Local IPSec NMI

Table 1 lists the updates to the Communications Server application interface for local IPSec network management interface (NMI).

Table 1. Summary of new Communications Server IP Local IPSec NMI
Request / Response	Rel.	Description	Reason for change
NMsec_GET_IKETUN NMsec_GET_IKETUNCASCADE	V1R13	The NMsIKETunNATTLevel field is changed to support two additional values: NMsec_IKETUN_NATTV2 (6) and NMsec_IKETUN_NATTV2ZOS (7). The following fields previously reported 0 for all IKEv2 tunnels because NAT traversal was not supported for IKEv2. They are now set appropriately when an IKEv2 tunnel traverses one or more NAT devices: NMsIKETunLclNAT NMsIKETunRmtNAT NMsIKETunRmtNAPT NMsIKETunCanInitP1 NMsIKETunRmtUDPPort	Network address translation traversal support for IKE version 2
NMsec_GET_IKETUNCASCADE NMsec_GET_IPTUNDYNSTACK NMsec_GET_IPTUNDYNIKE	V1R13	The following fields previously reported 0 for all IKEv2 tunnels because NAT traversal was not supported for IKEv2. They are now set appropriately when an IKEv2 tunnel traverses one or more NAT devices: NMsIPDynLclNAT NMsIPDynRmtNAT NMsIPDynRmtNAPT NMsIPDynRmtGW NMsIPDynRmtZOS NMsIPDynCanInitP2 NMsIPDynRmtUDPPort NMsIPDynSrcNATOA NMsIPDynDstNATOA	Network address translation traversal support for IKE version 2
NMsec_GET_IPFLTCURR NMsec_GET_IPFLTDEFAULT NMsec_GET_IPFLTPOLICY	V2R1	A new field. NMsIPFltLogLimit, is defined. For defensive filters it indicates whether filter-match messages are being limited. For all other filter types, it has a value of 0.	Limit defensive filter logging
NMsec_GET_STACKINFO	V2R1	The following changes are made to IPSec NMI response message NMsec_GET_STACKINFO: A new field, NMsStackDVLocalFltr, is added to the NMsecStack structure at offset 0, bit 7. The reserved field NMsStackRsvd1 is updated to begin at offset 0, bit 8 with a length of 24 bits.	APAR PI40291
NMsec_GET_STACKINFO	V2R2		APAR PI44865