EZD1223I

Explanation
 In a multilevel secure environment, an interface
is configured into a NETACCESS  security zone with an incorrect security
label for the TCPIP job that owns the  interface.  See message EZD1215I
for the security label of the TCPIP job. Local  interface addresses
must be in zones with the same security label as the TCPIP  job. VIPAs
on an unrestricted stack may be in a security zone with any security
 label that is currently active on that system.  VIPAs on a restricted
stack  must be in zones with a security label that is not SYSMULTI
and is equivalent  to the TCPIP job. 
 zonesl is
the security label defined in the SECLABEL field in this SERVAUTH
 profile.  If the SECLABEL field is blank, zonesl will
be <NONE>.
 ipaddress is the
IPv4 or IPv6 address on the local interface. 
 ifcname is
the name of the INTERFACE or IPv4 LINK statement that defined this
 IP address. 
 zonename is the security zone
name defined in the NETACCESS zone entry for this  IP address. 
 zoneentry is
 the NETACCESS zone entry for this IP address.  zoneentry will
 one of the following:  DEFAULT 	 
DEFAULTHOME  
ipaddress/masklength 

 resourcename is the name of the SERVAUTH
resource.   
 profilename is the name of
the SERVAUTH profile that covers this resource  name.

System action
 TCPIP continues.

Operator response
 Contact the system programmer.

System programmer response
 Verify that:   The IP address is intended to be owned by this TCPIP JOB. 
The NETACCESS statement maps the IP address into the correct security
zone. 
The resource name is covered by the intended profile in the SERVAUTH
class. 
The profile has the correct security label defined. 
The security label is defined and active on this system.

 See  z/OS Communications Server: IP Diagnosis Guide for more information about diagnosing TCPIP
access  control problems.

Module
 EZBTIMDF

Procedure name
  MLSCheck