| liveliness_failed | If the liveliness is configured and if probe
does not get the response through the tunnel, the tunnel manager
marks the tunnel down with the extended status as liveliness failed. |
| parent_no_ip | The underlay parent interface on which the
standard VPN tunnel is configured does not have the IP address. |
| peer_address_unresolved | If there is no peer IP address to use. |
| invalid_service_endpoint | Service endpoint configured is not present. |
| peer_auth_failed | Peer authentication failed. |
| parse_error | If the control message parsing failed during
tunnel bring up. |
| cert_expired | If the certificates are expired. |
| cert_revoked | If the certificates are revoked. |
| no_issuer_cert | No Issuer certificate found. |
| retransmit_send_timeout | If no response is seen from the remote. |
| proposal_mismatch_ike | Proposal mismatch in phase-1. |
| proposal_mismatch_child | Proposal mismatch in phase-2. |
| admin_down | Service link is admin down. |
| StandbySpoke | Spoke is Stand up. |
| bringup_wait | Scenarios to move to this state:After
unloading the VPN connection. If the load connection request fails. If the terminate SA request fails.
|
| bring up | When the config is complete and trying to bring
up the connection. |
| hold_down | When the tunnel flaps 3 times with in 120 sec
(2 min), we mark the tunnel to be in hold downstate. |
| internal_resource_unavailable | Parsing psk failed in tunnelmgr. |
| duplicate_endpoints | Already a tunnel is UP with the same Source
and Remote IP. |
| local_auth_failed | Received authentication failed. |
| peer_auth_failed | Detected authentication failed. |
| parse_error | Parsing control message failed. |
| retransmit_send_timeout | No reply from peer retry in progress. |
| half_open_timeout | Timeout for negotiating child sa in phase2. |
| proposal_mismatch_ike | Phase1 proposal mismatch (ike). |
| proposal_mismatch_child | Phase2 proposal mismatch (ipsec). |
| transform_selector_mismatch | Phase2 selectors mismatch (ipsec). |
| install_child_sa_failed | Installing child sa failed. |
| install_child_policy_failed | Installing child policy failed. |
| authorization_failed | When explicit authorization rules are defiled
(remote identity). |
| cert_expired | When the certificate is expired. |
| cert_revoked | Certificate is revoked. |
| no_issuer_cert | No issuer certificate found. |
| unique_replace | Session is uniquely identified uniquely. |
| unique_keep | Keep the session with unique ids. |
| vip_failure | Virtual interface creation failed. |
| retransmit_send | No reply from peer, hence retry in progress. |
| standby_spoke | Standby spoke. |
| lowerlayerdown | Lower layer is down. |
| liveliness_configured | When the tunnel comes up and if liveliness
is configured. |
| tunnel_bringup_up_wait | When the tunnel is in bringup wait state. |
| tunnel_bringup | When the tunnel is in bringup state (loading
the config to charon). |
| multiple_ike_session | When tunnel is reset because of multi ike. |
| invalid_auth_param | When the secret is invalid. |
| config_changed | Configuration was updated. |
| load_failed | Loading the configuration failed. |
| gre_keepalive_configured | GRE keepalive is configured. |
