An IKE message failed to be processed because an SPI size was not valid.
Additional diagnostic messages that have the same message instance number will be issued to identify the impacted Security Association (SA). The message instance number precedes the message number in the log output and is used to group related messages from the IKE daemon.
SPI_size_exp is the expected SPI size.
SPI_size is the SPI size found.
protocol_id is the protocol ID.
proposal is the proposal number or -1 if this message was not part of an SA negotiation.
Contact the system programmer.
Contact the system programmer.
Notify the administrator of the remote security endpoint that you received a proposal that was not valid and ask the administrator to ensure that their policy is configured correctly.
doi.cpp, infoXchg.cpp, policy.cpp
None.