The Internet Key Exchange (IKE) daemon detected a Diffie-Hellman (DH) group that is not supported. Only groups 1, 2, 5, and 14 are supported.

Additional diagnostic messages that have the same message instance number will be issued to identify the impacted Security Association (SA). The message instance number precedes the message number in the log output and is used to group related messages from the IKE daemon.

transform_id is the value used to identify this transform in an IKE proposal. Supported transforms for IKE SAs are described in Policy Agent and policy applications in z/OS Communications Server: IP Configuration Reference. Phase 1 transforms are specified on a KeyExchangeOffer statement, and phase 2 transforms are specified on an IpDataOffer statement.

DH_group is the ID of the unsupported DH group. DH groups are specified on the DHGroup parameter on a KeyExchangeOffer Statement.