EZD0960I   Phase 1 proposal contains non-IKE protocol

Explanation

An IKE negotiation failed because the current phase 1 proposal contains a non-IKE protocol. During phase 1, the only protocol allowed is IKE.

Additional diagnostic messages that have the same message instance number will be issued to identify the impacted Security Association (SA). The message instance number precedes the message number in the log output and is used to group related messages from the IKE daemon.

System action

The SA negotiation failed; IKE daemon processing continues.

Operator response

Contact the system programmer.

System programmer response

Notify the administrator of the remote security endpoint that you received a phase 1 message with a non-IKE protocol specified and to verify that their proposal configuration is correct.

Module

policy.cpp

Procedure name

None.