z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


EZD1102I

z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
SC27-3655-01

EZD1102I
Negotiation of a phase 1 Security Association due to a remote security endpoint IP address change failed - original IP address / port : origip / origport failed IP address / port : filaedip / failedport

Explanation

This message indicates that a phase 1 Security Association (SA) being negotiated in response to a detected remote security endpoint IP address change failed. The changed IP address (filaedip) that caused the negotiation might be caused by a reboot of the NAT device in front of the remote security endpoint or an expired NAT mapping. The changed IP address (filaedip) might also be caused by a packet with an address that is not valid. This message is associated with a previously issued EZD1086I message.

origip is the IP address of the established SA.

origport is the port of the established SA.

filaedip is the IP address of the failed negotiation.

failedport is the port of the failed negotiation.

System action

Negotiation of the phase 1 SA fails; IKE daemon processing continues.

Operator response

Contact the system programmer.

System programmer response

Check other messages in the system log with this IP address to determine the cause of the failure. If neccessary, notify the administrator of the remote security endpoint about this error

Module

anchor_ureq.cpp, oakley_kep.cpp, oakley_phaseII.cpp, sa.cpp

Procedure name

None.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014