IPSec dynamic tunnel deactivation record (subtype 76)

The IPSec dynamic tunnel deactivation record is collected whenever the IKE daemon deactivates a dynamic tunnel. This record contains information about the characteristics of the dynamic tunnel about to be deactivated. If a tunnel is being deactivated as a result of a negotiation failure, some of the fields might be unknown. Fields might be unknown because the negotiation has not progressed far enough to determine a value, such fields have the value 0. If you are using the IPSec NMI, the common IP tunnel section of this SMF record is analogous to the NMsecIPTunnel structure, the dynamic tunnel section is analogous to the NMsecIPDynTunnel structure, the IKE dynamic tunnel section is analogous to the NMsecIPDynamicIKE structure.

Result: When a TCP/IP stack is stopped, dynamic tunnels are not immediately deleted from the IKED. Instead, the IKED waits for the stack to restart so that the stack has the opportunity to send a delete message to the IKE peer. At the time the stack is restarted, you see subtype 76 records for IKED deletion of the dynamic tunnels.

See Table 1 for the contents of the TCP/IP stack identification section. For the IPSec dynamic tunnel activation record, the TCP/IP stack identification section indicates IKE as the subcomponent and X'08' (event record) as the record reason.

See Table 2 for the contents of the common IP tunnel section.

See Table 3 for the contents of the dynamic tunnel section.

See Table 4 for the contents of the IKE dynamic tunnel section.

See Table 5 for the contents of the local client ID section.

See Table 6 for the contents of the remote client ID section.

Table 1 lists the IPSec dynamic tunnel deactivation record self-defining section.

Table 1. IPSec dynamic tunnel deactivation record self-defining section
Offset	Name	Length	Format	Description
0(X'0')	SMF119_HDR	24	EBCDIC	Standard SMF Header; subtype is 76(X'4C')
Self-defining section
24(X'18')	SMF119SD_TRN	2	Binary	Number of triplets in this record (6).
26(X'1A')		2	Binary	Reserved
28(X'1C')	SMF119IDOff	4	Binary	Offset to TCP/IP identification section
32(X'20')	SMF119IDLen	2	Binary	Length of TCP/IP identification section
34(X'22')	SMF119IDNum	2	Binary	Number of TCP/IP identification sections
36(X'24')	SMF119S1Off	4	Binary	Offset to common IP tunnel section
40(X'28')	SMF119S1Len	2	Binary	Length of common IP tunnel section
42(X'2A')	SMF119S1Num	2	Binary	Number of common IP tunnel sections
44(X'2C')	SMF119S2Off	4	Binary	Offset to dynamic tunnel section
48(X'30')	SMF119S2Len	2	Binary	Length of dynamic tunnel section
50(X'32')	SMF119S2Num	2	Binary	Number of dynamic tunnel sections
52(X'34')	SMF119S3Off	4	Binary	Offset to IKE dynamic tunnel section
56(X'38')	SMF119S3Len	2	Binary	Length of IKE dynamic tunnel sections
58(X'3A')	SMF119S3Num	2	Binary	Number of IKE dynamic tunnel sections
60(X'3C')	SMF119S4Off	4	Binary	Offset to local client ID section
64(X'40')	SMF119S4Len	2	Binary	Length of local client ID section
66(X'42')	SMF119S4Num	2	Binary	Number of local client ID sections
68(X'44')	SMF119S5Off	4	Binary	Offset to remote client ID section
72(X'48')	SMF119S5Len	2	Binary	Length of remote client ID section
74(X'4C')	SMF119S5Num	2	Binary	Number of remote client ID sections