EZD0953I   Filter installation failed due to conflict with existing filter

Explanation

An IKE negotiation failed because the IKE daemon was unable to install a dynamic filter in the TCP/IP stack due to a conflict with an existing filter. This error occurs whenever an existing dynamic filter overlaps the new filter partially, or whenever an existing filter exactly matches the new filter. Because of the conflict, the stack cannot determine which filter should take precedence, so the new filter is rejected.

Additional diagnostic messages that have the same message instance number will be issued to identify the impacted Security Association (SA). The message instance number precedes the message number in the log output and is used to group related messages from the IKE daemon.

System action

The SA negotiation failed; IKE daemon processing continues.

Operator response

Change the properties of the tunnel so that the dynamic filter does not conflict with an existing dynamic filter, and restart the negotiation. If the error persists, contact the system programmer.

System programmer response

Contact IBM® software support services and provide a syslog that includes this message. If available, provide a CTRACE for component SYSTCPIK.

Module

stackobj.cpp

Procedure name

None.