GETTING ERROR IPIS1201 FOR IPSEC MONITORING

Products

• NetMaster Network Management for TCP/IP
• SOLVE

Issue/Introduction

Customer has told us about the problem:
-

We are getting the following error when we turned on IPSec monitoring (via IPSECNMI=YES on SSI's SSIPARMS):

IPIS1201 IPSECNMI request failed, USS BPX1CON: RetVal=-1 Retcode=00000468 Reason=120D0253.  Only one 

NetMaster is having this error.

Environment

OS : z/OS
   
Release : 12.1
      
Component : CA NetMaster Network Management for TCP/IP

Cause

-

Resolution

NetMaster L2 Support provided us with the details--sent to customer:
-


As specified in the IBM manual, even though it only states dynamic tunnels it also appears it is required for    manual tunnels

as well:

   

The IKE daemon manages dynamic IPSec tunnels and provides a network management interface (NMI) for monitoring   and

controlling IP filtering and IPSec. Because the IKE daemon processes NMI monitoring requests, it must be running to gather

monitoring data for IP filters, manual Security Associations, or dynamic     Security Associations.
-

      

Customer confirmed it as being the solution: We started IKED (IKE daemon) and all is now working.