EZD1104I

Explanation
 The Internet Key Exchange (IKE) daemon is initiating
a tunnel-mode Security Association (SA) for a new dynamic tunnel with
a non-z/OS peer.  The SA traverses a NAT.  There might be  problems
with interoperability with the non-z/OS peer for a tunnel-mode SA.
  z/OS® is providing NAT Traversal
support for a defined group of configurations  where z/OS is running the IKE daemon.  See the information
about IP security in z/OS Communications Server: IP Configuration
Guide for a description of the supported configurations
and  interoperability considerations.

System action
 The SA negotiation continues.

Operator response
 If the SA negotiation fails or if data cannot
be successfully sent over the SA,  contact the system programmer.

System programmer response
 Determine whether there is an interoperability
concern that caused the SA  negotiation or data to fail.  See the
information about IP security in z/OS Communications Server: IP Configuration
Guide for a description of the supported configurations
and  interoperability considerations.
 A possible solution is
to use transport-mode  IpDataOffers.  See the information about the Policy Agent and policy applications in z/OS Communications Server: IP Configuration
Reference for more  information about configuring 
policy.

Module
 oakley_phaseII.cpp

Procedure name
  None.