Customer has told us about the problem:
We are getting the following error when we turned on IPSec monitoring (via IPSECNMI=YES on SSI's SSIPARMS):
IPIS1201 IPSECNMI request failed, USS BPX1CON: RetVal=-1 Retcode=00000468 Reason=120D0253. Only one
NetMaster is having this error.
OS : z/OS
Release : 12.1
Component : CA NetMaster Network Management for TCP/IP
NetMaster L2 Support provided us with the details--sent to customer:
As specified in the IBM manual, even though it only states dynamic tunnels it also appears it is required for manual tunnels
The IKE daemon manages dynamic IPSec tunnels and provides a network management interface (NMI) for monitoring and
controlling IP filtering and IPSec. Because the IKE daemon processes NMI monitoring requests, it must be running to gather
monitoring data for IP filters, manual Security Associations, or dynamic Security Associations.
Customer confirmed it as being the solution: We started IKED (IKE daemon) and all is now working.