EZD0936I   Phase 2 IDs must be IP type addresses

Explanation

An IKE negotiation failed because the identities exchanged during a phase 2 Security Association (SA) negotiation were not IP-type addresses.

Additional diagnostic messages that have the same message instance number will be issued to identify the impacted SA. The message instance number precedes the message number in the log output and is used to group related messages from the IKE daemon.

System action

The SA negotiation failed; IKE daemon processing continues.

Operator response

Contact the system programmer.

System programmer response

Notify the administrator of the remote security endpoint about this error and ask the administrator to ensure that phase 2 IDs are IP-type addresses.

Module

oakley_phaseII.cpp, policy.cpp

Procedure name

None.