EZD1579I PAGENT POLICIES ARE NOT ENABLED FOR image : type
Explanation
The policies indicated by the type value that is defined in a configuration file are not enabled for the TCP/IP stack indicated by the image value. The policies are not enabled because the underlying stack function (for example, AT-TLS or IPSec) is not enabled on the stack.
In the message
text:
- image
- The name of the TCP/IP stack.
- type
- The policy type that is not enabled. Possible values are:
- IPSEC
- IP Filtering, KeyExchange and LocalDynVpn policies
- TTLS
- Application Transparent Transport Layer Security (AT-TLS) policies
System action
The results depend on the type value
as follows:
- IPSEC
- Policy Agent does not parse or read the IPSec configuration file for this image.
- TTLS
- Policy Agent reads and parses the AT-TLS configuration file and
installs the policies, but the TCP/IP stack does not enforce the policies.
If the ServicesConnection statement is configured with Security Secure, then Policy Agent automatically creates an AT-TLS policy for the connection, but the TCP/IP stack does not enforce the policy and the generated AT-TLS policy is not in effect.
Operator response
See the system programmer response.
System programmer response
The action depends on the type value
as follows:
- IPSEC
- If you want IP security to be enabled for IPv4, use the IPCONFIG IPSECURITY statement in the TCP/IP profile to configure the stack for IPv4 IP security. If you want IP security enabled for IPv6, use the IPCONFIG6 IPSECURITY statement in the TCP/IP profile to configure the stack for IPv6 IP security. See the information about IPCONFIG IPSECURITY and IPCONFIG6 IPSECURITY in z/OS Communications Server: IP Configuration Reference and the information about default IP filter policy and IP security Policy in z/OS Communications Server: IP Configuration Guide for more information.
- TTLS
- If you want AT-TLS enabled, configure the stack for AT-TLS using the TTLS parameter on the TCPCONFIG statement in the TCP/IP profile. See the information about the TCPCONFIG statement in z/OS Communications Server: IP Configuration Reference for more information. See the information about the AT-TLS configuration in PROFILE.TCPIP in z/OS Communications Server: IP Configuration Guide for information about how to enable AT-TLS.
User response
Not applicable.
Problem determination
Not applicable.
Source
z/OS® Communications Server TCP/IP: Policy Agent (PAGENT)
Module
plfmmisc.c
Routing code
10
Descriptor code
12
Example
EZD1579I PAGENT POLICIES ARE NOT ENABLED FOR TCPCS1 : IPSEC