z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


EZD0919I

z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
SC27-3655-01

EZD0919I
Local security endpoint IP address cannot be determined from IP address range ( ip_range ) errid = errid

Explanation

While attempting to activate a dynamic tunnel, the IKE daemon could not determine the local security endpoint IP address for the tunnel. Usually this is caused by specifying IP addresses and the RemoteIpGranularity and LocalIpGranularity parameters on the IpLocalStartAction statement in the configuration policy that resolve to ranges of IP addresses.

ip_range is the address range from which the IKE daemon was trying to obtain the endpoint location.

errid is a unique error ID for the occurrence of this message.

System action

The dynamic tunnel activation failed; IKE daemon processing continues.

Operator response

Review and alter the IPSec configuration as necessary in order for the IKE daemon to be able to determine a local IP address. See the information about Policy Agent and policy applications in z/OS Communications Server: IP Configuration Reference for more information about configuring policy. After you review your configuration, if you believe that the IKE daemon should be able to determine the source IP address, contact the system programmer.

System programmer response

Contact IBM® software support services with the errid and provide a syslog that includes this message. If available, provide a CTRACE for component SYSTCPIK.

Module

policymgr.cpp

Procedure name

PMGet_Phase1Rule

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014