z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


EZD1777I

z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
SC27-3655-01

EZD1777I
IKE version version Security Association sa_generation for tunnel tunnel_id has the following attributes - identities : id_protection local authentication : local_auth_method remote authentication : remote_auth_method encryption : encr_function integrity : integ_function PRF : psuedo_random_function DH : dh_group_name lifetime : lifetime lifesize : lifesize

Explanation

This message displays the attributes of a new IKE Security Association (SA).

In the message text:
version
The version of the IKE protocol that was used to create the SA.
sa_generation
The number used to differentiate SAs for the same tunnel. The first SA created for a tunnel is number 1.
tunnel_id
The tunnel prefix and number used to identify the IKE tunnel. The tunnel prefix is K.
id_protection
Indicates whether the confidentiality of the local and remote IKE identities is ensured for the IKE tunnel.
local_auth_method
The method that the remote peer must use to authenticate the local endpoint.
remote_auth_method
The method that IKED must use to authenticate the remote endpoint.
encr_function
The name of the encryption function that the IKE tunnel used to provide data confidentiality.
integ_function
The name of the integrity function that the IKE tunnel used to provide data integrity.
psuedo_random_function
The name of the pseudo-random function that was used to seed the keying material.
dh_group_name
The Diffie-Hellman group ID that was used to generate the keying material.
lifetime
The length of time that the SA lives in seconds.
lifesize
The life size of the SA in kilobytes.

System action

IKE daemon processing continues.

Operator response

None.

System programmer response

None.

User response

Not applicable.

Problem determination

None.

Source

z/OS® Communications Server TCP/IP: IKE daemon

Module

IKEv2IKESA.cpp

Routing code

11

Descriptor code

7

Automation

This message is output to the syslog.

Example

EZD1777I IKE version 1.0 Security Association 1 for tunnel K1 has the following  attributes - 
         identities : unprotected local authentication : PresharedKey  remote authentication : 
         PresharedKey encryption : AES-CBC integrity : HMAC-SHA1  PRF : PRF_HMAC_SHA1 DH : Group5 
         lifetime : 28800 lifesize : NONE 

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014