Cisco III System Message Guide - Page 134

DOT1X Messages, DOT1X-5, EAP Messages - access control server

Page 134 highlights

DOT1X Messages Chapter 2 Messages and Recovery Procedures DOT1X Messages This section contains IEEE 802.1X (DOT1X) messages. DOT1X-5 Error Message %DOT1X-5-ERR_PVLAN: Dot1x cannot be enabled on private vlan port [chars] Explanation 802.1X could not be enabled on the specified private VLAN port. This condition was caused by trying to set 802.1X port control to auto mode on a PVLAN port. Recommended Action Change the port to access or routed mode, and retry enabling 802.1X on the port. Error Message %DOT1X-5-ERR_PVLAN_EQ_VVLAN: Dot1x can not be enabled on a port with Access VLAN equal to Voice VLAN. Explanation A port could not enable 802.1X because the access VLAN is equal to a voice VLAN. This condition was caused by trying to set 802.1X port control to auto or force-unauthorized mode on a voice VLAN that is equal to an access VLAN port. Recommended Action Change the voice VLAN or the access VLAN on the interface, and retry the 802.1X operation. Error Message %DOT1X-5-ERR_RADIUSVLAN_EQ_VVLAN: RADIUS attempted to assign a VLAN to Dot1x port [chars] whose Voice VLAN is same as AccessVlan Explanation The RADIUS server attempted to assign a VLAN to a supplicant on a port with a voice VLAN that is equal to an access VLAN. Recommended Action Either update the RADIUS configuration so that an access VLAN is not equal to voice VLAN or change the voice VLAN on the specified port. Error Message %DOT1X-5-ERR_STATIC_MAC: Dot1x can not be enabled on a port configured with Static MAC addresses. Explanation A port could not enable 802.1X because the port is configured with static MAC addresses. This condition was caused by trying to set 802.1X port control to auto or force-unauthorized mode on a port that is configured with static MAC addresses. Recommended Action Remove the static MAC addresses on the port, and retry the 802.1X operation. EAP Messages This section contains Extensible Authentication Protocol (EAP) messages. 2-104 Catalyst Supervisor Engine 32 PISA Cisco IOS System Message Guide, Release 12.2ZY OL-11469-02

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368

2-104
Catalyst Supervisor Engine 32 PISA Cisco IOS System Message Guide, Release 12.2ZY
OL-11469-02
Chapter 2
Messages and Recovery Procedures
DOT1X Messages
DOT1X Messages
This section contains IEEE 802.1X (DOT1X) messages.
DOT1X-5
Error Message
%DOT1X-5-ERR_PVLAN: Dot1x cannot be enabled on private vlan port
[chars]
Explanation
802.1X could not be enabled on the specified private VLAN port. This condition was
caused by trying to set 802.1X port control to auto mode on a PVLAN port.
Recommended Action
Change the port to access or routed mode, and retry enabling 802.1X on the
port.
Error Message
%DOT1X-5-ERR_PVLAN_EQ_VVLAN: Dot1x can not be enabled on a port with
Access VLAN equal to Voice VLAN.
Explanation
A port could not enable 802.1X because the access VLAN is equal to a voice VLAN.
This condition was caused by trying to set 802.1X port control to auto or force-unauthorized mode
on a voice VLAN that is equal to an access VLAN port.
Recommended Action
Change the voice VLAN or the access VLAN on the interface, and retry the
802.1X operation.
Error Message
%DOT1X-5-ERR_RADIUSVLAN_EQ_VVLAN: RADIUS attempted to assign a VLAN to
Dot1x port [chars] whose Voice VLAN is same as AccessVlan
Explanation
The RADIUS server attempted to assign a VLAN to a supplicant on a port with a voice
VLAN that is equal to an access VLAN.
Recommended Action
Either update the RADIUS configuration so that an access VLAN is not equal
to voice VLAN or change the voice VLAN on the specified port.
Error Message
%DOT1X-5-ERR_STATIC_MAC: Dot1x can not be enabled on a port configured
with Static MAC addresses.
Explanation
A port could not enable 802.1X because the port is configured with static MAC
addresses. This condition was caused by trying to set 802.1X port control to auto or
force-unauthorized mode on a port that is configured with static MAC addresses.
Recommended Action
Remove the static MAC addresses on the port, and retry the 802.1X operation.
EAP Messages
This section contains Extensible Authentication Protocol (EAP) messages.