53 lines
4.5 KiB
HTML
53 lines
4.5 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="task" />
|
||
|
|
<meta name="DC.Title" content="VPN error: The key connection group for a connection changes" />
|
||
|
|
<meta name="abstract" content="When you create a dynamic-key connection, you specify a dynamic-key group and an identifier for the remote key server. Later, when you view the properties of the related connection object, the General page of the property sheet displays the same remote key server identifier, but a different dynamic-key group." />
|
||
|
|
<meta name="description" content="When you create a dynamic-key connection, you specify a dynamic-key group and an identifier for the remote key server. Later, when you view the properties of the related connection object, the General page of the property sheet displays the same remote key server identifier, but a different dynamic-key group." />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzajacommonerrors.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2000, 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2000, 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="rzajakeycongrpchanges" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>VPN error: The key connection group for a connection changes</title>
|
||
|
|
</head>
|
||
|
|
<body id="rzajakeycongrpchanges"><a name="rzajakeycongrpchanges"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">VPN error: The key connection group for a connection changes</h1>
|
||
|
|
<div><p>When you create a dynamic-key connection, you specify a dynamic-key group and an identifier for the remote key server. Later, when you view the properties of the related connection object, the
|
||
|
|
General page of the property sheet displays the same remote key server identifier, but a different dynamic-key group.</p>
|
||
|
|
<div class="section"><dl><dt class="dlterm">Symptom:</dt>
|
||
|
|
<dd>When you create a dynamic-key connection, you specify a dynamic-key group and an identifier for the remote key server. Later, when you select <span class="uicontrol">Properties</span> on the related connection
|
||
|
|
object, the <span class="uicontrol">General</span> page of the property sheet displays the same remote key server identifier, but a different dynamic-key group.</dd>
|
||
|
|
<dt class="dlterm">Possible resolution:</dt>
|
||
|
|
<dd>The identifier is the only information stored in the VPN policy database that refers to the remote key server of the dynamic-key connection . When VPN looks up a policy for a remote key server, it looks
|
||
|
|
for the first dynamic-key group that has that remote key server identifier in it. So, when you view the properties for one these connections, it uses the same dynamic-key group that VPN found. If you do
|
||
|
|
not want to associate the dynamic-key group with that remote key server, you can do one of the following:</dd>
|
||
|
|
</dl>
|
||
|
|
</div>
|
||
|
|
<ol><li><span>Remove the remote key server from the dynamic-key group.</span></li>
|
||
|
|
<li><span>Expand <span class="uicontrol">By Groups</span> in the left pane of the VPN interface, and select and drag the dynamic-key group you want to the top of the table in the right pane. This ensures that
|
||
|
|
VPN checks this dynamic-key group first for the remote key server.</span></li>
|
||
|
|
</ol>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzajacommonerrors.htm" title="This information identifies the most common user errors and provides possible resolutions.">Common VPN configuration errors and how to fix them</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|