Windows event ID 5451 - An IPsec Quick Mode security association was established

Event ID: 

5451

Category: 

Logon/Logoff

Subcategory: 

IPsec Quick Mode

Supported on: 

Windows Vista, Windows Server 2008

An IPsec Quick Mode security association was established.

Local Endpoint:
Network Address: %1
Network Address mask: %2
Port: %3
Tunnel Endpoint: %4

Remote Endpoint:
Network Address: %5
Network Address Mask: %6
Port: %7
Private Address: %8
Tunnel Endpoint: %9
Protocol: %10
Keying Module Name: %11

Cryptographic Information:
Integrity Algorithm - AH: %12
Integrity Algorithm - ESP: %13
Encryption Algorithm: %14

Security Association Information:
Lifetime - seconds: %15
Lifetime - data: %16
Lifetime - packets: %17
Mode: %18
Role: %19
Quick Mode Filter ID: %20
Main Mode SA ID: %21
Quick Mode SA ID: %22

Additional Information:
Inbound SPI: %23
Outbound SPI: %24
Virtual Interface Tunnel ID: %25
Traffic Selector ID: %26

Note: Virtual Interface Tunnel ID and Traffic Selector ID data is only available on computers running Windows 7 or Windows Server 2008.

Related content