Why is the TCPIP stack issuing EZD1096I Local IP address addr is not available?

The source address used for a Security Association (SA) negotiation must be an address owned by the stack. If the local address is a distributed DVIPA, then the stack must be acting as the distributor. addr is the source address for the attempted negotiation. Otherwise, the Security Association negotiation fails, and message EZD1096I is issued.

If the SA negotiation was locally activated, verify that the IP address is local to this stack. Use the Netstat HOME/-h command to view the list of IP addresses local to this stack.

When configured without the IBM Configuration Assistant for z/OS Communications Server, check for LocalDynVpnRule statements with LocalIp or LocalIpRef parameters that specify an IP address that is not local to this stack and, if necessary, correct the policy.

When configured with the IBM Configuration Assistant for z/OS Communications Server, edit the corresponding Connectivity Rule in the GUI and verify that the local IP address is local to this stack. If your local data endpoint is a single IP address, verify that it is local to this stack. If the local data end point value is an asterisk (*), verify that your Advanced IPSec: Dynamic Tunnels: Local Activation Settings are correct and contain only IP addresses local to this stack.