Cisco III System Message Guide - Page 174

mls unicast acl, input | output

Page 174 highlights

FM_EARL7 Messages Chapter 2 Messages and Recovery Procedures Error Message %FM_EARL7-4-MLS_IPV6_FORCED_COMPRESS_MODE: Use IPv6 mask values of 88 or lower in forced compress mode for consistent processing of incompressible IPv6 addresses in both hardware and software. Explanation IPv6 compress mode is a hardware feature. If compress mode is force-enabled and IPv6 ACLs are built with mask values 89 or greater, inconsistent behavior in IPv6 ACL processing could result with incompressible addresses. Using IPv6 mask values of 88 and lower while forcing compress mode ensures proper hardware processing of IPv6 ACL entries. Recommended Action Use IPv6 mask values of 88 or lower in forced compress mode for consistent processing of incompressible IPv6 addresses in both hardware and software. Error Message %FM_EARL7-4-NO_FLOWMASK_REGISTERS: Feature configuration on interface [chars] could not allocate required flowmask registers, traffic may be switched in software Explanation The flow mask requirements for configured features on the specified interface cannot be met because there are no available flow mask registers. The traffic on this interface will be sent to software. Recommended Action Remove one or more NetFlow-based features or QoS Micro-flow policing from the configuration, and reapply the features. Error Message %FM_EARL7-4-RACL_REDUCED_MCAST_RATELIM_WARN: Enabling acl [chars] rate-limiter will cause Multicast traffic to be dropped in hardware on interface [chars] in [chars] direction Explanation A TCAM resource contention prevents routed ACLs from being programmed in TCAM for the specified interface in the specified direction. All Layer 3 traffic will be sent to the CPU to have RACLs enforced in software. Due to a lack of resources, multicast special VMRs cannot be programmed. In this condition, rate limiting for traffic bridged to the CPU by the ACL is incompatible with the status of the multicast interface and will cause multicast traffic to be dropped in hardware. Recommended Action Do not configure the mls unicast acl {input | output} command. Error Message %FM_EARL7-4-VACL_PVLAN: Vacl config is NOT supported on secondary Vlan: [chars] and will be removed Explanation The current implementation of the Feature Manager does not support the configuration of VACLs on secondary VLANs. The VACL configuration is removed from the VLAN interface once it becomes a secondary private VLAN. Both the hardware and the software will be than updated accordingly. Recommended Action Change the VLAN to be a primary VLAN or a regular (nonprivate) VLAN and reapply the VLAN filter. 2-144 Catalyst Supervisor Engine 32 PISA Cisco IOS System Message Guide, Release 12.2ZY OL-11469-02

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368

2-144
Catalyst Supervisor Engine 32 PISA Cisco IOS System Message Guide, Release 12.2ZY
OL-11469-02
Chapter 2
Messages and Recovery Procedures
FM_EARL7 Messages
Error Message
%FM_EARL7-4-MLS_IPV6_FORCED_COMPRESS_MODE: Use IPv6 mask values of 88
or lower in forced compress mode for consistent processing of incompressible IPv6
addresses in both hardware and software.
Explanation
IPv6 compress mode is a hardware feature. If compress mode is force-enabled and IPv6
ACLs are built with mask values 89 or greater, inconsistent behavior in IPv6 ACL processing could
result with incompressible addresses. Using IPv6 mask values of 88 and lower while forcing
compress mode ensures proper hardware processing of IPv6 ACL entries.
Recommended Action
Use IPv6 mask values of 88 or lower in forced compress mode for consistent
processing of incompressible IPv6 addresses in both hardware and software.
Error Message
%FM_EARL7-4-NO_FLOWMASK_REGISTERS: Feature configuration on interface
[chars] could not allocate required flowmask registers, traffic may be switched
in software
Explanation
The flow mask requirements for configured features on the specified interface cannot
be met because there are no available flow mask registers. The traffic on this interface will be sent
to software.
Recommended Action
Remove one or more NetFlow-based features or QoS Micro-flow policing from
the configuration, and reapply the features.
Error Message
%FM_EARL7-4-RACL_REDUCED_MCAST_RATELIM_WARN: Enabling acl [chars]
rate-limiter will cause Multicast traffic to be dropped in hardware on interface
[chars] in [chars] direction
Explanation
A TCAM resource contention prevents routed ACLs from being programmed in TCAM
for the specified interface in the specified direction. All Layer 3 traffic will be sent to the CPU to
have RACLs enforced in software. Due to a lack of resources, multicast special VMRs cannot be
programmed. In this condition, rate limiting for traffic bridged to the CPU by the ACL is
incompatible with the status of the multicast interface and will cause multicast traffic to be dropped
in hardware.
Recommended Action
Do not configure the
mls unicast acl
{
input | output
} command.
Error Message
%FM_EARL7-4-VACL_PVLAN: Vacl config is NOT supported on secondary
Vlan: [chars] and will be removed
Explanation
The current implementation of the Feature Manager does not support the configuration
of VACLs on secondary VLANs. The VACL configuration is removed from the VLAN interface
once it becomes a secondary private VLAN. Both the hardware and the software will be than updated
accordingly.
Recommended Action
Change the VLAN to be a primary VLAN or a regular (nonprivate) VLAN and
reapply the VLAN filter.