EZD0979I   Refresh of phase 1 Security Association p1_SA_ID could not be performed

Explanation

The Internet Key Exchange (IKE) daemon could not refresh the specified phase 1 Security Association (SA) because the IKE message queue could not be accessed.

Additional diagnostic messages that have the same message instance value will be issued to further identify the impacted SA. The message instance number precedes the message number in the log output and is used to group related messages from the IKE daemon.

p1_SA_ID is the phase 1 SA ID of this SA.

System action

The SA is not refreshed; IKE daemon processing continues.

Operator response

No action is required, but the SA will expire after the normal lifetime or life-size has been exceeded. To refresh the SA manually, use the ipsec -k refresh command.

See the information about the managing network security information in z/OS Communications Server: IP System Administrator's Commands or issue the man ipsec command in a z/OS® UNIX shell to obtain information about the ipsec command syntax and options.

System programmer response

None.

Module

isakmp_base_sa.cpp

Procedure name

None.