z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


EZD1113I

z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
SC27-3655-01

EZD1113I
A delete message is being sent with LocalIp ANY for phase 1 security association p1sa_id (LocalIp : local_ip RemoteIp : remote_ip)

Explanation

A delete message is being sent to the IKE peer to terminate the phase 1 Security Association identified by the p1sa_id value between the local IP address specified by the local_ip value and the remote IP address specified by the remote_ip value. However, the local stack has already deleted its end of the tunnel. To insure that the delete message can be sent, the local_ip value is set to the value ANY (INADDR_ANY for IPv4 or IN6ADDR_ANY for IPv6).

In the message text:

p1sa_id
The phase 1 SA ID.
local_ip
The local IP address.
remote_ip
The remote IP address.

System action

The IKE daemon continues.

Operator response

With a source address value ANY, it is possible that the IKE peer might not handle the delete message. Some IKE implementations might require the source IP address as part of the tunnel identification process. If this message was received after the manual deletion of a DVIPA address, then use the ipsec command to deactivate tunnels that involve DVIPA addresses prior to manually deleting the DVIPA.

See the information about the managing network security in z/OS Communications Server: IP System Administrator's Commands or issue the man ipsec command in a z/OS® UNIX shell to obtain information about the ipsec command syntax and options.

System programmer response

None.

User response

Not applicable.

Problem determination

Not applicable.

Source

z/OS Communication Server TCP/IP other application

Module

infoXchg.cpp

Example

Not applicable.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014