Cisco ME 3400E, ME 3400, and ME 2400
Ethernet Access Switches
System Message Guide
Cisco IOS Release 12.2(44)EY (ME 3400E)
Cisco IOS Release 12.2(46)SE (ME 3400 and ME 2400)
February 2009
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
Text Part Number: OL-9641-04
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
CCDE, CCENT, Cisco Eos, Cisco HealthPresence, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, Cisco WebEx, DCE, and Welcome
to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn and Cisco
Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco
Cisco
Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step,
Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort
MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase,
SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx
Cisco
Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company. (0812R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the
document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
iii
Contents
IGMP_QUERIER Messages2-34
MAC_LIMIT Messages2-35
MAC_MOVE Messages2-36
PAGP_DUAL_ACTIVE Messages2-36
PHY Messages2-37
PIMSN Messages2-39
PLATFORM Messages2-39
PLATFORM_ENV Messages2-40
PLATFORM_PBR Messages2-42
PLATFORM_PM Messages2-43
PLATFORM_SPAN Messages2-44
PLATFORM_UCAST Messages2-45
PLATFORM_VLAN Messages2-47
PM Messages2-48
PORT_SECURITY Messages2-56
QOSMGR Messages2-57
REP Messages2-66
RMON Messages2-66
SPAN Messages 2-67
SPANTREE Messages2-67
SPANTREE_FAST Messages2-74
SPANTREE_VLAN_SW Messages2-75
STORM_CONTROL Messages2-75
SUPERVISOR Messages2-76
SUPQ Messages2-76
SW_DAI Messages2-78
SW_VLAN Messages2-80
TCAMMGR Messages2-85
UDLD Messages2-87
VQPCLIENT Messages2-89
I
NDEX
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
iv
OL-9641-04
Audience
Preface
This guide is for the networking professional managing the Cisco Metro Ethernet (ME) 3400E,
ME
3400, and ME 2400 Ethernet Access switches, hereafter referred to as the switch. Before using this
guide, you should have experience working with the Cisco IOS software and the switch software
features.
Purpose
This guide describes only the Cisco ME 3400E, ME 3400, and ME 2400 switch-specific system
messages that you might encounter. For a complete list of Cisco IOS system error messages, see the
Cisco IOS Software System Error Messages, Cisco IOS Release 12.2.
This guide does not describe how to install your switch or how to configure software features on your
switch. It also does not provide detailed information about commands that have been created or changed
for use by the switch. For hardware installation information, see the hardware installation guide and the
getting started guide that shipped with your switch. For software information, see the software
configuration guide and the command reference for this release. For the latest documentation updates,
see the release notes for this release.
Conventions
This publication uses these conventions to convey instructions and information:
Command descriptions use these conventions:
•Commands and keywords are in boldface text.
•Arguments for which you supply values are in italic.
•Square brackets ([ ]) mean optional elements.
•Braces ({ }) group required choices, and vertical bars ( | ) separate the alternative elements.
•Braces and vertical bars within square brackets ([{ | }]) mean a required choice within an optional
element.
Interactive examples use these conventions:
•Terminal sessions and system displays are in screen font.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
v
•Information you enter is in boldface screen font.
•Nonprinting characters, such as passwords or tabs, are in angle brackets (< >).
Notes use this convention and symbol:
NoteMeans reader take note. Notes contain helpful suggestions or references to materials not in this manual.
Related Publications
Documents on this Cisco.com site provide complete information about the switches:
Subscribe to the What’s New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed
and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free
service and Cisco currently supports RSS
New in Cisco Product Documentation, which also lists all new and
Ve r si o n 2.0.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
vii
Obtaining Documentation and Submitting a Service Request
Preface
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
viii
OL-9641-04
CHAP T E R
1
System Message Overview
This guide describes the Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access switches system
messages. During operation, the system software sends these messages to the console (and, optionally,
to a logging server on another system). Not all system messages indicate problems with your system.
Some messages are purely informational, whereas others can help diagnose problems with
communications lines, internal hardware, or the system software. This guide also includes error
messages that appear when the system fails.
NoteFor information about system messages that are not Cisco ME switch platform-specific, see the Cisco
IOS Software System Messages for Cisco IOS Release 12.2S.
This chapter contains these sections:
•How to Read System Messages, page 1-1
•Error Message Traceback Reports, page 1-3
How to Read System Messages
System log messages can contain up to 80 characters and a percent sign (%), which follows the optional
sequence number or time stamp information, if configured. Messages are displayed in this format:
By default, a switch sends the output from system messages to a logging process.
Each system message begins with a percent sign (%) and is structured as follows:
%FACILITY-SEVERITY-MNEMONIC: Message-text
•FACILITY is a code consisting of two or more uppercase letters that show the facility to which the
message refers. A facility can be a hardware device, a protocol, or a module of the system software.
Examples of facilities are: ACLMGR, DOT1X, and HARDWARE.
The messages are described in Chapter 2, “Messages and Recovery Procedures,” in alphabetical
order by facility code with the most severe (lowest number) errors described first.
•SEVERITY is a single-digit code from 0 to 7 that reflects the severity of the condition. The lower
the number, the more serious the situation.
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
OL-9641-04
Table 1-1 lists the message severity levels.
1-1
How to Read System Messages
Ta b l e 1-1 Message Severity Levels
Severity LevelDescription
0 – emergencySystem is unusable.
1 – alertImmediate action required.
2 – criticalCritical condition.
3 – errorError condition.
4 – warningWarning condition.
5 – notificationNormal but significant condition.
6 – informationalInformational message only.
7 – debuggingMessage that appears during debugging only.
•MNEMONIC is a code that uniquely identifies the message.
•Message-text is a text string describing the condition. This portion of the message sometimes
Chapter 1 System Message Overview
contains detailed information about the event, including terminal port numbers, network addresses,
or addresses that correspond to locations in the system memory address space. Because the
information in these variable fields changes from message to message, it is represented here by short
strings enclosed in square brackets ([ ]). A decimal number, for example, is represented as [dec].
Table 1-2 lists the variable fields in messages.
Ta b l e 1-2Representation of Variable Fields in Messages
RepresentationType of Information
[dec]Decimal integer
[char]Single character
[chars]Character string
[enet]Ethernet address (for example, 0000.FEED.00C0)
[hex]Hexadecimal integer
[inet]Internet address
This example shows a partial switch system message:
00:00:46: %LINK-3-UPDOWN: Interface Port-channel1, changed state to up
00:00:47: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to up
00:00:47: %LINK-3-UPDOWN: Interface GigabitEthernet0/2, changed state to up
00:00:48: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down
00:00:48: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed
state to down 2
*Mar 1 18:46:11: %SYS-5-CONFIG_I: Configured from console by vty2 (10.34.195.36)
18:47:02: %SYS-5-CONFIG_I: Configured from console by vty2 (10.34.195.36)
*Mar 1 18:48:50.483 UTC: %SYS-5-CONFIG_I: Configured from console by vty2 (10.34.195.36)
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
1-2
OL-9641-04
Chapter 1 System Message Overview
Error Message Traceback Reports
Some messages describe internal errors and contain traceback information. This information is very
important and should be included when you report a problem to your technical support representative.
This message example includes traceback information:
-Process= "Exec", level= 0, pid= 17
-Traceback= 1A82 1AB4 6378 A072 1054 1860
Some system messages ask you to copy the error messages and take further action. These online tools
also provide more information about system error messages.
Output Interpreter
The Output Interpreter provides additional information and suggested fixes based on the output of many
CLI commands, such as the the show tech-support privileged EXEC command. You can access the
Output Interpreter at this URL:
The Bug Toolkit provides information on open and closed caveats, and allows you to search for all
known bugs in a specific Cisco IOS Release. You can access the Bug Toolkit at this URL:
If you cannot determine the nature of the error, see the “Obtaining Documentation and Submitting a
Service Request” section on page vii for further information.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
1-3
Error Message Traceback Reports
Chapter 1 System Message Overview
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
1-4
OL-9641-04
CHAP T E R
2
Messages and Recovery Procedures
This chapter describes the Cisco ME 3400E, ME 3400, and ME 2400 switches system messages in
alphabetical order by facility. Note that some messages apply only to specific switches and are never
seen on the other switches.
Within each facility, the messages are listed by severity levels 0 to 7: 0 is the highest severity level, and
7 is the lowest severity level. Each message is followed by an explanation and a recommended action.
NoteThe messages listed in this chapter do not include the hostname or the date/time stamp designation that
displays only if the software is configured for system log messaging.
The chapter includes these message facilities:
•ACLMGR Messages, page 2-3
•BACKUP_INTERFACE Messages, page 2-7
•BADTRANSCEIVER Messages, page 2-7
•BSPATCH Messages, page 2-8
•DHCP_SNOOPING Messages, page 2-9
OL-9641-04
•DOT1X Messages, page 2-12
•DOT1X_SWITCH Messages, page 2-17
•EC Messages, page 2-20
•ETHCNTR Messages, page 2-24
•FRNTEND_CTRLR Messages, page 2-25
•GBIC_SECURITY Messages, page 2-25
•GBIC_SECURITY_CRYPT Messages, page 2-27
•GBIC_SECURITY_UNIQUE Messages, page 2-28
•HARDWARE Messages, page 2-28
•HCPU_PROT_MGR Messages, page 2-30
•HLFM Messages, page 2-30
•IDBMAN Messages, page 2-31 (Cisco ME 3400E and ME 3400 switches only)
•IGMP_QUERIER Messages, page 2-34
•MAC_LIMIT Messages, page 2-35
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-1
Chapter 2 Messages and Recovery Procedures
•MAC_MOVE Messages, page 2-36
•PAGP_DUAL_ACTIVE Messages, page 2-36
•PHY Messages, page 2-37
•PIMSN Messages, page 2-39
•PLATFORM Messages, page 2-39
•PLATFORM_ENV Messages, page 2-40 (Cisco ME 3400E and ME 3400 switches only)
•PLATFORM_PBR Messages, page 2-42 (Cisco ME 3400E and ME 3400 switches only)
•PLATFORM_PM Messages, page 2-43
•PLATFORM_SPAN Messages, page 2-44
•PLATFORM_UCAST Messages, page 2-45 (Cisco ME 3400E and ME 3400 switches only)
•PLATFORM_VLAN Messages, page 2-47
•PM Messages, page 2-48
•PORT_SECURITY Messages, page 2-56
•QOSMGR Messages, page 2-57
•REP Messages, page 2-66 (Cisco ME 3400E and ME 3400 switches only)
•RMON Messages, page 2-66
•SPAN Messages, page 2-67
•SPANTREE Messages, page 2-67
•SPANTREE_FAST Messages, page 2-74
•SPANTREE_VLAN_SW Messages, page 2-75
•STORM_CONTROL Messages, page 2-75
•SUPERVISOR Messages, page 2-76
•SUPQ Messages, page 2-76
•SW_DAI Messages, page 2-78 (Cisco ME 3400E and ME 3400 switches only)
•SW_VLAN Messages, page 2-80
•TCAMMGR Messages, page 2-85
•UDLD Messages, page 2-87
•VQPCLIENT Messages, page 2-89
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-2
OL-9641-04
Chapter 2 Messages and Recovery Procedures
ACLMGR Messages
This section contains the access control list (ACL) manager messages. Most messages in this section are
the result of a switch memory shortage, which includes hardware memory and label space but not CPU
memory. Both kinds of memory shortages are described.
Error Message ACLMGR-2-NOMAP: Cannot create ACL Manager data structures for VLAN Map
[chars].
Explanation This message means that the ACL manager was unable to allocate the data structures
needed to describe a VLAN map in a form that can be loaded into hardware. This error is most likely
caused by lack of free memory. [chars] is the VLAN map name.
Recommended Action Reduce other system activity to ease memory demands.
Error Message ACLMGR-2-NOVLB: Cannot create memory block for VLAN [dec].
Explanation This message means that the ACL manager was unable to save per-VLAN information
needed for its correct operation. Some per-interface features, such as access groups or VLAN maps,
will not be configured correctly. [dec] is the VLAN number.
ACLMGR Messages
Recommended Action Use a less complicated configuration that requires less memory.
Error Message ACLMGR-2-NOVMR: Cannot create VMR data structures for access list
[chars].
Explanation This message means that the ACL manager was unable to allocate the value-mask result
(VMR) data structures needed to describe an ACL in a form that can be loaded into hardware. This
error is most likely caused by lack of available memory. [chars] is the access-list name.
Recommended Action Use a less complicated configuration that requires less memory.
Error Message ACLMGR-3-ACLTCAMFULL: Acl Tcam Full. Drop packets on Output Acl label
[dec] on [chars] [chars].
Explanation This message means that there are too many ACLs configured for the platform-specific
ACL TCAM table to support. [dec] is the label number, and [chars] represents the layer. The first
[chars] is for Layer 3; the second is for Layer 2. If only one layer of TCAM is full, only one string
is displayed, and the other string is NULL.
Recommended Action Reduce the number of IP or MAC access lists to be applied to interfaces.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-3
ACLMGR Messages
Chapter 2 Messages and Recovery Procedures
Error Message ACLMGR-3-AUGMENTFAIL: Augmenting of access-map [chars] on [chars]
label [dec] failed.
Explanation This message means that the system ran out of CPU DRAM when attempting to merge
internally required elements with the configured access maps. The first [chars] is the access-map
name, the second [chars] is the direction in which the map was applied (input or output), and [dec]
is the label number.
Recommended Action Reduce other system activity to ease memory demands.
Error Message ACLMGR-3-IECPORTLABELERROR: ACL labels are out-of-sync on interface
[chars], label [dec] is not available on asic [dec].
Explanation This message means that an internal software error has occurred. [chars] is the interface
name. The first [dec] is the label associated with the ACL, and the second [dec] is the ASIC number.
Recommended Action Copy the message exactly as it appears on the console or in the system log.
Research and attempt to resolve the error by using the Output Interpreter. Use the Bug Toolkit to
look for similar reported problems. If you still require assistance, open a case with the TAC, or
contact your Cisco technical support representative, and provide the representative with the gathered
information. For more information about these online tools and about contacting Cisco, see the
Message Traceback Reports” section on page 1-3.
“Error
Error Message ACLMGR-3-INSERTFAIL: Insert of access-map [chars] #[dec] into [chars]
label [dec] failed.
Explanation This message means that the system ran out of CPU memory when trying to merge
sections of an access map. The first [chars] is the map name, and the second [chars] is the direction
in which the map was applied. The first [dec] is the entry number, and the second [dec] is the label
number.
Recommended Action Reduce other system activity to ease memory demands. For example, remove
any ACLs that have been defined but are not now used. Use simpler ACLs with fewer access control
entries (ACEs). Use fewer VLANs, and remove any unneeded VLANs from the VLAN database.
Error Message ACLMGR-3-INTTABLE: Not in truth table: VLMAP [dec] RACL [dec] Mcb [dec]
Feat [dec].
Explanation This message means that an unrecoverable software error occurred while trying to
merge the configured input features. [dec] are internal action codes.
Recommended Action Copy the message exactly as it appears on the console or in the system log.
Research and attempt to resolve the error by using the Output Interpreter. Enter the show
running-config user EXEC command to gather data that might help identify the nature of the error.
Use the Bug Toolkit to look for similar reported problems. If you still require assistance, open a case
with the TAC, or contact your Cisco technical support representative, and provide the representative
with the gathered information. For more information about these online tools and about contacting
Cisco, see the
“Error Message Traceback Reports” section on page 1-3.
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-4
OL-9641-04
Chapter 2 Messages and Recovery Procedures
Error Message ACLMGR-3-MAXRECURSION: Too many ([dec]) levels of recursion while
merging ACLs (code [dec]).
Explanation This message means that the configuration is too complicated for the platform-specific
ACL merge code to support. The most likely cause is too many separate access lists in a single
VLAN map or policy map. The first [dec] is the number of levels of recursion. The second [dec] is
an internal code number of the merge stage that encountered the problem.
Recommended Action Reduce the number of IP or MAC access lists (considered separately) in any
one VLAN or policy map to fewer than the number of levels reported by this log message.
Explanation This message means that the ACL manager was unable to complete the merge of the
configured features into a form suitable for loading into the hardware. Packets potentially affected
by this feature will be sent to the CPU for processing instead. The most likely cause is specifying
an ACL that is too large or too complex for the system. The first [chars] is the ACL-type error (ip
or mac), the first [dec] is the error code, the second [chars] is the message string for the preceding
error code, the second [dec] is the label number, and the third [chars] is either input or output.
ACLMGR Messages
Recommended Action Specify a smaller and less complicated configuration.
Error Message ACLMGR-3-NOLABEL: Cannot allocate [chars] label for interface [chars].
Explanation This message means that the ACL manager was unable to allocate a label for the
features on this interface. This means that the hardware cannot be programmed to implement the
features, and packets for this interface will be filtered in software. There is a limit of 256 labels per
direction. The first [chars] is the direction (input or output); the second [chars] is the interface name.
Recommended Action Use a simpler configuration. Use the same ACLs on multiple interfaces, if
possible.
Error Message ACLMGR-3-OUTTTABLE: Not in truth table: RACL [dec] VLMAP [dec].
Explanation This message means that an unrecoverable software error occurred while trying to
merge the configured output features. [dec] are internal action codes.
Recommended Action Copy the message exactly as it appears on the console or in the system log.
Research and attempt to resolve the error by using the Output Interpreter. Enter the show
running-config user EXEC command to gather data that might help identify the nature of the error.
Use the Bug Toolkit to look for similar reported problems. If you still require assistance, open a case
with the TAC, or contact your Cisco technical support representative, and provide the representative
with the gathered information. For more information about these online tools and about contacting
Cisco, see the
“Error Message Traceback Reports” section on page 1-3.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-5
ACLMGR Messages
Chapter 2 Messages and Recovery Procedures
Error Message ACLMGR-3-PACLTTABLE: Not in truth table: IPSrcGrd [dec] PACL [dec].
Explanation This message means that an unrecoverable software error occurred while trying to
merge the configured port ACL features. The first [dec] is the action specified by IP source guard,
and the second [dec] is the action specified by the port ACL.
Recommended Action Copy the message exactly as it appears on the console or in the system log.
Research and attempt to resolve the error by using the Output Interpreter. Enter the show
running-config user EXEC command to gather data that might help identify the nature of the error.
Use the Bug Toolkit to look for similar reported problems. If you still require assistance, open a case
with the TAC, or contact your Cisco technical support representative, and provide the representative
with the gathered information. For more information about these online tools and about contacting
Cisco, see the
Error Message ACLMGR-3-QOSTTABLE: Not in truth table: ACL [dec] in map, action [dec].
Explanation This message means that a software error occurred while trying to merge a QoS policy
map. The first [dec] is the ACL number, and the second [dec] is the action corresponding to the
specified ACL number.
“Error Message Traceback Reports” section on page 1-3.
Recommended Action Copy the message exactly as it appears on the console or in the system log.
Research and attempt to resolve the error by using the Output Interpreter. Use the Bug Toolkit to
look for similar reported problems. If you still require assistance, open a case with the TAC, or
contact your Cisco technical support representative, and provide the representative with the gathered
information. For more information about these online tools and about contacting Cisco, see the
Explanation This message means that the ACL manager is now able to load more of the configured
features on this label into the hardware. One or more features had previously been unloaded because
of lack of space. [chars] is the direction (input or output), and [dec] is the label number.
Recommended Action No action is required.
Error Message ACLMGR-3-UNKNOWNACTION: Unknown VMR access group action [hex].
Explanation This message means that an internal software error has occurred. [hex] is an internal
action code.
Recommended Action Copy the message exactly as it appears on the console or in the system log.
Research and attempt to resolve the error by using the Output Interpreter. Use the Bug Toolkit to
look for similar reported problems. If you still require assistance, open a case with the TAC, or
contact your Cisco technical support representative, and provide the representative with the gathered
information. For more information about these online tools and about contacting Cisco, see the
Message Traceback Reports” section on page 1-3.
“Error
“Error
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
Explanation This message means that the ACL manager was unable to fit the complete configuration
into the hardware, so some features will be applied in software. This prevents some or all of the
packets in a VLAN from being forwarded in hardware and requires them to be forwarded by the
CPU. Multicast packets might be dropped entirely instead of being forwarded. [chars] is the
direction (input or output), and [dec] is the label number.
Recommended Action Use a simpler configuration. Use the same ACLs on multiple interfaces, if
possible.
BACKUP_INTERFACE Messages
This section contains the Flex Link message.
Error Message BACKUP_INTERFACE-5-VLB_NON_TRUNK: Warning: Flexlink VLB is not
allowed on non-trunk ports. Please configure [chars] to be a trunk port.
BACKUP_INTERFACE Messages
Explanation Flex Link VLB detects a nontrunk port. [chars] is the interface name.
Recommended Action Configure the interface to operate in trunking mode.
BADTRANSCEIVER Messages
This section contains the BADTRANSCEIVER message.
Error Message BADTRANSCEIVER, PHY, LOG_WARNING: An innapropriate transceiver has
been inserted in interface [chars].
Explanation This message means that a defective module is installed in the specified interface.
[chars] is the interface.
Recommended Action Remove the transceiver. If it was purchased from Cisco, contact your Cisco
representative to have the transceiver replaced.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-7
BSPATCH Messages
BSPATCH Messages
This section contains boot loader patch messages.
Error Message BSPATCH-1-RELOAD: System will reboot to activate newly patched Boot
Loader.
Explanation This message means that the switch will automatically reboot after the boot loader is
patched.
Recommended Action If this message recurs, copy it exactly as it appears on the console or in the
system log. Research and attempt to resolve the error by using the Output Interpreter. Use the Bug
Toolkit to look for similar reported problems. If you still require assistance, open a case with the
TAC, or contact your Cisco technical support representative, and provide the representative with the
gathered information. For more information about these online tools and about contacting Cisco, see the
“Error Message Traceback Reports” section on page 1-3.
Explanation This message means that a boot loader patch is installed successfully. [chars] is the
SDRAM refresh timer register setting.
Recommended Action If this message recurs, copy it exactly as it appears on the console or in the
system log. Research and attempt to resolve the error by using the Output Interpreter. Use the Bug
Toolkit to look for similar reported problems. If you still require assistance, open a case with the
TAC, or contact your Cisco technical support representative, and provide the representative with the
gathered information. For more information about these online tools and about contacting Cisco, see the
“Error Message Traceback Reports” section on page 1-3.
Error Message BSPATCH-3-FAILED: Failed to install Boot Loader patch ([chars]).
Explanation This message means that the switch failed to apply a boot loader patch. [chars] is the
SDRAM refresh timer register setting.
Recommended Action Copy the message exactly as it appears on the console or in the system log.
Research and attempt to resolve the error by using the Output Interpreter. Use the Bug Toolkit to
look for similar reported problems. If you still require assistance, open a case with the TAC, or
contact your Cisco technical support representative, and provide the representative with the gathered
information. For more information about these online tools and about contacting Cisco, see the
“Error
Message Traceback Reports” section on page 1-3.
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
Explanation This message means that a software sanity check failed in the DHCP snooping process.
[chars] is the error.
Recommended Action Copy the message exactly as it appears on the console or in the system log.
Research and attempt to resolve the error by using the Output Interpreter. Use the Bug Toolkit to
look for similar reported problems. If you still require assistance, open a case with the TAC, or
contact your Cisco technical support representative, and provide the representative with the gathered
information. For more information about these online tools and about contacting Cisco, see the
“Error Message Traceback Reports” section on page 1-3.
Error Message DHCP_SNOOPING-4-AGENT_OPERATION_FAILED: DHCP snooping binding
transfer failed. [chars].
DHCP_SNOOPING Messages
Explanation This message means that the DHCP snooping binding transfer process failed because of
the specified reason for failure. [chars] is the reason for failure.
configuration may not take effect on secondary vlan [dec]. [chars]
Error Message DHCP_SNOOPING-4-IP_SOURCE_BINDING_PVLAN_WARNING: IP source filter may
not take effect on secondary vlan [dec] where IP source binding is configured.
[chars].
NoteThis message applies only to the Cisco ME 3400E and ME 3400 switches.
Chapter 2 Messages and Recovery Procedures
Explanation This message means that if private VLANs are configured, the DHCP Snooping
configuration on the primary VLAN automatically propagates to all the secondary VLANs. [dec] is
the VLAN IDs of the secondary VLANs, and [chars] is the warning.
Recommended Action No action is required.
Explanation This message means that if private VLANs are configured, the IP-source-guard filter on
the primary VLAN automatically propagates to all secondary VLANs. [dec] is the secondary
VLAN, and [chars] is the warning.
Recommended Action No action is required.
Error Message DHCP_SNOOPING-4-IP_SOURCE_BINDING_NON_EXISTING_VLAN_WARNING: IP
source binding is configured on non existing vlan [dec].
NoteThis message applies only to the Cisco ME 3400E and ME 3400 switches.
Explanation The message means that an IP source binding was configured on a VLAN that has not
been configured yet. [dec] is the VLAN.
Recommended Action No action is required.
Error Message DHCP_SNOOPING-4-NTP_NOT_RUNNING: NTP is not running; reloaded binding
lease expiration times are incorrect.
Explanation This message means that if the DHCP snooping database agent loads the DHCP
snooping bindings and NTP is not running, the calculated lease duration for the bindings is
incorrect.
Recommended Action Configure NTP on the switch to provide an accurate time and date for the
system clock. Then disable and re-enable DHCP snooping to clear the DHCP snooping binding
database.
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-10
OL-9641-04
Chapter 2 Messages and Recovery Procedures
Error Message DHCP_SNOOPING-4-QUEUE_FULL: Fail to enqueue DHCP packet into
processing queue: [chars], the queue is most likely full and the packet will be
dropped.
Explanation This message means that the CPU is receiving DHCP packets a higher rate than the
DHCP snooping process can handle. These DHCP packets are dropped to prevent a denial of service
attack. [chars] is the warning.
Explanation This message means that the specified number of bindings were ignored when the
switch read the database file. The bindings from the database file have MAC address and VLAN
information that a configured DHCP snooping binding already uses.
Recommended Action No action is required.
Error Message DHCP_SNOOPING-6-INTERFACE_NOT_VALID: Interface not valid. [dec]
bindings ignored.
Explanation This message means that the specified number of bindings were ignored when the
switch read the database file because the interface in binding database is not available, the interface
is a routed port, or the interface is a DHCP snooping-trusted Layer 2 interface. [dec] is the number
of bindings that the switch ignores.
Explanation This message means that the 802.1x process received an unknown message event.
Recommended Action Restart the 802.1x process by entering the dot1x system-auth-control global
configuration command. If this message recurs, reload the device.
Error Message DOT1X-4-PROC_START_ERR: Dot1x unable to start.
Explanation This message means that the system failed to create the 802.1x process.
Recommended Action Restart the 802.1x process by entering the dot1x system-auth-control global
configuration command. If this message recurs, reload the device.
Error Message DOT1X-4-UNKN_ERR: An unknown operational error occurred.
Explanation This message means that the 802.1x process cannot operate because of an internal
system error.
Recommended Action No action is required.
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-12
OL-9641-04
Chapter 2 Messages and Recovery Procedures
Error Message DOT1X-5-ERR_CHANNELLING: Dot1x can not be enabled on Channelling
ports.
Explanation This message means that 802.1x could not be enabled on the channeling port. Trying to
set 802.1x port-control to auto or force-unauthorized (force_unauth) mode on a channeling port,
which is not allowed, caused this condition.
Recommended Action Disable channeling on the interface, and then enable 802.1x.
Error Message DOT1X-5-ERR_DYNAMIC: Dot1x can not be enabled on Dynamic ports.
Explanation This message means that 802.1x could not be enabled on the dynamic mode port. Trying
to set 802.1x port-control to auto or force-unauthorized (force_unauth) mode on a dynamic mode
port, which is not allowed, caused this condition.
Recommended Action Disable dynamic mode on the interface, and then enable 802.1x.
Error Message DOT1X-5-ERR_DYNAMIC_VLAN: Dot1x can not be enabled on dynamic VLAN
ports.
DOT1X Messages
Explanation This message means that 802.1x could not be enabled on the dynamic VLAN port.
Trying to set 802.1x port-control to auto or force-unauthorized (force_unauth) mode on a dynamic
VLAN port, which is not allowed, caused this condition.
Recommended Action Disable dynamic VLAN configuration on the interface, and then enable
802.1x.
Error Message DOT1X-5-ERR_INVALID_TUNNEL_MEDIUM_TYPE: Got an invalid value [chars]
for TUNNEL_MEDIUM_TYPE [chars].
Explanation This message means that the provided tunnel medium is either unsupported or invalid.
[chars] is the text received from the RADIUS server.
Recommended Action Change the value to a valid tunnel medium.
Error Message DOT1X-5-ERR_INVALID_TUNNEL_TYPE: Got an invalid value of [chars] for
TUNNEL_TYPE [chars].
Explanation This message means that the provided tunnel type is either unsupported or invalid.
[chars] is the text received from the RADIUS server.
Recommended Action Change the value to a valid tunnel type.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-13
DOT1X Messages
Chapter 2 Messages and Recovery Procedures
Error Message DOT1X-5-ERR_PROTO_TUNNELLING: Dot1x can not be enabled on protocol
tunnelling enabled ports.
Explanation This message means that 802.1x could not be enabled on the protocol-tunneling-enabled
port. Trying to set 802.1x port-control to auto or force-unauthorized (force_unauth) mode on a
protocol-tunneling-enabled port, which is not allowed, caused this condition.
Recommended Action Change the access VLAN on the interface, and then enable 802.1x.
Error Message DOT1X-5-ERR_PVLAN_TRUNK:Dot1x can not be enabled on private VLAN trunk
ports
Explanation This message means that 802.1x could not be enabled on private VLAN ports on which
trunking is enabled.
Recommended Action No action is required.
Error Message DOT1X-5-ERR_RSPAN_VLAN: Dot1x can not be enabled on ports configured
in Remote SPAN vlan.
Explanation This message means that 802.1x could not be enabled on the remote SPAN VLAN port.
Trying to set 802.1x port-control to auto or force-unauthorized (force_unauth) mode on a port that
is in a remote SPAN VLAN, which is not allowed, caused this condition.
Recommended Action Disable remote SPAN on the VLAN, and then enable 802.1x.
Error Message DOT1X-5-ERR_SPANDST: Dot1x can not be enabled on [chars]. It is
configured as a SPAN Dest port.
Explanation This message means that 802.1x cannot be enabled on a port that is a SPAN destination
port because these features are mutually exclusive. [chars] is the port.
Recommended Action Remove the SPAN destination port from the SPAN session before
reconfiguring 802.1x on the port.
Error Message DOT1X-5-ERR_TRUNK: Dot1x can not be enabled on Trunk port.
Explanation This message means that 802.1x could not be enabled on the trunk port. Trying to set
802.1x port control to auto or force-unauthorized (force_unauth) mode on a trunk port, which is not
allowed, caused this condition.
Recommended Action Disable trunking on the interface, and then enable 802.1x.
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-14
OL-9641-04
Chapter 2 Messages and Recovery Procedures
Error Message DOT1X-5-ERR_TUNNEL: Dot1x can not be enabled on 802.1q tunnelling
enabled ports.
Explanation This message means that 802.1x could not be enabled on the 802.1Q
tunneling-enabled-port. Trying to set 802.1x port-control to auto or force-unauthorized
(force_unauth) mode on a 802.1Q-tunnel-enabled port, which is not allowed, caused this condition.
Recommended Action Disable 802.1Q tunneling on the interface, and then enable 802.1x.
Error Message DOT1X-5-ERR_VLAN_INTERNAL: The VLAN [dec] is being used internally and
cannot be assigned for use on the Dot1x port [chars] Vlan.
Explanation This message means that the VLAN is used internally and cannot be assigned again for
use on this port. [dec] is the VLAN ID. [chars] is the port number.
Recommended Action Update the configuration to not use this VLAN.
Error Message DOT1X-5-ERR_VLAN_INVALID: The VLAN [dec] is invalid and cannot be
assigned for use on the 802.1X port [chars] Vlan.
DOT1X Messages
Explanation This message means that the specified VLAN is out of range and cannot be assigned for
use on this port. [dec] is the VLAN ID. [chars] is the port number.
Recommended Action Update the configuration to use a valid VLAN.
Error Message DOT1X-5-ERR_VLAN_NOT_ASSIGNABLE: RADIUS tried to assign a VLAN to
dot1x port [chars] whose VLAN cannot be assigned.
Explanation This message means that the RADIUS server tried to assign a VLAN to a supplicant on
a port whose VLAN cannot be changed, such as a routed port. [chars] is the port number.
Recommended Action Change the specified port to a Layer 2 port by using the switchport interface
configuration command.
Error Message DOT1X-5-ERR_VLAN_NOT_FOUND: Attempt to assign non-existent [chars]
VLAN [chars] to dot1x port [chars].
Explanation This message means that an attempt to assign a VLAN to a supplicant on a port fails
because the VLAN was not found in the VTP database. [chars] is the port number.
Recommended Action Make sure that the VLAN exists, or use another VLAN.
Error Message DOT1X-5-ERR_VLAN_RESERVED: The VLAN [dec] is a reserved vlan and cannot
be assigned for use on the Dot1x port [chars] Vlan.
Explanation This message means that the VLAN specified is a reserved VLAN and cannot be
assigned for use on this port. [dec] is the VLAN ID. [chars] is the port number.
Recommended Action Update the configuration to not use this VLAN.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-15
DOT1X Messages
Chapter 2 Messages and Recovery Procedures
Error Message DOT1X-5-ERR_VLAN_RSPAN_CONFIGURED: VLAN [dec] is configured as a
Remote SPAN VLAN, which has Dot1x enabled interface(s) configured. Please disable
Dot1x on all ports in this VLAN or do not enable RSPAN on this VLAN.
Explanation This message means that remote SPAN should not be enabled on a VLAN in which ports
are configured with 802.1x enabled. [dec] is the VLAN ID.
Recommended Action Either disable the remote SPAN configuration on the VLAN, or disable 802.1x
on all the ports in this VLAN.
Error Message DOT1X-5-INVALID_INPUT: Dot1x Interface parameter is Invalid on
interface [chars].
Explanation The IEEE 802.1x interface parameter is out of the specified range or is invalid. [chars]
is the interface.
Recommended Action Refer to the CLI help documentation to determine the valid IEEE 802.1x
parameters.
Error Message DOT1X-5-INVALID_MAC: Invalid MAC address (zero, broadcast or multicast
mac address [chars] is trying to authenticate).
Explanation This message means that authentication was attempted for a zero, broadcast, or
multicast MAC address using 802.1x. 802.1x authentication is allowed only for a valid nonzero,
nonbroadcast, or nonmulticast source MAC address.
Recommended Action Connect a 802.1x-supported host to the 802.1x-enabled port.
Error Message DDOT1X-5-NOT_DOT1X_CAPABLE: Dot1x disabled on interface [chars]
because it is not an Ethernet interface.
Explanation This message means that you can enable 802.1x authentication only on Ethernet
interfaces. [chars] is the interface.
Recommended Action Enable 802.1x authentication only on Ethernet interfaces.
Error Message DOT1X-5-SECURITY_VIOLATION: Security violation on the interface
[chars], new MAC address [enet] is seen.
Explanation A host on the specified interface is trying to access the network or to authenticate in a
host mode that does not support the number of hosts attached to the interface. This is a security
violation, and the port is put in the error-disabled state.
Recommended Action Ensure that the interface is configured to support the number of attached hosts.
Enter the shutdown interface configuration command and then the no shutdown interface
configuration command to restart the port.
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-16
OL-9641-04
Chapter 2 Messages and Recovery Procedures
DOT1X_SWITCH Messages
This section contains the DOT1X_SWITCH Messages.
Error Message DOT1X_SWITCH-5-ERR_ADDING_ADDRESS: Unable to add address [enet] on
[chars]
Explanation The client MAC address could not be added to the MAC address table because the
hardware memory is full or the address is a secure address on another port. [enet] is the supplicant
MAC address, and [chars] is the interface. This message might appear if the IEEE 802.1x feature is
enabled.
Recommended Action If the hardware memory is full, remove some of the dynamic MAC addresses.
If the client address is on another port, manually remove it from that port.
Error Message DOT1X_SWITCH-5-ERR_INVALID_PRIMARY_VLAN: Attempt to assign primary
VLAN [dec] to 802.1x port [chars]
DOT1X_SWITCH Messages
Explanation An attempt was made to assign a primary VLAN to an IEEE 802.1x port, which is not
allowed. [dec] is the VLAN, and [chars] is the port.
Recommended Action Update the configuration to use a different VLAN.
Error Message DOT1X_SWITCH-5-ERR_INVALID_SEC_VLAN: Attempt to assign invalid
secondary VLAN [dec] to PVLAN host 802.1x port [chars]
Explanation An attempt was made to assign a nonsecondary VLAN to a private VLAN host IEEE
802.1x port. [dec] is the VLAN, and [chars] is the port.
Recommended Action Change the mode of the port so that it is no longer a private VLAN host port,
or use a valid secondary VLAN.
Error Message DOT1X_SWITCH-5-ERR_PRIMARY_VLAN_NOT_FOUND: Attempt to assign VLAN
[dec], whose primary VLAN does not exist or is shutdown, to 802.1x port [chars]
Explanation An attempt was made to assign a private VLAN whose primary VLAN does not exist or
is shut down. [dec] is the VLAN, and [chars] is the port.
Recommended Action Make sure the primary VLAN exists and is not shut down. Verify that the
private VLAN is associated with a primary VLAN.
Error Message DOT1X_SWITCH-5-ERR_RADIUS_VLAN_NOT_FOUND: Attempt to assign
non-existent VLAN [chars] to dot1x port [chars]
Explanation RADIUS attempted to assign a VLAN with a particular name or id to a supplicant on a
port, but the name or id could not be found on the switch. [dec] is the VLAN, and [chars] is the port.
Recommended Action Make sure a VLAN with the specified name/id exists on the switch.
OL-9641-04
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-17
DOT1X_SWITCH Messages
Error Message DOT1X_SWITCH-5-ERR_SEC_VLAN_INVALID: Attempt to assign secondary VLAN
[dec] to non-PVLAN host 802.1x port [chars]
Error Message DOT1X_SWITCH-5-ERR_SPAN_DST_PORT: Attempt to assign VLAN [dec] to
802.1x port [chars], which is configured as a SPAN destination
Error Message DOT1X_SWITCH-5-ERR_VLAN_EQ_MDA_INACTIVE: Multi-Domain Authentication
cannot activate because Data and Voice VLANs are the same on port [chars]
Chapter 2 Messages and Recovery Procedures
Explanation An attempt was made to assign a secondary VLAN to a port that is not a private VLAN
host port, which is not allowed. [dec] is the VLAN, and [chars] is the port.
Recommended Action Change the mode of the port so that it is configured as a private VLAN host
port, or use a different VLAN that is not configured as a secondary VLAN.
Explanation An attempt was made to assign a VLAN to an IEEE 802.1x port that is configured as a
SPAN destination port. [dec] is the VLAN, and [chars] is the port.
Recommended Action Change the SPAN configuration so that the port is no longer a SPAN
destination port, or change the configuration so that no VLAN is assigned.
Explanation Multi-Domain Authentication host mode cannot start if the configured data VLAN on a
port is the same as the voice VLAN. [chars] is the port.
Recommended Action Change either the voice VLAN or the access VLAN on the interface so that
they are not equal. This causes Multi-Domain authentication to start.
Error Message DOT1X_SWITCH-5-ERR_VLAN_EQ_VVLAN: Data VLAN [dec] on port [chars]
cannot be equivalent to the Voice VLAN
Explanation An attempt was made to assign a data VLAN to an IEEE 802.1x port that is the same as
the voice VLAN. [dec] is the VLAN, and [chars] is the port.
Recommended Action Change either the voice VLAN or the access/IEEE 802.1x-assigned VLAN on
the interface so that they are not equal. This causes the authentication to proceed normally on the
next retry.
Error Message DOT1X_SWITCH-5-ERR_VLAN_INTERNAL: Attempt to assign internal VLAN
[dec] to 802.1x port [chars]
Explanation An attempt was made to assign an invalid VLAN to an IEEE 802.1x port. The VLAN
specified is used internally and cannot be assigned to this port. [dec] is the VLAN, and [chars] is the
port.
Recommended Action Update the configuration to not use this VLAN.
Cisco ME 3400E, ME 3400, and ME 2400 Ethernet Access Switch System Message Guide
2-18
OL-9641-04
Loading...
+ 76 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.