z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


EZD0825I

z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
SC27-3655-01

EZD0825I
UDP encapsulated ESP unsupported protocol: timestamp sipaddr= sipaddr dipaddr= dipaddr proto= proto vpnaction= vpnaction tunnelID= tunID ESPSPI= ESPindex

Explanation

A UDP-encapsulated ESP packet was decapsulated, and the resulting packet contained a protocol other than TCP, UDP or ICMP. No other protocols are supported for a UDP-encapsulated ESP tunnel when the remote tunnel endpoint is a security gateway behind a NAT.

timestamp is the stack timestamp that indicates the time at which the IP packet was processed by the stack. This time is retrieved from the system time-of-day clock, which usually reflects coordinated universal time. This timestamp might be different than the syslogd message timestamp.

sipaddr is the public source IP address.

dipaddr is the destination IP address.

proto is the protocol from the decapsulated packet. Possible values are:
  • IGMP(2)
  • IP(4)
  • OSPF(89)
  • IPIP(94)
  • The protocol number

vpnaction is the name specified on the IpDynVpnAction statement.

tunID is the tunnel ID.

ESPindex is the ESP security parameter index.

System action

The packet is discarded and TCP/IP processing continues.

Operator response

None.

System programmer response

None.

Module

EZATRZOS

Procedure name

trmd_ipsec_log

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014