z/OS Communications Server: IP Messages Volume 4 (EZZ, SNM)
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


EZZ8052I

z/OS Communications Server: IP Messages Volume 4 (EZZ, SNM)
SC27-3657-01

EZZ8052I
jobname send to ipaddr blocked by blocker when using intfname

Explanation

OMPROUTE cannot send to the IP address indicated using the specified interface because of restrictions imposed by security policies implemented on the TCP/IP stack.

If the specified IP address is a multicast address, this message is written to the console. The inability to send to any of its OSPF multicast addresses disables OSPF. The inability to send to any RIP version 2 or IPv6 RIP multicast addresses disables that version of RIP or IPv6 RIP. Otherwise, only the interface or IP address that is being blocked is affected, and this message is a debug message that is seen only if OMPROUTE debug messages are enabled.

In the message text:
jobname
The job name of the OMPROUTE application.
ipaddr
The IP address to which OMPROUTE is unable to send using intfname.
intfname
The name of the interface that OMPROUTE is unable to use to send to ipaddr.
blocker
The type of security policy that is blocking OMPROUTE. Possible values are:
NETACCESS
OMPROUTE is blocked as a result of restrictions coded on NETACCESS statements in the TCP/IP profile.
TCPIP
OMPROUTE is blocked as a result of other security policies, including, but not limited to, IP security and Policy Agent.

System action

OMPROUTE continues.

Operator response

Contact the system programmer.

System programmer response

Restricting routing daemons using security policies is not recommended and might affect network connectivity. If you do not want these restrictions, ensure that security products are configured so that the OMPROUTE user ID has full network access. If you want OMPROUTE to be restricted from OSPF multicast addresses, consider not running OMPROUTE or running it with OSPF disabled because OSPF will be ineffective without access to its multicast addresses. If you want OMPROUTE to be restricted from RIP version 2 multicast addresses, consider not running OMPROUTE or running it with RIP version 1 only. If you want OMPROUTE to be restricted from IPv6 RIP multicast addresses, consider not running OMPROUTE or running it with IPv6 RIP disabled.

Module

INRIPOUT, EZA6RIXR

Example

EZZ8052I OMPROUT1 send to 9.67.101.5 blocked by TCPIP when using OSA1

Procedure name

inet_output, inet_output6

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014