Step 2: Ensure the IKE daemon's user ID has enough system resources
The user ID under which the IKE daemon runs requires sufficient
system resources when all the z/OS® system's IKE peers attempt to negotiate or renegotiate IPSec tunnels
with z/OS at the same time. If thousands of IKE peers attempt to negotiate or renegotiate
, you might need to adjust certain system parameters upwards to ensure
that IKED does not run out of critical resources. Ensure that IKED
does not run out of the following critical resources:
If thousands of IKE peers attempt to negotiate or renegotiate, you might need to adjust certain system parameters upwards to ensure
that IKED does not run out of critical resources. Ensure that IKED
does not run out of the following critical resources:- Virtual storage
- System message queue space
- UDP queue capacity