Steps for verifying IPSec processing on zIIP

If attempting to use the zIIP IPSECURITY support (to direct IPSec AH|ESP protocol processing to zIIP), issue the Netstat STATS/-S command while the IPSec workload is running. The inbound and outbound 'Packets Handled by zIIP' counters will be rising if IPSec workload is in fact being processed on zIIP(s). If these counters are not rising while IPSec traffic is flowing, verify (a) GLOBALCONFIG ZIIP IPSECURITY parameters are specified in the TCPIP profile (use Netstat Config/-f to verify); and (b) zIIP(s) are configured to the z/OS® image (use MVS™ D M=CPU command to verify).