EZD0917I   Could not find applicable KeyExchangeRule - LocalIp : LSIP RemoteIp : RSIP LocalID : LSID RemoteID : RSID

Explanation

The Internet Key Exchange (IKE) daemon could not find an applicable KeyExchangeRule statement for the specified classification. The classification consists of the local security endpoint IP address (LSIP), remote security endpoint IP address (RSIP), local security endpoint identity (LSID), and remote security endpoint identity (RSID). If the remote system is behind a NAT, ensure that the RemoteSecurityEndpoint location in the KeyExchangeRule is the public address of the remote system.

System action

The Security Association (SA) activation failed; IKE daemon processing continues.

Operator response

Add a suitable KeyExchangeRule statement for the classification to the IPSec policy, if necessary. See the information about Policy Agent and policy applications in z/OS Communications Server: IP Configuration Reference for more information about configuring policy.

System programmer response

None.

Module

policymgr.cpp

Procedure name

None.