z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


EZD1085I

z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
SC27-3655-01

EZD1085I
A message was discarded because it was received from a remote peer behind an NAPT - src IP : sourceIP src port : sourceport dest IP :destIP dest port : destport

Explanation

The Internet Key Exchange (IKE) daemon is not permitted to allow a Security Association (SA) with a remote peer behind a network address port translation (NAPT). Therefore, any IKE message received from a remote peer with a source port other than 500 or 4500 will be discarded.

sourceIP is the source IP address.

sourceport is the source port.

destIP is the destination IP address.

destport is the destination port.

System action

The IKE message from the remote peer will be discarded; the IKE daemon continues.

Operator response

Contact the system programmer.

System programmer response

Notify the administrator of the remote security endpoint that the IKE daemon cannot accept messages from a peer behind an NAPT.

Module

simple_net.cpp

Procedure name

None.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014