z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


EZD1915I

z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
SC27-3655-01

EZD1915I
Rekey attempt for IKE tunnel tunnel_id rejected because of incomplete exchanges: half_open_count half-open, half_closed_count half-closed, rekey_requested_count rekeying

Explanation

The IKE daemon received a rekey request for the specified IKE tunnel from the IKE peer. The request is rejected to allow incomplete exchanges for one or more of the IKE tunnel's child Security Associations (SAs) to complete before replacing the IKE SA with a new IKE SA.

IKE rejects the rekey request by sending a NO_PROPOSAL_CHOSEN notification to the peer.

In the message text:
tunnel_id
The tunnel prefix and number used to identify the tunnel.
half_open_count
The count of child SAs that are in HALF_OPEN state.
half_closed_count
The count of child SAs that are in HALF_CLOSED state.
ekey_requested_count
The count of child SAs that are in the process of being rekeyed.

System action

The IKE tunnel rekey request fails. IKE daemon processing continues.

Operator response

None.

System programmer response

None.

User response

Not applicable.

Problem determination

None.

Source

z/OS® Communications Server TCP/IP: IKE daemon

Module

IKEv2CreateChildRequest.cpp

Routing code

*

Descriptor code

*

Automation

Not applicable.

Example

EZD1915I Rekey attempt for IKE tunnel K21 rejected because of incomplete exchanges: 1 half-open, 
         0 half-closed, 0 rekeying

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014