z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


EZD1768I

z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
SC27-3655-01

EZD1768I
Transform transform_name attribute type local_attribute_type length local_attribute_length in local proposal local_proposal_number does not match the length remote_attribute_length of attribute type remote_attribute_type in remote proposal remote_proposal_number

Explanation

The Internet Key Exchange (IKE) daemon was unable to accept a proposal because the local and remote IKEv2 Security Association (SA) transform attribute lengths are not the same. IKE daemon processing continues to the next proposal. If no proposals are accepted, the SA negotiation fails. This failure is indicated by message EZD0985I, EZD1021I, or EZD1022I being issued later in syslog.

In the message text:
transform_name
The name of the transform for which the mismatch occurred.
local_attribute_type and remote_attribute_type
The attribute types.
local_attribute_length and remote_attribute_length
The attribute lengths that are not the same.
local_proposal_number and remote_proposal_number
The proposal numbers.

System action

IKE daemon processing continues.

Operator response

None.

System programmer response

If the proposal with the mismatch is the one that should be accepted, notify the administrator of the remote and local security endpoints about the mismatch specification and ask that the configuration be updated with correct values. If the proposal with the mismatch is not the one that should be accepted, you can ignore message EZD1768I. See the information about Policy Agent and policy applications in z/OS Communications Server: IP Configuration Reference for more information about configuring policy.

User response

None.

Problem determination

None.

Source

z/OS® Communications Server TCP/IP: IKE daemon

Module

IKEv2NotifyPayload.cpp

Routing code

11

Descriptor code

7

Automation

This message is output to syslog.

Example

EZD1768I Transform ENCR_AES_CBC attribute type 16384 length 4 in local proposal  1 does not match the 
         length 8 of attribute type 16384 in remote proposal 2

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014