星期.
EndTime:夏令时结束时间.
OffsetTime:夏令时偏移量.
","执行clockdaylight-saving-time命令进行系统夏令时配置.
","CFM/5/SUMTMRCHG","1.
正常运行信息,无需处理.
""SUMTMRCHG","B2S_BACKUP_FAILED","Thesystemischangedto[para1]andthesystemtimeischangedfrom[para2]to[para3].
","5","当系统时间因为夏令时配置发生变化的时候,记录变化的状态和变化前后的时间.
","para1:当前系统的状态,表示为夏令时还是非夏令时.
para2:夏令时状态变化前的本地时间.
para3:夏令时状态变化后的本地时间.
","系统时间因为夏令时配置发生变化.
","CFM/4/CFM_TRANS_FILE","1.
正常运行信息,无需处理.
""CFM_TRANS_FILE","B2S_BACKUP_FAILED","Theconfigurationfilewastransferredthrough[TransProtocol].
(UserName=[UserName],OperateType=[OperateType],SrcFile=[SrcFile],DstFile=[DstFile],DstHost=[DstHost],VPN=[VPN],ErrCode=[ErrCode])","4","自动保存配置文件到服务器.
","TransProtocol:文件传输协议.
·FTP·TFTP·SFTPUserName:用户名.
OperateType:操作类型.
·Get:下载文件·Put:上传文件SrcFile:上传/下载的源文件名称.
DstFile:上传/下载后的目的文件名称.
DstHost:目的主机名.
VPN:VPN实例的名称.
ErrCode:错误码","系统自动上传/下载配置文件.
","CLOUD_MGMT/4/RUN_MODE_CHANGE","1.
正常运行信息,无需处理.
""CLOUD_MGMT","RUN_MODE_CHANGE","Firewallrunningmodechangetothe[running-mode]mode.
","4","FW的运行模式切换.
","running-mode:FW有两种运行模式:·cloudmanagement:云管理模式·traditional:传统模式","CGN/4/IPREACH","running-mode:FW有两种运行模式:·cloudmanagement:云管理模式·traditional:传统模式","1.
正常运行信息,无需处理.
""CGN","IPREACH","NATportnumberallocatedfrompublicIPAddressreachesthethreshold.
(IPAddress=[IP-Address],CurrentPortUsage=[port-usage],Threshold=[threshold-value],SlotID=[slot-id],CPUID=[cpu-id])","4","端口使用率达到设置的阈值.
","IP-Address:IP地址port-usage:当前端口使用率threshold-value:设置的端口利用率阈值slot-id:槽位号cpu-id:CPU号","1.
如果此条日志出现后,很长时间没有出现CGN/5/IPRESTORE日志,可以考虑扩容.
","IP-Address:IP地址port-usage:当前端口使用率threshold-value:设置的端口利用率阈值slot-id:槽位号cpu-id:CPU号","CGN/4/POOL_USEDUP""POOL_USEDUP","IPREACH","PortblocknumberallocatedfromIPpoolreachesthethreshold.
(PoolNumber=[pool-number],PortBlockCount=[port-block-number],CurrentPortBlockUsage=[port-usage],Threshold=[threshold-value],SlotID=[slot-id],CPUID=[cpu-id])","4","预分配地址池被分配的端口块数目达到阈值.
","pool-number:地址池IDport-block-number:端口块总数port-usage:当前端口块使用率threshold-value:地址池端口阈值slot-id:槽位号cpu-id:CPU号","1.
查看设备上用户的端口使用情况,根据实际情况增加地址池公网地址.
","pool-number:地址池IDport-block-number:端口块总数port-usage:当前端口块使用率threshold-value:地址池端口阈值slot-id:槽位号cpu-id:CPU号","CGN/4/POOLREACH""POOLREACH","IPREACH","NATportnumberallocatedfromIPpoolreachesthethreshold.
(PoolNumber=[pool-number],CurrentPortUsage=[port-usage],Threshold=[threshold-value],SlotID=[slot-id],CPUID=[cpu-id])","4","地址池总端口使用率达到设置的阈值.
","pool-number:地址池IDport-usage:当前地址池端口使用率threshold-value:设置的地址池端口利用率阈值slot-id:槽位号cpu-id:CPU号","1.
如果此条日志出现后,很长时间没有出现CGN/5/POOLRESTORE日志,可以考虑扩容.
","pool-number:地址池IDport-usage:当前地址池端口使用率threshold-value:设置的地址池端口利用率阈值slot-id:槽位号cpu-id:CPU号","CGN/4/PORT_USEDUP""PORT_USEDUP","IPREACH","Portnumberallocatedfromportblockreachesthethreshold(user=[user-ip],PortBlockSize=[Port-Block-Size],CurrentPortUsage=[current-port-usage],Threshold=[threshold-value],SlotID=[slot-id],CPUID=[cpu-id])","4","端口块被分配出的端口数目达到阈值.
","user-ip:用户IP地址Port-Block-Size:端口块大小current-port-usage:当前端口使用率threshold-value:端口设置的阈值slot-id:槽位号cpu-id:CPU号","1.
扩大端口块大小或增量分配给用户追加分配端口.
","user-ip:用户IP地址Port-Block-Size:端口块大小current-port-usage:当前端口使用率threshold-value:端口设置的阈值slot-id:槽位号cpu-id:CPU号","CGN/4/USERTBL_USEDUP""USERTBL_USEDUP","IPREACH","Usertablenumberreachesthethreshold.
(UserTableTotal=[user-table],CurrentUsage=[current-usage],Threshold=[threshold-value],SlotID=[slot-id],CPUID=[cpu-id])","4","用户表使用率达到阈值.
","user-table:用户表总数current-usage:用户表当前的使用率threshold-value:阈值slot-id:SPU槽位号cpu-id:CPU号","用户表使用率达到阈值.
Note:需要打开natuser-tableused-upalarmenable后,当用户表使用率达到阈值时,才会发送该日志.
","1.
业务板扩容,增加CPU数量.
","CGN/5/IPRESTORE""IPRESTORE","IPREACH","NATportnumberallocatedfrompublicIPAddressrestorestobelowerthanthethreshold.
(IPAddress=[IP-Address],CurrentPortUsage=[port-usage],Threshold=[threshold-value],SlotID=[slot-id],CPUID=[cpu-id])","5","端口使用率达由超过阈值恢复到阈值以下.
","CGN/5/POOL_NORMAL","1.
如果此条日志出现后,很长时间没有出现CGN/5/IPRESTORE日志,可以考虑扩容.
","CGN/5/POOL_NORMAL","1.
正常运行信息,无需处理.
""POOL_NORMAL","IPREACH","PortblocknumberallocatedfromIPpoolrestorestobelowerthanthethreshold.
(PoolNumber=[pool-number],PortBlockCount=[port-block-number],CurrentPortBlockUsage=[port-usage],Threshold=[threshold-value],SlotID=[slot-id],CPUID=[cpu-id])","5","预分配地址池被分配的端口块数目低于阈值,恢复到正常.
","pool-number:地址池IDport-block-number:端口块总数.
port-usage:当前端口块使用率threshold-value:地址池端口阈值slot-id:槽位号cpu-id:CPU号","预分配地址池可以被分配的端口块恢复正常.
","CGN/5/POOLRESTORE","1.
正常运行信息,无需处理.
""POOLRESTORE","IPREACH","NATportnumberallocatedfromIPpoolrestorestobelowerthanthethreshold.
(PoolNumber=[pool-number],CurrentPortUsage=[port-usage],Threshold=[threshold-value],SlotID=[slot-id],CPUID=[cpu-id])","5","地址池总端口使用率达由超过阈值恢复到阈值以下.
","CGN/5/PORT_NORMAL","1.
如果此条日志出现后,很长时间没有出现CGN/5/POOLRESTORE日志,可以考虑扩容.
","CGN/5/PORT_NORMAL","1.
正常运行信息,无需处理.
""PORT_NORMAL","IPREACH","Portnumberallocatedfromportblockrestorestobelowerthanthethreshold.
(User=[user-ip],PortBlockSize=[port-block-size],CurrentPortUsage=[current-port-usage],Threshold=[threshold-value],SlotID=[slot-id],CPUID=[cpu-id])","5","给用户分配的端口使用率低于阈值,恢复正常.
","user-ip:用户IP地址port-block-size:端口块大小current-port-usage:当前端口使用率threshold-value:端口设置的阈值slot-id:槽位号cpu-id:CPU号","给用户分配的端口使用已恢复正常.
","CGN/5/USERTBL_NORMAL","1.
正常运行信息,无需处理.
""USERTBL_NORMAL","IPREACH","Usertablenumberrestorestobelowerthanthethreshold.
(UserTableTotal=[user-table],CurrentUsage=[current-usage],Threshold=[threshold-value],SlotID=[slot-id],CPUID=[cpu-id])","5","用户表使用率恢复到低于阈值.
","用户表使用率恢复到低于阈值.
Note:需要打开natuser-tableused-upalarmenable后,当用户表使用率恢复到低于阈值时,才会发送该日志.
","用户表使用率达到阈值.
Note:需要打开natuser-tableused-upalarmenable后,当用户表使用率达到阈值时,才会发送该日志.
","CM/5/USER_ACCESSRESULT","1.
正常运行信息,无需处理.
""CM","USER_ACCESSRESULT","[USER_INFO_AUTHENTICATION]DEVICEMAC:[device-mac-address];DEVICENAME:[device-name];USER:[user-name];MAC:[user-mac-address];IPADDRESS:[user-ip-address];TIME:[time];ZONE:[time-zone];DAYLIGHT:[false/true];ERRCODE:[error-code];RESULT:[online-reason];CIBID:[cib-id];ACCESSTYPE:[access-type];","5","用户上线.
","device-mac-address:设备MAC地址.
device-name:设备名称.
user-name:用户名.
user-mac-address:用户MAC地址.
user-ip-address:用户IP地址.
time:上线时间.
time-zone:时区.
false/true:是否夏令时.
error-code:错误码.
online-reason:上线原因.
cib-id:CIB编号.
access-type:接入类型.
Note:如果用户上线不成功,则接入类型记录为None.
","CM/5/USER_OFFLINERESULT","device-mac-address:设备MAC地址.
device-name:设备名称.
user-name:用户名.
user-mac-address:用户MAC地址.
user-ip-address:用户IP地址.
time:上线时间.
time-zone:时区.
false/true:是否夏令时.
error-code:错误码.
online-reason:上线原因.
cib-id:CIB编号.
access-type:接入类型.
Note:如果用户上线不成功,则接入类型记录为None.
","1.
正常运行信息,无需处理.
""USER_OFFLINERESULT","USER_ACCESSRESULT","[USER_INFO_OFFLINE]DEVICEMAC:[device-mac-address];DEVICENAME:[device-name];USER:[user-name];MAC:[user-mac-address];IPADDRESS:[user-ip-address];TIME:[time];ZONE:[time-zone];DAYLIGHT:[false/true];ERRCODE:[error-code];RESULT:[offline-reason];CIBID:[cib-id];ACCESSTYPE:[access-type];","5","用户下线.
","device-mac-address:设备MAC地址.
device-name:设备名称.
user-name:用户名.
user-mac-address:用户MAC地址.
user-ip-address:用户IP地址.
time:下线时间.
time-zone:时区.
false/true:是否夏令时.
error-code:错误码.
offline-reason:下线原因.
cib-id:CIB编号.
access-type:接入类型.
Note:如果用户上线不成功,则接入类型记录为None.
","CMD/5/CMD_AUTO_UNLOCK","device-mac-address:设备MAC地址.
device-name:设备名称.
user-name:用户名.
user-mac-address:用户MAC地址.
user-ip-address:用户IP地址.
time:下线时间.
time-zone:时区.
false/true:是否夏令时.
error-code:错误码.
offline-reason:下线原因.
cib-id:CIB编号.
access-type:接入类型.
Note:如果用户上线不成功,则接入类型记录为None.
","1.
正常运行信息,无需处理.
""CMD","CMD_AUTO_UNLOCK","Thecurrentconfigurationisautomaticallyunlockedfortimeout.
(Informationofformeruserlockedtheconfiguration:UserName=[STRING],IpAddr=[STRING],VPN=[STRING])","5","当前配置因超时自动解锁.
","UserName:原锁定配置的用户名,当无法获取用户名时,使用"**"记录,例如通过密码认证登录用户的场景.
IpAddress:原锁定配置的用户的IP地址,当无法获取IP地址时,使用"**"记录,例如通过Console口或Aux口登录用户的场景.
VPN:原锁定配置的用户的VPN.
","配置互锁超时自动解锁.
","CMD/4/CLKCHGREBOOTCANCELED","1.
正常运行信息,无需处理.
""CLKCHGREBOOTCANCELED","CMD_AUTO_UNLOCK","Scheduledrebootwillbecanceledbecause[user-name]changedsystemclock.
","4","定时重启被取消","[user-name]:用户名.
","定时重启被取消.
","CMD/4/CMD_PRI_REARRG","1.
正常运行信息,无需处理.
""CMD_PRI_REARRG","CMD_AUTO_UNLOCK","Theuserchose[Y/N]whendecidingwhethertorearrangethecommandlevel.
","4","用户选择是否重新排列命令等级.
","CMD/4/DIAG_OVERWRITE","CFM/4/SAVE","CMD/4/DIAG_OVERWRITE","1.

正常运行信息,无需处理.
""DIAG_OVERWRITE","CMD_AUTO_UNLOCK","Theuserchose[Y/N]whendecidingwhethertooverwritethefile.
","4","用户选择是否覆盖文件.
","CMD/4/LAN_MODE","CFM/4/SAVE","CMD/4/LAN_MODE","1.
正常运行信息,无需处理.
""LAN_MODE","CMD_AUTO_UNLOCK","Theuserchose[Y/N]whendecidingwhethertochangethelanguagemode.
","4","用户选择是否改变语言模式.
","CMD/4/REBOOT","CFM/4/SAVE","CMD/4/REBOOT","1.
正常运行信息,无需处理.
""REBOOT","CMD_AUTO_UNLOCK","Theuserchose[Y/N]whendecidingwhethertorebootthesystem.
(Task=[STRING],Ip=[STRING],VpnName=[STRING],User=[STRING])","4","用户选择是否重启系统.
","[Y/N]:用户选择的操作类型.
Task:任务名.
Ip:用户IP地址.
当无法获取IP地址时,使用"**"记录.
例如通过Console口或Aux口登录用户的场景.
VpnName:VPN实例名称.
User:用户名.
当无法获取用户名时,使用"**"记录.
例如通过密码认证登录用户的场景.
","CMD/4/SCH_REBOOT","[Y/N]:用户选择的操作类型.
Task:任务名.
Ip:用户IP地址.
当无法获取IP地址时,使用"**"记录.
例如通过Console口或Aux口登录用户的场景.
VpnName:VPN实例名称.
User:用户名.
当无法获取用户名时,使用"**"记录.
例如通过密码认证登录用户的场景.
","1.
正常运行信息,无需处理.
""SCH_REBOOT","CMD_AUTO_UNLOCK","Theuserchose[Y/N]whendecidingwhethertorebootaccordingtotheschedule.
","4","用户选择是否依据定时设定执行重启.
","CMD/4/SCH_REBOOT_START","CFM/4/SAVE","CMD/4/SCH_REBOOT_START","1.

正常运行信息,无需处理.
""SCH_REBOOT_START","CMD_AUTO_UNLOCK","Scheduledrebootwillstart.
","4","定时重启任务开始.
","执行命令schedulereboot启动定时重启功能,设定的时间到后,记录该日志.
","无:无","CMD/4/SUPERLOGIN","1.
正常运行信息,无需处理.
""SUPERLOGIN","CMD_AUTO_UNLOCK","Userchangedlevel.
(User=[string],IpAddress=[string],Level=[USHORT],VpnName=[STRING],Times=[ULONG],LoginResult=[string])","4","通过命令行切换当前终端用户级别.
","User:用户名.
当设备无法获取用户名时,使用"**"记录.
例如通过密码认证登录用户的场景.
IpAddress:IP地址.
当设备无法获取IP地址时,使用"**"记录.
例如通过Console口或Aux口登录用户的场景.
VpnName:VPN实例名称.
Level:级别.
Times:登录次数.
LoginResult:登录成功或失败.
","CMD/4/SCH_REBOOT_FAIL","User:用户名.
当设备无法获取用户名时,使用"**"记录.
例如通过密码认证登录用户的场景.
IpAddress:IP地址.
当设备无法获取IP地址时,使用"**"记录.
例如通过Console口或Aux口登录用户的场景.
VpnName:VPN实例名称.
Level:级别.
Times:登录次数.
LoginResult:登录成功或失败.
","1.
正常运行信息,无需处理.
""SCH_REBOOT_FAIL","CMD_AUTO_UNLOCK","Scheduledrebootfailed.
","4","定时重启任务失败.
","执行命令schedulereboot启动定时重启功能,设定的时间到后,重启失败.
","无:无","CSC/3/CONFERFAIL","1.
正常运行信息,无需处理.
""CSC","CONFERFAIL","Failedtonegotiatewiththedispatchserver.
(Module=[module-name],Reason=[reason])","3","设备与调度服务器之间协商失败.
","module-name:模块名称.
reason:协商失败的原因.
","设备与调度服务器之间的连接断开.
","1.
查看网络连接是否正常.
若仍无法解决,请联系技术支持工程师.
","CSC/3/SPEED""SPEED","CONFERFAIL","Failedtotestthespeedofthequeryserver.
(Module=[module-name],Reason=[reason])","3","设备测试查询服务器的速度失败.
","module-name:模块名称.
reason:失败原因.
","设备与查询服务器之间的连接断开.
","DDNS/4/CONNECTFAIL","CSC/3/SPEED""DDNS","CONNECTFAIL","FailedtoresolveDDNSserverdomainname.
(DDNSServerName=[ddns-server-name])","4","解析DDNS服务提供商域名失败.
","ddns-server-name:DDNSServer名称.
","原因1:域名解析未配置.
原因2:网络连接故障,与Internet网络不通.
","1.
排查原因1:域名解析未配置.
执行命令displaydnsserver或displaydnsdymatic-host,检查域名解析是否已配置,配置是否正确.
2.
排查原因2:网络连接故障,与Internet网络不通.
打开网页浏览器,检查是否可访问常用的网站.
","DDNS/4/UPDATEFAIL""UPDATEFAIL","CONNECTFAIL","Failedtoupdatedynamicdomainname.
(DDNSClientFQDN=[domain-name],DDNSClientIpAddr=[ip-address],DDNSServerName=[ddns-server-name])","4","与DDNS服务提供商交互,动态域名更新失败.
","domain-name:需要进行D动态更新的DDNSClient域名.
ip-address:需要进行动态更新的DDNSClient的IP地址.
ddns-server-name:DDNSSever名称.
","DDNS策略配置错误,包括:·设备上配置的DDNSClient访问DDNS服务提供商时所使用的用户名和密码错误.
·设备上配置的DDNSClient域名与在DDNS服务提供商网页上注册的DDNSClient的域名不一致.
·设备上配置DDNS服务提供商域名错误.
","1.
执行命令displayddnspolicy,检查策略配置中的用户名、密码、DDNS服务提供商域名、需要更新的DDNSClient域名是否正确.
","DDNS/5/UPDATESUCC""UPDATESUCC","CONNECTFAIL","Successfullyupdatedynamicdomainname.
(DDNSClientFQDN=[domain-name],DDNSClientIpAddr=[ip-address],DDNSServerName=[ddns-server-name])","5","与DDNS服务提供商交互,动态域名更新成功.
","ATK/4/FIREWALLATCK","DDNS策略配置错误,包括:·设备上配置的DDNSClient访问DDNS服务提供商时所使用的用户名和密码错误.
·设备上配置的DDNSClient域名与在DDNS服务提供商网页上注册的DDNSClient的域名不一致.
·设备上配置DDNS服务提供商域名错误.
","ATK/4/FIREWALLATCK","1.
正常运行信息,无需处理.
""ATK","FIREWALLATCK","AttackType=[attack-type],slot=[slot_number],cpu=[cpu_id],receiveinterface=[receive-interface],proto=[protocol],src=[source-ip:source-port],dst=[dst-ip;dst-port],begintime=[begin-time],endtime=[end-time],totalpackets=[total-packets],maxspeed=[max-speed],User=[username],Action=[action]","4","设备检测到目的IP攻击而产生的攻击日志信息.
","attack_type:当前目标受到的攻击类型.
slot_number:消息源所在的设备槽位号.
cpu_id:消息源所在CPU的ID号.
receive-interface:流量入接口.
protocol:报文协议.
source-ip:source-port:攻击源IP地址和源端口.
dst-ip;dst-port:攻击目的IP地址和目的端口.
begin-time:攻击开始时间.
end-time:攻击结束时间.
total-packets:触发上报日志的报文数.
max-speed:触发攻击时的包速率,单位为pps.
username:用户的名称.
action:攻击防御的动作.
","攻击发生时,定时向日志服务器发送攻击日志信息(日志发送及发送间隔可控).
","DEFEND_IPCAR/4/SESS_RATE","1.
正常运行信息,无需处理.
""DEFEND_IPCAR","SESS_RATE","Thesessioncreationrateexceededthethreshold.
(vsys=[vsysname],IPaddress=[ipaddress],type=[type],peakrate=[peakrate],sessionratethreshold=[threshold],slot=[slot],cpu=[cpu])","4","设备检测到每IP新建速率超出设备配置的新建连接速率阈值时产生的日志信息.
","vsysname:虚拟系统名称.
ipaddress:每IP新建连接速率超出阈值的IP地址.
type:防护类型:·DST:基于目的IP的公网防护·SRC:基于源IP的内网防护peakrate:当前每IP新建连接速率的峰值.
threshold:设备配置的每IP新建连接速率的最大值.
slot:每IP新建连接速率超出阈值的槽位号.
仅USG9500支持该参数.
cpu:每IP新建连接速率超出阈值的CPU号.
仅USG9500支持该参数.
","某个IP的新建会话速率超出了新建连接速率阈值.
","1.
查看设备上是否存在异常流量.
","DHCP/0/DHCPV6RATET_DETECT""DHCP","DHCPV6RATET_DETECT","0",""TherateofDHCPV6packetsexceedsthespeedlimit.
[INTEGER]packetshavebeendiscarded.
"","因超过速率限制而丢弃的DHCPv6报文数目达到阈值.
","[INTEGER]:被丢弃的报文数目.
","DHCPv6报文超速被丢弃数到达阈值.
","1.
设备收到大量DHCP报文,说明网络上有攻击,请检查网络.
","DHCPC/4/IPCON_IF""DHCPC","IPCON_IF","TheIPaddressassignedbyaDHCPserverconflictedwithanotherinterface.
(ClientInterfaceName=[interface-name],ServerId=[ip-address],AssignedIpAddress=[assigned-ip-address])","4","接口被分配到的IP地址与设备上其他接口的IP地址冲突.
","interface-name:DHCPClient的接口名称.
ip-address:DHCPServer的IP地址.
assigned-ip-address:DHCPServer为接口指定的IP地址.
","1.
执行命令displaycurrent-configuration,检查DHCP相关配置是否正确.
","interface-name:DHCPClient的接口名称.
ip-address:DHCPServer的IP地址.
assigned-ip-address:DHCPServer为接口指定的IP地址.
","DHCPC/4/IPCON_LINK""IPCON_LINK","IPCON_IF","TheIPaddressassignedbyaDHCPserverconflictedwithanotherhostonthelink.
(ClientInterfaceName=[interface-name],ServerId=[ip-address],AssignedIpAddress=[assigned-ip-address])","4","接口被分配到的IP地址与网络中其他设备的IP地址冲突.
","接口被分配到的IP地址与网络中上其他设备的IP地址冲突.
","1.

执行命令displaycurrent-configuration,检查DHCP相关配置是否正确.
","1.
执行命令ping,检查网络中该IP地址是否被占用.
","DHCPC/4/NAK""NAK","IPCON_IF","TheDHCPclientreceivedaNAKpacketfromaDHCPserver.
(ClientInterfaceName=[interface-name],ServerId=[ip-address])","4","接口从DHCPServer接收到NAK报文.
","interface-name:重新申请IP地址的接口名称.
ip-address:DHCPServer的IP地址.
","接口申请的IP地址与DHCPServer保存的租约地址不匹配.
","1.
如果一直收到DHCPServer的NAK报文,检查DHCPServer配置.
否则,无需处理.
","DHCPC/5/GW_RENEW""GW_RENEW","IPCON_IF","ThegatewayassignedbyaDHCPserverchanged.
(ClientInterfaceName=[interface-name],ServerId=[ip-address],OldGateway=[old-gateway-address],NewGateway=[new-gateway-address])","5","DHCPServer指定的网关地址发生了变化.
","interface-name:DHCPClient的接口名称.
ip-address:DHCPServer的IP地址.
old-gateway-address:变化前的网关地址列表.
new-gateway-address:变化后的网关地址列表.
","DHCPC/5/REQIP","interface-name:DHCPClient的接口名称.
ip-address:DHCPServer的IP地址.
old-gateway-address:变化前的网关地址列表.
new-gateway-address:变化后的网关地址列表.
","1.
正常运行信息,无需处理.
""REQIP","IPCON_IF","TheDHCPclientacquiredIPaddresssuccessfully.
(ClientInterfaceName=[interface-name],ServerId=[ip-address],AcquiredIpAddress=[acquired-ip-address],Mask=[mask],Gateway=[gateway-address],StaticRoute=[static-route])","5","接口从DHCPServer申请IP地址成功.
","interface-name:DHCPClient的接口名称.
ip-address:DHCPServer的IP地址.
acquired-ip-address:DHCPClient被分配到的IP地址.
mask:网络掩码.
gateway-address:网关地址.
static-route:静态路由.
","DHCPC/5/RT_RENEW","interface-name:DHCPClient的接口名称.
ip-address:DHCPServer的IP地址.
acquired-ip-address:DHCPClient被分配到的IP地址.
mask:网络掩码.
gateway-address:网关地址.
static-route:静态路由.
","1.
正常运行信息,无需处理.
""RT_RENEW","IPCON_IF","ThestaticrouteassignedbyaDHCPserverchanged.
(ClientInterfaceName=[interface-name],ServerId=[ip-address],OldStaticRoute=[old-static-route],NewStaticRoute=[new-static-route])","5","接口从DHCP服务器申请的静态路由发生了变化.
","interface-name:接口名称.
ip-address:DHCPServer的IP地址.
old-static-route:变化前的静态路由.
new-static-route:变化后的静态路由.
","DHCPServer配置的option33或者121选项发生了变化.
","DHCPS/6/DHCPS_LOCAL_SERVER","1.
正常运行信息,无需处理.
""DHCPS","DHCPS_LOCAL_SERVER","AlocalDHCPserverwasdetected.
(InterfaceName=[interface-name],ServerId=[ip-address],ClientHardwareAddress=[mac-address])","6","发现一个DHCPClient使用的DHCPServer.
","interface-name:DHCPClient所在的接口名称.
ip-address:DHCPServer的IP地址.
mac-address:DHCPClient的MAC地址.
","DHCPClient使用本地DHCPServer分配IP地址.
","1.
日志中的DHCPServer地址是否是本设备的地址,如果是,则为正常运行信息,无需处理.
如果不是,执行2.
2.
确认该地址是否私设了DHCPServer.
","DHCPSNP/4/HLENERR""DHCPSNP","HLENERR","ThelengthofhardwareaddressinDHCPpacketreceivedfrominterface[interface-name]VLAN[valn-id]waswrong.
","4","从接口接收的DHCP报文的硬件地址长度错误.
","interface-name:接口名称.
valn-id:VLANID.
","1.
检查报文源是否有异常.
如果经常出现,则使用抓包工具抓取出错包,记录其内容和设备的配置信息,并联系技术支持工程师.
","interface-name:接口名称.
valn-id:VLANID.
","DHCPSNP/4/HOPEXCEED""HOPEXCEED","HLENERR","TheHOPinDHCPpacketreceivedfrominterface[interface-name]VLAN[valn-id]exceededthelimitation[limit-number].
","4","从接口接收到的DHCP报文经过DHCPRelay的跳数超过限制,丢弃该报文.
","interface-name:接口名称.
valn-id:VLANID.
limit-number:限制的跳数.
","从接口接收到的DHCP报文经过DHCPRelay的跳数超过限制.
","DHCPSNP/4/HTYPEERR","DHCPSNP/4/HOPEXCEED""HTYPEERR","HLENERR","ThetypeofhardwareaddressinDHCPpacketreceivedfrominterface[interface-name]VLAN[valn-id]waswrong.
","4","从接口接收的DHCP报文的硬件地址类型错误.
","DHCPSNP/4/LENEXCEEDMTU","1.
检查报文源是否有异常.
如果经常出现,则使用抓包工具抓取出错包,记录其内容和设备的配置信息,并联系技术支持工程师.
","DHCPSNP/4/LENEXCEEDMTU","DHCPSNP/4/HOPEXCEED""LENEXCEEDMTU","HLENERR","ThelengthofDHCPpacketreceivedfrominterface[interface-name]VLAN[vlan-id]exceededMTU[mtu-value].
","4","从接口接收到的报文长度超过该接口的MTU值.
","interface-name:接口名称.
valn-id:VLANID.
mtu-value:MTU数值.
","DHCPClient发送的报文长度过长.
","1.
检查报文长度.
","DHCPSNP/4/LENTOOSHORT""LENTOOSHORT","HLENERR","TheDHCPpacketreceivedfrominterface[interface-name]VLAN[vlan-id]wastooshort.
","4","从接口接收到的DHCP报文长度过小.
","接收到的DHCP报文长度过小.
","1.
检查报文源是否有异常.
如果经常出现,则使用抓包工具抓取出错包,记录其内容和设备的配置信息,并联系技术支持工程师.
","DLP/4/ABNFILE","DHCPSNP/4/LENTOOSHORT""DLP","ABNFILE","Anabnormalfilewastransmitted.
(SyslogId=[syslog-id],VSys=[vsys-name],Policy=[policy-name],SrcIp=[source-ip],DstIp=[destination-ip],SrcPort=[source-port],DstPort=[destination-port],SrcZone=[source-zone],DstZone=[destination-zone],User=[user-name],Protocol=[protocol],Application=[application-name],Profile=[profile-name],Direction=[direction],FileName=[file-name],Abnormal=[abnormal],Action=[action])","4","网络中传输的文件存在异常.
","syslog-id:日志序号.
vsys-name:虚拟系统名称.
policy-name:安全策略名称.
source-ip:报文的源IP地址.
destination-ip:报文的目的IP地址.
source-port:报文的源端口(对于ICMP报文,该字段为0).
destination-port:报文的目的端口(对于ICMP报文,该字段为0).
source-zone:报文的源安全域.
destination-zone:报文的目的安全域.
user-name:用户名.
protocol:报文的协议号.
application-name:报文的应用协议.
profile-name:配置文件的名称.
direction:文件的传输方向.
file-name:过滤文件的文件名.
abnormal:文件异常的类型.
·falseextensionfile:文件后缀名不匹配·malformedfile:文件格式异常·unknownfile:未知文件类型·decompressoverdepth:文件的解压层数超大·decompressoversize:解压文件的大小超大action:响应动作.
·Alert:告警.
·Block:阻断.
","网络中传输的文件真实类型和文件后缀名不匹配.
","DLP/4/DATAFILTER","1.
正常运行信息,无需处理.
""DATAFILTER","ABNFILE","Somedatacontainingillegitimatecharacterswastransmitted.
(SyslogId=[syslog-id],VSys=[vsys-name],Policy=[policy-name],SrcIp=[source-ip],DstIp=[destination-ip],SrcPort=[source-port],DstPort=[destination-port],SrcZone=[source-zone],DstZone=[destination-zone],User=[user-name],Protocol=[protocol],Application=[application-name],Profile=[profile-name],Direction=[direction],EventNum=[event-number],FileName=[file-name],KeywordGroup=[keyword-group],Action=[action])","4","网络中传输的数据中包含过滤关键字,被内容过滤规则过滤.
","syslog-id:日志序号.
vsys-name:虚拟系统名称.
policy-name:安全策略名称.
source-ip:报文的源IP地址.
destination-ip:报文的目的IP地址.
source-port:报文的源端口(对于ICMP报文,该字段为0).
destination-port:报文的目的端口(对于ICMP报文,该字段为0).
source-zone:报文的源安全域.
destination-zone:报文的目的安全域.
user-name:用户名.
protocol:报文的协议号.
application-name:报文的应用协议.
profile-name:配置文件的名称.
direction:文件的传输方向.
event-number:事件归并计数.
file-name:过滤文件的文件名.
keyword-group:内容过滤使用的关键字组的名称.
action:响应动作.
·Alert:告警.
·Block:阻断.
","对数据进行关键字过滤,命中了内容过滤的规则.
","DLP/4/FILEBLOCK","1.
正常运行信息,无需处理.
""FILEBLOCK","ABNFILE","Anillegitimatefilewastransmitted.
(SyslogId=[syslog-id],VSys=[vsys-name],Policy=[policy-name],SrcIp=[source-ip],DstIp=[destination-ip],SrcPort=[source-port],DstPort=[destination-port],SrcZone=[source-zone],DstZone=[destination-zone],User=[user-name],Protocol=[protocol],Application=[application-name],Profile=[profile-name],Direction=[direction],FileName=[file-name],FileType=[file-type],Action=[action])","4","网络中传输的文件被文件类型过滤规则过滤.
","syslog-id:日志序号.
vsys-name:虚拟系统名称.
policy-name:安全策略名称.
source-ip:报文的源IP地址.
destination-ip:报文的目的IP地址.
source-port:报文的源端口(对于ICMP报文,该字段为0).
destination-port:报文的目的端口(对于ICMP报文,该字段为0).
source-zone:报文的源安全域.
destination-zone:报文的目的安全域.
user-name:用户名.
protocol:报文的协议号.
application-name:报文的应用协议.
profile-name:配置文件的名称.
direction:文件的传输方向.
file-name:过滤文件的文件名.
file-type:文件类型名称.
action:响应动作.
·Alert:告警.
·Block:阻断.
","文件传输行为命中文件过滤规则.
","DOT1X/4/ADD_ACL_FAILED","1.
正常运行信息,无需处理.
""DOT1X","ADD_ACL_FAILED","AddACLfailedbecauseofnoenoughACLresources.
([STRING])","4","ACL资源不够,下发ACL失败.
","[STRING]:槽位号.
","ACL资源耗尽.
","1.
检查ACL资源是否合理.
·如果合理,请更换性能更高的设备.
·如果不合理,请删除不必要的ACL资源.
2.
请收集日志和配置信息,联系技术支持人员.
","DOT1X/5/QUIETTABLE_FULL""QUIETTABLE_FULL","ADD_ACL_FAILED","Theusercannotbeauthenticatedtemporarily,becausethenumberofentriesinthequiettableexceedstheupperlimit.
(MACAddress=[STRING])","5","静默表已满,用户暂时不能进行认证.
","[STRING]:用户的MAC地址.
","静默表已满.
","1.
检查设备是否受到报文攻击,如果受到攻击,请先处理攻击.
2.
等静默表老化后,用户可以进行认证.
3.
上述未生效,请联系技术支持人员.
","DOT1X/6/EAPOL_USER_QUIETTABLE_ADD""EAPOL_USER_QUIETTABLE_ADD","ADD_ACL_FAILED","Theuserisaddedtoquiet-table.
(MACAddress:[STRING])","6","将802.
1x认证用户加入到静默表.
","[STRING]:802.
1x认证用户的MAC地址.
","静默功能开启之后,802.
1x认证用户在配置的静默周期内,认证失败的次数超过指定的数值.
Note:静默周期的配置时间与实际生效时间误差不超过15秒.
","1.
日常运行信息,无需处理","DOT1X/6/EAPOL_USER_QUIETTABLE_DEL""EAPOL_USER_QUIETTABLE_DEL","ADD_ACL_FAILED","Theuserisdeletedfromquiet-table.
(MACAddress:[STRING])","6","将802.
1x认证用户从静默表中删除.
","静默周期到期,设备对用户重新认证.
Note:静默周期的配置时间与实际生效时间误差不超过15秒.
","静默功能开启之后,802.
1x认证用户在配置的静默周期内,认证失败的次数超过指定的数值.
Note:静默周期的配置时间与实际生效时间误差不超过15秒.
","DOT1X/3/MACAUTH_ACL_FAILED","DOT1X/6/EAPOL_USER_QUIETTABLE_DEL""MACAUTH_ACL_FAILED","ADD_ACL_FAILED","Failedtoconfiguremacauthenticationbecauseofinsufficientresource.
(SlotID=[STRING])","3","在VLANIF接口使能MAC认证时,如果单板ACL资源不足,会导致MAC认证失败.
","[STRING]:单板所在的槽位号.
","单板ACL资源不足.
","1.
删除单板上不必要的配置,释放ACL资源.
","DOT1X/4/CONFIGURATE_DOT1X_URL_FAILED""CONFIGURATE_DOT1X_URL_FAILED","ADD_ACL_FAILED","Failedtoconfiguredot1xurl.
([STRING])","4","802.
1x用户认证的重定向URL在某单板上下发失败.
","[STRING]:802.
1x用户认证的重定向URL在某单板上下发失败.
取值:Thedot1xurlisnotsupportedonslot%s.
Note:%s表示:单板所在的槽位号.
","通过命令dot1xurlurl-string配置的802.
1x用户认证的重定向URL,属于全局下发的功能,但SA系列单板不支持该功能.
","1.
日常运行信息,无需处理.
","DOT1X/4/CONFIGURATE_DOT1X_FREE_IP_FAILED""CONFIGURATE_DOT1X_FREE_IP_FAILED","ADD_ACL_FAILED","Failedtoconfiguredot1xfree-ip.
([STRING])","4","802.
1x用户免认证规则在某单板上下发失败.
","[STRING]:802.
1x用户免认证规则在某单板下发失败.
取值:Thedot1xfree-ip%s/%uisnotsupportedonslot%s.
Note:·%s/%u表示:IP地址/掩码.
·%s表示:单板所在的槽位号.
","通过命令dot1xfree-ipip-address{mask-length|mask-address}配置的802.
1x用户免认证规则,属于全局下发的功能,但SA系列单板不支持该功能.
","DOT1X/4/COMMAND_EXECUTE_FAILED","DOT1X/4/CONFIGURATE_DOT1X_FREE_IP_FAILED""COMMAND_EXECUTE_FAILED","ADD_ACL_FAILED","Thecommand([STRING1])executefailedonport[STRING2].
","4","命令行在接口上下发失败.
","[STRING1]:命令名[STRING2]:接口名","·接口上配置的其他命令行与本命令行冲突,导致命令下发失败.
·资源限制导致命令行下发失败.
·接口由于加入到Eth-Trunk接口导致命令行下发失败.
","1.
请根据日志中的命令排查接口的配置是否正确.
·如果正确,请执行步骤2.
·如果不正确,请将相应的配置修改正确.
2.
请收集日志和配置信息,联系技术支持人员.
","DSLITE/5/PORT_LESS""DSLITE","PORT_LESS","Slot=[slot]/[cpu],Vcpu=[Vcpu];Thenumberof[port-style]portsinitiatedbyuser[user-name]fellbelowtheupperlimit.
(Ports=[port],Tunnelid=[tunnel-id],Threshold=[threshold],slot=[slot],cpu=[cpu])USG9500的日志信息.
DSLITE/5/PORT_LESS(l):Thenumberof[port-style]portsinitiatedbyuser[user-name]fellbelowtheupperlimit.
(Ports=[port],Tunnelid=[tunnel-id],Threshold=[threshold],slot=[slot],cpu=[cpu])USG6000的日志信息.
","5","基于端口的会话连接数恢复正常.
","slot:槽位号.
cpu:CPU号.
Vcpu:VCPU号.
port-style:端口类型.
包含UDP和TCP.
user-name:用户名称.
port:端口名称.
tunnel-id:隧道号.
threshold:会话连接数的阈值.
","DSLITE/4/PORT_MORE","slot:槽位号.
cpu:CPU号.
Vcpu:VCPU号.
port-style:端口类型.
包含UDP和TCP.
user-name:用户名称.
port:端口名称.
tunnel-id:隧道号.
threshold:会话连接数的阈值.
","1.
正常运行信息,无需处理.
""PORT_MORE","PORT_LESS","Slot=[slot]/[cpu],Vcpu=[Vcpu];Thenumberof[port-style]portsinitiatedbyuser[user-name]exceedsthethreshold.
(Ports=[port],Tunnelid=[tunnel-id],Threshold=[threshold],slot=[slot],cpu=[cpu])USG9500的日志信息.
DSLITE/4/PORT_MORE(l):Thenumberof[port-style]portsinitiatedbyuser[user-name]exceedsthethreshold.
(Ports=[port],Tunnelid=[tunnel-id],Threshold=[threshold],slot=[slot],cpu=[cpu])USG6000的日志信息.
","4","基于端口的会话连接数超出阈值.
","slot:槽位号.
cpu:CPU号.
Vcpu:VCPU号.
port-style:端口类型.
包含UDP和TCP.
user-name:用户名称.
port:端口名称.
tunnel-id:隧道号.
threshold:会话连接数的阈值","1.
通过查看丢包统计,查看是否有由于连接数超过阈值造成的丢包.
","slot:槽位号.
cpu:CPU号.
Vcpu:VCPU号.
port-style:端口类型.
包含UDP和TCP.
user-name:用户名称.
port:端口名称.
tunnel-id:隧道号.
threshold:会话连接数的阈值","DSLITE/5/SESSLMT_LESS""SESSLMT_LESS","PORT_LESS","Slot=[slot]/[cpu],Vcpu=[Vcpu];Thenumberof[port-style]sessionsinitiatedbyuser[user-name]fellbelowtheupperlimit.
(Sessions=[session],Tunnelid=[tunnel-id],Threshold=[threshold],slot=[slot],cpu=[cpu])USG9500的日志信息.
DSLITE/5/SESSLMT_LESS(l):Thenumberof[port-style]sessionsinitiatedbyuser[user-name]fellbelowtheupperlimit.
(Sessions=[session],Tunnelid=[tunnel-id],Threshold=[threshold],slot=[slot],cpu=[cpu])USG6000的日志信息.
","5","用户发出的会话连接数恢复正常.
","slot:槽位号.
cpu:CPU号.
Vcpu:VCPU号.
port-style:端口类型.
包含UDP和TCP.
user-name:用户名称.
session:会话连接数.
tunnel-id:隧道号.
threshold:会话连接数的阈值","DSLITE/4/SESSLMT_MORE","slot:槽位号.
cpu:CPU号.
Vcpu:VCPU号.
port-style:端口类型.
包含UDP和TCP.
user-name:用户名称.
session:会话连接数.
tunnel-id:隧道号.
threshold:会话连接数的阈值","1.
正常运行信息,无需处理.
""SESSLMT_MORE","PORT_LESS","Slot=[slot]/[cpu],Vcpu=[Vcpu];Thenumberof[port-style]sessionsinitiatedbyuser[user-name]exceedsthethreshold.
(Sessions=[session],Tunnelid=[tunnel-id],Threshold=[threshold],slot=[slot],cpu=[cpu])USG9500的日志信息.
DSLITE/4/SESSLMT_MORE(l):Thenumberof[port-style]sessionsinitiatedbyuser[user-name]exceedsthethreshold.
(Sessions=[session],Tunnelid=[tunnel-id],Threshold=[threshold],slot=[slot],cpu=[cpu])USG6000的日志信息.
","4","用户发出的会话连接数超过阈值.
","ENGINE/2/THREADERR","DSLITE/4/SESSLMT_MORE","ENGINE/2/THREADERR","DSLITE/5/SESSLMT_LESS""ENGINE","THREADERR","Theheartbeatoftheenginethreadwaslost.
(SyslogId=[syslog-id],ThreadId=[thread-index])","2","业务线程未向管理线上报心跳,管理线程检查到业务线程心跳丢失异常情况.
","syslog-id:日志序号.
thread-index:工作线程索引.
","原因1:业务线程死循环.
原因2:业务线程异常.
","1.
检查线程运行时状态,如CPU占用过高、死锁等情况是否发生.
","ENGINE/3/MODFAIL""MODFAIL","THREADERR","Failedtoprocessthemodule.
(SyslogId=[syslog-id],Reason=[reason])","3","组件加载或卸载失败.
","syslog-id:日志序号.
reason:组件处理失败的原因.
1.
Can'tstartinstallbecauseengineisnotrun不能执行加载因为引擎不存在2.
Can'tstartinstallbecauseengineisnotready不能执行加载因为引擎初始化未完成3.
Can'tstartinstallbecausecompileisbusy,compileflagvalueis[value]不能执行加载因为正在编译,编译标记值为[value].
value为整数形式,取值范围为0~9.
4.
Can'tstartinstallbecausemodulehasbeeninstalled不能执行加载因为组件已经加载完成5.
Installmodule[module-name]failed加载模块[module-name]失败.
module-name的取值为BC、AUDIT、FTF、DCF、MF或URLF.
6.
Can'tstartuninstallbecauseengineisnotrun不能执行卸载因为引擎不存在7.
Can'tstartuninstallbecauseengineisnotready不能执行卸载因为引擎初始化未完成8.
Can'tstartuninstallbecausecompileisbusy,compileflagvalueis[value]不能执行卸载因为正在编译,编译标记值为[value].
value为整数形式,取值范围为0~9.
9.
Can'tstartuninstallbecausemoduleisnotbeeninstalled不能执行卸载因为组件还没有加载10.
Uninstallmodule[module-name]failed卸载模块[module-name]失败.
module-name的取值为FTF或URLF.
11.
Module[module-name]stateis[state],cannot[action]onslot[slot-id]cpu[cpu-id]模块[module-name]状态为[state],执行[action]失败在slot[slot-id]cpu[cpu-id].
[module-name]的取值为BC、AUDIT、FTF、DCF、MF或URLF.
[state]的取值为IDLE、INSTALL_START、INSTALL_REQ_CFG、INSTALL_START_COMPILE、INSTALL_FAILED、INSTALL_DONE、UNINSTALL_START、UNINSTALL_START_COMPILE、UNINSTALL_COMPILE_OK、UNINSTALL_FAILED、UNINSTALL_DONE.

[action]的取值为加载、卸载[slot-id]的取值为引擎所在的设备槽位号[cpu-id]的取值为引擎所在的cpu号12.
Module[module-name][action]failedonslot[slot-id]cpu[cpu-id]模块[module-name][action]失败在slot[slot-id]cpu[cpu-id][module-name]的取值为FTF或URLF[action]的取值为加载、卸载[slot-id]的取值为引擎所在的设备槽位号[cpu-id]的取值为引擎所在的cpu号13.
Startcompilefailedwhen[action]moduleslot[slot-id]cpu[cpu-id][module-name]模块时启动编译失败在slot[slot-id]cpu[ULONG-2][action]的取值为加载、卸载[slot-id]的取值为引擎所在的设备槽位号[cpu-id]的取值为引擎所在的cpu号14.
Compilefailedwhen[action]moduleslot[slot-id]cpu[cpu-id][action]模块时编译失败在slot[slot-id]cpu[cpu-id][action]的取值为加载、卸载[slot-id]的取值为引擎所在的设备槽位号[cpu-id]的取值为引擎所在的cpu号15.
Processtimeoutwhen[action]moduleonslot[slot-id]cpu[cpu-id][action]模块时处理超时在slot[slot-id]cpu[cpu-id][action]的取值为加载、卸载[slot-id]的取值为引擎所在的设备槽位号[cpu-id]的取值为引擎所在的cpu号16.
Inthevirtualsystem[virtual-system-name],theprofileof[module-name]isreferencedbythesecuritypolicy.
在虚拟系统[virtual-system-name]中,安全策略引用了模块[module-name]的配置[virtual-system-name]的取值为虚拟系统的名称[module-name]的取值为BC、AUDIT、FTF、DCF、MF或URLF","原因1:不能执行加载因为引擎不存在原因2:不能执行加载因为引擎初始化未完成原因3:不能执行加载因为正在编译原因4:不能执行加载因为组件已经加载完成原因5:加载模块失败原因6:不能执行卸载因为引擎不存在原因7:不能执行卸载因为引擎初始化未完成原因8:不能执行卸载因为正在编译原因9:不能执行卸载因为组件还没有加载原因10:卸载模块失败原因11:模块状态异常,无法执行加载或卸载操作原因12:模块在业务板加载或卸载失败原因13:启动编译失败原因14:编译失败原因15:处理超时原因16:profile被安全策略引用","1.
对应日志的产生原因,依次给出处理建议.
1.
使用命令displayengineinformation查看引擎状态.
2.
使用命令displayengineinformation查看引擎状态.
3.
使用命令displayengineinformation查看引擎状态.
4.
正常运行信息,无需处理.
5.
请稍后重试.
如果无法解决,请联系技术支持工程师.
6.
使用命令displayengineinformation查看引擎状态.
7.
使用命令displayengineinformation查看引擎状态.
8.
使用命令displayengineinformation查看引擎状态.
9.
正常运行信息,无需处理.
10.
请稍后重试.
如果无法解决,请联系技术支持工程师.
11.
请稍后重试.
如果无法解决,请联系技术支持工程师.
12.
请稍后重试.
如果无法解决,请联系技术支持工程师.
13.
按照设备上的具体提示信息进行处理.
14.
按照设备上的具体提示信息进行处理.
15.
请稍后重试.
如果无法解决,请联系技术支持工程师.
16.
先解除profile和安全策略的绑定关系,再尝试卸载.
","ETRUNK/4/MBR_PHYSTAT_CHG""ETRUNK","MBR_PHYSTAT_CHG","ThephysicalstatusofanE-Trunkmemberchanged.
(MemberType=[STRING],MemberId=[ULONG],State=[STRING])","4","成员物理状态改变.
","MemberType:成员类型,目前只有ETH-TRUNK.
MemberId:成员ID.
State:状态.
有两种取值·Up·Down","原因1:加入E-Trunk的成员(目前只有ETH-TRUNK类型)物理状态发生变化.
","ETRUNK/4/MEMBER_STATE_CHG","1.
正常运行信息,无需处理.
""MEMBER_STATE_CHG","MBR_PHYSTAT_CHG","ThestatusofanE-Trunkmemberchanged.
(MemberType=[STRING],MemberId=[ULONG],OldState=[STRING],OldReason=[STRING],NewState=[STRING],NewReason=[STRING])","4","E-Trunk成员状态改变.
","MemberType:成员类型,目前只有ETH-TRUNK.
MemberId:成员ID.
OldState:老状态.
·Backup:备用状态·Master:主用状态·Negot:协商状态OldReason:老状态原因.
·FORCE_BACKUP:强制备·FORCE_MASTER:强制主·ETRUNK_INIT:初始化·ETRUNK_BACKUP:E-Trunk为备·ETRUNK_MASTER:E-Trunk为主·PEER_MEMBER_DOWN:对端成员Down·PEER_MEMBER_UP:对端成员UpNewState:新状态.
·Backup:备用状态·Master:主用状态·Negot:协商状态NewReason:新状态原因.
·FORCE_BACKUP:强制备·FORCE_MASTER:强制主·ETRUNK_INIT:初始化·ETRUNK_BACKUP:E-Trunk为备·ETRUNK_MASTER:E-Trunk为主·PEER_MEMBER_DOWN:对端成员Down·PEER_MEMBER_UP:对端成员Up","原因1:E-Trunk成员状态或者状态原因改变,例如E-Trunk成员当前状态为主用,通过命令行将其工作模式设置为强制备用状态,此时成员状态会变为备用状态.
","ETRUNK/4/STATE_CHG","1.

正常运行信息,无需处理.
""STATE_CHG","MBR_PHYSTAT_CHG","ThestatusofanE-Trunkchanged.
(ETrunkId=[ULONG],OldState=[STRING],OldReason=[STRING],NewState=[STRING],NewReason=[STRING])","4","E-Trunk状态改变.
","ETrunkId:E-TrunkID.
OldState:老状态.
·Init:初始化状态·Backup:备用状态·Master:主用状态OldReason:老状态原因.
·PRI:优先级计算·TIMEOUT:超时·BFD_DOWN:BFD会话Down·BFD_DOWN:BFD会话Down·PEER_TIMEOUT:对端超时·PEER_BFD_DOWN:对端BFD会话Down·PEER_BFD_DOWN:对端BFD会话Down·INIT:初始化NewState:新状态.
·Init:初始化状态·Backup:备用状态·Master:主用状态NewReason:新状态原因.
·PRI:优先级计算·TIMEOUT:超时·BFD_DOWN:BFD会话Down·BFD_DOWN:BFD会话Down·PEER_TIMEOUT:对端超时·PEER_BFD_DOWN:对端BFD会话Down·PEER_BFD_DOWN:对端BFD会话Down·INIT:初始化","原因1:E-Trunk状态或者状态原因改变,例如E-Trunk当前状态为备用,如果在设定的超时时间内没有收到对端的协议报文,则E-Trunk状态会变为主用状态.
","FEEDBACK/3/CONNECTSERVERR","1.

正常运行信息,无需处理.
""FEEDBACK","CONNECTSERVERR","Failedtoconnecttothedatafeedbackserver.
(SyslogId=[syslog-id])","3","连接数据反馈服务器失败.
","syslog-id:日志序号.
","原因1:网络连接异常,与数据反馈服务器网络不通.
原因2:数据反馈服务器异常.
","1.
检查网络连接情况以及网络配置是否正确.
2.
如果依然不能解决问题,请联系技术支持工程师.
","FEEDBACK/3/GETSERVERR""GETSERVERR","CONNECTSERVERR","Failedtoobtaintheinformationfromthedatafeedbackserver.
(SyslogId=[syslog-id])","3","获取数据反馈服务器信息失败.
","原因1:网络连接异常,与安全中心平台网络不通.
原因2:安全中心平台异常.
","原因1:网络连接异常,与数据反馈服务器网络不通.
原因2:数据反馈服务器异常.
","FIBSPT/3/SPT_LOG","FEEDBACK/3/GETSERVERR""FIBSPT","SPT_LOG","[spt-log-info].
","3","SPT计算信息.
","[spt-log-info]:SPT计算的日志信息.
","FIB表内路由更新.
","FLOW6/4/FLOW6_SESS_NUM_BELOW_THRESHOLD","1.
正常运行信息,无需处理.
""FLOW6","FLOW6_SESS_NUM_BELOW_THRESHOLD","Totalnumberofipv6sessionsonSLOT[slot-id]CPU[cpu-id]is[session-number],lowerthanthresholdvalue[session-number-threshold].
","4","IPv6会话总数低于设置的告警阈值.
","slot-id:槽位号.
cpu-id:CPU号.
session-number:当前IPv6会话的总数.
session-number-threshold:IPv6会话总数的告警阈值.
","FLOW6/4/FLOW6_SESS_NUM_OVER_THRESHOLD","slot-id:槽位号.
cpu-id:CPU号.
session-number:当前IPv6会话的总数.
session-number-threshold:IPv6会话总数的告警阈值.
","1.
正常运行信息,无需处理.
""FLOW6_SESS_NUM_OVER_THRESHOLD","FLOW6_SESS_NUM_BELOW_THRESHOLD","Totalnumberofipv6sessionsonSLOT[slot-id]CPU[cpu-id]is[session-number],exceedingthresholdvalue[session-number-threshold].
","4","IPv6会话总数超过了设置的告警阈值.
","1.
检查网络中是否存在异常的IPv6流量.
","FLOW6/4/FLOW6_SESS_NUM_OVER_THRESHOLD","1.
检查网络中是否存在异常的IPv6流量.
","FLOW6/4/FLOW6_SESS_RATE_BELOW_THRESHOLD""FLOW6_SESS_RATE_BELOW_THRESHOLD","FLOW6_SESS_NUM_BELOW_THRESHOLD","Therateofcreatingipv6sessionsonSLOT[slot-id]CPU[cpu-id]is[session-rate],lowerthanthresholdvalue[session-rate-threshold].
","4","IPv6会话新建速率低于设置的告警阈值.
","slot-id:槽位号.
cpu-id:CPU号.
session-rate:当前IPv6会话的新建速率.
session-rate-threshold:IPv6会话新建速率的告警阈值.
","FLOW6/4/FLOW6_SESS_RATE_OVER_THRESHOLD","slot-id:槽位号.
cpu-id:CPU号.
session-rate:当前IPv6会话的新建速率.
session-rate-threshold:IPv6会话新建速率的告警阈值.
","1.
正常运行信息,无需处理.
""FLOW6_SESS_RATE_OVER_THRESHOLD","FLOW6_SESS_NUM_BELOW_THRESHOLD","Therateofcreatingipv6sessionsonSLOT[slot-id]CPU[cpu-id]is[session-rate],exceedingthresholdvalue[session-rate-threshold].
","4","IPv6会话新建速率超过了设置的告警阈值.
","FRAG/4/FRAG_PKT_EXCEED_THRESHOLD","FLOW6/4/FLOW6_SESS_RATE_OVER_THRESHOLD","FRAG/4/FRAG_PKT_EXCEED_THRESHOLD","FLOW6/4/FLOW6_SESS_RATE_BELOW_THRESHOLD""FRAG","FRAG_PKT_EXCEED_THRESHOLD","TotalnumberofcachedfragmentpacketonSLOT[slot_id]CPU[cpu_id]is[frag_pkt],exceedingthresholdvalue[thres_frag_pkt].
","4","缓存分片报文总数超过阈值.
","slot_id:槽位号.
cpu_id:CPU号.
frag_pkt:当前已经缓存的分片报文数量.
thres_frag_pkt:分片报文缓存阈值.
","当分片报文缓存的数量达到阈值时发送日志,在持续超出的情况下每隔30秒发送一次.
","1.
检查是否有大量异常的分片攻击报文.
","FRAG/4/FRAG_SESS_EXCEED_THRESHOLD""FRAG_SESS_EXCEED_THRESHOLD","FRAG_PKT_EXCEED_THRESHOLD","TotalnumberoffragmentsessiononSLOT[slot_id]CPU[cpu_id]is[frag_sess],exceedingthresholdvalue[thres_frag_sess].
","4","分片会话表项总数超过阈值.
","slot_id:槽位号.
cpu_id:CPU号.
frag_sess:当前分片会话数量.
thres_frag_sess:分片会话阈值.
","当分片会话的当前使用数量达到阈值时发送日志,在持续超出的情况下每隔30秒发送一次.
","FRAG6/4/FRAG6_SESS_EXCEED_THRESHOLD","FRAG/4/FRAG_SESS_EXCEED_THRESHOLD""FRAG6","FRAG6_SESS_EXCEED_THRESHOLD","TotalnumberofIPv6fragmentsessiononSLOT[slot_id]CPU[cpu_id]is[frag_sess],exceedingthresholdvalue[thres_frag_sess].
","4","IPv6分片会话表项总数超过阈值.
","slot_id:槽位号.
cpu_id:CPU号.
frag_sess:当前IPv6分片会话数量.
thres_frag_sess:IPv6分片会话阈值.
","当IPv6分片会话的当前使用数量达到阈值时发送日志,在持续超出的情况下每隔30秒发送一次.
","1.
检查是否有大量异常的IPv6分片攻击报文.
","FRAG6/4/FRAG6_PKT_EXCEED_THRESHOLD""FRAG6_PKT_EXCEED_THRESHOLD","FRAG6_SESS_EXCEED_THRESHOLD","TotalnumberofcachedIPv6fragmentpacketonSLOT[slot_id]CPU[cpu_id]is[frag_pkt],exceedingthresholdvalue[thres_frag_pkt].
","4","IPv6缓存分片报文超过阈值.
","slot_id:槽位号.
cpu_id:CPU号.
frag_pkt:当前已经缓存的IPv6分片报文数量.
thres_frag_pkt:IPv6分片报文缓存阈值.
","当IPv6分片报文缓存的数量达到阈值时发送日志,在持续超出的情况下每隔30秒发送一次.
","FTPS/5/ACL_DENY","FRAG6/4/FRAG6_PKT_EXCEED_THRESHOLD""FTPS","ACL_DENY","TheTCPrequestwasdeniedaccordingtoACLrules.
(IpAddress=[IpAddress],VpnInstanceName=[VpnInstanceName])","5","根据ACL规则限制,TCP请求被拒绝.
","IpAddress:客户端IP地址.
VpnInstanceName:VPN实例的名称.
","TCP请求不符合配置的ACL规则.
","1.
正常运行消息,无需处理.
","FTPS/4/FILE_OVERWRITE""FILE_OVERWRITE","ACL_DENY","Thefile[file-name]wasoverwritten.
(UserName=[STRING],IpAddress=[STRING],VpnInstanceName=[STRING]).
","4","FTP服务器中的文件被覆盖.
","file-name:服务器中的文件名称.
UserName:用户名.
IpAddress:用户的IP地址.
VpnInstanceName:VPN的实例名.
","用户向FTP服务器上传文件时,新上传的文件覆盖了服务器中的原有文件.
","FTPS/3/LOGINFAILED","1.
正常运行信息,无需处理.
""LOGINFAILED","ACL_DENY","Failedtologin.
(UserName="[string]",IpAddress=[string],VpnInstanceName="[string]",Reason="[string]")","3","FTP用户登录失败.
","UserName:用户名.
当设备无法获取用户名时,使用"**"记录.
例如通过密码认证登录用户的场景.
IpAddress:用户的IP地址.
VpnInstanceName:VPN的实例名.
Reason:登录失败的原因.
","1.
检查用户名和密码是否正确.
·如果用户名和密码不正确,请正确输入用户名和密码.
·如果用户名和密码正确,请收集日志信息和配置信息,并联系华为技术支持工程师.
","UserName:用户名.
当设备无法获取用户名时,使用"**"记录.
例如通过密码认证登录用户的场景.
IpAddress:用户的IP地址.
VpnInstanceName:VPN的实例名.
Reason:登录失败的原因.
","FTPS/5/LOGIN_OK""LOGIN_OK","ACL_DENY","Theusersucceededinlogin.
(UserName="[string]",IpAddress=[string],VpnInstanceName="[string]")","5","FTP用户登录成功.
","UserName:用户名.
IpAddress:用户的IP地址.
VpnInstanceName:VPN的实例名.
","FTPS/5/LOGOUT_OK","UserName:用户名.
IpAddress:用户的IP地址.
VpnInstanceName:VPN的实例名.
","1.
正常运行信息,无需处理.
""LOGOUT_OK","ACL_DENY","Theuserleft.
(UserName="[string]",IpAddress=[string],VpnInstanceName="[string]",Reason="[string]")","5","FTP用户离开.
","UserName:用户名.
IpAddress:用户的IP地址.
VpnInstanceName:VPN的实例名.
Reason:用户离开原因.
","FTPS/5/REQUEST","UserName:用户名.
IpAddress:用户的IP地址.
VpnInstanceName:VPN的实例名.
Reason:用户离开原因.
","1.
正常运行信息,无需处理.
""REQUEST","ACL_DENY","Theuserhadarequest.
(UserName="[string]",IpAddress=[string],VpnInstanceName="[string]",Request=[string],Result=[string]","5","用户有请求.
","UserName:用户名.
IpAddress:用户登录IP地址.
VpnInstanceName:VPN的实例名.
Request:用户请求,如"PASS".
Result:Request报文的处理结果:·Success·ExecutionFailure","FTP用户登录成功后对FTP服务器有请求.
","FTPS/3/TRS_FAIL","1.
正常运行信息,无需处理.
""TRS_FAIL","ACL_DENY","Theuserfailedtotransferdata.
(UserName="[string]",IpAddress=[string],VpnInstanceName="[string]",Reason="[string]")","3","FTP用户传输失败.
","UserName:用户名.
IpAddress:用户的IP地址.
VpnInstanceName:VPN的实例名.
Reason:文件传输失败原因.
","1.
检查传输的连接是否正常,能否ping通,如果网络连接正常但传输仍然失败,请联系华为技术支持工程师.
","UserName:用户名.
IpAddress:用户的IP地址.
VpnInstanceName:VPN的实例名.
Reason:文件传输失败原因.
","FTPS/5/TRANSFER_FINISH""TRANSFER_FINISH","ACL_DENY","Finishedtotransferfile.
(FileName=[STRING],UserName=[STRING],IpAddress=[STRING],VpnInstanceName=[STRING],Transferlength=[ULONG],ActionType=[STRING])","5","文件传输完成.
","FileName:传输文件名.
UserName:用户名.
IpAddress:用户登录IP地址.
VpnInstanceName:VPN的实例名.
Transferlength:传输数据的长度.
ActionType:操作类型:·上传文件·下载文件","通过FTP传输文件结束.
","FWD/4/SESSCTRLBEGIN","1.
正常运行信息,无需处理.
""FWD","SESSCTRLBEGIN","Sessioncreationcontrolstarted.
TheCPUusagewas[cpu-usage],andthesessionratewas[session-rate].
","4","记录会话抑制开始事件.
","cpu-usage:CPU使用率.
session-rate:会话速率.
","CPU使用率较高,达到会话抑制设置的CPU阈值.
","1.
如果此日志少量出现,等待一段时间后,如果恢复正常,则无需处理.
2.
如果此日志大量出现,请联系华为技术支持工程师.
","FWD/4/SESSCTRLEND""SESSCTRLEND","SESSCTRLBEGIN","Sessioncreationcontrolended.
TheCPUusagewas[cpu-usage].
Intheprocess,[permitted-packets-num]packetswerepermittedand[blocked-packets-num]packetswereblocked.
","4","记录会话抑制结束事件.
","cpu-usage:CPU使用率.
permitted-packets-num:会话抑制周期通过的报文包的个数.
blocked-packets-num:会话抑制周期阻断的报文包的个数.
","CPU使用率降到会话抑制设置的CPU使用率,会话抑制周期结束.
","FWD/4/SESSINSERTOVERLOAD","1.
正常运行信息,无需处理.
""SESSINSERTOVERLOAD","SESSCTRLBEGIN","Abnormaltrafficwasdetected.
(Vsys=[vsysname],VLAN=[vlan],Protocol=[protocal],SourceIP=[source-ip],SourcePort=[source-port],DestinationIP=[destination-ip],DestinationPort=[destination-port])","4","会话表上出现了超过20个相同五元组的会话表项.
","vsysname:虚拟系统名称.
vlan:VLANID.
protocal:协议名称.
source-ip:报文的源IP地址.
source-port:报文的源端口.
destination-ip:报文的目的IP地址.
destination-port:报文的目的端口.
","收到相同五元组的syn-flood攻击.
","1.
屏蔽攻击源,开启攻击防范.
","FWD/4/TOPNSESSDST""TOPNSESSDST","SESSCTRLBEGIN","InformationabouttopNsessionsbydestinationIPaddresswasrecorded.
(SlotID=[slot-id],CPUID=[cpu-id],Details="IP:[ip-address]Sessionnum:[sessionnumber]")","4","当CPU使用率或者会话使用率超过告警阈值时,通过统计基于目的IP地址的TOP10会话.
可以帮助用户及时了解当前哪些目的IP地址的会话数量最大,根据这些信息可以分析这些会话是否正常,便于攻击溯源.
","slot-id:槽位号.
cpu-id:CPU号.
Details:基于目的IP地址的TOP10对应的会话数量.
","当CPU使用率超过cpu-usagethreshold设置的threshold-value告警阈值时,系统会发送此日志进行提示.
当会话使用率超过snmp-agentsessiontrapthreshold设置的threshold-value会话告警阈值时,系统会发送此日志进行提示.
","1.
根据系统发送的日志,查看基于目的地址的TOP10会话信息,及时阻止攻击行为.
","FWD/4/TOPNSESSSRC""TOPNSESSSRC","SESSCTRLBEGIN","InformationabouttopNsessionsbysourceIPaddresswasrecorded.
(SlotID=[slot-id],CPUID=[cpu-id],Details="IP:[ip-address]Sessionnum:[sessionnumber]")","4","当CPU使用率或者会话使用率超过告警阈值时,通过统计基于源IP地址的TOP10会话,可以帮助用户及时了解当前哪些源IP地址的会话数量最大,根据这些信息可以分析这些会话是否正常,便于攻击溯源.
","slot-id:槽位号.
cpu-id:CPU号.
Details:基于源IP地址的TOP10对应的会话数量.
","1.
根据系统发送的日志,查看基于源IP地址的TOP10会话信息,及时阻止攻击行为.
","1.
根据系统发送的日志,查看基于目的地址的TOP10会话信息,及时阻止攻击行为.
","FWD/4/RES_OVER""RES_OVER","SESSCTRLBEGIN","Thenumberofdynamicresourcesexceededthethreshold.
(SlotID=[slot-id],CPUID=[cpu-id],type=[type],currentnumber=[currentnumber],threshold=[threshold]).
","4","动态资源表项个数达到告警阈值.
","slot-id:槽位号.
cpu-id:CPU号.
type:资源类型,包括(SERVER-MAP、IPV6SERVER-MAP、BLACKLIST).
currentnumber:当前已使用资源数.
threshold:资源告警阈值.
","动态资源相关的业务流量过多或者设备受到攻击.
·Server-map:存在大量FTP业务、三元组NAT业务.
·IPv6Server-map:存在大量IPV6访问FTP业务,三元组NAT业务.
·BLACKLIST:设备收到异常流量攻击.
Note:打开firewalldynamic-resourceused-upalarmallenable或者任意firewalldynamic-resourceused-upalarmserver-mapenable、firewalldynamic-resourceused-upalarmipv6server-mapenable、firewalldynamic-resourceused-upalarmblacklistenable命令后,当动态资源表项个数达到阈值时,才会发送该日志.
","1.
查看业务是否正常,设备是否遭到攻击.
·Server-map:查看FTP业务是否正常,三元组NAT业务是否正常,避免不必要的流量.
·IPV6Server-map:查看FTP业务是否正常,三元组NAT业务是否正常,避免不必要的流量.
·BLACKLIST:检查设备是否遭到异常流量攻击,设置安全策略阻断攻击流量.
","FWD/4/RES_BELOW""RES_BELOW","SESSCTRLBEGIN","Thenumberofdynamicresourcesfellbelowthethreshold.
(SlotID=[slot-id],CPUID=[cpu-id],type=[type],currentnumber=[current-number],threshold=[threshold])","4","动态资源表项个数恢复低于告警阈值.
","slot-id:槽位号.
cpu-id:CPU号.
type:资源类型,包括(SERVER-MAP、IPV6SERVER-MAP、BLACKLIST).
current-number:当前已使用资源数.
threshold:资源告警阈值.
","·动态资源相关的业务流量减少.
·设备恢复正常.
Note:打开firewalldynamic-resourceused-upalarmallenable或者任意firewalldynamic-resourceused-upalarmserver-mapenable、firewalldynamic-resourceused-upalarmipv6server-mapenable、firewalldynamic-resourceused-upalarmblacklistenable命令后,当动态资源表项个数恢复低于阈值时,才会发送该日志.
","1.
业务正常,无需处理.
","FWLCNS/1/EXPIRED""FWLCNS","EXPIRED","1","Licenseexceedstheauthorizedperiodandthetrialperiod!
","系统时间超过License文件中的运行截止日期且超过试用天数.
","定期的时间校验中检测到系统时间超过License文件中的运行截止日期且超过试用天数.
","无:无","1.
License控制项已经被恢复默认配置,需立即更换新的License文件.
","FWLCNS/1/TRIAL""TRIAL","EXPIRED","Licenseexceedstheauthorizedperiodbutwithin[remain-days]trialday(s)!
","Licenseexceedstheauthorizedperiodandthetrialperiod!
","系统时间超过License文件中的运行截止日期,但尚未超过试用天数.
","remain-days:试用期剩余天数.
","定期的时间校验中检测到系统时间超过License文件中的运行截止日期但仍在试用天数内.
","1.
License控制项可正常使用,仍然保持现有配置,但需立即更换新的License文件,以免过期影响使用.
","FWLCNS/1/TRIALFINISH""TRIALFINISH","EXPIRED","Thelicensetrialperiodhasexpired!
","Licenseexceedstheauthorizedperiodandthetrialperiod!
","License试用期已结束.
","1.
购买并激活License,以免影响使用.
","无:无","1.
购买并激活License,以免影响使用.
","FWLCNS/1/TRIALWILLFINISH""TRIALWILLFINISH","EXPIRED","Thelicensetrialperiodisabouttoexpirein[remainingdays]day(s)!
","Licenseexceedstheauthorizedperiodandthetrialperiod!
","License试用期即将到期.
","remainingdays:到期前剩余天数.
","1.
购买并激活License,以免到期影响使用.
","remainingdays:到期前剩余天数.
","FWLCNS/1/WILLEXPIRE""WILLEXPIRE","EXPIRED","Licenseisabouttoexpirein[remain-days]day(s)!
","Licenseexceedstheauthorizedperiodandthetrialperiod!
","系统时间即将在10天内超过License文件中的运行截止日期.
","remain-days:过期前剩余天数.
","定期的时间校验中检测到系统时间将在10天内超过License文件中的运行截止时间.
","1.
License控制项可正常使用,仍然保持现有配置,但需尽快更换新的License文件,以免过期影响使用.
","FWLCNS/4/ACTIVATIONFAIL""ACTIVATIONFAIL","EXPIRED","Failedtoactivatethelicensefile.
(AccessType=[access-type],Ip=[ip-address],UserName=[user-name])","4","License文件激活失败.
","access-type:登录类型.
ip-address:IP地址.
user-name:用户名.
","1.
执行命令displaylicense,检查License文件是否存在或过期.
2.
执行命令displayesn,检查设备的ESN与License文件的信息是否一致.
3.
检查设备与License文件的版本是否一致.
4.
如果以上均不能解决问题,请联系华为技术支持工程师.
","access-type:登录类型.
ip-address:IP地址.
user-name:用户名.
","FWLCNS/4/EMERGNO""EMERGNO","EXPIRED","Theuser[user-name]choseNwhendecidingwhethertochangethelicensestatetoEMERGENCY.
","4","用户取消进入License紧急状态.
","[user-name]:用户名.
","用户运行命令licenseemergency后,确认不开启License紧急状态功能.
","FWLCNS/4/EMERGOVER","1.
正常运行信息,无需处理.
""EMERGOVER","EXPIRED","Licenseemergencystateexpires.
","4","License紧急状态功能已失效.
","License紧急状态功能的有效期为7天.
由于已达到有效期的上限,所以License紧急状态功能失效.
","无:无","1.
达到有效期上限后,License控制项将由紧急状态恢复为默认配置.
为了避免影响正常业务,请尽快申请License文件.
","FWLCNS/4/EMERGSTART""EMERGSTART","EXPIRED","Startlicenseemergencystate.
","4","成功开启License紧急状态功能.
","用户运行命令licenseemergency,并确认开启License紧急状态功能.
","无:无","FWLCNS/4/EMERGYES","1.
正常运行信息,无需处理.
""EMERGYES","EXPIRED","Theuser[user-name]choseYwhendecidingwhethertochangethelicensestatetoEMERGENCY.
","4","用户确认进入License紧急状态.
","FWLCNS/4/LCSEMERG","用户运行命令licenseemergency后,确认不开启License紧急状态功能.
","FWLCNS/4/EMERGYES","1.
正常运行信息,无需处理.
""LCSEMERG","EXPIRED","Thelicenseemergencystatewillbeinvalidin[day]day(s).
","4","License紧急状态功能即将失效.
","[day]:License紧急状态生效的剩余天数.
","License紧急状态功能剩余的生效时间小于7天时,设备将每日定时发送该日志,并显示剩余天数.
","FWLCNS/5/ACTIVATION","1.

正常运行信息,无需处理.
""ACTIVATION","EXPIRED","Succeededinactivatingthelicensefile.
(AccessType=[access-type],Ip=[ip-address],UserName=[user-name])","5","成功激活License文件.
","License文件激活成功.
","1.
执行命令displaylicense,检查License文件是否存在或过期.
2.
执行命令displayesn,检查设备的ESN与License文件的信息是否一致.
3.
检查设备与License文件的版本是否一致.
4.
如果以上均不能解决问题,请联系华为技术支持工程师.
","1.
激活操作成功提示,注意随后保存配置.
","FW_SLB/4/Failed""FW_SLB","Failed","ConnecttotheSLBrealserverfailed.
(ClientIP=[client-ip],ClienrPort=[client-port],ServerIP=[rserver-ip-address],ServerPort=[rserver-port]).
","4","连接实服务器失败.
","client-ip:客户端IP地址.
client-port:客户端端口.
rserver-ip-address:实服务器IP地址.
rserver-port:实服务器端口.
","FW和实服务器之间链路故障或者实服务器故障.
","1.
检查FW和实服务器之间的链路是否出现故障.
2.
检查实服务器是否出现故障.
","FW_SLB/4/DOWN""DOWN","Failed","TheSLBrealserverchangedtodown.
(GroupIndex=[group-id],GroupName=[group-name],ServerIndex=[server-id],ServerIp=[server-ip],OldStatus=[old-status],NewStatus=[new-status]).
","4","SLB实服务器的状态变为DOWN.
","[group-id]:实服务器组的ID.
[group-name]:实服务器组的名称.
[server-id]:实服务器的ID.
[server-ip]:实服务器的IP地址.
[old-status]:实服务器的旧状态.
[new-status]:实服务器的新状态.
","实服务器的状态不正常,无法提供服务.
","1.
检查实服务器的故障原因.
2.
如果实服务器状态正常,则需要检查链路、接口等其他网络组件的状态是否正常.
","FW_SLB/5/UP""UP","Failed","TheSLBrealserverchangedtoup.
(GroupIndex=[group-id],GroupName=[group-name],ServerIndex=[server-id],ServerIp=[server-ip],OldStatus=[old-status],NewStatus=[new-status]).
","5","SLB实服务器的状态变为UP.
","实服务器的状态恢复正常.
","实服务器的状态不正常,无法提供服务.
","FW_SLB/5/WebOper","1.

正常运行信息,无需处理.
""WebOper","Failed","SucceededinclearingthehistorystatusinformationoftherealserveronthewebUI.
(User=[user-name],GroupIndex=[group-id],GroupName=[group-name],ServerIndex=[server-id],ServerIp=[server-ip]).
","5","管理员通过Web方式成功清除SLB实服务器历史状态信息.
","[user-name]:Web登录用户名.
[group-id]:实服务器组的ID.
[group-name]:实服务器组的名称.
[server-id]:实服务器的ID.
[server-ip]:实服务器的IP地址.
","FW_SLB/5/WebOperFail","[user-name]:Web登录用户名.
[group-id]:实服务器组的ID.
[group-name]:实服务器组的名称.
[server-id]:实服务器的ID.
[server-ip]:实服务器的IP地址.
","1.
正常运行信息,无需处理.
""WebOperFail","Failed","FailedtoclearthehistorystatusinformationoftherealserveronthewebUI.
(User=[user-name],GroupIndex=[group-id],GroupName=[group-name],ServerIndex=[server-id],ServerIp=[server-ip]).
","5","管理员通过Web方式清除SLB实服务器历史状态信息的操作失败.
","FW_SLB/5/OVERLOAD","FW_SLB/5/WebOperFail","FW_SLB/5/OVERLOAD","1.

正常运行信息,无需处理.
""OVERLOAD","Failed","TheSLBvirtualserverwasoverloaded.
(VServerIndex=[vserver-id],VServerName=[vserver-name])","5","SLB虚拟服务器超负载,不能新建连接.
","vserver-id:虚拟服务器的ID.
vserver-name:虚拟服务器的名称.
","SLB虚拟服务器的当前连接数已经达到最大值,新建连接导致虚拟服务器超负载.
","1.
正常运行信息,无需处理.
Note:当已经建立的连接老化,虚拟服务器连接数恢复为正常值范围后(并发连接数恢复为最大连接数的80%),就可以重新发起连接.
","FW_SLB/6/Normal""Normal","Failed","TheSLBvirtualserverwasrestored.
(VServerIndex=[vserver-id],VServerName=[vserver-name])","6","SLB虚拟服务器从超载状态恢复为正常状态.
","SLB虚拟服务器的并发连接数恢复为最大连接数的80%,可以接受新建连接.
","SLB虚拟服务器的当前连接数已经达到最大值,新建连接导致虚拟服务器超负载.
","TheSLBrealserverwasoverloaded.
(GroupIndex=[group-id],GroupName=[group-name],ServerIndex=[server-id],ServerIP=[server-ip-address])","1.
正常运行信息,无需处理.
""OVERLOAD","Failed","TheSLBvirtualserverwasoverloaded.
(VServerIndex=[vserver-id],VServerName=[vserver-name])","5","SLB实服务器超负载,不能新建连接.
","group-id:实服务器所属服务器组ID.
group-name:实服务器所属服务器组名称.
server-id:实服务器的ID.
server-ip-address:实服务器的IP地址.
","SLB实服务器的当前连接数已经达到最大值,再分配连接则导致实服务器超负载.
","TheSLBrealserverwasrestored.
(GroupIndex=[group-id],GroupName=[group-name],ServerIndex=[server-id],ServerIP=[server-ip-address])","1.
正常运行信息,无需处理.
""Normal","Failed","TheSLBvirtualserverwasrestored.
(VServerIndex=[vserver-id],VServerName=[vserver-name])","6","SLB实服务器从超载状态恢复为正常状态.
","SLB实服务器的并发连接数恢复为最大连接数的80%,可以接受新建连接.
","SLB实服务器的当前连接数已经达到最大值,再分配连接则导致实服务器超负载.
","FW_TPDNS/4/DOWN","1.

正常运行信息,无需处理.
""FW_TPDNS","TheDNSserverchangeddown.
(ServerIp=[server-ip],OldStatus=[old-statue],NewStatus=[new-statue]).
","TheSLBrealserverchangedtodown.
(GroupIndex=[group-id],GroupName=[group-name],ServerIndex=[server-id],ServerIp=[server-ip],OldStatus=[old-status],NewStatus=[new-status]).
","4","DNS服务器的状态变为DOWN.
","[server-ip]:DNS服务器的IP地址.
[old-statue]:DNS服务器的旧状态.
[new-statue]:DNS服务器的新状态.
","健康检查探测到DNS服务器的服务状态故障.
","1.
检查DNS服务器的故障原因.
2.
如果DNS服务器状态正常,则需要检查链路、接口等其他网络组件的状态是否正常.
","FW_TPDNS/5/UP""TheDNSserverchangedup.
(ServerIp=[server-ip],OldStatus=[old-statue],NewStatus=[new-statue]).
","TheDNSserverchangeddown.
(ServerIp=[server-ip],OldStatus=[old-statue],NewStatus=[new-statue]).
","TheSLBrealserverchangedtoup.
(GroupIndex=[group-id],GroupName=[group-name],ServerIndex=[server-id],ServerIp=[server-ip],OldStatus=[old-status],NewStatus=[new-status]).
","5","DNS服务器的状态变为UP.
","健康检查探测到DNS服务器的服务状态正常.
","健康检查探测到DNS服务器的服务状态故障.
","GPM/3/BUILDFAIL","1.

正常运行信息,无需处理.
""GPM","BUILDFAIL","Failedtocompilethedatabase.
(SyslogId=[syslog-id],DatabaseId=[database-index],Algorithm=[algorithm-type],DatabaseStatus=[database-status])","3","数据库编译失败.
","syslog-id:日志序号.
database-index:数据库的序号.
algorithm-type:使用的算法类型,包括ac、srs、cavium-hfa和pcre-compatible.
database-status:数据库状态,包括:·compiling:表示数据库正在编译.
·invalid:表示数据库无效.
","原因1:预编译内存不够.
原因2:临时内存申请失败.
","1.
调整GPM内存分配值.
","GPM/4/DBMEMEXT""DBMEMEXT","BUILDFAIL","Thedatabaseusedtoomuchmemory.
(SyslogId=[syslog-id],DatabaseId=[database-index],Algorithm=[algorithm-type],DatabaseStatus=[database-status],MemorySize=[memory-size])","4","GPM模块某一个状态机占用内存过大,并输出内存值.
","syslog-id:日志序号.
database-index:数据库的序号.
algorithm-type:使用的算法类型,包括ac、srs、cavium-hfa和pcre-compatible.
database-status:数据库状态,包括:·compiling:表示数据库正在编译.
·invalid:表示数据库无效.
memory-size:数据库占用的内存.
","状态机内存过大.
对于非正则模式,原因是模式数量过多;对于正则模式,原因是正则表达式过于复杂.
","GTP/6/PKT_BASIC","1.
请联系技术支持工程师.
""GTP","PKT_BASIC","ResultofGTPpackets:[log-cause].
((Basic),ver=GTP_V[GTP-ver],[source-ip]-->[destination-ip],TID/TEID=[TID/TEID],messagetype=[message-type],PLMN=[PLMN-name]).
","6","当GTPLOG设置为显示基础报文时,会上报此日志.
","log-cause:记录日志的原因.
GTP-ver:GTP版本.
source-ip:源IP地址.
destination-ip:目的IP地址.
TID/TEID:TID/TEID.
message-type:消息类型.
PLMN-name:PLMN或域名.
","设置在报文通过、报文匹配GTP拒绝规则等特定情况下记录日志.
","1.
提示用户消息,不必处理.
","GTP/6/PKT_EXTENDED""PKT_EXTENDED","PKT_BASIC","ResultofGTPpackets:[log-case].
((Basic),ver=GTP_V[GTP-ver],[source-ip]-->[destination-ip],TID/TEID=[TID/TEID],messagetype=[message-type],PLMN=[PLMN-name],(Extended),APN=[APN-name],selectmode=[APN-type],SGSNsignaddress=[SGSN-signaling-address],SGSNdataaddress=[SGSN-data-address],GGSNsignaddress=[GGSN-signaling-address],GGSNdataaddress=[GGSN-data-address]).
","6","当GTPLOG设置为显示扩展的报文时,并且是GGSN与SGSN之间的报文会上报此日志.
","log-case:记录日志的原因.
GTP-ver:GTP版本.
source-ip:源IP地址.
destination-ip:目的IP地址.
TID/TEID:TID/TEID.
message-type:消息类型.
PLMN-name:PLMN或域名.
APN-name:APN名字.
APN-type:APN类型.
SGSN-signaling-address:信令SGSN地址.
SGSN-data-address:数据SGSN地址.
GGSNsignaddress=[GGSN-signaling-address]:信令GGSN地址.
GGSNdataaddress=[GGSN-data-address]:数据GGSN地址.
","GTP/6/PKT_EXTENDED_SGSN","1.
提示用户消息,不必处理.
","GTP/6/PKT_EXTENDED""PKT_EXTENDED_SGSN","PKT_BASIC","ResultofGTPpackets:[string1].
((Basic),ver=GTP_V[ULONG],[string2]-->[string3],TID/TEID=[string4],messagetype=[string5],PLMN=[string6],(Extended),APN=[string7],selectmode=[string8],SGSNsignaddress=[string9],SGSNdataaddress=[string10],oldSGSNsignaddress=[string11],oldSGSNdataaddress=[string12]).
","6","当GTPLOG设置为显示扩展的报文时,并且是SGSN与SGSN之间的报文会上报此日志.
","log-case:记录日志的原因.
GTP-ver:GTP版本.
source-ip:源IP地址.
destination-ip:目的IP地址.
TID/TEID:TID/TEID.
message-type:消息类型.
PLMN-name:PLMN或域名.
APN-name:APN名字.
APN-type:APN类型.
SGSN-destination-signaling-address:信令SGSN地址.
SGSN-destination-data-address:数据SGSN地址.
SGSN-source-signaling-address:原信令SGSN地址.
SGSN-source-data-address:原数据SGSN地址.
","HA/5/BATCHSTART","1.
提示用户消息,不必处理.
","GTP/6/PKT_EXTENDED""HA","BATCHSTART","Batchbackupstarted.
","5","备板批量备份开始.
","HA/6/RESTART","无:无","HA/6/RESTART","1.
正常运行信息,无需处理.
""RESTART","BATCHSTART","Whendecidingwhethertorestartslaveboard,theuser[user-name]choose[STRING].
","6","用户确认是否重启备板.
","[user-name]:用户名.
[STRING]:表示用户确认的字符.
Y:表示用户确认操作.
N:表示用户取消操作.
","用户执行slaveswitchover命令后,需要再次确认.
","HA/5/RESTSLA","1.
正常运行信息,无需处理.
""RESTSLA","BATCHSTART","Rebootedtheslaveboard.
(Slot=[STRING])","5","重起备板.
","Slot:备板槽号","HA提供给产品的钩子函数.
","1.
重启备板.
","HA/5/RSTSLA""RSTSLA","BATCHSTART","Rebootedtheslaveboard,becausethemessagesinthequeueweretoomuch.
(Slot=[STRING])","5","消息队列满,重发多次失败.
","Slot:备板槽号","HA提供给产品的钩子函数.
","1.
消息队列满,重发多次失败,重启备板.
","HA/4/SMOTHINGSLAINS""SMOTHINGSLAINS","BATCHSTART","Theslaveboardwasinsertedwhenmasterboardwassmoothing.
","4","主备倒换后,处理平滑状态的主板收到备板在位的消息,将重启备板.
","1.
如果平滑等待时间太长,这个时候如果插入备板,会上报此消息,不影响正常流程的处理.
如果备板上报的次数超过200次,备板将自动复位.
","无:无","1.
如果平滑等待时间太长,这个时候如果插入备板,会上报此消息,不影响正常流程的处理.
如果备板上报的次数超过200次,备板将自动复位.
","HA/6/SWITCHOVER""SWITCHOVER","BATCHSTART","Whendecidingwhethertoswitchslavetomaster,theuser[user-name]choose[STRING].
","6","用户确认是否进行主备倒换.
","HA/4/UPDATELCS","用户执行slaveswitchover命令后,需要再次确认.
","HA/5/RESTSLA","1.
正常运行信息,无需处理.
""UPDATELCS","BATCHSTART","Slaveboardwasupdatedwithmasterboard'sLicensefile,andrebootstheslaveboardnow.
","4","备板License更新完毕,需要重启备板.
","备板PAFLicense更新完毕,需要重启备板.
","无:无","1.
主备license不一致,更新完备板的license后,备板将重启.
","HA/4/UPDATEPAF""UPDATEPAF","BATCHSTART","ThePAFfileoftheslaveboardwasupdatedalongwiththatofthemasterboardandtheslaveboardwasrestarted.
","4","更新备板PAF完毕,重启备板.
","更新备板PAF完毕.
","无:无","1.
主备的paf不一致,更新完备板的paf后,备板将重启.
","HA/4/VERDIFF""VERDIFF","BATCHSTART","Theversionofmasterandslaveboardisdifferent.
","4","主备板版本不一致.
","1.
主备版本不一致,但是不重启备板.
","无:无","1.
主备版本不一致,但是不重启备板.
","HA/4/VERWRNRST""VERWRNRST","BATCHSTART","Theslaveboardwasrebootedandwilldownloadthenewimagebecauseofdifferentversionofmasterboardandslaveboard.
","4","备板版本与主板不一致,复位版本并重新下载镜像.
","备板版本与主板不一致.
","无:无","1.
主备版本不一致,复位备板.
","HARDDISK/3/ADDPLUGTMRFAIL""HARDDISK","ADDPLUGTMRFAIL","Failedtocreateinsertiondetectiontimerfordisk[disk-id].
","3","硬盘插入时,检测硬盘的定时器创建失败.
","disk-id:安装硬盘的槽位号.
","系统资源不足,硬盘插入时,检测硬盘的定时器创建失败.
","1.
重新拔插硬盘.
","HARDDISK/3/ADDPWRTMRFAIL""ADDPWRTMRFAIL","ADDPLUGTMRFAIL","Failedtocreatepower-offdelaytimerfordisk[disk-id].
","3","硬盘下电时,延时定时器创建失败.
","系统资源不足,硬盘下电时,延时定时器创建失败.
","系统资源不足,硬盘插入时,检测硬盘的定时器创建失败.
","HARDDISK/3/ADDREMOVTMRFAIL","HARDDISK/3/ADDPWRTMRFAIL""ADDREMOVTMRFAIL","ADDPLUGTMRFAIL","Failedtocreateremovaldetectiontimerfordisk[disk-id].
","3","硬盘拔出时,检测硬盘的定时器创建失败.
","系统资源不足,硬盘拔出时,检测硬盘的定时器创建失败.
","系统资源不足,硬盘插入时,检测硬盘的定时器创建失败.
","HARDDISK/3/AUTHFAIL","HARDDISK/3/ADDPWRTMRFAIL""Disk[disk-id](SN=[disk-number])isnotsupported.
","ADDPLUGTMRFAIL","AUTHFAIL","3","硬盘认证失败.
","disk-id:安装硬盘的槽位号.
disk-number:硬盘序列号.
","硬盘是非正规渠道获取的.
","1.
请使用华为出厂的配套本设备的硬盘.
","HARDDISK/3/CMDEXCFAIL""CMDEXCFAIL","ADDPLUGTMRFAIL","Commandexecutionfailedbecauseofself-test.
","3","硬盘自检期间,命令不能下发.
","硬盘自检中,不能执行非自检相关的命令.
","无:无","1.
如果需要立即执行相关命令,请先停止自检.
","HARDDISK/3/DELPLUGTMRFAIL""DELPLUGTMRFAIL","ADDPLUGTMRFAIL","Failedtodeleteinsertiondetectiontimerfordisk[disk-id].
","3","硬盘插入时,检测定时器删除失败.
","系统资源不足,硬盘插入时,检测定时器删除失败.
","系统资源不足,硬盘插入时,检测硬盘的定时器创建失败.
","HARDDISK/3/DELREMOVTMRFAIL","HARDDISK/3/ADDPWRTMRFAIL""DELREMOVTMRFAIL","ADDPLUGTMRFAIL","Failedtodeleteremovaldetectiontimerfordisk[disk-id].
","3","硬盘拔出时,检测硬盘定时器删除失败.
","系统资源不足,硬盘拔出时,检测硬盘定时器删除失败.
","系统资源不足,硬盘插入时,检测硬盘的定时器创建失败.
","HARDDISK/3/FORMATFAIL","HARDDISK/3/ADDPWRTMRFAIL""FORMATFAIL","ADDPLUGTMRFAIL","Disk(s)formattingfailed.
","3","硬盘格式化失败.
","由于设备内存不足或硬盘故障等原因,导致硬盘格式化失败.
","无:无","1.
重新格式化硬盘.
","HARDDISK/3/FWUPDATEFAIL""FWUPDATEFAIL","ADDPLUGTMRFAIL","Failedtoloadthefirmwaretothedisk[disk-id](SN=[disk-number]).
","3","Firmware升级失败.
","1.
执行升级Firmware命令,重新对Firmware升级.
2.
如果无法升级,请联系技术支持工程师.
","硬盘是非正规渠道获取的.
","1.
执行升级Firmware命令,重新对Firmware升级.
2.
如果无法升级,请联系技术支持工程师.
","HARDDISK/3/IOCFWUPDATEFAIL""IOCFWUPDATEFAIL","ADDPLUGTMRFAIL","FailedtoloadtheIOcontrollerfirmware.
","3","硬盘IO控制器Firmware升级失败.
","1.
重新执行升级命令,对IO控制器升级.
","无:无","1.
重新执行升级命令,对IO控制器升级.
","HARDDISK/3/IOCOFFDISK""IOCOFFDISK","ADDPLUGTMRFAIL","Thedisk[disk-id](SN=[disk-number])isdisabled.
","3","硬盘退出当前系统.
","硬盘故障,退出当前系统.
","硬盘是非正规渠道获取的.
","1.
将硬盘返厂检查硬盘故障原因,或更换硬盘.
","HARDDISK/3/OFLFAIL""OFLFAIL","ADDPLUGTMRFAIL","Disk(s)failedtogooffline.
","3","硬盘下线失败.
","原因1:业务不响应offline消息.
原因2:offline消息发送失败.
","无:无","1.
重新执行diskoffline命令.
","HARDDISK/3/ONLINEFAIL""ONLINEFAIL","ADDPLUGTMRFAIL","Disk(s)failedtogoonline.
","3","硬盘上线失败.
","建立RAID失败后,或者未建立RAID,执行diskonline给硬盘上线.
","无:无","1.
执行命令resetraid删除或者重建RAID.
","HARDDISK/3/PLIMSGFAIL""PLIMSGFAIL","ADDPLUGTMRFAIL","Failedtosenddisk[disk-id]insertionmessage.
","3","硬盘插入信息发送失败.
","1.
重新插拔硬盘.
","系统资源不足,硬盘插入时,检测硬盘的定时器创建失败.
","1.
重新插拔硬盘.
","HARDDISK/3/REBOOTE""REBOOTE","ADDPLUGTMRFAIL","Errorsweredetectedduringtheself-test.
Pleaserebootthesystem.
","3","硬盘自检结束,检查到错误,请重启设备.
","硬盘错误导致自检完成.
","无:无","1.
执行命令reboot重启设备.
","HARDDISK/3/REMOVMSGFAIL""REMOVMSGFAIL","ADDPLUGTMRFAIL","Failedtosenddisk[disk-id]removalmessage.
","3","硬盘拔出信息发送失败.
","HARDDISK/3/SELFTESTFAIL","系统资源不足,硬盘插入时,检测硬盘的定时器创建失败.
","HARDDISK/3/SELFTESTFAIL","HARDDISK/3/ADDPWRTMRFAIL""SELFTESTFAIL","ADDPLUGTMRFAIL","Disk(s)self-testfailed.
","3","硬盘自检失败.
","硬盘读写业务停止失败,不允许自检.
","无:无","1.
执行diskoffline命令,或者重启设备后重新开始自检.
","HARDDISK/4/ACTDISK""ACTDISK","ADDPLUGTMRFAIL","Pleaseusethe"1:diskoffline2:resetraid[PRIMARY-DISK{0|1}]3:diskonline"commandtothenewdisktakeeffect.
","4","使用命令diskoffline、resetraid、diskonline命令重置硬盘RAID,启用新盘.
","设备上已经有一个硬盘,又插入了一块新盘.
","无:无","1.
按照提示进行操作.
","HARDDISK/4/DISKSIZEDIFF""DISKSIZEDIFF","ADDPLUGTMRFAIL","PleaseusetwodiskswiththesamesizeforRAID.
","4","请使用两块相同容量的硬盘构建RAID.
","设备上存在不同容量的硬盘同时在位.
","无:无","1.
请将不同容量的硬盘更换成相同容量的硬盘.
","HARDDISK/4/FAILUREALM""FAILUREALM","ADDPLUGTMRFAIL","Disk[disk-id]failureprediction(asc=[asc-number],ascq=[ascq-number],SN=[disk-number]).
","4","硬盘预失效.
","disk-id:安装硬盘的槽位号.
asc-number:ASC寄存器值.
ascq-number:ASCQ寄存器值.
disk-number:硬盘序列号.
","1.
更换硬盘.
","disk-id:安装硬盘的槽位号.
asc-number:ASC寄存器值.
ascq-number:ASCQ寄存器值.
disk-number:硬盘序列号.
","HARDDISK/4/FORCEOFFLINE""FORCEOFFLINE","ADDPLUGTMRFAIL","Pleasemakealldisksgoofflinefirst.
","4","系统提示用户先给硬盘下线.
","硬盘正常使用的时候执行resetraid命令删除或重建硬盘RAID.
","无:无","1.
按照提示执行命令diskoffline给硬盘下线.
","HARDDISK/4/FORMATFSINUSE""FORMATFSINUSE","ADDPLUGTMRFAIL","Pleasemakealldisk(s)goofflinefirstbeforediskformatting.
","4","硬盘格式化前请先给硬盘下线.
","硬盘没有下线,就进行格式化操作.
","无:无","1.
确保硬盘下线了,才能执行格式化操作.
","HARDDISK/4/FORMATNOMEM""FORMATNOMEM","ADDPLUGTMRFAIL","Pleasereserveenoughmemoryfordiskformatting.
","4","请确保硬盘格式化时有足够内存.
","格式化硬盘时,内存不足.
","无:无","1.
请确保硬盘格式化时有足够内存,再格式化硬盘.
","HARDDISK/4/FORMATSUCC""FORMATSUCC","ADDPLUGTMRFAIL","Disk(s)formattingsucceeded.
","4","硬盘格式化成功.
","HARDDISK/4/FWUPDATEOK","无:无","HARDDISK/4/FWUPDATEOK","1.
正常运行信息,无需处理.
""FWUPDATEOK","ADDPLUGTMRFAIL","Firmwareupgradesucceeded.
Newfirmwarewilltakeeffectseveralminuteslater.
","4","Firmware升级成功,将会在几分钟后生效.
","Firmware升级成功.
","无:无","HARDDISK/4/IOCFWUPDATEOK","1.
正常运行信息,无需处理.
""IOCFWUPDATEOK","ADDPLUGTMRFAIL","IOcontrollerfirmwareupgradesucceeded.
","4","硬盘IO控制器Firmware升级成功.
","HARDDISK/4/NODISK","无:无","HARDDISK/4/NODISK","1.
正常运行信息,无需处理.
""NODISK","ADDPLUGTMRFAIL","Nodiskpresent,ornodiskisavailable.
","4","无硬盘在位,或者所有硬盘都不可使用.
","原因1:设备没有插入硬盘.
原因2:硬盘没有认证通过.
原因3:硬盘故障,无法读写.
","无:无","1.
原因1:插入硬盘.
2.
原因2:更换认证通过的硬盘.
3.
原因3:更换能正常读写的硬盘.
","HARDDISK/4/OFLSYNC""OFLSYNC","ADDPLUGTMRFAIL","Disk(s)wentofflinesuccessfully(Backgroundsyncing:Remaining[percent]%).
","4","硬盘下线成功,后台正在进行数据同步.
","percent:硬盘数据同步进度.
","硬盘在数据同步过程中,使用命令diskoffline给硬盘下线.
","1.
按照提示等待硬盘完成数据同步.
","HARDDISK/4/ONLINECOMMAND""ONLINECOMMAND","ADDPLUGTMRFAIL","Pleaseusethe"diskonline"commandtomakedisk(s)takeeffect.
","4","重置硬盘RAID后,系统提醒用户进行上线操作.
","用户执行resetraid命令,重置硬盘RAID.
","无:无","1.
执行diskonline给硬盘上线.
","HARDDISK/4/PLUGIN""Thedisk[disk-id]ispluggedin.
","ADDPLUGTMRFAIL","PLUGIN","4","硬盘插入设备.
","HARDDISK/4/PLUGOUT","系统资源不足,硬盘插入时,检测硬盘的定时器创建失败.
","HARDDISK/4/PLUGOUT","1.

正常运行信息,无需处理.
""Thedisk[disk-id]isremoved.
","ADDPLUGTMRFAIL","PLUGOUT","4","硬盘被拔出.
","HARDDISK/4/REBOOTNOTE","系统资源不足,硬盘插入时,检测硬盘的定时器创建失败.
","HARDDISK/4/REBOOTNOTE","1.

正常运行信息,无需处理.
""REBOOTNOTE","ADDPLUGTMRFAIL","Self-testcompleted.
Pleaserebootyoursystem.
","4","硬盘自检结束,请重启设备.
","硬盘自检结束.
","无:无","HARDDISK/4/REMOVABLE","HARDDISK/3/REMOVMSGFAIL""REMOVABLE","ADDPLUGTMRFAIL","Alldisk(s)areremovable.
","4","硬盘可以安全移除.
","用户执行diskoffline命令成功.
","无:无","1.
可执行硬盘移除操作.
","HARDDISK/4/RESETRAID""RESETRAID","ADDPLUGTMRFAIL","Pleaseusethe"resetraid[PRIMARY-DISK{0|1}]"commandtoresetRAID.
","4","请使用命令resetraid命令删除或重置硬盘RAID.
","设备上插入的硬盘有RAID信息,或插入的硬盘不合法.
","无:无","1.
使用命令resetraid删除或重建硬盘RAID.
","HARDDISK/4/SELFTESTING""SELFTESTING","ADDPLUGTMRFAIL","Disk(s)self-teststarts.
Itmaytakeseveralhours.
Pleasewait.
","4","硬盘自检开始,需要几个小时,请耐心等待.
","硬盘开始自检.
","无:无","1.
等待硬盘自检结束后重启设备.
","HARDDISK/4/TEMPEHIGH""TEMPEHIGH","ADDPLUGTMRFAIL","Thedisk[disk-id]temperatureistoohigh(CurrentTemperature=[current-temperature]degreecentigrade,ReferenceTemperature=[referenceTemperature]degreecentigrade).
","4","硬盘温度告警.
","disk-id:安装硬盘的槽位号.
current-temperature:硬盘当前温度.
referenceTemperature:硬盘参考温度.
","硬盘温度过高.
","1.
给风扇调速或降低环境温度.
","HARDDISK/4/TOOFFLINE""TOOFFLINE","ADDPLUGTMRFAIL","Disk(s)willtakeafewsecondstogooffline,pleasewait.
","4","硬盘下线需要等待一段时间,请稍候.
","原因1:执行diskoffline,给硬盘下线.
原因2:硬盘正在进行自检.
","无:无","1.
等待硬盘下线.
","HARDDISK/5/ONLINESUCC""ONLINESUCC","ADDPLUGTMRFAIL","Disk(s)wentonlinesuccessfully.
","5","硬盘上线操作成功.
","建立RAID成功后,执行diskonline命令给硬盘上线.
","无:无","HARDDISK/5/TOONLINE","1.
正常运行信息,无需处理.
""TOONLINE","ADDPLUGTMRFAIL","Disk(s)willtakeafewsecondstogoonline,pleasewait.
","5","硬盘上线过程中,文件系统修复可能消耗大量时间,提醒用户等待一段时间.
","用户执行diskonline命令给硬盘上线.
","无:无","1.
等待硬盘上线结束提示.
","HARDDISK/6/ONLINE""ONLINE","ADDPLUGTMRFAIL","Disk(s)alreadygoonline.
","6","硬盘已经上线.
","硬盘完成上线后,用户再次执行diskonline命令给硬盘上线.
","无:无","1.
不需要再执行diskonline命令.
","HEALTHCHECK/3/DOWN""HEALTHCHECK","IP-Link[ip-link-name]changedstatustodown(Protocol=[ip-link-protocol],DestinationIp=[destination-ip],DestinationPort=[destination-port]).
","TheSLBrealserverchangedtodown.
(GroupIndex=[group-id],GroupName=[group-name],ServerIndex=[server-id],ServerIp=[server-ip],OldStatus=[old-status],NewStatus=[new-status]).
","3","IP-Link状态变为DOWN.
","ip-link-name:IP-Link的名称.
ip-link-protocol:IP-Link探测的协议类型.
destination-ip:IP-Link探测的目的IP.
destination-port:IP-Link探测的目的端口.
","1.
接口状态从UP变为DOWN.
2.
路由从有效变为无效.
3.
被探测设备的相关服务被关闭.
","1.
检查接口状态是否为UP.
2.
检查目的地址是否路由可达.
3.
检查被探测设备的相关服务是否开启.
","HEALTHCHECK/4/DOWN""Detectchangedstatustodown(Protocol=[detection-protocol],DestinationIp=[destination-ip],DestinationPort=[destination-port]).
","IP-Link[ip-link-name]changedstatustodown(Protocol=[ip-link-protocol],DestinationIp=[destination-ip],DestinationPort=[destination-port]).
","TheSLBrealserverchangedtodown.
(GroupIndex=[group-id],GroupName=[group-name],ServerIndex=[server-id],ServerIp=[server-ip],OldStatus=[old-status],NewStatus=[new-status]).
","4","探测项状态变为DOWN.
","detection-protocol:探测项的协议类型.
destination-ip:探测项探测的目的IP.
destination-port:探测项探测的目的端口.
","HEALTHCHECK/4/UP","1.
检查接口状态是否为UP.
2.
检查目的地址是否路由可达.
3.
检查被探测设备的相关服务是否开启.
","HEALTHCHECK/4/DOWN""IP-link[ip-link-name]changedstatustoup(Protocol=[ip-link-protocol],DestinationIp=[destination-ip],DestinationPort=[destination-port]).
","IP-Link[ip-link-name]changedstatustodown(Protocol=[ip-link-protocol],DestinationIp=[destination-ip],DestinationPort=[destination-port]).
","TheSLBrealserverchangedtoup.
(GroupIndex=[group-id],GroupName=[group-name],ServerIndex=[server-id],ServerIp=[server-ip],OldStatus=[old-status],NewStatus=[new-status]).
","4","IP-Link状态变为UP.
","1.
接口状态从DOWN变为UP.
2.
路由从无效变为有效.
3.
目的地址的相关服务开启.
","1.
接口状态从UP变为DOWN.
2.
路由从有效变为无效.
3.
被探测设备的相关服务被关闭.
","HEALTHCHECK/5/UP","1.
正常运行信息,无需处理.
""Detectchangedstatustoup(Protocol=[detection-protocol],DestinationIp=[destination-ip],DestinationPort=[destination-port]).
","IP-Link[ip-link-name]changedstatustodown(Protocol=[ip-link-protocol],DestinationIp=[destination-ip],DestinationPort=[destination-port]).
","TheSLBrealserverchangedtoup.
(GroupIndex=[group-id],GroupName=[group-name],ServerIndex=[server-id],ServerIp=[server-ip],OldStatus=[old-status],NewStatus=[new-status]).
","5","探测项状态变为UP.
","HQOS/4/SQRESNOTENOUGH","HEALTHCHECK/4/UP","HEALTHCHECK/5/UP","1.

正常运行信息,无需处理.
""HQOS","SQRESNOTENOUGH","Theresourceofuser-queueonslot[slot-id]isusedup.
","4","接口板上的user-queue资源不足.
","slot-id:槽位号.
","1.
联系华为工程师进行处理.
","slot-id:槽位号.
","HQOS/7/GQRSRELREQINVALID""GQRSRELREQINVALID","SQRESNOTENOUGH","7","TherequestofreleasingGQ'sresourceisinvalid.
(Position:PrivateSlot=[slot-id],Direction=[direction];Releaser:ModuleId=0x[moduleid];Expected:GqIdNumber=[expected-gqidnumber];Hold:GqIdNumber=[hold-gqidnumber])","释放GQ资源的请求无效.
","slot-id:槽位号.
direction:方向.
moduleid:模块编号.
expected-gqidnumber:期望释放的GQID数.
hold-gqidnumber:已经拥有的GQID数.
","原因1:某个模块对GQ资源存在多释放的可能.
原因2:某个模块对GQ资源存在重复释放的可能.
","1.
记录模块编号,联系华为工程师进行处理.
","HQOS/7/SQRSRELREQINVALID""SQRSRELREQINVALID","SQRESNOTENOUGH","TherequestofreleasingSQ'sresourceisinvalid.
(Position:PrivateSlot=[slot-id],Direction=[direction];Releaser:ModuleId=0x[moduleid];Expected:SqIdNumber=[expected-sqidnumber],Cir=[expected-cir]K,Pir=[expected-pir]K;Hold:SqIdNumber=[hold-sqidnumber],Cir=[hold-cir]K,Pir=[hold-pir]K)","TherequestofreleasingGQ'sresourceisinvalid.
(Position:PrivateSlot=[slot-id],Direction=[direction];Releaser:ModuleId=0x[moduleid];Expected:GqIdNumber=[expected-gqidnumber];Hold:GqIdNumber=[hold-gqidnumber])","释放SQ资源的请求无效.
","slot-id:槽位号.
direction:方向.
moduleid:模块编号.
expected-sqidnumber:期望释放的SQID数.
expected-cir:期望释放的CIR数.
expected-pir:期望释放的PIR数.
hold-sqidnumber:已经拥有的SQID数.
hold-cir:已经拥有的CIR数.
hold-pir:已经拥有的PIR数.
","原因1:某个模块对SLOT级SQ资源存在多释放的可能.
原因2:某个模块对SLOT级SQ资源存在重复释放的可能.
","HQOS/7/TBSQRSRELREQINVALID","HQOS/7/SQRSRELREQINVALID""TBSQRSRELREQINVALID","SQRESNOTENOUGH","TherequestofreleasingSQ'sresourceisinvalid.
(Position:PrivateTb=[tb-id],Direction=[direction];Releaser:ModuleId=0x[moduleid];Expected:SqIdNumber=[expected-sqidnumber],Cir=[expected-cir]K,Pir=[expected-pir]K;Hold:SqIdNumber=[hold-sqidnumber],Cir=[hold-cir]K,Pir=[hold-pir]K)","TherequestofreleasingGQ'sresourceisinvalid.
(Position:PrivateSlot=[slot-id],Direction=[direction];Releaser:ModuleId=0x[moduleid];Expected:GqIdNumber=[expected-gqidnumber];Hold:GqIdNumber=[hold-gqidnumber])","tb-id:TB号.
direction:方向.
moduleid:模块编号.
expected-sqidnumber:期望释放的SQID数.
expected-cir:期望释放的CIR数.
expected-pir:期望释放的PIR数.
hold-sqidnumber:已经拥有的SQID数.
hold-cir:已经拥有的CIR数.
hold-pir:已经拥有的PIR数.
","slot-id:槽位号.
direction:方向.
moduleid:模块编号.
expected-sqidnumber:期望释放的SQID数.
expected-cir:期望释放的CIR数.
expected-pir:期望释放的PIR数.
hold-sqidnumber:已经拥有的SQID数.
hold-cir:已经拥有的CIR数.
hold-pir:已经拥有的PIR数.
","原因1:某个模块对TB级SQ资源存在多释放的可能.
原因2:某个模块对TB级SQ资源存在重复释放的可能.
","HRPI/2/DOWN","HQOS/7/SQRSRELREQINVALID""HRPI","HRPlinkchangestodowndueto[reason].
","TheSLBrealserverchangedtodown.
(GroupIndex=[group-id],GroupName=[group-name],ServerIndex=[server-id],ServerIp=[server-ip],OldStatus=[old-status],NewStatus=[new-status]).
","2","HRP链路状态变为down及其原因.
","[reason]:链路中断原因,包括以下几种情况:·heartbeatlostforxxxcycles·senddatafailed·peernotified·commanddisable","HRP链路中断,可能原因有:心跳丢失、发送报文失败、对端通知(连接断开)、功能关闭.
","1.
需要检查两端设备运行是否正常,或者心跳线是否有故障.
","HRPI/2/ENCRYPT_KEY""ENCRYPT_KEY","HRPlinkchangestodowndueto[reason].
","TheencryptionkeyforHRPbackupchannelsisdifferentwithpeerdevice","2","双机热备组网中,主备设备上备份配置命令的加密密钥不一致.
","主备设备上备份配置命令的加密密码不一致.
","无:无","1.
执行命令hrpencryption-key,配置主、备设备间加密配置命令备份报文的密钥为一致.
","HRPI/4/COCHK""COCHK","HRPlinkchangestodowndueto[reason].
","Theconfigurationsbetweenmasterandslavedeviceisdifferent(different-configuration-name).
","4","双机热备配置一致性检查发现主备FW配置不一致.
","different-configuration-name:主备防火墙配置不一致的具体特性名称,可能有如下取值:·audit-policy:审计策略配置不一致.
·auth-policy:认证策略配置不一致.
·nat-policy:NAT策略配置不一致.
·security-policy:安全策略配置不一致.
·traffic-policy:带宽策略配置不一致.
·hrp:HRP配置不一致.
·interface-typeinterface-number:接口配置不一致.
interface-typeinterface-number是配置不一致的接口名称.
·staticroute:静态路由配置不一致.
·ospfid:OSPF配置不一致.
id为OSPF进程ID.
·bgp:BGP配置不一致.
·license:License配置.
·hash:下次启动的哈希模式及哈希因子配置不一致.
","管理员执行hrpconfigurationcheck手工进行主备配置一致性检查或者执行hrpconfigurationauto-check命令开启了主备配置一致性自动检查功能.
双机热备配置一致性检查发现主备FW中某个特性的配置不一致.
","1.
根据告警中提示的特性模块名称检查主备防火墙上该模块的配置,并使用hrpsync命令进行一次批量备份或者手工修改主备配置为一致.
具体的检查项可参考.
","HRPI/4/CORE_STATE""CORE_STATE","HRPlinkchangestodowndueto[reason].
","HRPcorestatechanged,old_state=[old-state],new_state=[new-state],local_priority=[local-priority],peer_priority=[peer-priority].
","4","HRP内部组状态变化.
","old-state:切换之前的状态,有四种:·initial·standby·active·load-balancenew-state:切换之后的状态,有四种:·initial·standby·active·load-balancelocal-priority:本端优先级.
peer-priority:对端优先级.
","HRP本端或者对端优先级变化导致状态切换.
","HRPI/4/UP","1.
正常运行信息,无需处理.
""HRPlinkchangestoup.
","HRPlinkchangestodowndueto[reason].
","TheSLBrealserverchangedtoup.
(GroupIndex=[group-id],GroupName=[group-name],ServerIndex=[server-id],ServerIp=[server-ip],OldStatus=[old-status],NewStatus=[new-status]).
","4","HRP链路状态变为up.
","HRPI/4/VRRP_PEER_DOWN","无:无","HRPI/4/VRRP_PEER_DOWN","1.
正常运行信息,无需处理.
""VRRP_PEER_DOWN","HRPlinkchangestodowndueto[reason].
","TheVRRPlinkwentdown.
(Interface=[interface-name],VrId=[virtual-router-ID],InetType=[vrrp-protocol-type]).
","4","主备FW业务接口之间的链路故障,备用FW收不到主用FW接口发出的VRRP通告报文.
","interface-name:接口名称.
virtual-router-ID:VRRP备份组组号.
vrrp-protocol-type:VRRP协议类型,取值可以是VRRP4或VRRP6.
","主用或备用FW的业务接口Down.
连接主备FW业务接口的交换机发生故障.
Note:因为VRRP通告报文是由主用FW向备用FW发送,备用FW不会向主用FW发送,所以该日志仅会在备用FW上打印.
如果接口上配置了多个VRRP备份组,则会按配置的VRRP备份组组号分别打印日志.
","1.
检查主用FW的业务接口状态是否为Down.
2.
检查连接主备FW业务接口的交换机是否发生故障.
","HRPI/5/VRRP_PEER_UP""VRRP_PEER_UP","HRPlinkchangestodowndueto[reason].
","TheVRRPlinkwentup.
(Interface=[interface-name],VrId=[virtual-router-ID],InetType=[vrrp-protocol-type]).
","5","主备FW业务接口之间可以正常通信,备用FW能收到主用FW接口发出的VRRP通告报文.
","主备FW业务接口之间的链路从故障中恢复后,备用FW收到主用FW发来的VRRP通告报文时会产生该日志.

Note:因为VRRP通告报文是由主用FW向备用FW发送,备用FW不会向主用FW发送,所以该日志仅会在备用FW上打印.
如果接口上配置了多个VRRP备份组,则会按配置的VRRP备份组组号分别打印日志.
","主用或备用FW的业务接口Down.
连接主备FW业务接口的交换机发生故障.
Note:因为VRRP通告报文是由主用FW向备用FW发送,备用FW不会向主用FW发送,所以该日志仅会在备用FW上打印.
如果接口上配置了多个VRRP备份组,则会按配置的VRRP备份组组号分别打印日志.
","HTTPD/6/CMD","1.
正常运行信息,无需处理.
""HTTPD","task:[task-name]ip:[ip-addrss]user:[user-name]command:[command].
","CMD_AUTO_UNLOCK","6","Web用户执行命令.
","task-name:任务.
ip-addrss:IP地址.
user-name:用户名.
command:命令.
","HTTPD/4/COMM_FAIL","task-name:任务.
ip-addrss:IP地址.
user-name:用户名.
command:命令.
","1.
正常运行信息,无需处理.
""COMM_FAIL","task:[task-name]ip:[ip-addrss]user:[user-name]command:[command].
","task:[task-name]ip:[ip-address]user:[user-name]commfailed:[command].
","4","Web执行取数失败.
","task-name:任务名称.
ip-address:IP地址.
user-name:用户名.
command:取数描述.
","web执行取数失败.
","1.
关注是否有web页面取数错误.
","HTTPD/7/COMM_SUCC""COMM_SUCC","task:[task-name]ip:[ip-addrss]user:[user-name]command:[command].
","task:[task-name]ip:[ip-address]user:[user-name]commsuccessfully:[command]","TherequestofreleasingGQ'sresourceisinvalid.
(Position:PrivateSlot=[slot-id],Direction=[direction];Releaser:ModuleId=0x[moduleid];Expected:GqIdNumber=[expected-gqidnumber];Hold:GqIdNumber=[hold-gqidnumber])","Web执行取数成功.
","web执行取数成功.
","web执行取数失败.
","HTTPD/5/CUT","DOT1X/4/CONFIGURATE_DOT1X_FREE_IP_FAILED""CUT","task:[task-name]ip:[ip-addrss]user:[user-name]command:[command].
","User[user-name](IP:[ip-address]ID:[ID])iscut.
","5","用户被强制注销.
","user-name:用户名.
ip-address:用户的IP地址.
ID:系统分配的用户ID.
","强制注销一个Web用户.
","HTTPD/4/DOWNLOADFAIL","1.
正常运行信息,无需处理.
""TheuserfailedtodownloadthefileonthewebUI.
(Task=task-name,Ip=ip-address,User=user-name,Vrf=virtual-system,FileName=[file-name])","task:[task-name]ip:[ip-addrss]user:[user-name]command:[command].
","DOWNLOADFAIL","4","用户通过Web界面下载文件失败.
","task-name:任务.
ip-address:IP地址.
user-name:用户名.
virtual-system:虚拟系统.
public表示根系统.
file-name:文件名.
","1.
请确认是否有权限访问或下载文件.
","task-name:任务.
ip-address:IP地址.
user-name:用户名.
virtual-system:虚拟系统.
public表示根系统.
file-name:文件名.
","HTTPD/5/DOWNLOADSUCC""DOWNLOADSUCC","task:[task-name]ip:[ip-addrss]user:[user-name]command:[command].
","TheuserdownloadedthefilesuccessfullyonthewebUI.
(Task=task-name,Ip=ip-address,User=user-name,Vrf=virtual-system,FileName=[file-name])","5","用户通过Web界面成功下载文件.
","task-name:Indicatesthenameofatask.
ip-address:IndicatestheIPaddressofauser.
user-name:Indicatesthenameofauser.
virtual-system:Indicatesavirtualsystem.
publicindicatesthepublicsystem.
file-name:Indicatesthenameofthefile.
","HTTPD/4/EXPORTFAIL","task-name:Indicatesthenameofatask.
ip-address:IndicatestheIPaddressofauser.
user-name:Indicatesthenameofauser.
virtual-system:Indicatesavirtualsystem.
publicindicatesthepublicsystem.
file-name:Indicatesthenameofthefile.
","1.
正常运行信息,无需处理.
""EXPORTFAIL","task:[task-name]ip:[ip-addrss]user:[user-name]command:[command].
","TheuserfailedtoexporttheconfigurationfromthevirtualsystemonthewebUI.
(Task=task-name,Ip=ip-address,User=user-name,Vrf=virtual-system)","4","用户通过Web界面导出文件失败.
","task-name:任务.
ip-address:IP地址.
user-name:用户名.
virtual-system:虚拟系统.
public表示根系统.
","HTTPD/5/EXPORTSUCC","task-name:任务.
ip-address:IP地址.
user-name:用户名.
virtual-system:虚拟系统.
public表示根系统.
","HQOS/7/GQRSRELREQINVALID""EXPORTSUCC","task:[task-name]ip:[ip-addrss]user:[user-name]command:[command].
","TheuserexporttheconfigurationfromthevirtualsystemsuccessfullyonthewebUI.
(Task=task-name,Ip=ip-address,User=user-name,Vrf=virtual-system)","5","用户通过Web界面成功导出文件.
","HTTPD/5/FAIL","HTTPD/5/EXPORTSUCC","HTTPD/5/FAIL","1.

正常运行信息,无需处理.
""FAIL","task:[task-name]ip:[ip-addrss]user:[user-name]command:[command].
","User[user-name](IP:[ip-address]ID:[user-id])loginfailed.
","5","用户登录失败.
","user-name:用户名.
ip-address:IP地址.
user-id:用户ID.
","HTTPD/4/IMPORTFAIL","user-name:用户名.
ip-address:IP地址.
user-id:用户ID.
","1.
正常运行信息,无需处理.
""IMPORTFAIL","task:[task-name]ip:[ip-addrss]user:[user-name]command:[command].
","TheuserfailedtoimporttheconfigurationintothevirtualsystemonthewebUI.
(Task=task-name,Ip=ip-address,User=user-name,Vrf=virtual-system)","4","用户通过Web界面导入文件失败.
","1.
检查待导入文件的格式是否正确.
","HTTPD/5/EXPORTSUCC","1.
检查待导入文件的格式是否正确.
","HTTPD/5/IMPORTSUCC""IMPORTSUCC","task:[task-name]ip:[ip-addrss]user:[user-name]command:[command].
","TheuserimporttheconfigurationintothevirtualsystemsuccessfullyonthewebUI.
(Task=task-name,Ip=ip-address,User=user-name,Vrf=virtual-system)","5","用户通过Web界面成功导入文件.
","HTTPD/4/MAX_USERS","HTTPD/5/EXPORTSUCC","HTTPD/4/MAX_USERS","1.

正常运行信息,无需处理.
""MAX_USERS","task:[task-name]ip:[ip-addrss]user:[user-name]command:[command].
","Thenumberofwebusersexceededthemaximum.
(Ip=ip-address,User=user-name,Vrf=virtual-system)","4","Web管理员接入数超出最大值.
","ip-address:IP地址.
user-name:用户名.
virtual-system:虚拟系统.
public表示根系统.
","1.
请稍后登录.
","ip-address:IP地址.
user-name:用户名.
virtual-system:虚拟系统.
public表示根系统.
","HTTPD/5/OUT""OUT","task:[task-name]ip:[ip-addrss]user:[user-name]command:[command].
","User[user-name](IP:[ip-address]ID:[user-id])logout.
","5","用户注销.
","HTTPD/6/PASS","HTTPD/4/IMPORTFAIL","HTTPD/6/PASS","1.
正常运行信息,无需处理.
""PASS","task:[task-name]ip:[ip-addrss]user:[user-name]command:[command].
","User[user-name](IP:[IP-address]ID:[user-id])loginsucceeded.
","6","Web登录成功.
","user-name:用户名.
IP-address:IP地址.
user-id:用户ID.
","用户登录成功.
","HTTPD/4/UPLOADFAIL","1.
正常运行信息,无需处理.
""UPLOADFAIL","task:[task-name]ip:[ip-addrss]user:[user-name]command:[command].
","TheuserfailedtouploadthefileonthewebUI.
(Task=task-name,Ip=ip-address,User=user-name,Vrf=virtual-system,FileName=[file-name])","4","用户通过Web界面上传文件失败.
","·设备存储空间不足·文件格式错误","1.
请确认是否有权限访问或下载文件.
","1.
检查存储空间,删除无用文件.
2.
检查文件格式是否正确.
","HTTPD/5/UPLOADSUCC""UPLOADSUCC","task:[task-name]ip:[ip-addrss]user:[user-name]command:[command].
","TheuseruploadedthefilesuccessfullyonthewebUI.
(Task=task-name,Ip=ip-address,User=user-name,Vrf=virtual-system,FileName=[file-name])","5","用户通过Web界面成功上传文件.
","HWCM/4/CCOPY","1.
请确认是否有权限访问或下载文件.
","HWCM/4/CCOPY","1.
正常运行信息,无需处理.
""HWCM","CCOPY","Configurationcopy.
(OperationType=[integer],OptTime=[TIMETICK],OptState=[integer],OptEndTime=[TIMETICK])","4","配置COPY操作.
","OperationType:操作类型.
OptTime:操作时间.
OptState:操作状态.
OptEndTime:操作结束时间.
","用户通过MIB对配置文件进行保存操作.
","HWCM/5/TRAPLOG","1.
正常运行信息,无需处理.
""TRAPLOG","CCOPY","OID[oid]configurechanged.
(EventIndex=[integer],CommandSource=[integer],ConfigSource=[integer],ConfigDestination=[integer])","5","配置发生更改.
","oid:OID值.
EventIndex:事件索引.
CommandSource:命令源.
ConfigSource:配置源.
ConfigDestination:配置目的.
","当配置发生改变,记录日志.
","IFNET/4/ACOAM_ENABLE_FAIL","1.
正常运行信息,无需处理.
""IFNET","ACOAM_ENABLE_FAIL","FailedtonotifyApplicationmoduleoftheACOAMCFGevent.
(Application=[STRING])","4","通告应用模块ACOAM配置事件失败.
","Application:应用模块名称.
","向应用模块通告ACOAM配置事件出错.
","1.
执行displaydiagnostic-information命令,保存显示结果,并联系华为技术支持工程师.
","IFNET/5/ACOAM_STATE_CHANGE""ACOAM_STATE_CHANGE","ACOAM_ENABLE_FAIL","TheOAMManagerdetectedinterfacestateschange.
(InterfaceName=[STRING],State=[STRING])","5","OAMManager检测到接口状态改变.
","InterfaceName:接口名称.
State:接口的链路层协议状态.
具体情况如下:1、Up:接口的链路层协议处于正常运行状态.
2、Down:接口的链路层协议不正常.
","配置oamdetect命令后,OAMmanager收到ACOAM状态变化消息.
","IFNET/6/APP_NOTIFY_FAULT","1.
正常运行信息,无需处理.
""APP_NOTIFY_FAULT","ACOAM_ENABLE_FAIL","TheApplicationmodule[module]oftheinterface[interface-name].
","6","应用模块通告故障.
","[module]:模块名.
[interface-name]:接口名称.
","App模块进行故障通告.
","IFNET/4/BOARD_DISABLE","1.
正常运行信息,无需处理.
""BOARD_DISABLE","ACOAM_ENABLE_FAIL","Board[board-number]hasbeenunavailable.
","4","单板不可用.
","[board-number]:接口板号.
","接口板被拔出.
","IFNET/4/BOARD_ENABLE","1.
正常运行信息,无需处理.
""BOARD_ENABLE","ACOAM_ENABLE_FAIL","Board[board-number]hasbeenavailable.
","4","单板可用.
","接口板被插入机框中.
","接口板被拔出.
","IFNET/4/BWRATE_IN_RESUME","1.
正常运行信息,无需处理.
""BWRATE_IN_RESUME","ACOAM_ENABLE_FAIL","Interfaceinputflowbandwidthusagewasrestoredtothelogthreshold.
(Interface=[interface],BandWidthUsage=[usage],LogThreshold=[threshod])","4","接口入带宽利用率低于配置的恢复阈值.
","Interface:接口名称.
BandWidthUsage:当前带宽利用率.
LogThreshold:接口当前配置的阈值.
","IFNET/4/BWRATE_IN_RISING","Interface:接口名称.
BandWidthUsage:当前带宽利用率.
LogThreshold:接口当前配置的阈值.
","1.
正常运行信息,无需处理.
""BWRATE_IN_RISING","ACOAM_ENABLE_FAIL","Interfaceinputflowbandwidthusageexceededthelogthreshold.
(Interface=[interface],BandWidthUsage=[usage],LogThreshold=[threshod])","4","接口入带宽利用率超过配置的阈值.
","1.
如果此条日志出现后,很长时间没有出现BWRATE_IN_RESUME日志,可以考虑扩容.
","IFNET/4/BWRATE_IN_RISING","1.
如果此条日志出现后,很长时间没有出现BWRATE_IN_RESUME日志,可以考虑扩容.
","IFNET/4/BWRATE_OUT_RESUME""BWRATE_OUT_RESUME","ACOAM_ENABLE_FAIL","Interfaceoutputflowbandwidthusagewasrestoredtothelogthreshold.
(Interface=[interface],BandWidthUsage=[usage],LogThreshold=[threshod])","4","接口出带宽利用率低于配置的恢复阈值.
","IFNET/4/BWRATE_OUT_RISING","IFNET/4/BWRATE_IN_RISING","IFNET/4/BWRATE_OUT_RISING","1.

正常运行信息,无需处理.
""BWRATE_OUT_RISING","ACOAM_ENABLE_FAIL","Interfaceoutputflowbandwidthusageexceededthelogthreshold.
(Interface=[interface],BandWidthUsage=[usage],LogThreshold=[threshod])","4","接口出带宽利用率超过配置的阈值.
","1.
如果此条日志出现后,很长时间没有出现BWRATE_OUT_RESUME日志,可以考虑扩容.
","IFNET/4/BWRATE_IN_RISING","1.
如果此条日志出现后,很长时间没有出现BWRATE_OUT_RESUME日志,可以考虑扩容.
","IFNET/4/CARD_DISABLE""CARD_DISABLE","ACOAM_ENABLE_FAIL","Board[board-number]card[card-number]hasbeenunavailable.
","4","单板上的接口卡不可用.
","[board-number]:接口板号.
[card-number]:接口卡号.
","接口卡被拔出.
","IFNET/4/CARD_ENABLE","1.
正常运行信息,无需处理.
""CARD_ENABLE","ACOAM_ENABLE_FAIL","Board[board-number]card[card-number]hasbeenavailable.
","4","单板上的接口卡可用.
","接口卡被插入单板.
","接口卡被拔出.
","IFNET/4/CHANGE_ENCAP","1.
正常运行信息,无需处理.
""CHANGE_ENCAP","ACOAM_ENABLE_FAIL","Theuserperformedtheconfigurationthatwillchangetheencapsulationprotocolofthelinkandthenselected[STRING].
","4","用户当前配置会改变链路层协议类型,需要用户确认.
","[STRING]:用户确认是否更改链路层协议类型.
·Y:用户确认更改链路层协议类型.
·N:用户确认不更改链路层协议类型.
","用户更改链路层协议类型.
","IFNET/4/FLOWDOWN","1.
正常运行信息,无需处理.
""FLOWDOWN","ACOAM_ENABLE_FAIL","ThestateofinterfaceturnedtoDOWNbecauseofFLOWDOWN.
(Interface=[STRING],SysUpTime=[ULONG])","4","接口的状态发生变化.
","Interface:接口名称.
SysUpTime:系统启动时间.
","流量状态发生变化.
","IFNET/4/FLOWUP","1.
正常运行信息,无需处理.
""FLOWUP","ACOAM_ENABLE_FAIL","ThestateofinterfaceturnedtoUPbecauseofFLOWUP.
(Interface=[STRING],SysUpTime=[ULONG])","4","IFNET/4/IF_DISABLE","Interface:接口名称.
SysUpTime:系统启动时间.
","流量状态发生变化.
","IFNET/4/FLOWUP","1.
正常运行信息,无需处理.
""IF_DISABLE","ACOAM_ENABLE_FAIL","Interface[interface-name]hasbeenunavailable.
","4","接口不可用.
","[interface-name]:接口名称.
","接口转变为不可用状态.
","IFNET/4/IF_ENABLE","1.
正常运行信息,无需处理.
""IF_ENABLE","ACOAM_ENABLE_FAIL","Interface[interface-name]hasbeenavailable.
","4","接口可用.
","接口转变为可用状态.
","接口转变为不可用状态.
","IFNET/6/IF_INFO_CHANGE","1.

正常运行信息,无需处理.
""IF_INFO_CHANGE","ACOAM_ENABLE_FAIL","Theinterface[interface-name]changedthe[property-name]from[old-value]to[new-value].
","6","接口的属性值发生变化.
","[interface-name]:接口名[property-name]:接口属性名[old-value]:接口属性原值[new-value]:接口属性新值","IFNET/4/IF_STATE","[interface-name]:接口名[property-name]:接口属性名[old-value]:接口属性原值[new-value]:接口属性新值","1.
正常运行信息,无需处理.
""IF_STATE","ACOAM_ENABLE_FAIL","Interface[interface-name]hasturnedinto[state]state.
","4","[interface-name]:接口名称.
[state]:链路层协议状态.
具体情况如下1、Up:接口的链路层协议处于正常运行状态.
2、Down:接口的链路层协议不正常.
","Interface:接口名称.
SysUpTime:系统启动时间.
","接口状态发生变化.
","IFNET/4/LINK_STATE","1.
正常运行信息,无需处理.
""LINK_STATE","ACOAM_ENABLE_FAIL","Thelineprotocol[line-protocol]ontheinterface[interface-name]hasenteredthe[state]state.
","4","接口的链路协议状态变化.
","[line-protocol]:链路层协议名称.
[interface-name]:接口名.
[state]:链路层协议状态.
具体情况如下:1、UP:接口的链路层协议处于正常运行状态.
2、DOWN:接口的链路层协议不正常.
","接口的链路协议状态发生改变.
","IFNET/6/LSP_STATE_CHANGE","1.
正常运行信息,无需处理.
""LSP_STATE_CHANGE","ACOAM_ENABLE_FAIL","TheOAMManagerreceivedtheBFDforLSPstatechangedmessage.
(State=[STRING],Session=[ULONG])","6","OAMManager收到BFDforLSP状态改变消息.
","State:BFDforLSP的状态.
Session:BFD会话.
","收到BFDforLSP状态变化消息.
","IFNET/4/NOTIFY_BFD_FAIL","1.
正常运行信息,无需处理.
""NOTIFY_BFD_FAIL","ACOAM_ENABLE_FAIL","FailedtonotifyApplicationmoduleoftheBFDstatechangeevent.
(Application=[STRING])","4","通告应用模块BFD状态变化事件失败.
","向应用模块通告BFD状态变化事件出错.
","向应用模块通告ACOAM配置事件出错.
","IFNET/4/NTF_ACOAM_STATE_FAIL","IFNET/5/ACOAM_STATE_CHANGE""NTF_ACOAM_STATE_FAIL","ACOAM_ENABLE_FAIL","FailedtonotifyApplicationmoduleoftheACOAMstatechangeevent.
(Application=[STRING])","4","通告应用模块ACOAM状态变化事件失败.
","向应用模块通告ACOAM状态变化事件出错.
","向应用模块通告ACOAM配置事件出错.
","IFNET/6/NTF_STATE_CHANGE","IFNET/5/ACOAM_STATE_CHANGE""NTF_STATE_CHANGE","ACOAM_ENABLE_FAIL","TheOAMManagerinterfacefaultnotifystatechange.
(InterfaceName=[STRING],State=[STRING])","6","OAMManager接口故障通告状态改变.
","InterfaceName:接口名称.
State:状态.
","配置oamnotify命令后,OAMmanager收到APP状态变化消息.
","IFNET/4/OUT_OF_MEMORY","1.
正常运行信息,无需处理.
""OUT_OF_MEMORY","ACOAM_ENABLE_FAIL","Insufficientmemory.
","4","IFNET/6/PW_STATE_CHANGE","内存不足.
","无:无","内存不足.
","IFNET/5/ACOAM_STATE_CHANGE""PW_STATE_CHANGE","ACOAM_ENABLE_FAIL","TheOAMManagerreceivedtheBFDforPWstatechangedmessage.
(State=[STRING],Session=[ULONG])","6","OAMManager收到BFDforPW状态改变消息.
","State:状态.
Session:BFDSessionIndex.
","收到BFDforPW状态变化消息.
","IFNET/6/REPEAT_NOTIFY","1.
正常运行信息,无需处理.
""REPEAT_NOTIFY","ACOAM_ENABLE_FAIL","TheApplicationmodulerepeatedlynotifiedthefault.
(InterfaceName=[STRING],State=[STRING])","6","应用模块重复通告故障.
","InterfaceName:接口名称.
State:接口的链路层协议状态.
","应用模块进行重复故障通告.
","IGMP/4/INT_INV","IFNET/5/ACOAM_STATE_CHANGE""IGMP","INT_INV","InVPNinstance\"[vpn-instance-name]\",aMtracepacketreceivedonanunknowninterfacewasdiscarded.
(FlCode=[STRING][ULONG])","4","在未知接口收到一个Mtrace报文.
","[vpn-instance-name]:VPN实例名.
FlCode:输出日志的文档信息,包括文档标识符和行号.
","接口没有配置IP地址.
","1.
在接口视图下使用displaythis命令查看接口是否配置了IP地址.
2.
在接口视图下使用ipaddressip-address{mask|mask-length}命令为接口配置IP地址.
3.
结束.
","IGMP/4/REG_ACL_F""REG_ACL_F","INT_INV","InVPNinstance\"[vpn-instance-name]\",registeringACLupdatecallbackfunctionsfailed.
(FlCode=[STRING][ULONG])","4","IGMP向MRM注册ACL更新回调函数失败.
","[vpn-instance-name]:VPN实例名称.
FlCode:输出日志的文档信息,包括文档标识符和行号.
","调用MRM接口向MRM添加ACLName失败.
","1.
重新配置使用命名型ACL的命令.
","IGMP/4/SET_IGMP_GLBPLC_FAIL""SET_IGMP_GLBPLC_FAIL","INT_INV","InVPNinstance\"[vpn-instance-name]\",failedtosettheIGMPglobalapplicationpolicy.
(FlCode=[STRING][ULONG])","4","为接口设置IGMP应用策略失败.
","为接口配置IGMP时,向底层设置接口应用策略失败.
","调用MRM接口向MRM添加ACLName失败.
","1.
在接口上执行undoigmpenable命令,并重新配置IGMP.
2.
如果每次重新配置都出现这条日志,请联系华为技术支持工程师.
","IGMP/6/GLB_ENTRY""GLB_ENTRY","INT_INV","InVPNinstance\"[vpn-instance-name]\",IGMPdiscardedthereceivedreport([source-address],[group-address])becausethenumberofIGMPgroupmembershipsinallVPNinstancesreachedthelimit.
ThecurrentstatisticalnumberofIGMPgroupmembershipsis[statistical-number].
(FlCode=[STRING][ULONG])","6","收到的IGMPReport消息因所有实例下IGMP表项个数达到限制值而被丢弃.
","[vpn-instance-name]:VPN实例名称.
[source-address]:源地址.
[group-address]:组地址.
[statistical-number]:IGMP表项个数限制值.
FlCode:输出日志的文档信息,包括文档标识符和行号.
","在配置了所有实例IGMP限制的情况下,收到的IGMPReport消息因所有实例下IGMP表项个数达到了限制值而被丢弃.
","IGMP/6/GLB_LIMIT","1.
正常运行信息,无需处理.
""GLB_LIMIT","INT_INV","InallVPNinstances,thenumberofexistedIGMPgroupmembershipsexceededthelimit.
(FlCode=[STRING][ULONG])","6","当前所有实例IGMP表项个数已经超过配置的限制值.
","FlCode:输出日志的文档信息,包括文档标识符和行号.
","在配置了所有实例IGMP限制的情况下,所有实例的IGMP表项个数已经超过了限制值.
","IGMP/6/IF_ENTRY","1.

正常运行信息,无需处理.
""IF_ENTRY","INT_INV","InVPNinstance\"[vpn-instance-name]\",IGMPdiscardedthereceivedreport([source-address],[group-address])becausethenumberofIGMPgroupmembershipsreachedthelimitontheinterface[interface-name].
ThecurrentstatisticalnumberofIGMPgroupmembershipsis[statistical-number].
(FlCode=[STRING][ULONG])","6","从接口收到的IGMPReport消息因该接口IGMP表项个数达到了限制值而被丢弃.
","[vpn-instance-name]:VPN实例名称.
[source-address]:源地址.
[group-address]:组地址.
[interface-name]:接口名称.
[statistical-number]:IGMP表项个数限制值.
FlCode:输出日志的文档信息,包括文档标识符和行号.
","在接口配置了IGMP限制的情况下,从该接口收到的IGMPReport消息因该接口下IGMP表项个数达到了限制值而被丢弃.
","IGMP/6/IF_LIMIT","1.
正常运行信息,无需处理.
""IF_LIMIT","INT_INV","InVPNinstance\"[vpn-instance-name]\",thenumberofexistedIGMPgroupmembershipsexceededthelimitonthisinterface.
(FlCode=[STRING][ULONG])","6","当前接口IGMP表项个数已经超过配置的限制值.
","在当前接口配置了IGMP限制的情况下,接口下的IGMP表项个数已经超过了限制值.
","调用MRM接口向MRM添加ACLName失败.
","IGMP/6/INST_ENTRY","1.
正常运行信息,无需处理.
""INST_ENTRY","INT_INV","InVPNinstance\"[vpn-instance-name]\",IGMPdiscardedthereceivedreport([source-address],[group-address])becausethenumberofIGMPgroupmembershipsinthisVPNinstancereachedthelimit.
ThecurrentstatisticalnumberofIGMPgroupmembershipsis[statistical-number].
(FlCode=[STRING][ULONG])","6","收到的IGMPReport消息因该实例下IGMP表项个数达到了配置的限制值而被丢弃.
","在当前实例下配置了IGMP限制的情况下,收到的IGMPReport消息因该实例IGMP表项个数达到了限制值而被丢弃.
","在配置了所有实例IGMP限制的情况下,收到的IGMPReport消息因所有实例下IGMP表项个数达到了限制值而被丢弃.
","IGMP/6/INST_LIMIT","1.
正常运行信息,无需处理.
""INST_LIMIT","INT_INV","InVPNinstance\"[vpn-instance-name]\",thenumberofexistedIGMPgroupmembershipsexceededthelimit.
(FlCode=[STRING][ULONG])","6","当前实例IGMP表项个数已经超过配置的限制值.
","在当前实例配置了IGMP限制的情况下,当前实例下的IGMP表项个数已经超过了限制值.
","调用MRM接口向MRM添加ACLName失败.
","IGMP/6/VER1_RECV_INV","1.
正常运行信息,无需处理.
""VER1_RECV_INV","INT_INV","InVPNinstance\"[vpn-instance-name]\",ignoredthereceivedIGMPqueryofversion[version]onIGMPv1interface[interface-name]([ip-address]).
(FlCode=[STRING][ULONG])","6","处于V1模式的接口收到的不同版本的IGMP查询消息,则忽略此查询消息.
","[vpn-instance-name]:VPN实例名.
[version]:版本号.
[interface-name]:接口名称.
[ip-address]:接口地址.
FlCode:输出日志的文档信息,包括文档标识符和行号.
","原因1:V1模式下的接口收到其他版本查询.
原因2:60秒后,处于V1模式的接口再次收到高版本的IGMP查询.
","IGMP/6/VER2_RECV_INV","1.
正常运行信息,无需处理.
""VER2_RECV_INV","INT_INV","InVPNinstance\"[vpn-instance-name]\",ignoredthereceivedIGMPqueryofversion[version]onIGMPv2interface[interface-name]([ip-address]).
(FlCode=[STRING][ULONG])","6","处于V2模式的接口收到高版本或非法的IGMP查询消息,则忽略此查询消息.
","原因1:V2模式下的接口收到其他版本查询.
原因2:60秒后,处于V2模式的接口再次收到高版本的IGMP查询.
","原因1:V1模式下的接口收到其他版本查询.
原因2:60秒后,处于V1模式的接口再次收到高版本的IGMP查询.
","IGMP/6/VER3_RECV_INV","1.
正常运行信息,无需处理.
""VER3_RECV_INV","INT_INV","InVPNinstance\"[vpn-instance-name]\",ignoredthereceivedIGMPqueryofversion[version]onIGMPv3interface[interface-name]([ip-address]).
(FlCode=[STRING][ULONG])","6","处于V3模式的接口,收到不可识别查询,忽略此查询消息.
","原因1:V3模式下的接口收到其他版本查询.
原因2:60秒后,处于V3模式的接口再次收到高版本的IGMP查询.
","原因1:V1模式下的接口收到其他版本查询.
原因2:60秒后,处于V1模式的接口再次收到高版本的IGMP查询.
","INFO/4/DBG_ALL","1.
正常运行信息,无需处理.
""INFO","DBG_ALL","Whendecidingwhethertoturningonallthedebuggingswitches,theuserchose[Y/N].
","4","当决定是否打开所有调试开关时,用户进行了选择.
","Y/N:用户执行操作的类型.
选择y执行该操作;选择n不支持该操作.
","执行debuggingall命令时,记录用户输入的参数.
","INFO/4/FILE_DELETE","1.
正常运行信息,无需处理.
""FILE_DELETE","DBG_ALL","Thefile"[filename]"conflictswithlogfiledirectory,deleteit.
","4","日志文件的名称和日志文件夹名称冲突,删除日志文件.
","filename:日志文件名称.
","·原因1:系统在创建文件夹时,先创建同名文件,再把文件的属性改为文件夹,在修改属性时可能发生失败,导致创建了一个和日志文件夹同名的文件.
·原因2:用户手动在设备上创建了和日志文件夹同名的文件.
","INFO/4/FILE_RENAME","1.
正常运行信息,无需处理.
""FILE_RENAME","DBG_ALL","Thefile"[OldName]"conflictswithlogfiledirectory,itisrenamedto"[NewName]".
","4","日志文件和日志文件夹名字冲突,对日志文件进行重命名.
","OldName:修改前的日志文件名称.
NewName:修改后的日志文件名称.
","INFO/6/LOGFILE_DELETED","INFO/4/FILE_RENAME","1.
正常运行信息,无需处理.
""LOGFILE_DELETED","DBG_ALL","Thelogfile[filename]isdeletedsuccessfully.
","6","日志文件成功删除.
","filename:删除的日志文件名.
","日志文件个数超过设置的上限,或磁盘剩余空间不足30M.
","1.
确认是否需要保存设备上即将被自动删除的旧的日志文件.
","INFO/4/RST_LOGB""RST_LOGB","DBG_ALL","Whendecidingwhethertoresetthelogbuffer,theuserchose[Y/N].
","4","当决定是否重置日志缓冲区时,用户进行了选择.
","执行resetlogbuffer命令时,记录用户输入的参数.
","执行debuggingall命令时,记录用户输入的参数.
","INFO/4/SUPPRESS_LOG","1.
正常运行信息,无需处理.
""SUPPRESS_LOG","DBG_ALL","Lastmessagerepeated[times]times.
(InfoID=[info-id],ModuleName=[module-name],InfoAlias=[info-alias])","4","最后一条消息重复次数.
","times:重复次数.
info-id:重复日志ID.
module-name:重复日志所属模块名.
info-alias:重复日志的日志别名.
","当系统连续产生重复的日志时,第一条日志正常记录,后续重复的日志只记录重复次数.
如果其他日志上送或者输出时间超时,触发重复次数日志上送.
","INFO/5/FILTERINFOID_FAIL","1.