z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


EZD1022I

z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
SC27-3655-01

EZD1022I
No proposal chosen with IpFilterRule ( rule ) and IpDynVpnAction ( action )

Explanation

An IKE phase 2 negotiation failed because no proposal in the offer was accepted by the local security endpoint.

Additional diagnostic messages that have the same message instance number will be issued to identify the impacted Security Association (SA). The message instance number precedes the message number in the log output and is used to group related messages from the IKE daemon.

rule is the name of a filter rule.
  • In the policy agent configuration file, rule is the name of a IpFilterRule statement.
  • When configured with the IBM® Configuration Assistant for z/OS® Communications Server, rule is the name of a Connectivity Rule in GUI. rule also contains a numeric suffix appended to the Connectivity Rule name to guarantee uniqueness.
action is the action name.
  • In the policy agent configuration file, action is the name specified on the applicable IpDynVpnAction statement.
  • When configured with the IBM Configuration Assistant for z/OS Communications Server, the action name corresponds to the name of the security level in the GUI. The action name also contains a numeric suffix appended to the security level name to guarantee uniqueness.

System action

The SA negotiation failed; IKE daemon processing continues.

Operator response

This message will be accompanied by one or more EZD1093I messages. See the User or Operator Response in EZD1093I for information about resolving this negotiation failure.

System programmer response

None.

Module

policy.cpp

Procedure name

None.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014