The IP address for the data endpoint must be the same as the IP address for the security endpoint when using a transport mode Security Association (SA).

Additional diagnostic messages that have the same message instance number will be issued to identify the impacted SA. The message instance number precedes the message number in the log output and is used to group related messages from the IKE daemon.

location describes the data endpoint. The possible values are local and remote.

dataaddr is the data endpoint IP address.

endptaddr is the security endpoint IP address.

method describes how the SA was initiated. The possible values are locally and remotely.