z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


EZD1108I

z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
SC27-3655-01

EZD1108I
Unable to retransmit message - associated phase 1 security association has expired

Explanation

The Internet Key Exchange (IKE) daemon attempted to retransmit a message using a phase 1 security association (SA) that is expired. This might occur in a NAT environment when the IP address of the remote security endpoint is remapped.

Additional diagnostic messages that have the same message instance number will be issued to identify the impacted SA. The message instance number precedes the message number in the log output and is used to group related messages.

System action

The message was not retransmitted and the SA negotiation failed; the IKE daemon continues.

Operator response

Verify that the required tunnels are activated, and if necessary, activate or refresh any required tunnels using the ipsec command. See the information about the managing network security in z/OS Communications Server: IP System Administrator's Commands or issue the man ipsec command in a z/OS® UNIX shell to obtain information about the ipsec command syntax and options.

System programmer response

None.

Module

retrans.cpp

Procedure name

None.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014