Cisco 3750 System Message Guide - Page 33

switchport, force_unauth mode on a 802.1Q-tunnel-enabled port, which is not allowed - vlan routing

Page 33 highlights

Chapter 2 Message and Recovery Procedures DOT1X Messages 78-16184-04 Error Message DOT1X-5-ERR_SPANDST: Dot1x can not be enabled on [chars]. It is configured as a SPAN Dest port. Explanation This message means that 802.1x cannot be enabled on a port that is a SPAN destination port because these features are mutually exclusive. [chars] is the port. Recommended Action Remove the SPAN destination port from the SPAN session before reconfiguring 802.1x on the port. Error Message DOT1X-5-ERR_TRUNK: Dot1x can not be enabled on Trunk port. Explanation This message means that 802.1x could not be enabled on the trunk port. Trying to set 802.1x port control to auto or force-unauthorized (force_unauth) mode on a trunk port, which is not allowed, caused this condition. Recommended Action Disable trunking on the interface, and then enable 802.1x. Error Message DOT1X-5-ERR_TUNNEL: Dot1x can not be enabled on 802.1q tunnelling enabled ports. Explanation This message means that 802.1x could not be enabled on the 802.1Q tunneling-enabled-port. Trying to set 802.1x port-control to auto or force-unauthorized (force_unauth) mode on a 802.1Q-tunnel-enabled port, which is not allowed, caused this condition. Recommended Action Disable 802.1Q tunneling on the interface, and then enable 802.1x. Error Message DOT1X-5-ERR_VLAN_INTERNAL: The VLAN [dec] is being used internally and cannot be assigned for use on the Dot1x port [chars] Vlan. Explanation This message means that the VLAN is used internally and cannot be assigned again for use on this port. [dec] is the VLAN ID. [chars] is the port number. Recommended Action Update the configuration to not use this VLAN. Error Message DOT1X-5-ERR_VLAN_INVALID: The VLAN [dec] is invalid and cannot be assigned for use on the 802.1X port [chars] Vlan. Explanation This message means that the specified VLAN is out of range and cannot be assigned for use on this port. [dec] is the VLAN ID. [chars] is the port number. Recommended Action Update the configuration to use a valid VLAN. Error Message DOT1X-5-ERR_VLAN_NOT_ASSIGNABLE: RADIUS tried to assign a VLAN to dot1x port [chars] whose VLAN cannot be assigned. Explanation This message means that the RADIUS server tried to assign a VLAN to a supplicant on a port whose VLAN cannot be changed, such as a routed port. [chars] is the port number. Recommended Action Change the specified port to a Layer 2 port by using the switchport interface configuration command. Catalyst 3750 Switch System Message Guide 2-15

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120

2-15
Catalyst 3750 Switch System Message Guide
78-16184-04
Chapter 2
Message and Recovery Procedures
DOT1X Messages
Error Message
DOT1X-5-ERR_SPANDST: Dot1x can not be enabled on [chars]. It is
configured as a SPAN Dest port.
Explanation
This message means that 802.1x cannot be enabled on a port that is a SPAN destination
port because these features are mutually exclusive. [chars] is the port.
Recommended Action
Remove the SPAN destination port from the SPAN session before
reconfiguring 802.1x on the port.
Error Message
DOT1X-5-ERR_TRUNK: Dot1x can not be enabled on Trunk port.
Explanation
This message means that 802.1x could not be enabled on the trunk port. Trying to set
802.1x port control to
auto
or
force-unauthorized
(force_unauth) mode on a trunk port, which is not
allowed, caused this condition.
Recommended Action
Disable trunking on the interface, and then enable 802.1x.
Error Message
DOT1X-5-ERR_TUNNEL: Dot1x can not be enabled on 802.1q tunnelling
enabled ports.
Explanation
This message means that 802.1x could not be enabled on the 802.1Q
tunneling-enabled-port. Trying to set 802.1x port-control to
auto
or
force-unauthorized
(force_unauth) mode on a 802.1Q-tunnel-enabled port, which is not allowed, caused this condition.
Recommended Action
Disable 802.1Q tunneling on the interface, and then enable 802.1x.
Error Message
DOT1X-5-ERR_VLAN_INTERNAL: The VLAN [dec] is being used internally and
cannot be assigned for use on the Dot1x port [chars] Vlan.
Explanation
This message means that the VLAN is used internally and cannot be assigned again for
use on this port. [dec] is the VLAN ID. [chars] is the port number.
Recommended Action
Update the configuration to not use this VLAN.
Error Message
DOT1X-5-ERR_VLAN_INVALID: The VLAN [dec] is invalid and cannot be
assigned for use on the 802.1X port [chars] Vlan.
Explanation
This message means that the specified VLAN is out of range and cannot be assigned for
use on this port. [dec] is the VLAN ID. [chars] is the port number.
Recommended Action
Update the configuration to use a valid VLAN.
Error Message
DOT1X-5-ERR_VLAN_NOT_ASSIGNABLE: RADIUS tried to assign a VLAN to
dot1x port [chars] whose VLAN cannot be assigned.
Explanation
This message means that the RADIUS server tried to assign a VLAN to a supplicant on
a port whose VLAN cannot be changed, such as a routed port. [chars] is the port number.
Recommended Action
Change the specified port to a Layer 2 port by using the
switchport
interface
configuration command.