An IKE negotiation failed because the IKE daemon was unable to install a dynamic filter in the TCP/IP stack due to a conflict with an existing filter. This error occurs whenever an existing dynamic filter overlaps the new filter partially, or whenever an existing filter exactly matches the new filter. Because of the conflict, the stack cannot determine which filter should take precedence, so the new filter is rejected.
Additional diagnostic messages that have the same message instance number will be issued to identify the impacted Security Association (SA). The message instance number precedes the message number in the log output and is used to group related messages from the IKE daemon.
The SA negotiation failed; IKE daemon processing continues.
Change the properties of the tunnel so that the dynamic filter does not conflict with an existing dynamic filter, and restart the negotiation. If the error persists, contact the system programmer.
Contact IBM® software support services and provide a syslog that includes this message. If available, provide a CTRACE for component SYSTCPIK.
stackobj.cpp
None.