Previous topic |
Next topic |
Contents |
Contact z/OS |
Library |
PDF
EZZ8052I z/OS Communications Server: IP Messages Volume 4 (EZZ, SNM) SC27-3657-01 |
|
EZZ8052I jobname send to ipaddr blocked
by blocker when using intfname ExplanationOMPROUTE cannot send to the IP address indicated using the specified interface because of restrictions imposed by security policies implemented on the TCP/IP stack. If the specified IP address is a multicast address, this message is written to the console. The inability to send to any of its OSPF multicast addresses disables OSPF. The inability to send to any RIP version 2 or IPv6 RIP multicast addresses disables that version of RIP or IPv6 RIP. Otherwise, only the interface or IP address that is being blocked is affected, and this message is a debug message that is seen only if OMPROUTE debug messages are enabled. In the message
text:
System actionOMPROUTE continues. Operator responseContact the system programmer. System programmer responseRestricting routing daemons using security policies is not recommended and might affect network connectivity. If you do not want these restrictions, ensure that security products are configured so that the OMPROUTE user ID has full network access. If you want OMPROUTE to be restricted from OSPF multicast addresses, consider not running OMPROUTE or running it with OSPF disabled because OSPF will be ineffective without access to its multicast addresses. If you want OMPROUTE to be restricted from RIP version 2 multicast addresses, consider not running OMPROUTE or running it with RIP version 1 only. If you want OMPROUTE to be restricted from IPv6 RIP multicast addresses, consider not running OMPROUTE or running it with IPv6 RIP disabled. ModuleINRIPOUT, EZA6RIXR Example
Procedure nameinet_output, inet_output6 |
Copyright IBM Corporation 1990, 2014
|