Previous topic |
Next topic |
Contents |
Contact z/OS |
Library |
PDF
EZD0919I z/OS Communications Server: IP Messages Volume 2 (EZB, EZD) SC27-3655-01 |
|
EZD0919I Local security endpoint IP address cannot be determined from
IP address range ( ip_range ) errid = errid ExplanationWhile attempting to activate a dynamic tunnel, the IKE daemon could not determine the local security endpoint IP address for the tunnel. Usually this is caused by specifying IP addresses and the RemoteIpGranularity and LocalIpGranularity parameters on the IpLocalStartAction statement in the configuration policy that resolve to ranges of IP addresses. ip_range is the address range from which the IKE daemon was trying to obtain the endpoint location. errid is a unique error ID for the occurrence of this message. System actionThe dynamic tunnel activation failed; IKE daemon processing continues. Operator responseReview and alter the IPSec configuration as necessary in order for the IKE daemon to be able to determine a local IP address. See the information about Policy Agent and policy applications in z/OS Communications Server: IP Configuration Reference for more information about configuring policy. After you review your configuration, if you believe that the IKE daemon should be able to determine the source IP address, contact the system programmer. System programmer responseContact IBM® software support services with the errid and provide a syslog that includes this message. If available, provide a CTRACE for component SYSTCPIK. Modulepolicymgr.cpp Procedure namePMGet_Phase1Rule |
Copyright IBM Corporation 1990, 2014
|