Cisco IAD2423-16FXS-RF - IAD 2423 Router, ME-2400-24TS-D, ME 3400E, ME 3400, ME 2400 System Message Manual

Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switches System Message Guide
Cisco IOS Release 12.2(44)EY (ME 3400E) Cisco IOS Release 12.2(46)SE (ME 3400 and ME 2400)
February 2009
Americas Headquarters
Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000
Fax: 408 527-0883
Text Part Number: OL-9641-04
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
CCDE, CCENT, Cisco Eos, Cisco HealthPresence, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, Cisco WebEx, DCE, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn and Cisco Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Cisco
Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx Cisco
Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0812R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
© 2006-2009 Cisco Systems, Inc. All rights reserved.
Store are service marks; and Access Registrar, Aironet, AsyncOS,
IMPLIED, INCLUDING, WITHOUT
Certified Internetwork Expert logo, Cisco IOS,
logo, LightStream, Linksys, MediaTone,
logo are registered trademarks of
CONTENTS
Preface v
Audience v
Purpose v
Conventions v
Related Publications vi
Obtaining Documentation and Submitting a Service Request i-vii
CHAPTER
CHAPTER
1 System Message Overview 1-1
How to Read System Messages 1-1
Error Message Traceback Reports 1-3
Output Interpreter 1-3 Bug Toolkit 1-3 Contacting TAC 1-3
2 Messages and Recovery Procedures 2-1
ACLMGR Messages 2-3
BACKUP_INTERFACE Messages 2-7
BADTRANSCEIVER Messages 2-7
BSPATCH Messages 2-8
DHCP_SNOOPING Messages 2-9
DOT1X Messages 2-12
DOT1X_SWITCH Messages 2-17
EC Messages 2-20
ETHCNTR Messages 2-24
FRNTEND_CTRLR Messages 2-25
GBIC_SECURITY Messages 2-25
GBIC_SECURITY_CRYPT Messages 2-27
GBIC_SECURITY_UNIQUE Messages 2-28
HARDWARE Messages 2-28
HCPU_PROT_MGR Messages 2-30
HLFM Messages 2-30
IDBMAN Messages 2-31
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
iii
Contents
IGMP_QUERIER Messages 2-34
MAC_LIMIT Messages 2-35
MAC_MOVE Messages 2-36
PAGP_DUAL_ACTIVE Messages 2-36
PHY Messages 2-37
PIMSN Messages 2-39
PLATFORM Messages 2-39
PLATFORM_ENV Messages 2-40
PLATFORM_PBR Messages 2-42
PLATFORM_PM Messages 2-43
PLATFORM_SPAN Messages 2-44
PLATFORM_UCAST Messages 2-45
PLATFORM_VLAN Messages 2-47
PM Messages 2-48
PORT_SECURITY Messages 2-56
QOSMGR Messages 2-57
REP Messages 2-66
RMON Messages 2-66
SPAN Messages 2-67
SPANTREE Messages 2-67
SPANTREE_FAST Messages 2-74
SPANTREE_VLAN_SW Messages 2-75
STORM_CONTROL Messages 2-75
SUPERVISOR Messages 2-76
SUPQ Messages 2-76
SW_DAI Messages 2-78
SW_VLAN Messages 2-80
TCAMMGR Messages 2-85
UDLD Messages 2-87
VQPCLIENT Messages 2-89
I
NDEX
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
iv
OL-9641-04
Audience
Preface
This guide is for the networking professional managing the Cisco Metro Ethernet (ME) 3400E, ME
3400, and ME 2400 Ethernet Access switches, hereafter referred to as the switch. Before using this guide, you should have experience working with the Cisco IOS software and the switch software features.
Purpose
This guide describes only the Cisco ME 3400E, ME 3400, and ME 2400 switch-specific system messages that you might encounter. For a complete list of Cisco IOS system error messages, see the Cisco IOS Software System Error Messages, Cisco IOS Release 12.2.
This guide does not describe how to install your switch or how to configure software features on your switch. It also does not provide detailed information about commands that have been created or changed for use by the switch. For hardware installation information, see the hardware installation guide and the getting started guide that shipped with your switch. For software information, see the software configuration guide and the command reference for this release. For the latest documentation updates, see the release notes for this release.
Conventions
This publication uses these conventions to convey instructions and information:
Command descriptions use these conventions:
Commands and keywords are in boldface text.
Arguments for which you supply values are in italic.
Square brackets ([ ]) mean optional elements.
Braces ({ }) group required choices, and vertical bars ( | ) separate the alternative elements.
Braces and vertical bars within square brackets ([{ | }]) mean a required choice within an optional
element.
Interactive examples use these conventions:
Terminal sessions and system displays are in screen font.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
v
Information you enter is in boldface screen font.
Nonprinting characters, such as passwords or tabs, are in angle brackets (< >).
Notes use this convention and symbol:
Note Means reader take note. Notes contain helpful suggestions or references to materials not in this manual.
Related Publications
Documents on this Cisco.com site provide complete information about the switches:
Cisco ME 3400E switch:
http://www.cisco.com/en/US/products/ps9637/tsd_products_support_series_home.html
Cisco ME 3400 switch:
http://www.cisco.com/en/US/products/ps6580/tsd_products_support_series_home.html
Cisco ME 2400 switch:
http://www.cisco.com/en/US/products/ps6581/tsd_products_support_series_home.html
Preface
Note Before installing, configuring, or upgrading the switch, see these documents:
For initial configuration information, see the “Configuring the Switch with the CLI-Based Setup
Program” appendix in the hardware installation guide.
For upgrading information, see the “Downloading Software” section in the release notes.
These are combined documents for the switches:
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switches System Message Guide
Cisco ME 3400 and ME 2400 Ethernet Access Switches Getting Started Guide
Regulatory Compliance and Safety Information for the Cisco ME 3400 and ME 2400 Ethernet
Access Switches
These documents are available for the Cisco ME 3400E switch:
Release Notes for the Cisco ME 3400E Ethernet Access Switch
Cisco ME 3400E Ethernet Access Switch Software Configuration Guide
Cisco ME 3400E Ethernet Access Switch Command Reference
Cisco ME 3400E Ethernet Access Switch Hardware Installation Guide
Cisco ME 3400E Ethernet Access Switch Getting Started Guide
Regulatory Compliance and Safety Information for the Cisco ME 3400E Ethernet Access Switch
These documents are available for the Cisco ME 3400 switch:
Release Notes for the Cisco ME 3400 Ethernet Access Switch
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
Cisco ME 3400 Ethernet Access Switch Command Reference
Cisco ME 3400 Ethernet Access Switch Hardware Installation Guide
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
vi
OL-9641-04
Preface
Obtaining Documentation and Submitting a Service Request
These documents are available for the Cisco ME 2400 switch:
Release Notes for the Cisco ME 2400 Ethernet Access Switch
Cisco ME 2400 Ethernet Access Switch Software Configuration Guide
Cisco ME 2400 Ethernet Access Switch Command Reference
Cisco ME 2400 Ethernet Access Switch Hardware Installation Guide
You can also refer to these documents are available for additional information:
Cisco Small Form-Factor Pluggable Modules Installation Notes
Cisco CWDM GBIC and CWDM SFP Installation Note
These compatibility matrix documents are available from this Cisco.com site:
http://www.cisco.com/en/US/products/hw/modules/ps5455/products_device_support_tables_list.html
Cisco Gigabit Ethernet Transceiver Modules Compatibility Matrix
Cisco 100-Megabit Ethernet SFP Modules Compatibility Matrix
Cisco Small Form-Factor Pluggable Modules Compatibility Matrix
Compatibility Matrix for 1000BASE-T Small Form-Factor Pluggable Modules
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What’s revised Cisco
technical documentation, at:
http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html
Subscribe to the What’s New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS
New in Cisco Product Documentation, which also lists all new and
Ve r si o n 2.0.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
vii
Obtaining Documentation and Submitting a Service Request
Preface
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
viii
OL-9641-04
CHAP T E R
1
System Message Overview
This guide describes the Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access switches system messages. During operation, the system software sends these messages to the console (and, optionally, to a logging server on another system). Not all system messages indicate problems with your system. Some messages are purely informational, whereas others can help diagnose problems with communications lines, internal hardware, or the system software. This guide also includes error messages that appear when the system fails.
Note For information about system messages that are not Cisco ME switch platform-specific, see the Cisco
IOS Software System Messages for Cisco IOS Release 12.2S.
This chapter contains these sections:
How to Read System Messages, page 1-1
Error Message Traceback Reports, page 1-3
How to Read System Messages
System log messages can contain up to 80 characters and a percent sign (%), which follows the optional sequence number or time stamp information, if configured. Messages are displayed in this format:
seq no:timestamp: %facility-severity-MNEMONIC:description
By default, a switch sends the output from system messages to a logging process.
Each system message begins with a percent sign (%) and is structured as follows:
%FACILITY-SEVERITY-MNEMONIC: Message-text
FACILITY is a code consisting of two or more uppercase letters that show the facility to which the
message refers. A facility can be a hardware device, a protocol, or a module of the system software. Examples of facilities are: ACLMGR, DOT1X, and HARDWARE.
The messages are described in Chapter 2, “Messages and Recovery Procedures,” in alphabetical order by facility code with the most severe (lowest number) errors described first.
SEVERITY is a single-digit code from 0 to 7 that reflects the severity of the condition. The lower
the number, the more serious the situation.
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
OL-9641-04
Table 1-1 lists the message severity levels.
1-1
How to Read System Messages
Ta b l e 1-1 Message Severity Levels
Severity Level Description
0 – emergency System is unusable.
1 – alert Immediate action required.
2 – critical Critical condition.
3 – error Error condition.
4 – warning Warning condition.
5 – notification Normal but significant condition.
6 – informational Informational message only.
7 – debugging Message that appears during debugging only.
MNEMONIC is a code that uniquely identifies the message.
Message-text is a text string describing the condition. This portion of the message sometimes
Chapter 1 System Message Overview
contains detailed information about the event, including terminal port numbers, network addresses, or addresses that correspond to locations in the system memory address space. Because the information in these variable fields changes from message to message, it is represented here by short strings enclosed in square brackets ([ ]). A decimal number, for example, is represented as [dec].
Table 1-2 lists the variable fields in messages.
Ta b l e 1-2 Representation of Variable Fields in Messages
Representation Type of Information
[dec] Decimal integer
[char] Single character
[chars] Character string
[enet] Ethernet address (for example, 0000.FEED.00C0)
[hex] Hexadecimal integer
[inet] Internet address
This example shows a partial switch system message:
00:00:46: %LINK-3-UPDOWN: Interface Port-channel1, changed state to up 00:00:47: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to up 00:00:47: %LINK-3-UPDOWN: Interface GigabitEthernet0/2, changed state to up 00:00:48: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down 00:00:48: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to down 2 *Mar 1 18:46:11: %SYS-5-CONFIG_I: Configured from console by vty2 (10.34.195.36) 18:47:02: %SYS-5-CONFIG_I: Configured from console by vty2 (10.34.195.36) *Mar 1 18:48:50.483 UTC: %SYS-5-CONFIG_I: Configured from console by vty2 (10.34.195.36)
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
1-2
OL-9641-04
Chapter 1 System Message Overview
Error Message Traceback Reports
Some messages describe internal errors and contain traceback information. This information is very important and should be included when you report a problem to your technical support representative.
This message example includes traceback information:
-Process= "Exec", level= 0, pid= 17
-Traceback= 1A82 1AB4 6378 A072 1054 1860
Some system messages ask you to copy the error messages and take further action. These online tools also provide more information about system error messages.
Output Interpreter
The Output Interpreter provides additional information and suggested fixes based on the output of many CLI commands, such as the the show tech-support privileged EXEC command. You can access the Output Interpreter at this URL:
https://www.cisco.com/cgi-bin/Support/OutputInterpreter/home.pl
Error Message Traceback Reports
Bug Toolkit
The Bug Toolkit provides information on open and closed caveats, and allows you to search for all known bugs in a specific Cisco IOS Release. You can access the Bug Toolkit at this URL:
http://www.cisco.com/cgi-bin/Support/Bugtool/home.pl
Contacting TAC
If you cannot determine the nature of the error, see the “Obtaining Documentation and Submitting a
Service Request” section on page vii for further information.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
1-3
Error Message Traceback Reports
Chapter 1 System Message Overview
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
1-4
OL-9641-04
CHAP T E R
2
Messages and Recovery Procedures
This chapter describes the Cisco ME 3400E, ME 3400, and ME 2400 switches system messages in alphabetical order by facility. Note that some messages apply only to specific switches and are never seen on the other switches.
Within each facility, the messages are listed by severity levels 0 to 7: 0 is the highest severity level, and 7 is the lowest severity level. Each message is followed by an explanation and a recommended action.
Note The messages listed in this chapter do not include the hostname or the date/time stamp designation that
displays only if the software is configured for system log messaging.
The chapter includes these message facilities:
ACLMGR Messages, page 2-3
BACKUP_INTERFACE Messages, page 2-7
BADTRANSCEIVER Messages, page 2-7
BSPATCH Messages, page 2-8
DHCP_SNOOPING Messages, page 2-9
OL-9641-04
DOT1X Messages, page 2-12
DOT1X_SWITCH Messages, page 2-17
EC Messages, page 2-20
ETHCNTR Messages, page 2-24
FRNTEND_CTRLR Messages, page 2-25
GBIC_SECURITY Messages, page 2-25
GBIC_SECURITY_CRYPT Messages, page 2-27
GBIC_SECURITY_UNIQUE Messages, page 2-28
HARDWARE Messages, page 2-28
HCPU_PROT_MGR Messages, page 2-30
HLFM Messages, page 2-30
IDBMAN Messages, page 2-31 (Cisco ME 3400E and ME 3400 switches only)
IGMP_QUERIER Messages, page 2-34
MAC_LIMIT Messages, page 2-35
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-1
Chapter 2 Messages and Recovery Procedures
MAC_MOVE Messages, page 2-36
PAGP_DUAL_ACTIVE Messages, page 2-36
PHY Messages, page 2-37
PIMSN Messages, page 2-39
PLATFORM Messages, page 2-39
PLATFORM_ENV Messages, page 2-40 (Cisco ME 3400E and ME 3400 switches only)
PLATFORM_PBR Messages, page 2-42 (Cisco ME 3400E and ME 3400 switches only)
PLATFORM_PM Messages, page 2-43
PLATFORM_SPAN Messages, page 2-44
PLATFORM_UCAST Messages, page 2-45 (Cisco ME 3400E and ME 3400 switches only)
PLATFORM_VLAN Messages, page 2-47
PM Messages, page 2-48
PORT_SECURITY Messages, page 2-56
QOSMGR Messages, page 2-57
REP Messages, page 2-66 (Cisco ME 3400E and ME 3400 switches only)
RMON Messages, page 2-66
SPAN Messages, page 2-67
SPANTREE Messages, page 2-67
SPANTREE_FAST Messages, page 2-74
SPANTREE_VLAN_SW Messages, page 2-75
STORM_CONTROL Messages, page 2-75
SUPERVISOR Messages, page 2-76
SUPQ Messages, page 2-76
SW_DAI Messages, page 2-78 (Cisco ME 3400E and ME 3400 switches only)
SW_VLAN Messages, page 2-80
TCAMMGR Messages, page 2-85
UDLD Messages, page 2-87
VQPCLIENT Messages, page 2-89
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-2
OL-9641-04
Chapter 2 Messages and Recovery Procedures
ACLMGR Messages
This section contains the access control list (ACL) manager messages. Most messages in this section are the result of a switch memory shortage, which includes hardware memory and label space but not CPU memory. Both kinds of memory shortages are described.
Error Message ACLMGR-2-NOMAP: Cannot create ACL Manager data structures for VLAN Map [chars].
Explanation This message means that the ACL manager was unable to allocate the data structures
needed to describe a VLAN map in a form that can be loaded into hardware. This error is most likely caused by lack of free memory. [chars] is the VLAN map name.
Recommended Action Reduce other system activity to ease memory demands.
Error Message ACLMGR-2-NOVLB: Cannot create memory block for VLAN [dec].
Explanation This message means that the ACL manager was unable to save per-VLAN information
needed for its correct operation. Some per-interface features, such as access groups or VLAN maps, will not be configured correctly. [dec] is the VLAN number.
ACLMGR Messages
Recommended Action Use a less complicated configuration that requires less memory.
Error Message ACLMGR-2-NOVMR: Cannot create VMR data structures for access list
[chars].
Explanation This message means that the ACL manager was unable to allocate the value-mask result
(VMR) data structures needed to describe an ACL in a form that can be loaded into hardware. This error is most likely caused by lack of available memory. [chars] is the access-list name.
Recommended Action Use a less complicated configuration that requires less memory.
Error Message ACLMGR-3-ACLTCAMFULL: Acl Tcam Full. Drop packets on Output Acl label
[dec] on [chars] [chars].
Explanation This message means that there are too many ACLs configured for the platform-specific
ACL TCAM table to support. [dec] is the label number, and [chars] represents the layer. The first [chars] is for Layer 3; the second is for Layer 2. If only one layer of TCAM is full, only one string is displayed, and the other string is NULL.
Recommended Action Reduce the number of IP or MAC access lists to be applied to interfaces.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-3
ACLMGR Messages
Chapter 2 Messages and Recovery Procedures
Error Message ACLMGR-3-AUGMENTFAIL: Augmenting of access-map [chars] on [chars]
label [dec] failed.
Explanation This message means that the system ran out of CPU DRAM when attempting to merge
internally required elements with the configured access maps. The first [chars] is the access-map name, the second [chars] is the direction in which the map was applied (input or output), and [dec] is the label number.
Recommended Action Reduce other system activity to ease memory demands.
Error Message ACLMGR-3-IECPORTLABELERROR: ACL labels are out-of-sync on interface
[chars], label [dec] is not available on asic [dec].
Explanation This message means that an internal software error has occurred. [chars] is the interface
name. The first [dec] is the label associated with the ACL, and the second [dec] is the ASIC number.
Recommended Action Copy the message exactly as it appears on the console or in the system log.
Research and attempt to resolve the error by using the Output Interpreter. Use the Bug Toolkit to look for similar reported problems. If you still require assistance, open a case with the TAC, or contact your Cisco technical support representative, and provide the representative with the gathered information. For more information about these online tools and about contacting Cisco, see the
Message Traceback Reports” section on page 1-3.
“Error
Error Message ACLMGR-3-INSERTFAIL: Insert of access-map [chars] #[dec] into [chars] label [dec] failed.
Explanation This message means that the system ran out of CPU memory when trying to merge
sections of an access map. The first [chars] is the map name, and the second [chars] is the direction in which the map was applied. The first [dec] is the entry number, and the second [dec] is the label number.
Recommended Action Reduce other system activity to ease memory demands. For example, remove
any ACLs that have been defined but are not now used. Use simpler ACLs with fewer access control entries (ACEs). Use fewer VLANs, and remove any unneeded VLANs from the VLAN database.
Error Message ACLMGR-3-INTTABLE: Not in truth table: VLMAP [dec] RACL [dec] Mcb [dec] Feat [dec].
Explanation This message means that an unrecoverable software error occurred while trying to
merge the configured input features. [dec] are internal action codes.
Recommended Action Copy the message exactly as it appears on the console or in the system log.
Research and attempt to resolve the error by using the Output Interpreter. Enter the show running-config user EXEC command to gather data that might help identify the nature of the error.
Use the Bug Toolkit to look for similar reported problems. If you still require assistance, open a case with the TAC, or contact your Cisco technical support representative, and provide the representative with the gathered information. For more information about these online tools and about contacting Cisco, see the
“Error Message Traceback Reports” section on page 1-3.
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-4
OL-9641-04
Chapter 2 Messages and Recovery Procedures
Error Message ACLMGR-3-MAXRECURSION: Too many ([dec]) levels of recursion while
merging ACLs (code [dec]).
Explanation This message means that the configuration is too complicated for the platform-specific
ACL merge code to support. The most likely cause is too many separate access lists in a single VLAN map or policy map. The first [dec] is the number of levels of recursion. The second [dec] is an internal code number of the merge stage that encountered the problem.
Recommended Action Reduce the number of IP or MAC access lists (considered separately) in any
one VLAN or policy map to fewer than the number of levels reported by this log message.
Error Message ACLMGR-3-MERGEFAIL: [chars] ACL merge error [dec] ([chars]) on [chars] label [dec].
Explanation This message means that the ACL manager was unable to complete the merge of the
configured features into a form suitable for loading into the hardware. Packets potentially affected by this feature will be sent to the CPU for processing instead. The most likely cause is specifying an ACL that is too large or too complex for the system. The first [chars] is the ACL-type error (ip or mac), the first [dec] is the error code, the second [chars] is the message string for the preceding error code, the second [dec] is the label number, and the third [chars] is either input or output.
ACLMGR Messages
Recommended Action Specify a smaller and less complicated configuration.
Error Message ACLMGR-3-NOLABEL: Cannot allocate [chars] label for interface [chars].
Explanation This message means that the ACL manager was unable to allocate a label for the
features on this interface. This means that the hardware cannot be programmed to implement the features, and packets for this interface will be filtered in software. There is a limit of 256 labels per direction. The first [chars] is the direction (input or output); the second [chars] is the interface name.
Recommended Action Use a simpler configuration. Use the same ACLs on multiple interfaces, if
possible.
Error Message ACLMGR-3-OUTTTABLE: Not in truth table: RACL [dec] VLMAP [dec].
Explanation This message means that an unrecoverable software error occurred while trying to
merge the configured output features. [dec] are internal action codes.
Recommended Action Copy the message exactly as it appears on the console or in the system log.
Research and attempt to resolve the error by using the Output Interpreter. Enter the show running-config user EXEC command to gather data that might help identify the nature of the error.
Use the Bug Toolkit to look for similar reported problems. If you still require assistance, open a case with the TAC, or contact your Cisco technical support representative, and provide the representative with the gathered information. For more information about these online tools and about contacting Cisco, see the
“Error Message Traceback Reports” section on page 1-3.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-5
ACLMGR Messages
Chapter 2 Messages and Recovery Procedures
Error Message ACLMGR-3-PACLTTABLE: Not in truth table: IPSrcGrd [dec] PACL [dec].
Explanation This message means that an unrecoverable software error occurred while trying to
merge the configured port ACL features. The first [dec] is the action specified by IP source guard, and the second [dec] is the action specified by the port ACL.
Recommended Action Copy the message exactly as it appears on the console or in the system log.
Research and attempt to resolve the error by using the Output Interpreter. Enter the show running-config user EXEC command to gather data that might help identify the nature of the error.
Use the Bug Toolkit to look for similar reported problems. If you still require assistance, open a case with the TAC, or contact your Cisco technical support representative, and provide the representative with the gathered information. For more information about these online tools and about contacting Cisco, see the
Error Message ACLMGR-3-QOSTTABLE: Not in truth table: ACL [dec] in map, action [dec].
Explanation This message means that a software error occurred while trying to merge a QoS policy
map. The first [dec] is the ACL number, and the second [dec] is the action corresponding to the specified ACL number.
“Error Message Traceback Reports” section on page 1-3.
Recommended Action Copy the message exactly as it appears on the console or in the system log.
Research and attempt to resolve the error by using the Output Interpreter. Use the Bug Toolkit to look for similar reported problems. If you still require assistance, open a case with the TAC, or contact your Cisco technical support representative, and provide the representative with the gathered information. For more information about these online tools and about contacting Cisco, see the
Message Traceback Reports” section on page 1-3.
Error Message ACLMGR-3-RELOADED: Reloading [chars] label [dec] feature.
Explanation This message means that the ACL manager is now able to load more of the configured
features on this label into the hardware. One or more features had previously been unloaded because of lack of space. [chars] is the direction (input or output), and [dec] is the label number.
Recommended Action No action is required.
Error Message ACLMGR-3-UNKNOWNACTION: Unknown VMR access group action [hex].
Explanation This message means that an internal software error has occurred. [hex] is an internal
action code.
Recommended Action Copy the message exactly as it appears on the console or in the system log.
Research and attempt to resolve the error by using the Output Interpreter. Use the Bug Toolkit to look for similar reported problems. If you still require assistance, open a case with the TAC, or contact your Cisco technical support representative, and provide the representative with the gathered information. For more information about these online tools and about contacting Cisco, see the
Message Traceback Reports” section on page 1-3.
“Error
“Error
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-6
OL-9641-04
Chapter 2 Messages and Recovery Procedures
Error Message ACLMGR-3-UNLOADING: Unloading [chars] label [dec] feature.
Explanation This message means that the ACL manager was unable to fit the complete configuration
into the hardware, so some features will be applied in software. This prevents some or all of the packets in a VLAN from being forwarded in hardware and requires them to be forwarded by the CPU. Multicast packets might be dropped entirely instead of being forwarded. [chars] is the direction (input or output), and [dec] is the label number.
Recommended Action Use a simpler configuration. Use the same ACLs on multiple interfaces, if
possible.
BACKUP_INTERFACE Messages
This section contains the Flex Link message.
Error Message BACKUP_INTERFACE-5-VLB_NON_TRUNK: Warning: Flexlink VLB is not allowed on non-trunk ports. Please configure [chars] to be a trunk port.
BACKUP_INTERFACE Messages
Explanation Flex Link VLB detects a nontrunk port. [chars] is the interface name.
Recommended Action Configure the interface to operate in trunking mode.
BADTRANSCEIVER Messages
This section contains the BADTRANSCEIVER message.
Error Message BADTRANSCEIVER, PHY, LOG_WARNING: An innapropriate transceiver has been inserted in interface [chars].
Explanation This message means that a defective module is installed in the specified interface.
[chars] is the interface.
Recommended Action Remove the transceiver. If it was purchased from Cisco, contact your Cisco
representative to have the transceiver replaced.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-7
BSPATCH Messages
BSPATCH Messages
This section contains boot loader patch messages.
Error Message BSPATCH-1-RELOAD: System will reboot to activate newly patched Boot Loader.
Explanation This message means that the switch will automatically reboot after the boot loader is
patched.
Recommended Action If this message recurs, copy it exactly as it appears on the console or in the
system log. Research and attempt to resolve the error by using the Output Interpreter. Use the Bug Toolkit to look for similar reported problems. If you still require assistance, open a case with the TAC, or contact your Cisco technical support representative, and provide the representative with the gathered information. For more information about these online tools and about contacting Cisco, see the
“Error Message Traceback Reports” section on page 1-3.
Error Message BSPATCH-1-PATCHED: Boot Loader patch ([chars]) installed.
Chapter 2 Messages and Recovery Procedures
Explanation This message means that a boot loader patch is installed successfully. [chars] is the
SDRAM refresh timer register setting.
Recommended Action If this message recurs, copy it exactly as it appears on the console or in the
system log. Research and attempt to resolve the error by using the Output Interpreter. Use the Bug Toolkit to look for similar reported problems. If you still require assistance, open a case with the TAC, or contact your Cisco technical support representative, and provide the representative with the gathered information. For more information about these online tools and about contacting Cisco, see the
“Error Message Traceback Reports” section on page 1-3.
Error Message BSPATCH-3-FAILED: Failed to install Boot Loader patch ([chars]).
Explanation This message means that the switch failed to apply a boot loader patch. [chars] is the
SDRAM refresh timer register setting.
Recommended Action Copy the message exactly as it appears on the console or in the system log.
Research and attempt to resolve the error by using the Output Interpreter. Use the Bug Toolkit to look for similar reported problems. If you still require assistance, open a case with the TAC, or contact your Cisco technical support representative, and provide the representative with the gathered information. For more information about these online tools and about contacting Cisco, see the
“Error
Message Traceback Reports” section on page 1-3.
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-8
OL-9641-04
Chapter 2 Messages and Recovery Procedures
DHCP_SNOOPING Messages
This section contains the DHCP snooping messages.
Error Message DHCP_SNOOPING-3-DHCP_SNOOPING_INTERNAL_ERROR: DHCP Snooping internal error, [chars].
Explanation This message means that a software sanity check failed in the DHCP snooping process.
[chars] is the error.
Recommended Action Copy the message exactly as it appears on the console or in the system log.
Research and attempt to resolve the error by using the Output Interpreter. Use the Bug Toolkit to look for similar reported problems. If you still require assistance, open a case with the TAC, or contact your Cisco technical support representative, and provide the representative with the gathered information. For more information about these online tools and about contacting Cisco, see the
“Error Message Traceback Reports” section on page 1-3.
Error Message DHCP_SNOOPING-4-AGENT_OPERATION_FAILED: DHCP snooping binding transfer failed. [chars].
DHCP_SNOOPING Messages
Explanation This message means that the DHCP snooping binding transfer process failed because of
the specified reason for failure. [chars] is the reason for failure.
Recommended Action No action is required.
Error Message DHCP_SNOOPING-4-AGENT_OPERATION_FAILED_N: DHCP snooping binding
transfer failed ([dec]). [chars].
Explanation This message means that the DHCP snooping binding transfer process failed because of
the specified reason for failure [dec] is the number of failures, and [chars] is the reason for the failure. This message is rate-limited.
Recommended Action No action is required.
Error Message DHCP_SNOOPING-4-DHCP_SNOOPING_ERRDISABLE_WARNING: DHCP Snooping
received [dec] DHCP packets on interface [chars].
Explanation This message means that the switch detected a DHCP packet rate-limit violation on the
specified interface and put the interface in the error-disabled state. [dec] is the number of DCHP packets, and [chars] is the interface.
Recommended Action No action is required.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-9
DHCP_SNOOPING Messages
Error Message DHCP_SNOOPING-4-DHCP_SNOOPING_PVLAN_WARNING: DHCP Snooping
configuration may not take effect on secondary vlan [dec]. [chars]
Error Message DHCP_SNOOPING-4-IP_SOURCE_BINDING_PVLAN_WARNING: IP source filter may not take effect on secondary vlan [dec] where IP source binding is configured. [chars].
Note This message applies only to the Cisco ME 3400E and ME 3400 switches.
Chapter 2 Messages and Recovery Procedures
Explanation This message means that if private VLANs are configured, the DHCP Snooping
configuration on the primary VLAN automatically propagates to all the secondary VLANs. [dec] is the VLAN IDs of the secondary VLANs, and [chars] is the warning.
Recommended Action No action is required.
Explanation This message means that if private VLANs are configured, the IP-source-guard filter on
the primary VLAN automatically propagates to all secondary VLANs. [dec] is the secondary VLAN, and [chars] is the warning.
Recommended Action No action is required.
Error Message DHCP_SNOOPING-4-IP_SOURCE_BINDING_NON_EXISTING_VLAN_WARNING: IP
source binding is configured on non existing vlan [dec].
Note This message applies only to the Cisco ME 3400E and ME 3400 switches.
Explanation The message means that an IP source binding was configured on a VLAN that has not
been configured yet. [dec] is the VLAN.
Recommended Action No action is required.
Error Message DHCP_SNOOPING-4-NTP_NOT_RUNNING: NTP is not running; reloaded binding
lease expiration times are incorrect.
Explanation This message means that if the DHCP snooping database agent loads the DHCP
snooping bindings and NTP is not running, the calculated lease duration for the bindings is incorrect.
Recommended Action Configure NTP on the switch to provide an accurate time and date for the
system clock. Then disable and re-enable DHCP snooping to clear the DHCP snooping binding database.
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-10
OL-9641-04
Chapter 2 Messages and Recovery Procedures
Error Message DHCP_SNOOPING-4-QUEUE_FULL: Fail to enqueue DHCP packet into
processing queue: [chars], the queue is most likely full and the packet will be dropped.
Explanation This message means that the CPU is receiving DHCP packets a higher rate than the
DHCP snooping process can handle. These DHCP packets are dropped to prevent a denial of service attack. [chars] is the warning.
Recommended Action No action is required.
Error Message DHCP_SNOOPING-4-STANDBY_AGENT_OPERATION_FAILED: DHCP snooping binding
transfer failed on the Standby Supervisor. [chars].
Explanation This message means that the DHCP snooping binding transfer process failed on a
standby supervisor engine. [chars] is the standby supervisor engine.
Recommended Action No action is required.
Error Message DHCP_SNOOPING-6-AGENT_OPERATION_SUCCEEDED: DHCP snooping database
[chars] succeeded.
DHCP_SNOOPING Messages
Explanation This message means that the DHCP binding transfer process succeeded. [chars] is the
DCHP snooping database.
Recommended Action No action is required.
Error Message DHCP_SNOOPING-6-BINDING_COLLISION: Binding collision. [dec] bindings
ignored.
Explanation This message means that the specified number of bindings were ignored when the
switch read the database file. The bindings from the database file have MAC address and VLAN information that a configured DHCP snooping binding already uses.
Recommended Action No action is required.
Error Message DHCP_SNOOPING-6-INTERFACE_NOT_VALID: Interface not valid. [dec]
bindings ignored.
Explanation This message means that the specified number of bindings were ignored when the
switch read the database file because the interface in binding database is not available, the interface is a routed port, or the interface is a DHCP snooping-trusted Layer 2 interface. [dec] is the number of bindings that the switch ignores.
Recommended Action No action is required.
Error Message DHCP_SNOOPING-6-LEASE_EXPIRED: Lease Expired. [dec] bindings ignored.
Explanation This message means that the specified number of bindings were ignored when the
switch read the database file because the DHCP lease expired. [dec] is the number of bindings.
Recommended Action No action is required.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-11
DOT1X Messages
Error Message DHCP_SNOOPING-6-PARSE_FAILURE: Parsing failed for [dec] bindings.
Explanation This message means that the specified number of bindings were ignored when the
switch read the database file because the database read operation failed. [dec] is the number of bindings.
Recommended Action No action is required.
Error Message DHCP_SNOOPING-6-VLAN_NOT_SUPPORTED: Vlan not supported. [dec] bindings
ignored.
Explanation This message means that the specified number of bindings were ignored when the
switch read the database file because VLAN is no longer configured on the switch. [dec] is the number of bindings that the switch ignores.
Recommended Action No action required.
DOT1X Messages
Chapter 2 Messages and Recovery Procedures
This section contains the IEEE 802.1x messages.
Error Message DOT1X-4-MEM_UNAVAIL: Memory was not available to perform the
802.1X
action.
Explanation This message means that the system memory is not sufficient to perform the 802.1x
authentication.
Recommended Action Reduce other system activity to reduce memory demands.
Error Message DOT1X-4-MSG_ERR: Unknown message event received.
Explanation This message means that the 802.1x process received an unknown message event.
Recommended Action Restart the 802.1x process by entering the dot1x system-auth-control global
configuration command. If this message recurs, reload the device.
Error Message DOT1X-4-PROC_START_ERR: Dot1x unable to start.
Explanation This message means that the system failed to create the 802.1x process.
Recommended Action Restart the 802.1x process by entering the dot1x system-auth-control global
configuration command. If this message recurs, reload the device.
Error Message DOT1X-4-UNKN_ERR: An unknown operational error occurred.
Explanation This message means that the 802.1x process cannot operate because of an internal
system error.
Recommended Action No action is required.
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-12
OL-9641-04
Chapter 2 Messages and Recovery Procedures
Error Message DOT1X-5-ERR_CHANNELLING: Dot1x can not be enabled on Channelling
ports.
Explanation This message means that 802.1x could not be enabled on the channeling port. Trying to
set 802.1x port-control to auto or force-unauthorized (force_unauth) mode on a channeling port, which is not allowed, caused this condition.
Recommended Action Disable channeling on the interface, and then enable 802.1x.
Error Message DOT1X-5-ERR_DYNAMIC: Dot1x can not be enabled on Dynamic ports.
Explanation This message means that 802.1x could not be enabled on the dynamic mode port. Trying
to set 802.1x port-control to auto or force-unauthorized (force_unauth) mode on a dynamic mode port, which is not allowed, caused this condition.
Recommended Action Disable dynamic mode on the interface, and then enable 802.1x.
Error Message DOT1X-5-ERR_DYNAMIC_VLAN: Dot1x can not be enabled on dynamic VLAN
ports.
DOT1X Messages
Explanation This message means that 802.1x could not be enabled on the dynamic VLAN port.
Trying to set 802.1x port-control to auto or force-unauthorized (force_unauth) mode on a dynamic VLAN port, which is not allowed, caused this condition.
Recommended Action Disable dynamic VLAN configuration on the interface, and then enable
802.1x.
Error Message DOT1X-5-ERR_INVALID_TUNNEL_MEDIUM_TYPE: Got an invalid value [chars] for TUNNEL_MEDIUM_TYPE [chars].
Explanation This message means that the provided tunnel medium is either unsupported or invalid.
[chars] is the text received from the RADIUS server.
Recommended Action Change the value to a valid tunnel medium.
Error Message DOT1X-5-ERR_INVALID_TUNNEL_TYPE: Got an invalid value of [chars] for
TUNNEL_TYPE [chars].
Explanation This message means that the provided tunnel type is either unsupported or invalid.
[chars] is the text received from the RADIUS server.
Recommended Action Change the value to a valid tunnel type.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-13
DOT1X Messages
Chapter 2 Messages and Recovery Procedures
Error Message DOT1X-5-ERR_PROTO_TUNNELLING: Dot1x can not be enabled on protocol
tunnelling enabled ports.
Explanation This message means that 802.1x could not be enabled on the protocol-tunneling-enabled
port. Trying to set 802.1x port-control to auto or force-unauthorized (force_unauth) mode on a protocol-tunneling-enabled port, which is not allowed, caused this condition.
Recommended Action Change the access VLAN on the interface, and then enable 802.1x.
Error Message DOT1X-5-ERR_PVLAN_TRUNK:Dot1x can not be enabled on private VLAN trunk
ports
Explanation This message means that 802.1x could not be enabled on private VLAN ports on which
trunking is enabled.
Recommended Action No action is required.
Error Message DOT1X-5-ERR_RSPAN_VLAN: Dot1x can not be enabled on ports configured
in Remote SPAN vlan.
Explanation This message means that 802.1x could not be enabled on the remote SPAN VLAN port.
Trying to set 802.1x port-control to auto or force-unauthorized (force_unauth) mode on a port that is in a remote SPAN VLAN, which is not allowed, caused this condition.
Recommended Action Disable remote SPAN on the VLAN, and then enable 802.1x.
Error Message DOT1X-5-ERR_SPANDST: Dot1x can not be enabled on [chars]. It is
configured as a SPAN Dest port.
Explanation This message means that 802.1x cannot be enabled on a port that is a SPAN destination
port because these features are mutually exclusive. [chars] is the port.
Recommended Action Remove the SPAN destination port from the SPAN session before
reconfiguring 802.1x on the port.
Error Message DOT1X-5-ERR_TRUNK: Dot1x can not be enabled on Trunk port.
Explanation This message means that 802.1x could not be enabled on the trunk port. Trying to set
802.1x port control to auto or force-unauthorized (force_unauth) mode on a trunk port, which is not allowed, caused this condition.
Recommended Action Disable trunking on the interface, and then enable 802.1x.
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-14
OL-9641-04
Chapter 2 Messages and Recovery Procedures
Error Message DOT1X-5-ERR_TUNNEL: Dot1x can not be enabled on 802.1q tunnelling
enabled ports.
Explanation This message means that 802.1x could not be enabled on the 802.1Q
tunneling-enabled-port. Trying to set 802.1x port-control to auto or force-unauthorized (force_unauth) mode on a 802.1Q-tunnel-enabled port, which is not allowed, caused this condition.
Recommended Action Disable 802.1Q tunneling on the interface, and then enable 802.1x.
Error Message DOT1X-5-ERR_VLAN_INTERNAL: The VLAN [dec] is being used internally and
cannot be assigned for use on the Dot1x port [chars] Vlan.
Explanation This message means that the VLAN is used internally and cannot be assigned again for
use on this port. [dec] is the VLAN ID. [chars] is the port number.
Recommended Action Update the configuration to not use this VLAN.
Error Message DOT1X-5-ERR_VLAN_INVALID: The VLAN [dec] is invalid and cannot be
assigned for use on the 802.1X port [chars] Vlan.
DOT1X Messages
Explanation This message means that the specified VLAN is out of range and cannot be assigned for
use on this port. [dec] is the VLAN ID. [chars] is the port number.
Recommended Action Update the configuration to use a valid VLAN.
Error Message DOT1X-5-ERR_VLAN_NOT_ASSIGNABLE: RADIUS tried to assign a VLAN to
dot1x port [chars] whose VLAN cannot be assigned.
Explanation This message means that the RADIUS server tried to assign a VLAN to a supplicant on
a port whose VLAN cannot be changed, such as a routed port. [chars] is the port number.
Recommended Action Change the specified port to a Layer 2 port by using the switchport interface
configuration command.
Error Message DOT1X-5-ERR_VLAN_NOT_FOUND: Attempt to assign non-existent [chars] VLAN [chars] to dot1x port [chars].
Explanation This message means that an attempt to assign a VLAN to a supplicant on a port fails
because the VLAN was not found in the VTP database. [chars] is the port number.
Recommended Action Make sure that the VLAN exists, or use another VLAN.
Error Message DOT1X-5-ERR_VLAN_RESERVED: The VLAN [dec] is a reserved vlan and cannot
be assigned for use on the Dot1x port [chars] Vlan.
Explanation This message means that the VLAN specified is a reserved VLAN and cannot be
assigned for use on this port. [dec] is the VLAN ID. [chars] is the port number.
Recommended Action Update the configuration to not use this VLAN.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-15
DOT1X Messages
Chapter 2 Messages and Recovery Procedures
Error Message DOT1X-5-ERR_VLAN_RSPAN_CONFIGURED: VLAN [dec] is configured as a
Remote SPAN VLAN, which has Dot1x enabled interface(s) configured. Please disable Dot1x on all ports in this VLAN or do not enable RSPAN on this VLAN.
Explanation This message means that remote SPAN should not be enabled on a VLAN in which ports
are configured with 802.1x enabled. [dec] is the VLAN ID.
Recommended Action Either disable the remote SPAN configuration on the VLAN, or disable 802.1x
on all the ports in this VLAN.
Error Message DOT1X-5-INVALID_INPUT: Dot1x Interface parameter is Invalid on interface [chars].
Explanation The IEEE 802.1x interface parameter is out of the specified range or is invalid. [chars]
is the interface.
Recommended Action Refer to the CLI help documentation to determine the valid IEEE 802.1x
parameters.
Error Message DOT1X-5-INVALID_MAC: Invalid MAC address (zero, broadcast or multicast mac address [chars] is trying to authenticate).
Explanation This message means that authentication was attempted for a zero, broadcast, or
multicast MAC address using 802.1x. 802.1x authentication is allowed only for a valid nonzero, nonbroadcast, or nonmulticast source MAC address.
Recommended Action Connect a 802.1x-supported host to the 802.1x-enabled port.
Error Message DDOT1X-5-NOT_DOT1X_CAPABLE: Dot1x disabled on interface [chars]
because it is not an Ethernet interface.
Explanation This message means that you can enable 802.1x authentication only on Ethernet
interfaces. [chars] is the interface.
Recommended Action Enable 802.1x authentication only on Ethernet interfaces.
Error Message DOT1X-5-SECURITY_VIOLATION: Security violation on the interface
[chars], new MAC address [enet] is seen.
Explanation A host on the specified interface is trying to access the network or to authenticate in a
host mode that does not support the number of hosts attached to the interface. This is a security violation, and the port is put in the error-disabled state.
Recommended Action Ensure that the interface is configured to support the number of attached hosts.
Enter the shutdown interface configuration command and then the no shutdown interface configuration command to restart the port.
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-16
OL-9641-04
Chapter 2 Messages and Recovery Procedures
DOT1X_SWITCH Messages
This section contains the DOT1X_SWITCH Messages.
Error Message DOT1X_SWITCH-5-ERR_ADDING_ADDRESS: Unable to add address [enet] on [chars]
Explanation The client MAC address could not be added to the MAC address table because the
hardware memory is full or the address is a secure address on another port. [enet] is the supplicant MAC address, and [chars] is the interface. This message might appear if the IEEE 802.1x feature is enabled.
Recommended Action If the hardware memory is full, remove some of the dynamic MAC addresses.
If the client address is on another port, manually remove it from that port.
Error Message DOT1X_SWITCH-5-ERR_INVALID_PRIMARY_VLAN: Attempt to assign primary VLAN [dec] to 802.1x port [chars]
DOT1X_SWITCH Messages
Explanation An attempt was made to assign a primary VLAN to an IEEE 802.1x port, which is not
allowed. [dec] is the VLAN, and [chars] is the port.
Recommended Action Update the configuration to use a different VLAN.
Error Message DOT1X_SWITCH-5-ERR_INVALID_SEC_VLAN: Attempt to assign invalid
secondary VLAN [dec] to PVLAN host 802.1x port [chars]
Explanation An attempt was made to assign a nonsecondary VLAN to a private VLAN host IEEE
802.1x port. [dec] is the VLAN, and [chars] is the port.
Recommended Action Change the mode of the port so that it is no longer a private VLAN host port,
or use a valid secondary VLAN.
Error Message DOT1X_SWITCH-5-ERR_PRIMARY_VLAN_NOT_FOUND: Attempt to assign VLAN [dec], whose primary VLAN does not exist or is shutdown, to 802.1x port [chars]
Explanation An attempt was made to assign a private VLAN whose primary VLAN does not exist or
is shut down. [dec] is the VLAN, and [chars] is the port.
Recommended Action Make sure the primary VLAN exists and is not shut down. Verify that the
private VLAN is associated with a primary VLAN.
Error Message DOT1X_SWITCH-5-ERR_RADIUS_VLAN_NOT_FOUND: Attempt to assign non-existent VLAN [chars] to dot1x port [chars]
Explanation RADIUS attempted to assign a VLAN with a particular name or id to a supplicant on a
port, but the name or id could not be found on the switch. [dec] is the VLAN, and [chars] is the port.
Recommended Action Make sure a VLAN with the specified name/id exists on the switch.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-17
DOT1X_SWITCH Messages
Error Message DOT1X_SWITCH-5-ERR_SEC_VLAN_INVALID: Attempt to assign secondary VLAN
[dec] to non-PVLAN host 802.1x port [chars]
Error Message DOT1X_SWITCH-5-ERR_SPAN_DST_PORT: Attempt to assign VLAN [dec] to
802.1x port [chars], which is configured as a SPAN destination
Error Message DOT1X_SWITCH-5-ERR_VLAN_EQ_MDA_INACTIVE: Multi-Domain Authentication cannot activate because Data and Voice VLANs are the same on port [chars]
Chapter 2 Messages and Recovery Procedures
Explanation An attempt was made to assign a secondary VLAN to a port that is not a private VLAN
host port, which is not allowed. [dec] is the VLAN, and [chars] is the port.
Recommended Action Change the mode of the port so that it is configured as a private VLAN host
port, or use a different VLAN that is not configured as a secondary VLAN.
Explanation An attempt was made to assign a VLAN to an IEEE 802.1x port that is configured as a
SPAN destination port. [dec] is the VLAN, and [chars] is the port.
Recommended Action Change the SPAN configuration so that the port is no longer a SPAN
destination port, or change the configuration so that no VLAN is assigned.
Explanation Multi-Domain Authentication host mode cannot start if the configured data VLAN on a
port is the same as the voice VLAN. [chars] is the port.
Recommended Action Change either the voice VLAN or the access VLAN on the interface so that
they are not equal. This causes Multi-Domain authentication to start.
Error Message DOT1X_SWITCH-5-ERR_VLAN_EQ_VVLAN: Data VLAN [dec] on port [chars] cannot be equivalent to the Voice VLAN
Explanation An attempt was made to assign a data VLAN to an IEEE 802.1x port that is the same as
the voice VLAN. [dec] is the VLAN, and [chars] is the port.
Recommended Action Change either the voice VLAN or the access/IEEE 802.1x-assigned VLAN on
the interface so that they are not equal. This causes the authentication to proceed normally on the next retry.
Error Message DOT1X_SWITCH-5-ERR_VLAN_INTERNAL: Attempt to assign internal VLAN [dec] to 802.1x port [chars]
Explanation An attempt was made to assign an invalid VLAN to an IEEE 802.1x port. The VLAN
specified is used internally and cannot be assigned to this port. [dec] is the VLAN, and [chars] is the port.
Recommended Action Update the configuration to not use this VLAN.
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-18
OL-9641-04
Loading...
+ 76 hidden pages