EZD2020A

Explanation
QDIO Accelerator will accelerate only Sysplex Distributor
traffic. Routed traffic cannot be accelerated for one of the following
reasons:You have no IP security filters configured in your TCP/IP profile,
or the current IP security filters configured in your TCP/IP profile
do not explicitly permit all routed traffic.
Filter logging is enabled for routed traffic in your TCP/IP profile.

To satisfy your configured IP filters, routed traffic
must be processed by the TCP/IP stack, where IP filtering is implemented.

System action
 Processing continues with QDIO Accelerator enabled
only for sysplex distributor traffic.

Operator response
 Contact the system programmer.

System programmer response
 No action is required if any of the
following conditions are true:Your security policy requires some routed traffic to be denied
Your security policy requires some routed traffic to be protected
using IPsec
Your security policy requires some routed traffic to be subject
to filter logging
You do not want to use QDIO acceleration for your routed traffic

If your security policy allows all routed traffic to be
permitted and does not require any routed traffic to be subject to
filter logging, you can change the IP security filters configured
in your TCP/IP profile so that QDIO Accelerator is enabled for routed
traffic. To do this, modify the IPSEC statement in your TCP/IP profile:
Ensure that the first IPv4 IPSECRULE statement with
a ROUTING specification of ROUTED or EITHER permits all IPv4 addresses,
all protocols, and all security classes.Tip: If
your rule has a ROUTING specification of EITHER, it applies to both
local and routed traffic. If your security policy does not allow you
to permit all local traffic, split this rule into two rules, one with
a ROUTING specification of ROUTED and one with a ROUTING specification
of LOCAL.

Ensure that this IPSECRULE statement does not specify LOG to enable
filter logging.

For more information, see QDIO Accelerator and IP security in z/OS Communications Server: IP Configuration
Guide.

User response
 Not applicable.

Problem determination
 None.

Source
z/OS® Communications
Server TCP/IP

Module
 EZBIPEPR, EZBISPSW, EZBISEPR, EZBISSFT

Routing code
 10

Descriptor code
 2

Automation
 You can automate on this message to detect situations
when routed traffic is not being QDIO accelerated because of IP filtering
rules.

Example
  EZD2020A QDIO ACCELERATOR IS ENABLED ONLY FOR SYSPLEX DISTRIBUTOR BECAUSE OF TCPIP PROFILE FILTER RULES