H3C Fixed-Port Campus Switches System Log Messages Reference-R63xx-6W100

HomeSupportResource CenterH3C Fixed-Port Campus Switches System Log Messages Reference-R63xx-6W100

 

H3C Fixed-Port Campus Switches

System Log Messages Reference

 

 

 

This manual is applicable to the following switches and software versions:

 

H3C S6520X-HI[EI][SI] & S6520-SI & S5560X-HI & S5000-EI & MS4600 Switch Series (Release 6308 and later)

H3C S5560X-EI Switch Series & H3C S5500V2-EI Switch Series & H3C MS4520V2-30F switch (Release 6308 and later)

H3C S5130S-EI[HI] Switch Series (Release 6308 and later)

H3C S5120V2-LI Switch Series (Release 6308P01 and later)

H3C WAS6000 Switch Series (Release 6308P01 and later)

H3C MS4300V2 & MS4320 & MS4320V2 Switch Series (Release 6308P01 and later)

H3C WS5810-WiNet & WS5820-WiNet & WS5850-WiNet Switch Series (Release 6308P01 and later)

H3C E500C & E500D Switch Series (Release 6309P01 and later)

H3C S5560S-EI & S3100V3-EI[SI] Switch Series (Release 6309P01 and later)

H3C E128C & E152C switches (Release 6310 and later)

H3C S5560S-SI & S5500V3-SI Switch Series (Release 6310 and later)

H3C MS4200 & MS4520V2 Switch Series (except H3C MS4520V2-30F switch) (Release 6310 and later)

H3C S5110V2 & S5110V2-SI & S5130S-SI[LI] & S5120V2-SI & S5000V3-EI & S5000E-X Switch Series (Release 6310 and later)

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Document version: 6W100-20200315

 

Copyright © 2020 New H3C Technologies Co., Ltd. All rights reserved.

No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of New H3C Technologies Co., Ltd.

Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this document are the property of their respective owners.

The information in this document is subject to change without notice.


Contents

Introduction· 1

System log message format 1

Managing and obtaining system log messages· 3

Obtaining log messages from the console terminal 4

Obtaining log messages from a monitor terminal 4

Obtaining log messages from the log buffer 4

Obtaining log messages from the log file· 4

Obtaining log messages from a log host 4

Software module list 5

Using this document 8

AAA messages· 9

AAA_FAILURE· 10

AAA_LAUNCH· 10

AAA_SUCCESS· 11

ACL messages· 11

ACL_ACCELERATE_NO_RES· 11

ACL_ACCELERATE_NONCONTIGUOUSMASK· 12

ACL_ACCELERATE_NOT_SUPPORT· 12

ACL_ACCELERATE_NOT_SUPPORTHOPBYHOP· 12

ACL_ACCELERATE_NOT_SUPPORTMULTITCPFLAG·· 13

ACL_ACCELERATE_UNK_ERR· 13

ACL_IPV6_STATIS_INFO·· 13

ACL_NO_MEM·· 14

ACL_STATIS_INFO·· 14

ANCP messages· 14

ANCP_INVALID_PACKET· 15

APMGR messages· 15

APMGR_AC_MEM_ALERT· 15

APMGR_ADD_AP_FAIL· 16

APMGR_ADDBAC_INFO·· 16

APMGR_AP_OFFLINE· 16

APMGR_AP_ONLINE· 17

APMGR_CWC_IMG_DOWNLOAD_COMPLETE· 17

APMGR_CWC_IMG_DOWNLOAD_START· 17

APMGR_CWC_IMG_NO_ENOUGH_SPACE· 18

APMGR_CWC_LOCAL_AC_DOWN· 18

APMGR_CWC_LOCAL_AC_UP· 19

APMGR_CWC_REBOOT· 19

APMGR_CWC_RUN_DOWNLOAD_COMPLETE· 19

APMGR_CWC_RUN_DOWNLOAD_START· 20

APMGR_CWC_RUN_NO_ENOUGH_SPACE· 20

APMGR_CWC_TUNNEL_DOWN· 21

APMGR_CWC_TUNNEL_UP· 21

APMGR_CWS_IMG_DOWNLOAD_COMPLETE· 22

APMGR_CWS_IMG_DOWNLOAD_START· 22

APMGR_CWS_LOCAL_AC_DOWN· 23

APMGR_CWS_LOCAL_AC_UP· 23

APMGR_CWS_RUN_DOWNLOAD_COMPLETE· 24

APMGR_CWS_RUN_DOWNLOAD_START· 24

APMGR_CWS_TUNNEL_DOWN· 25

APMGR_CWS_TUNNEL_UP· 25

APMGR_DELBAC_INFO·· 26

APMGR_LOCAL_AC_OFFLINE· 26

APMGR_LOCAL_AC_ONLINE· 26

ARP messages· 26

ARP_ACTIVE_ACK_NO_REPLY· 27

ARP_ACTIVE_ACK_NOREQUESTED_REPLY· 27

ARP_BINDRULETOHW_FAILED·· 28

ARP_DETECTION_LOG·· 29

ARP_DUPLICATE_IPADDR_DETECT· 29

ARP_DYNAMIC· 30

ARP_DYNAMIC_IF· 30

ARP_DYNAMIC_SLOT· 31

ARP_ENTRY_CONFLICT· 32

ARP_HOST_IP_CONFLICT· 32

ARP_LOCALPROXY_ENABLE_FAILED·· 33

ARP_RATE_EXCEEDED·· 33

ARP_RATELIMIT_NOTSUPPORT· 34

ARP_SENDER_IP_INVALID·· 34

ARP_SENDER_MAC_INVALID·· 35

ARP_SENDER_SMACCONFLICT· 35

ARP_SENDER_SMACCONFLICT_VSI 36

ARP_SRC_MAC_FOUND_ATTACK· 36

ARP_SUP_ENABLE_FAILED·· 37

ARP_TARGET_IP_INVALID·· 37

ARP_THRESHOLD_REACHED·· 37

ARP_USER_DUPLICATE_IPADDR_DETECT· 38

ARP_USER_MOVE_DETECT· 39

DUPIFIP· 39

DUPIP· 40

DUPVRRPIP· 40

ATK messages· 40

ATK_ICMP_ADDRMASK_REQ·· 41

ATK_ICMP_ADDRMASK_REQ_RAW·· 42

ATK_ICMP_ADDRMASK_REQ_RAW_SZ· 43

ATK_ICMP_ADDRMASK_REQ_SZ· 44

ATK_ICMP_ADDRMASK_RPL· 45

ATK_ICMP_ADDRMASK_RPL_RAW·· 46

ATK_ICMP_ADDRMASK_RPL_RAW_SZ· 47

ATK_ICMP_ADDRMASK_RPL_SZ· 48

ATK_ICMP_ECHO_REQ·· 49

ATK_ICMP_ECHO_REQ_RAW·· 50

ATK_ICMP_ECHO_REQ_RAW_SZ· 51

ATK_ICMP_ECHO_REQ_SZ· 52

ATK_ICMP_ECHO_RPL· 53

ATK_ICMP_ECHO_RPL_RAW·· 54

ATK_ICMP_ECHO_RPL_RAW_SZ· 55

ATK_ICMP_ECHO_RPL_SZ· 56

ATK_ICMP_FLOOD·· 57

ATK_ICMP_FLOOD_SZ· 57

ATK_ICMP_INFO_REQ·· 58

ATK_ICMP_INFO_REQ_RAW·· 59

ATK_ICMP_INFO_REQ_RAW_SZ· 60

ATK_ICMP_INFO_REQ_SZ· 61

ATK_ICMP_INFO_RPL· 62

ATK_ICMP_INFO_RPL_RAW·· 63

ATK_ICMP_INFO_RPL_RAW_SZ· 64

ATK_ICMP_INFO_RPL_SZ· 65

ATK_ICMP_LARGE· 66

ATK_ICMP_LARGE_RAW·· 67

ATK_ICMP_LARGE_RAW_SZ· 67

ATK_ICMP_LARGE_SZ· 68

ATK_ICMP_PARAPROBLEM·· 69

ATK_ICMP_PARAPROBLEM_RAW·· 70

ATK_ICMP_PARAPROBLEM_RAW_SZ· 71

ATK_ICMP_PARAPROBLEM_SZ· 72

ATK_ICMP_PINGOFDEATH· 73

ATK_ICMP_PINGOFDEATH_RAW·· 74

ATK_ICMP_PINGOFDEATH_RAW_SZ· 75

ATK_ICMP_PINGOFDEATH_SZ· 76

ATK_ICMP_REDIRECT· 77

ATK_ICMP_REDIRECT_RAW·· 78

ATK_ICMP_REDIRECT_RAW_SZ· 79

ATK_ICMP_REDIRECT_SZ· 80

ATK_ICMP_SMURF· 81

ATK_ICMP_SMURF_RAW·· 82

ATK_ICMP_SMURF_RAW_SZ· 83

ATK_ICMP_SMURF_SZ· 84

ATK_ICMP_SOURCEQUENCH· 85

ATK_ICMP_SOURCEQUENCH_RAW·· 86

ATK_ICMP_SOURCEQUENCH_RAW_SZ· 87

ATK_ICMP_SOURCEQUENCH_SZ· 88

ATK_ICMP_TIMEEXCEED·· 89

ATK_ICMP_TIMEEXCEED_RAW·· 90

ATK_ICMP_TIMEEXCEED_RAW_SZ· 91

ATK_ICMP_TIMEEXCEED_SZ· 92

ATK_ICMP_TRACEROUTE· 93

ATK_ICMP_TRACEROUTE_RAW·· 94

ATK_ICMP_TRACEROUTE_RAW_SZ· 94

ATK_ICMP_TRACEROUTE_SZ· 95

ATK_ICMP_TSTAMP_REQ·· 96

ATK_ICMP_TSTAMP_REQ_RAW·· 97

ATK_ICMP_TSTAMP_REQ_RAW_SZ· 98

ATK_ICMP_TSTAMP_REQ_SZ· 99

ATK_ICMP_TSTAMP_RPL· 100

ATK_ICMP_TSTAMP_RPL_RAW·· 101

ATK_ICMP_TSTAMP_RPL_RAW_SZ· 102

ATK_ICMP_TSTAMP_RPL_SZ· 103

ATK_ICMP_TYPE· 104

ATK_ICMP_TYPE_RAW·· 105

ATK_ICMP_TYPE_RAW_SZ· 106

ATK_ICMP_TYPE_SZ· 107

ATK_ICMP_UNREACHABLE· 108

ATK_ICMP_UNREACHABLE_RAW·· 109

ATK_ICMP_UNREACHABLE_RAW_SZ· 110

ATK_ICMP_UNREACHABLE_SZ· 111

ATK_ICMPV6_DEST_UNREACH· 112

ATK_ICMPV6_DEST_UNREACH_RAW·· 113

ATK_ICMPV6_DEST_UNREACH_RAW_SZ· 113

ATK_ICMPV6_DEST_UNREACH_SZ· 114

ATK_ICMPV6_ECHO_REQ·· 115

ATK_ICMPV6_ECHO_REQ_RAW·· 116

ATK_ICMPV6_ECHO_REQ_RAW_SZ· 116

ATK_ICMPV6_ECHO_REQ_SZ· 117

ATK_ICMPV6_ECHO_RPL· 118

ATK_ICMPV6_ECHO_RPL_RAW·· 119

ATK_ICMPV6_ECHO_RPL_RAW_SZ· 119

ATK_ICMPV6_ECHO_RPL_SZ· 120

ATK_ICMPV6_FLOOD·· 121

ATK_ICMPV6_FLOOD_SZ· 121

ATK_ICMPV6_GROUPQUERY· 122

ATK_ICMPV6_GROUPQUERY_RAW·· 123

ATK_ICMPV6_GROUPQUERY_RAW_SZ· 123

ATK_ICMPV6_GROUPQUERY_SZ· 124

ATK_ICMPV6_GROUPREDUCTION· 125

ATK_ICMPV6_GROUPREDUCTION_RAW·· 126

ATK_ICMPV6_GROUPREDUCTION_RAW_SZ· 126

ATK_ICMPV6_GROUPREDUCTION_SZ· 127

ATK_ICMPV6_GROUPREPORT· 128

ATK_ICMPV6_GROUPREPORT_RAW·· 129

ATK_ICMPV6_GROUPREPORT_RAW_SZ· 129

ATK_ICMPV6_GROUPREPORT_SZ· 130

ATK_ICMPV6_LARGE· 131

ATK_ICMPV6_LARGE_RAW·· 131

ATK_ICMPV6_LARGE_RAW_SZ· 132

ATK_ICMPV6_LARGE_SZ· 132

ATK_ICMPV6_PACKETTOOBIG·· 133

ATK_ICMPV6_PACKETTOOBIG_RAW·· 134

ATK_ICMPV6_PACKETTOOBIG_RAW_SZ· 134

ATK_ICMPV6_PACKETTOOBIG_SZ· 135

ATK_ICMPV6_PARAPROBLEM·· 136

ATK_ICMPV6_PARAPROBLEM_RAW·· 137

ATK_ICMPV6_PARAPROBLEM_RAW_SZ· 137

ATK_ICMPV6_PARAPROBLEM_SZ· 138

ATK_ICMPV6_TIMEEXCEED·· 139

ATK_ICMPV6_TIMEEXCEED_RAW·· 140

ATK_ICMPV6_TIMEEXCEED_RAW_SZ· 140

ATK_ICMPV6_TIMEEXCEED_SZ· 141

ATK_ICMPV6_TRACEROUTE· 142

ATK_ICMPV6_TRACEROUTE_RAW·· 143

ATK_ICMPV6_TRACEROUTE_RAW_SZ· 144

ATK_ICMPV6_TRACEROUTE_SZ· 145

ATK_ICMPV6_TYPE· 146

ATK_ICMPV6_TYPE _RAW_SZ· 147

ATK_ICMPV6_TYPE_RAW·· 147

ATK_ICMPV6_TYPE_SZ· 148

ATK_IP_OPTION· 149

ATK_IP_OPTION_RAW·· 150

ATK_IP_OPTION_RAW_SZ· 151

ATK_IP_OPTION_SZ· 152

ATK_IP4_ACK_FLOOD·· 153

ATK_IP4_ACK_FLOOD_SZ· 153

ATK_IP4_DIS_PORTSCAN· 154

ATK_IP4_DIS_PORTSCAN_SZ· 154

ATK_IP4_DNS_FLOOD·· 155

ATK_IP4_DNS_FLOOD_SZ· 155

ATK_IP4_FIN_FLOOD·· 156

ATK_IP4_FIN_FLOOD_SZ· 156

ATK_IP4_FRAGMENT· 157

ATK_IP4_FRAGMENT_RAW·· 158

ATK_IP4_FRAGMENT_RAW_SZ· 159

ATK_IP4_FRAGMENT_SZ· 160

ATK_IP4_HTTP_FLOOD·· 161

ATK_IP4_HTTP_FLOOD_SZ· 161

ATK_IP4_IMPOSSIBLE· 162

ATK_IP4_IMPOSSIBLE_RAW·· 163

ATK_IP4_IMPOSSIBLE_RAW_SZ· 164

ATK_IP4_IMPOSSIBLE_SZ· 165

ATK_IP4_IPSWEEP· 166

ATK_IP4_IPSWEEP_SZ· 166

ATK_IP4_PORTSCAN· 167

ATK_IP4_PORTSCAN_SZ· 167

ATK_IP4_RST_FLOOD·· 168

ATK_IP4_RST_FLOOD_SZ· 168

ATK_IP4_SYN_FLOOD·· 169

ATK_IP4_SYN_FLOOD_SZ· 169

ATK_IP4_SYNACK_FLOOD·· 170

ATK_IP4_SYNACK_FLOOD_SZ· 170

ATK_IP4_TCP_ALLFLAGS· 171

ATK_IP4_TCP_ALLFLAGS_RAW·· 172

ATK_IP4_TCP_ALLFLAGS_RAW_SZ· 172

ATK_IP4_TCP_ALLFLAGS_SZ· 173

ATK_IP4_TCP_FINONLY· 174

ATK_IP4_TCP_FINONLY_RAW·· 175

ATK_IP4_TCP_FINONLY_RAW_SZ· 175

ATK_IP4_TCP_FINONLY_SZ· 176

ATK_IP4_TCP_INVALIDFLAGS· 177

ATK_IP4_TCP_INVALIDFLAGS_RAW·· 178

ATK_IP4_TCP_INVALIDFLAGS_RAW_SZ· 179

ATK_IP4_TCP_INVALIDFLAGS_SZ· 180

ATK_IP4_TCP_LAND·· 181

ATK_IP4_TCP_LAND_RAW·· 182

ATK_IP4_TCP_LAND_RAW_SZ· 183

ATK_IP4_TCP_LAND_SZ· 184

ATK_IP4_TCP_NULLFLAG·· 185

ATK_IP4_TCP_NULLFLAG_RAW·· 186

ATK_IP4_TCP_NULLFLAG_RAW_SZ· 186

ATK_IP4_TCP_NULLFLAG_SZ· 187

ATK_IP4_TCP_SYNFIN· 188

ATK_IP4_TCP_SYNFIN_RAW·· 189

ATK_IP4_TCP_SYNFIN_RAW_SZ· 189

ATK_IP4_TCP_SYNFIN_SZ· 190

ATK_IP4_TCP_WINNUKE· 191

ATK_IP4_TCP_WINNUKE_RAW·· 192

ATK_IP4_TCP_WINNUKE_RAW_SZ· 193

ATK_IP4_TCP_WINNUKE_SZ· 194

ATK_IP4_TEARDROP· 195

ATK_IP4_TEARDROP_RAW·· 196

ATK_IP4_TEARDROP_RAW_SZ· 197

ATK_IP4_TEARDROP_SZ· 198

ATK_IP4_TINY_FRAGMENT· 199

ATK_IP4_TINY_FRAGMENT_RAW·· 200

ATK_IP4_TINY_FRAGMENT_RAW_SZ· 201

ATK_IP4_TINY_FRAGMENT_SZ· 202

ATK_IP4_UDP_BOMB· 203

ATK_IP4_UDP_BOMB_RAW·· 204

ATK_IP4_UDP_BOMB_RAW_SZ· 205

ATK_IP4_UDP_BOMB_SZ· 206

ATK_IP4_UDP_FLOOD·· 207

ATK_IP4_UDP_FLOOD_SZ· 207

ATK_IP4_UDP_FRAGGLE· 208

ATK_IP4_UDP_FRAGGLE_RAW·· 209

ATK_IP4_UDP_FRAGGLE_RAW_SZ· 210

ATK_IP4_UDP_FRAGGLE_SZ· 211

ATK_IP4_UDP_SNORK· 212

ATK_IP4_UDP_SNORK_RAW·· 213

ATK_IP4_UDP_SNORK_RAW_SZ· 214

ATK_IP4_UDP_SNORK_SZ· 215

ATK_IP6_ACK_FLOOD·· 216

ATK_IP6_ACK_FLOOD_SZ· 216

ATK_IP6_DIS_PORTSCAN· 217

ATK_IP6_DIS_PORTSCAN_SZ· 217

ATK_IP6_DNS_FLOOD·· 218

ATK_IP6_DNS_FLOOD_SZ· 218

ATK_IP6_FIN_FLOOD·· 219

ATK_IP6_FIN_FLOOD_SZ· 219

ATK_IP6_FRAGMENT· 220

ATK_IP6_FRAGMENT_RAW·· 221

ATK_IP6_FRAGMENT_RAW_SZ· 222

ATK_IP6_FRAGMENT_SZ· 223

ATK_IP6_HTTP_FLOOD·· 224

ATK_IP6_HTTP_FLOOD_SZ· 224

ATK_IP6_IMPOSSIBLE· 225

ATK_IP6_IMPOSSIBLE_RAW·· 226

ATK_IP6_IMPOSSIBLE_RAW_SZ· 227

ATK_IP6_IMPOSSIBLE_SZ· 228

ATK_IP6_IPSWEEP· 228

ATK_IP6_IPSWEEP_SZ· 229

ATK_IP6_PORTSCAN· 229

ATK_IP6_PORTSCAN_SZ· 230

ATK_IP6_RST_FLOOD·· 230

ATK_IP6_RST_FLOOD_SZ· 231

ATK_IP6_SYN_FLOOD·· 231

ATK_IP6_SYN_FLOOD_SZ· 232

ATK_IP6_SYNACK_FLOOD·· 232

ATK_IP6_SYNACK_FLOOD_SZ· 233

ATK_IP6_TCP_ALLFLAGS· 234

ATK_IP6_TCP_ALLFLAGS_RAW·· 234

ATK_IP6_TCP_ALLFLAGS_RAW_SZ· 235

ATK_IP6_TCP_ALLFLAGS_SZ· 235

ATK_IP6_TCP_FINONLY· 236

ATK_IP6_TCP_FINONLY_RAW·· 236

ATK_IP6_TCP_FINONLY_RAW_SZ· 237

ATK_IP6_TCP_FINONLY_SZ· 237

ATK_IP6_TCP_INVALIDFLAGS· 238

ATK_IP6_TCP_INVALIDFLAGS_RAW·· 239

ATK_IP6_TCP_INVALIDFLAGS_RAW_SZ· 240

ATK_IP6_TCP_INVALIDFLAGS_SZ· 241

ATK_IP6_TCP_LAND·· 242

ATK_IP6_TCP_LAND_RAW·· 243

ATK_IP6_TCP_LAND_RAW_SZ· 243

ATK_IP6_TCP_LAND_SZ· 244

ATK_IP6_TCP_NULLFLAG·· 245

ATK_IP6_TCP_NULLFLAG_RAW·· 245

ATK_IP6_TCP_NULLFLAG_RAW_SZ· 246

ATK_IP6_TCP_NULLFLAG_SZ· 246

ATK_IP6_TCP_SYNFIN· 247

ATK_IP6_TCP_SYNFIN_RAW·· 247

ATK_IP6_TCP_SYNFIN_RAW_SZ· 248

ATK_IP6_TCP_SYNFIN_SZ· 248

ATK_IP6_TCP_WINNUKE· 249

ATK_IP6_TCP_WINNUKE_RAW·· 250

ATK_IP6_TCP_WINNUKE_RAW_SZ· 250

ATK_IP6_TCP_WINNUKE_SZ· 251

ATK_IP6_UDP_FLOOD·· 252

ATK_IP6_UDP_FLOOD_SZ· 252

ATK_IP6_UDP_FRAGGLE· 253

ATK_IP6_UDP_FRAGGLE_RAW·· 254

ATK_IP6_UDP_FRAGGLE_RAW_SZ· 254

ATK_IP6_UDP_FRAGGLE_SZ· 255

ATK_IP6_UDP_SNORK· 256

ATK_IP6_UDP_SNORK_RAW·· 257

ATK_IP6_UDP_SNORK_RAW_SZ· 257

ATK_IP6_UDP_SNORK_SZ· 258

ATK_IPOPT_ABNORMAL· 259

ATK_IPOPT_ABNORMAL_RAW·· 260

ATK_IPOPT_ABNORMAL_RAW_SZ· 261

ATK_IPOPT_ABNORMAL_SZ· 262

ATK_IPOPT_LOOSESRCROUTE· 263

ATK_IPOPT_LOOSESRCROUTE_RAW·· 264

ATK_IPOPT_LOOSESRCROUTE_RAW_SZ· 265

ATK_IPOPT_LOOSESRCROUTE_SZ· 266

ATK_IPOPT_RECORDROUTE· 267

ATK_IPOPT_RECORDROUTE_RAW·· 268

ATK_IPOPT_RECORDROUTE_RAW_SZ· 269

ATK_IPOPT_RECORDROUTE_SZ· 270

ATK_IPOPT_ROUTEALERT· 271

ATK_IPOPT_ROUTEALERT_RAW·· 272

ATK_IPOPT_ROUTEALERT_RAW_SZ· 273

ATK_IPOPT_ROUTEALERT_SZ· 274

ATK_IPOPT_SECURITY· 275

ATK_IPOPT_SECURITY_RAW·· 276

ATK_IPOPT_SECURITY_RAW_SZ· 277

ATK_IPOPT_SECURITY_SZ· 278

ATK_IPOPT_STREAMID·· 279

ATK_IPOPT_STREAMID_RAW·· 280

ATK_IPOPT_STREAMID_RAW_SZ· 281

ATK_IPOPT_STREAMID_SZ· 282

ATK_IPOPT_STRICTSRCROUTE· 283

ATK_IPOPT_STRICTSRCROUTE_RAW·· 284

ATK_IPOPT_STRICTSRCROUTE_RAW_SZ· 285

ATK_IPOPT_STRICTSRCROUTE_SZ· 286

ATK_IPOPT_TIMESTAMP· 287

ATK_IPOPT_TIMESTAMP_RAW·· 288

ATK_IPOPT_TIMESTAMP_RAW_SZ· 289

ATK_IPOPT_TIMESTAMP_SZ· 290

ATK_IPV6_EXT_HEADER· 291

ATK_IPV6_EXT_HEADER_RAW·· 292

ATK_IPV6_EXT_HEADER_RAW_SZ· 292

ATK_IPV6_EXT_HEADER_SZ· 293

ATM·· 293

ATM_PVCDOWN· 293

ATM_PVCUP· 294

BFD messages· 294

BFD_CHANGE_FSM·· 295

BFD_REACHED_UPPER_LIMIT· 295

BGP messages· 295

BGP_EXCEED_ROUTE_LIMIT· 296

BGP_REACHED_THRESHOLD·· 296

BGP_LOG_ROUTE_FLAP· 297

BGP_MEM_ALERT· 297

BGP_PEER_LICENSE_REACHED·· 297

BGP_ROUTE_LICENSE_REACHED·· 298

BGP_STATE_CHANGED·· 298

BLS messages· 298

BLS_ENTRY_ADD·· 299

BLS_ENTRY_DEL· 299

BLS_IPV6_ENTRY_ADD·· 300

BLS_IPV6_ENTRY_DEL· 300

CFD messages· 300

CFD_CROSS_CCM·· 301

CFD_ERROR_CCM·· 301

CFD_LOST_CCM·· 302

CFD_RECEIVE_CCM·· 302

CFGMAN messages· 303

CFGMAN_ARCHIVE_SCP_FAIL· 303

CFGMAN_CFGCHANGED·· 303

CFGMAN_EXIT_FROM_CONFIGURE· 304

CFGMAN_OPTCOMPLETION· 304

CONNLMT messages· 305

CONNLMT_IPV4_OVERLOAD·· 306

CONNLMT_IPV4_RECOVER· 307

CONNLMT_IPV6_OVERLOAD·· 308

CONNLMT_IPV6_RECOVER· 309

DEV messages· 309

BOARD_INSERTED·· 310

BOARD_REBOOT· 310

BOARD_REMOVED·· 310

BOARD_STATE_FAULT· 311

BOARD_STATE_NORMAL· 311

BOARD_STATE_STARTING·· 311

CFCARD_INSERTED·· 312

CFCARD_REMOVED·· 312

CHASSIS_REBOOT· 312

DEV_CLOCK_CHANGE· 313

DEV_FAULT_TOOLONG·· 313

DYINGGASP· 313

FAN_ABSENT· 314

FAN_DIRECTION_NOT_PREFERRED·· 314

FAN_FAILED·· 315

FAN_RECOVERED·· 315

MAD_DETECT· 316

POWER_ABSENT· 316

POWER_FAILED·· 317

POWER_MONITOR_ABSENT· 317

POWER_MONITOR_FAILED·· 318

POWER_MONITOR_RECOVERED·· 318

POWER_RECOVERED·· 319

RPS_ABSENT· 319

RPS_FAILED·· 320

RPS_NORMAL· 320

SUBCARD_FAULT· 321

SUBCARD_INSERTED·· 321

SUBCARD_REBOOT· 321

SUBCARD_REMOVED·· 322

SYSTEM_REBOOT· 322

TEMPERATURE_ALARM·· 323

TEMPERATURE_LOW·· 324

TEMPERATURE_NORMAL· 325

TEMPERATURE_SHUTDOWN· 326

TEMPERATURE_WARNING·· 327

VCHK_VERSION_INCOMPATIBLE· 328

DHCP· 328

DHCP_NOTSUPPORTED·· 328

DHCP_NORESOURCES· 329

DHCPR·· 329

DHCPR_SERVERCHANGE· 329

DHCPR_SWITCHMASTER· 330

DHCPS messages· 330

DHCPS_ALLOCATE_IP· 330

DHCPS_CONFLICT_IP· 331

DHCPS_EXTEND_IP· 331

DHCPS_FILE· 332

DHCPS_RECLAIM_IP· 332

DHCPS_VERIFY_CLASS· 332

DHCPS6 messages· 333

DHCPS6_ALLOCATE_ADDRESS· 333

DHCPS6_ALLOCATE_PREFIX· 333

DHCPS6_CONFLICT_ADDRESS· 334

DHCPS6_EXTEND_ADDRESS· 334

DHCPS6_EXTEND_PREFIX· 335

DHCPS6_FILE· 335

DHCPS6_RECLAIM_ADDRESS· 336

DHCPS6_RECLAIM_PREFIX· 336

DHCPSP4· 336

DHCPSP4_FILE· 337

DHCPSP6· 337

DHCPSP6_FILE· 337

DIAG messages· 337

CPU_MINOR_RECOVERY· 338

CPU_MINOR_THRESHOLD·· 338

CPU_SEVERE_RECOVERY· 338

CPU_SEVERE_THRESHOLD·· 339

MEM_ALERT· 340

MEM_BELOW_THRESHOLD·· 341

MEM_EXCEED_THRESHOLD·· 341

DLDP messages· 342

DLDP_AUTHENTICATION_FAILED·· 342

DLDP_LINK_BIDIRECTIONAL· 342

DLDP_LINK_SHUTMODECHG·· 343

DLDP_LINK_UNIDIRECTIONAL· 343

DLDP_NEIGHBOR_AGED·· 344

DLDP_NEIGHBOR_CONFIRMED·· 344

DLDP_NEIGHBOR_DELETED·· 345

DOT1X messages· 345

DOT1X_CONFIG_NOTSUPPORT· 345

DOT1X_LOGIN_FAILURE· 346

DOT1X_LOGIN_SUCC· 346

DOT1X_LOGIN_SUCC (in open mode) 347

DOT1X_LOGOFF· 347

DOT1X_LOGOFF (in open mode) 348

DOT1X_LOGOFF_ABNORMAL· 348

DOT1X_LOGOFF_ABNORMAL (in open mode) 349

DOT1X_MACBINDING_EXIST· 349

DOT1X_NOTENOUGH_EADFREEIP_RES· 350

DOT1X_NOTENOUGH_EADFREERULE_RES· 350

DOT1X_NOTENOUGH_EADMACREDIR_RES· 350

DOT1X_NOTENOUGH_EADPORTREDIR_RES· 351

DOT1X_NOTENOUGH_ENABLEDOT1X_RES· 351

DOT1X_PEXAGG_NOMEMBER_RES· 351

DOT1X_SMARTON_FAILURE· 352

DOT1X_UNICAST_NOT_EFFECTIVE· 352

DRNI 352

DRNI_AUTO-RECOVERY_TIMEOUT· 353

DRNI_GLBCONSISTENCYCHECK_SUCCESS· 353

DRNI_GLBCONSISTENCYCHECK_FAILURE· 353

DRNI_IFCONSISTENCYCHECK_SUCCESS· 354

DRNI_IFCONSISTENCYCHECK_FAILURE· 354

DRNI_IFEVENT_DR_BIND·· 354

DRNI_IFEVENT_DR_GLOBALDOWN· 355

DRNI_IFEVENT_DR_GLOBALUP· 355

DRNI_IFEVENT_DR_NOSELECTED·· 355

DRNI_IFEVENT_DR_PEER_NOSELECTED·· 356

DRNI_IFEVENT_DR_PEER_SELECTED·· 356

DRNI_IFEVENT_DR_SELECTED·· 356

DRNI_IFEVENT_DR_UNBIND·· 357

DRNI_IFEVENT_IPP_BIND·· 357

DRNI_IFEVENT_IPP_DOWN· 357

DRNI_IFEVENT_IPP_UNBIND·· 358

DRNI_IFEVENT_IPP_UP· 358

DRNI_IPP_BLOCK· 358

DRNI_IPP_UNBLOCK· 359

DRNI_KEEPALIVEINTERVAL_MISMATCH· 359

DRNI_KEEPALIVELINK_DOWN· 359

DRNI_KEEPALIVELINK_UP· 360

DRNI_SECONDARY_MADDOWN· 360

DRNI_SYSEVENT_DEVICEROLE_CHANGE· 360

DRNI_SYSEVENT_MAC_CHANGE· 361

DRNI_SYSEVENT_NUMBER_CHANGE· 361

DRNI_SYSEVENT_PRIORITY_CHANGE· 361

DRVPLAT messages· 361

DRVPLAT_ECMP_NO_RESOURCE· 362

DRVPLAT_MAC_Confilict 362

DRVPLAT_NO_ENOUGH_RESOURCE· 362

DRVPLAT_PORT_ATTACK_OCCUR· 363

DRVPLAT_PORT_ATTACK_OCCUR· 363

EDEV messages· 363

ALARM_IN_REMOVED·· 364

ALARM_IN_REPORTED·· 364

EDEV_BOOTROM_UPDATE_FAILED·· 364

EDEV_BOOTROM_UPDATE_SUCCESS· 365

EDEV_FAILOVER_GROUP_STATE_CHANGE· 365

ERPS messages· 365

ERPS_STATE_CHANGED·· 366

ETH messages· 366

ETH_SET_MAC_FAILED·· 366

ETHOAM messages· 366

ETHOAM_CONNECTION_FAIL_DOWN· 367

ETHOAM_CONNECTION_FAIL_TIMEOUT· 367

ETHOAM_CONNECTION_FAIL_UNSATISF· 367

ETHOAM_CONNECTION_SUCCEED·· 368

ETHOAM_DISABLE· 368

ETHOAM_DISCOVERY_EXIT· 368

ETHOAM_ENABLE· 369

ETHOAM_ENTER_LOOPBACK_CTRLLED·· 369

ETHOAM_ENTER_LOOPBACK_CTRLLING·· 369

ETHOAM_LOCAL_DYING_GASP· 370

ETHOAM_LOCAL_ERROR_FRAME· 370

ETHOAM_LOCAL_ERROR_FRAME_PERIOD·· 370

ETHOAM_LOCAL_ERROR_FRAME_SECOND·· 371

ETHOAM_LOCAL_ERROR_SYMBOL· 371

ETHOAM_LOCAL_LINK_FAULT· 371

ETHOAM_LOOPBACK_EXIT· 372

ETHOAM_LOOPBACK_EXIT_ERROR_STATU· 372

ETHOAM_LOOPBACK_NO_RESOURCE· 373

ETHOAM_LOOPBACK_NOT_SUPPORT· 373

ETHOAM_QUIT_LOOPBACK_CTRLLED·· 373

ETHOAM_QUIT_LOOPBACK_CTRLLING·· 374

ETHOAM_REMOTE_CRITICAL· 374

ETHOAM_REMOTE_DYING_GASP· 374

ETHOAM_REMOTE_ERROR_FRAME· 375

ETHOAM_REMOTE_ERROR_FRAME_PERIOD·· 375

ETHOAM_REMOTE_ERROR_FRAME_SECOND·· 375

ETHOAM_REMOTE_ERROR_SYMBOL· 376

ETHOAM_REMOTE_EXIT· 376

ETHOAM_REMOTE_FAILURE_RECOVER· 376

ETHOAM_REMOTE_LINK_FAULT· 377

ETHOAM_NO_ENOUGH_RESOURCE· 377

ETHOAM_NOT_CONNECTION_TIMEOUT· 377

EVB messages· 378

EVB_AGG_FAILED·· 378

EVB_LICENSE_EXPIRE· 378

EVB_VSI_OFFLINE· 379

EVB_VSI_ONLINE· 379

EVIISIS messages· 379

EVIISIS_LICENSE_EXPIRED·· 380

EVIISIS_LICENSE_EXPIRED_TIME· 380

EVIISIS_LICENSE_UNAVAILABLE· 380

EVIISIS_NBR_CHG·· 381

FCLINK messages· 381

FCLINK_FDISC_REJECT_NORESOURCE· 381

FCLINK_FLOGI_REJECT_NORESOURCE· 382

FCOE messages· 382

FCOE_INTERFACE_NOTSUPPORT_FCOE· 382

FCOE_LAGG_BIND_ACTIVE· 383

FCOE_LAGG_BIND_DEACTIVE· 383

FCZONE messages· 383

FCZONE_DISTRIBUTE_FAILED·· 384

FCZONE_HARDZONE_DISABLED·· 384

FCZONE_HARDZONE_ENABLED·· 385

FCZONE_ISOLATE_ALLNEIGHBOR· 385

FCZONE_ISOLATE_CLEAR_VSAN· 386

FCZONE_ISOLATE_CLEAR_ALLVSAN· 386

FCZONE_ISOLATE_NEIGHBOR· 387

FIB messages· 387

FIB_FILE· 387

FILTER messages· 387

FILTER_EXECUTION_ICMP· 388

FILTER_EXECUTION_ICMPV6· 389

FILTER_IPV4_EXECUTION· 390

FILTER_IPV6_EXECUTION· 391

FIPSNG messages· 391

FIPSNG_HARD_RESOURCE_NOENOUGH· 392

FIPSNG_HARD_RESOURCE_RESTORE· 392

FS messages· 392

FS_UNFORMATTED_PARTITION· 392

FTP messages· 393

FTP_ACL_DENY· 393

FTP_REACH_SESSION_LIMIT· 393

FTPD_AUTHOR_FAILED·· 394

gRPC messages· 394

GRPC_LOGIN· 394

GRPC_LOGIN_FAILED·· 395

GRPC_LOGOUT· 395

GRPC_SERVER_FAILED·· 395

GRPC_SUBSCRIBE_EVENT_FAILED·· 396

GRPC_RECEIVE_SUBSCRIPTION· 396

HA messages· 396

HA_BATCHBACKUP_FINISHED·· 396

HA_BATCHBACKUP_STARTED·· 397

HA_STANDBY_NOT_READY· 397

HA_STANDBY_TO_MASTER· 397

HQOS messages· 397

HQOS_DP_SET_FAIL· 398

HQOS_FP_SET_FAIL· 398

HQOS_POLICY_APPLY_FAIL· 399

HQOS_POLICY_APPLY_FAIL· 399

HTTPD messages· 399

HTTPD_CONNECT· 400

HTTPD_CONNECT_TIMEOUT· 400

HTTPD_DISCONNECT· 400

HTTPD_FAIL_FOR_ACL· 401

HTTPD_FAIL_FOR_ACP· 401

HTTPD_REACH_CONNECT_LIMIT· 402

IFNET messages· 402

IF_BUFFER_CONGESTION_OCCURRENCE· 402

IF_BUFFER_CONGESTION_CLEAR· 403

IF_JUMBOFRAME_WARN· 403

IF_LINKFLAP_DETECTED·· 404

INTERFACE_NOTSUPPRESSED·· 404

INTERFACE_SUPPRESSED·· 404

LINK_UPDOWN· 405

PHY_UPDOWN· 405

PROTOCOL_UPDOWN· 405

TUNNEL_LINK_UPDOWN· 406

TUNNEL_PHY_UPDOWN· 406

VLAN_MODE_CHANGE· 406

IKE messages· 407

IKE_P1_SA_ESTABLISH_FAIL· 407

IKE_P2_SA_ESTABLISH_FAIL· 408

IKE_P2_SA_TERMINATE· 408

IKE_VERIFY_CERT_FAIL· 409

IP6ADDR·· 410

IP6ADDR_CREATEADDRESS_ERROR· 410

IP6ADDR_FUNCTION_FAIL· 411

IPADDR messages· 411

IPADDR_HA_EVENT_ERROR· 412

IPADDR_HA_STOP_EVENT· 413

IPFW·· 413

IPFW_FAILURE· 413

IPSEC messages· 413

IPSEC_FAILED_ADD_FLOW_TABLE· 414

IPSEC_PACKET_DISCARDED·· 414

IPSEC_SA_ESTABLISH· 415

IPSEC_SA_ESTABLISH_FAIL· 415

IPSEC_SA_INITINATION· 416

IPSEC_SA_TERMINATE· 416

IPSG messages· 416

IPSG_ADDENTRY_ERROR· 417

IPSG_ADDEXCLUDEDVLAN_ERROR· 418

IPSG_ARP_LOCALMAC_CONFLICT· 418

IPSG_ARP_REMOTEMAC_CONFLICT· 419

IPSG_DELENTRY_ERROR· 420

IPSG_DELEXCLUDEDVLAN_ERROR· 420

IPSG_IPV4_ALARMCLEAR· 421

IPSG_IPV4_ALARMEMERGE· 421

IPSG_IPV6_ALARMCLEAR· 422

IPSG_IPV6_ALARMEMERGE· 422

IPSG_MAC_CONFLICT· 423

IPSG_ND_LOCALMAC_CONFLICT· 423

IPSG_ND_REMOTEMAC_CONFLICT· 424

IRDP messages· 424

IRDP_EXCEED_ADVADDR_LIMIT· 424

IRF· 424

IRF_LINK_BLOCK· 425

IRF_LINK_DOWN· 425

IRF_LINK_UP· 425

IRF_MEMBERID_CONFLICT· 426

IRF_MERGE· 426

IRF_MERGE_NEED_REBOOT· 426

IRF_MERGE_NOT_NEED_REBOOT· 427

ISIS messages· 427

ISIS_LSP_CONFLICT· 427

ISIS_MEM_ALERT· 428

ISIS_NBR_CHG·· 428

ISSU messages· 428

ISSU_LOAD_FAILED·· 429

ISSU_LOAD_SUCCESS· 429

ISSU_PROCESSWITCHOVER· 429

ISSU_ROLLBACKCHECKNORMAL· 430

L2PT messages· 430

L2PT_SET_MULTIMAC_FAILED·· 430

L2PT_CREATE_TUNNELGROUP_FAILED·· 430

L2PT_ADD_GROUPMEMBER_FAILED·· 431

L2PT_ENABLE_DROP_FAILED·· 431

L2TPv2 messages· 431

L2TPV2_TUNNEL_EXCEED_LIMIT· 432

L2TPV2_SESSION_EXCEED_LIMIT· 432

L2VPN messages· 432

L2VPN_BGPVC_CONFLICT_LOCAL· 433

L2VPN_BGPVC_CONFLICT_REMOTE· 433

L2VPN_HARD_RESOURCE_NOENOUGH· 434

L2VPN_HARD_RESOURCE_RESTORE· 434

L2VPN_LABEL_DUPLICATE· 434

LAGG messages· 435

LAGG_ACTIVE· 435

LAGG_AUTO_AGGREGATION· 435

LAGG_INACTIVE_AICFG·· 436

LAGG_INACTIVE_BFD·· 436

LAGG_INACTIVE_CONFIGURATION· 437

LAGG_INACTIVE_DUPLEX· 437

LAGG_INACTIVE_HARDWAREVALUE· 438

LAGG_INACTIVE_LOWER_LIMIT· 438

LAGG_INACTIVE_PARTNER· 439

LAGG_INACTIVE_PHYSTATE· 439

LAGG_INACTIVE_RESOURCE_INSUFICIE· 440

LAGG_INACTIVE_SPEED·· 440

LAGG_INACTIVE_UPPER_LIMIT· 441

LAGG_SELECTPORT_INCONSISTENT· 441

LDP messages· 441

LDP_MPLSLSRID_CHG·· 442

LDP_SESSION_CHG·· 443

LDP_SESSION_GR· 444

LDP_SESSION_SP· 444

LLDP messages· 445

LLDP_CREATE_NEIGHBOR· 445

LLDP_DELETE_NEIGHBOR· 446

LLDP_LESS_THAN_NEIGHBOR_LIMIT· 446

LLDP_NEIGHBOR_AGE_OUT· 447

LLDP_NEIGHBOR_PROTECTION_BLOCK· 447

LLDP_NEIGHBOR_PROTECTION_DOWN· 448

LLDP_NEIGHBOR_PROTECTION_UNBLOCK· 448

LLDP_NEIGHBOR_PROTECTION_UP· 448

LLDP_PVID_INCONSISTENT· 449

LLDP_REACH_NEIGHBOR_LIMIT· 449

LOAD messages· 449

BOARD_LOADING·· 450

LOAD_FAILED·· 450

LOAD_FINISHED·· 450

LOGIN messages· 451

LOGIN_FAILED·· 451

LOGIN_ INVALID_USERNAME_PWD·· 451

LPDT messages· 451

LPDT_LOOPED·· 452

LPDT_RECOVERED·· 452

LPDT_VLAN_LOOPED·· 452

LPDT_VLAN_RECOVERED·· 453

LS messages· 453

LS_ADD_USER_TO_GROUP· 453

LS_AUTHEN_FAILURE· 454

LS_AUTHEN_SUCCESS· 454

LS_DEL_USER_FROM_GROUP· 455

LS_DELETE_PASSWORD_FAIL· 455

LS_PWD_ADDBLACKLIST· 455

LS_PWD_CHGPWD_FOR_AGEDOUT· 456

LS_PWD_CHGPWD_FOR_AGEOUT· 456

LS_PWD_CHGPWD_FOR_COMPOSITION· 456

LS_PWD_CHGPWD_FOR_FIRSTLOGIN· 457

LS_PWD_CHGPWD_FOR_LENGTH· 457

LS_PWD_FAILED2WRITEPASS2FILE· 457

LS_PWD_MODIFY_FAIL· 458

LS_PWD_MODIFY_SUCCESS· 458

LS_REAUTHEN_FAILURE· 459

LS_UPDATE_PASSWORD_FAIL· 459

LS_USER_CANCEL· 459

LS_USER_PASSWORD_EXPIRE· 460

LS_USER_ROLE_CHANGE· 460

LSPV messages· 460

LSPV_PING_STATIS_INFO·· 461

MAC messages· 461

MAC_DRIVER_ADD_ENTRY· 461

MAC_PROTOCOLPKT_NORES_GLOBAL· 462

MAC_PROTOCOLPKT_NORES_PORT· 462

MAC_PROTOCOLPKT_NORES_VLAN· 463

MAC_TABLE_FULL_GLOBAL· 463

MAC_TABLE_FULL_PORT· 463

MAC_TABLE_FULL_VLAN· 464

MAC_VLAN_LEARNLIMIT_NORESOURCE· 464

MAC_VLAN_LEARNLIMIT_NOTSUPPORT· 464

MACA messages· 465

MACA_ENABLE_NOT_EFFECTIVE· 465

MACA_LOGIN_FAILURE· 465

MACA_LOGIN_SUCC· 466

MACA_LOGIN_SUCC (in open mode) 466

MACA_LOGOFF· 467

MACA_LOGOFF (in open mode) 467

MACSEC messages· 467

MACSEC_MKA_KEEPALIVE_TIMEOUT· 468

MACSEC_MKA_PRINCIPAL_ACTOR· 468

MACSEC_MKA_SAK_REFRESH· 468

MACSEC_MKA_SESSION_REAUTH· 469

MACSEC_MKA_SESSION_SECURED·· 469

MACSEC_MKA_SESSION_START· 470

MACSEC_MKA_SESSION_STOP· 470

MACSEC_MKA_SESSION_UNSECURED·· 471

MBFD messages· 471

MBFD_TRACEROUTE_FAILURE· 471

MBUF messages· 472

MBUF_DATA_BLOCK_CREATE_FAIL· 472

MDC messages· 472

MDC_CREATE_ERR· 473

MDC_CREATE· 473

MDC_DELETE· 473

MDC_KERNEL_EVENT_TOOLONG·· 474

MDC_LICENSE_EXPIRE· 474

MDC_NO_FORMAL_LICENSE· 474

MDC_NO_LICENSE_EXIT· 475

MDC_OFFLINE· 475

MDC_ONLINE· 475

MDC_STATE_CHANGE· 476

MFIB messages· 476

MFIB_MEM_ALERT· 476

MGROUP messages· 476

MGROUP_APPLY_SAMPLER_FAIL· 477

MGROUP_RESTORE_CPUCFG_FAIL· 477

MGROUP_RESTORE_GROUP_FAIL· 478

MGROUP_RESTORE_IFCFG_FAIL· 478

MGROUP_SYNC_CFG_FAIL· 479

MPLS messages· 479

MPLS_HARD_RESOURCE_NOENOUGH· 479

MPLS_HARD_RESOURCE_RESTORE· 480

MTLK messages· 480

MTLK_UPLINK_STATUS_CHANGE· 480

NAT messages· 480

NAT_ADDR_BIND_CONFLICT· 481

NAT_FAILED_ADD_FLOW_RULE· 481

NAT_FAILED_ADD_FLOW_TABLE· 482

NAT_FLOW·· 483

NAT_SERVER_INVALID·· 484

NAT_SERVICE_CARD_RECOVER_FAILURE· 485

ND messages· 485

ND_COMMONPROXY_ENABLE_FAILED·· 486

ND_CONFLICT· 486

ND_DUPADDR· 486

ND_HOST_IP_CONFLICT· 487

ND_LOCALPROXY_ENABLE_FAILED·· 487

ND_MAC_CHECK· 488

ND_NETWORKROUTE_DUPLICATE· 488

ND_RAGUARD_DROP· 489

ND_SET_PORT_TRUST_NORESOURCE· 489

ND_SET_VLAN_REDIRECT_NORESOURCE· 489

ND_SNOOPING_LEARN_ALARM·· 490

ND_SNOOPING_LEARN_ALARM_RECOVER· 490

ND_USER_DUPLICATE_IPV6ADDR· 491

ND_USER_MOVE· 492

ND_USER_OFFLINE· 492

ND_USER_ONLINE· 493

NETCONF messages· 493

CLI 493

EDIT-CONFIG·· 494

NETCONF_MSG_DEL· 495

THREAD·· 495

NQA messages· 495

NQA_LOG_UNREACHABLE· 496

NTP messages· 496

NTP_CLOCK_CHANGE· 496

NTP_LEAP_CHANGE· 497

NTP_SOURCE_CHANGE· 497

NTP_SOURCE_LOST· 498

NTP_STRATUM_CHANGE· 498

OAP messages· 498

OAP_CLIENT_DEREG·· 499

OAP_CLIENT_TIMEOUT· 499

OBJP messages· 499

OBJP_ACCELERATE_NO_RES· 500

OBJP_ACCELERATE_NOT_SUPPORT· 500

OBJP_ACCELERATE_UNK_ERR· 500

OFP messages· 501

OFP_ACTIVE· 501

OFP_ACTIVE_FAILED·· 501

OFP_CONNECT· 501

OFP_FAIL_OPEN· 502

OFP_FAIL_OPEN_FAILED·· 502

OFP_FLOW_ADD·· 503

OFP_FLOW_ADD_ARP_FAILED·· 503

OFP_FLOW_ADD_DUP· 504

OFP_FLOW_ADD_FAILED·· 504

OFP_FLOW_ADD_FAILED·· 505

OFP_FLOW_ADD_ND_FAILED·· 505

OFP_FLOW_ADD_TABLE_MISS· 506

OFP_FLOW_ADD_TABLE_MISS_FAILED·· 506

OFP_FLOW_DEL· 507

OFP_FLOW_DEL_L2VPN_DISABLE· 507

OFP_FLOW_DEL_TABLE_MISS· 508

OFP_FLOW_DEL_TABLE_MISS_FAILED·· 508

OFP_FLOW_DEL_VXLAN_DEL· 509

OFP_FLOW_MOD·· 509

OFP_FLOW_MOD_FAILED·· 510

OFP_FLOW_MOD_TABLE_MISS· 510

OFP_FLOW_MOD_TABLE_MISS_FAILED·· 511

OFP_FLOW_RMV_GROUP· 511

OFP_FLOW_RMV_HARDTIME· 511

OFP_FLOW_RMV_IDLETIME· 512

OFP_FLOW_RMV_METER· 512

OFP_FLOW_UPDATE_FAILED·· 513

OFP_GROUP_ADD·· 513

OFP_GROUP_ADD_FAILED·· 514

OFP_GROUP_DEL· 514

OFP_GROUP_MOD·· 515

OFP_GROUP_MOD_FAILED·· 515

OFP_GROUP_REFRESH_FAILED·· 516

OFP_GROUP_ROLLBACK_FAILED·· 516

OFP_METER_ADD·· 517

OFP_METER_ADD_FAILED·· 517

OFP_METER_DEL· 518

OFP_METER_MOD·· 518

OFP_METER_MOD_FAILED·· 519

OFP_MISS_RMV_GROUP· 519

OFP_MISS_RMV_HARDTIME· 519

OFP_MISS_RMV_IDLETIME· 520

OFP_MISS_RMV_METER· 520

OFP_RADARDETECTION· 520

PORT_MOD·· 521

OPENSRC (FreeRADIUS) messages· 522

HUP event 522

Process restart event 523

Process start event 523

User authentication· 524

OPTMOD messages· 526

BIAS_HIGH· 527

BIAS_LOW·· 527

BIAS_NORMAL· 527

CFG_ERR· 528

CHKSUM_ERR· 528

IO_ERR· 528

MOD_ALM_OFF· 529

MOD_ALM_ON· 529

MODULE_IN· 529

MODULE_OUT· 530

PHONY_MODULE· 530

RX_ALM_OFF· 530

RX_ALM_ON· 531

RX_POW_HIGH· 531

RX_POW_LOW·· 531

RX_POW_NORMAL· 532

TEMP_HIGH· 532

TEMP_LOW·· 532

TEMP_NORMAL· 533

TX_ALM_OFF· 533

TX_ALM_ON· 533

TX_POW_HIGH· 534

TX_POW_LOW·· 534

TX_POW_NORMAL· 534

TYPE_ERR· 535

VOLT_HIGH· 535

VOLT_LOW·· 535

VOLT_NORMAL· 536

OSPF messages· 536

OSPF_DUP_RTRID_NBR· 536

OSPF_IP_CONFLICT_INTRA· 537

OSPF_LAST_NBR_DOWN· 537

OSPF_MEM_ALERT· 538

OSPF_NBR_CHG·· 538

OSPF_RT_LMT· 538

OSPF_RTRID_CHG·· 539

OSPF_RTRID_CONFLICT_INTER· 539

OSPF_RTRID_CONFLICT_INTRA· 539

OSPF_VLINKID_CHG·· 540

OSPFV3 messages· 540

OSPFV3_LAST_NBR_DOWN· 540

OSPFV3_MEM_ALERT· 541

OSPFV3_NBR_CHG·· 541

OSPFV3_RT_LMT· 541

PBB messages· 542

PBB_JOINAGG_WARNING·· 542

PBR messages· 542

PBR_HARDWARE_ERROR· 542

PCE messages· 543

PCE_PCEP_SESSION_CHG·· 543

PEX messages (IRF 3) 543

PEX_ASSOCIATEID_MISMATCHING·· 544

PEX_CONFIG_ERROR· 544

PEX_CONNECTION_ERROR· 545

PEX_FORBID_STACK· 545

PEX_LINK_BLOCK· 546

PEX_LINK_DOWN· 547

PEX_LINK_FORWARD·· 547

PEX_REG_JOININ· 548

PEX_REG_LEAVE· 548

PEX_REG_REQUEST· 549

PEX_STACKCONNECTION_ERROR· 549

PEX messages (IRF 3.1) 549

PEX_AUTOCONFIG_BAGG_ASSIGNMEMBER· 550

PEX_AUTOCONFIG_BAGG_CREATE· 550

PEX_AUTOCONFIG_BAGG_NORESOURCE· 550

PEX_AUTOCONFIG_BAGG_REMOVEMEMBER· 551

PEX_AUTOCONFIG_CAPABILITY_ENABLE· 551

PEX_AUTOCONFIG_CASCADELIMIT· 551

PEX_AUTOCONFIG_CONNECTION_ERROR· 552

PEX_AUTOCONFIG_DIFFGROUPNUMBER· 552

PEX_AUTOCONFIG_DYNAMICBAGG_STP· 553

PEX_AUTOCONFIG_GROUP_CREATE· 553

PEX_AUTOCONFIG_NONUMBERRESOURCE· 553

PEX_AUTOCONFIG_NOT_CASCADEPORT· 554

PEX_AUTOCONFIG_NUMBER_ASSIGN· 554

PEX_LLDP_DISCOVER· 555

PEX_MEMBERID_EXCEED·· 555

PEX_PECSP_OPEN_RCVD·· 555

PEX_PECSP_OPEN_SEND·· 556

PEX_PECSP_TIMEOUT· 556

PFILTER messages· 556

PFILTER_GLB_IPV4_DACT_NO_RES· 557

PFILTER_GLB_IPV4_DACT_UNK_ERR· 557

PFILTER_GLB_IPV6_DACT_NO_RES· 558

PFILTER_GLB_IPV6_DACT_UNK_ERR· 558

PFILTER_GLB_MAC_DACT_NO_RES· 559

PFILTER_GLB_MAC_DACT_UNK_ERR· 559

PFILTER_GLB_NO_RES· 560

PFILTER_GLB_NOT_SUPPORT· 560

PFILTER_GLB_ RES_CONFLICT· 561

PFILTER_GLB_UNK_ERR· 561

PFILTER_IF_IPV4_DACT_NO_RES· 562

PFILTER_IF_IPV4_DACT_UNK_ERR· 562

PFILTER_IF_IPV6_DACT_NO_RES· 563

PFILTER_IF_IPV6_DACT_UNK_ERR· 563

PFILTER_IF_MAC_DACT_NO_RES· 564

PFILTER_IF_MAC_DACT_UNK_ERR· 564

PFILTER_IF_NO_RES· 565

PFILTER_IF_NOT_SUPPORT· 565

PFILTER_IF_RES_CONFLICT· 566

PFILTER_IF_UNK_ERR· 566

PFILTER_IPV4_FLOW_INFO·· 567

PFILTER_IPV4_FLOW_STATIS· 567

PFILTER_IPV6_FLOW_INFO·· 568

PFILTER_IPV6_FLOW_STATIS· 568

PFILTER_IPV6_STATIS_INFO·· 569

PFILTER_MAC_FLOW_INFO·· 569

PFILTER_STATIS_INFO·· 570

PFILTER_VLAN_IPV4_DACT_NO_RES· 570

PFILTER_VLAN_IPV4_DACT_UNK_ERR· 571

PFILTER_VLAN_IPV6_DACT_NO_RES· 571

PFILTER_VLAN_IPV6_DACT_UNK_ERR· 572

PFILTER_VLAN_MAC_DACT_NO_RES· 572

PFILTER_VLAN_MAC_DACT_UNK_ERR· 573

PFILTER_VLAN_NO_RES· 573

PFILTER_VLAN_NOT_SUPPORT· 574

PFILTER_VLAN_RES_CONFLICT· 574

PFILTER_VLAN_UNK_ERR· 575

PIM messages· 575

PIM_NBR_DOWN· 575

PIM_NBR_UP· 576

PING messages· 576

PING_STATISTICS· 576

PING_VPN_STATISTICS· 577

PKG messages· 577

PKG_BOOTLOADER_FILE_FAILED·· 577

PKG_BOOTLOADER_FILE_SUCCESS· 578

PKG_INSTALL_ACTIVATE_FAILED·· 578

PKG_INSTALL_ACTIVATE_SUCCESS· 578

PKI messages· 578

GET_CERT_FROM_CA_SERVER_FAIL· 579

IMPORT_CERT_FAIL· 580

REQUEST_CERT_FAIL· 581

REQUEST_CERT_SUCCESS· 582

RETRIEVE_CRL_FAIL· 583

VALIDATE_CERT_FAIL· 584

PKT2CPU messages· 585

PKT2CPU_NO_RESOURCE· 586

PKTCPT· 586

PKTCPT_AP_OFFLINE· 586

PKTCPT_AREADY_EXIT· 587

PKTCPT_CONN_FAIL· 587

PKTCPT_INVALID_FILTER· 588

PKTCPT_LOGIN_DENIED·· 588

PKTCPT_MEMORY_ALERT· 588

PKTCPT_OPEN_FAIL· 589

PKTCPT_OPERATION_TIMEOUT· 589

PKTCPT_SERVICE_FAIL· 590

PKTCPT_UNKNOWN_ERROR· 590

PKTCPT_UPLOAD_ERROR· 591

PKTCPT_WRITE_FAIL· 591

PoE· 591

POE_SHUTDOWN_POWEROFF· 592

POE_SHUTDOWN_POWERON· 592

Portal messages· 592

PORTAL_RULE_FAILED·· 593

PORTSEC messages· 593

PORTSEC_ACL_FAILURE· 594

PORTSEC_CAR_FAILURE· 594

PORTSEC_CREATEAC_FAILURE· 595

PORTSEC_LEARNED_MACADDR· 595

PORTSEC_NTK_NOT_EFFECTIVE· 596

PORTSEC_PORTMODE_NOT_EFFECTIVE· 596

PORTSEC_PROFILE_FAILURE· 596

PORTSEC_URL_FAILURE· 597

PORTSEC_VIOLATION· 597

PORTSEC_VLANMACLIMIT· 598

PPP messages· 598

IPPOOL_ADDRESS_EXHAUSTED·· 598

PPP_USER_LOGON_SUCCESS· 599

PPP_USER_LOGON_FAILED·· 599

PPP_USER_LOGOFF· 600

PWDCTL messages· 601

ADDBLACKLIST· 601

CHANGEPASSWORD·· 601

FAILEDTOWRITEPWD·· 602

FAILEDTOOPENFILE· 602

NOENOUGHSPACE· 602

QOS messages· 602

MIRROR_SYNC_CFG_FAIL· 603

QOS_CAR_APPLYUSER_FAIL· 603

QOS_CBWFQ_REMOVED·· 604

QOS_GTS_APPLYUSER_FAIL· 604

QOS_LR_APPLYIF_FAIL· 605

QOS_NOT_ENOUGH_BANDWIDTH· 605

QOS_NOT_ENOUGH_NNIBANDWIDTH· 606

QOS_POLICY_APPLYCOPP_CBFAIL· 607

QOS_POLICY_APPLYCOPP_FAIL· 607

QOS_POLICY_APPLYGLOBAL_CBFAIL· 608

QOS_POLICY_APPLYGLOBAL_FAIL· 608

QOS_POLICY_APPLYIF_CBFAIL· 609

QOS_POLICY_APPLYIF_FAIL· 609

QOS_POLICY_APPLYUSER_FAIL· 610

QOS_POLICY_APPLYVLAN_CBFAIL· 610

QOS_POLICY_APPLYVLAN_FAIL· 611

QOS_QMPROFILE_APPLYIF_FAIL· 611

QOS_QMPROFILE_APPLYUSER_FAIL· 612

QOS_QMPROFILE_MODIFYQUEUE_FAIL· 612

QOS_QUEUE_APPLYIF_FAIL· 613

QOS_UNI_RESTORE_FAIL· 613

WRED_TABLE_CFG_FAIL· 614

RADIUS messages· 614

RADIUS_AUTH_FAILURE· 614

RADIUS_AUTH_SUCCESS· 615

RADIUS_DELETE_HOST_FAIL· 615

RDDC messages· 615

RDDC_ACTIVENODE_CHANGE· 616

RESMON·· 616

RESMON_MINOR· 616

RESMON_MINOR_RECOVERY· 617

RESMON_SEVERE· 617

RESMON_SEVERE_RECOVERY· 618

RESMON_USEDUP· 618

RESMON_USEDUP_RECOVERY· 619

RIP messages· 619

RIP_MEM_ALERT· 619

RIP_RT_LMT· 620

RIPNG messages· 620

RIPNG_MEM_ALERT· 620

RIPNG_RT_LMT· 620

RM messages· 620

RM_ACRT_REACH_LIMIT· 621

RM_ACRT_REACH_THRESVALUE· 621

RM_THRESHLD_VALUE_REACH· 622

RM_TOTAL_THRESHLD_VALUE_REACH· 622

RPR messages· 622

RPR_EXCEED_MAX_SEC_MAC· 623

RPR_EXCEED_MAX_SEC_MAC_OVER· 623

RPR_EXCEED_MAX_STATION· 623

RPR_EXCEED_MAX_STATION_OVER· 624

RPR_EXCEED_RESERVED_RATE· 624

RPR_EXCEED_RESERVED_RATE_OVER· 624

RPR_IP_DUPLICATE· 625

RPR_IP_DUPLICATE_OVER· 625

RPR_JUMBO_INCONSISTENT· 625

RPR_JUMBO_INCONSISTENT_OVER· 626

RPR_LAGGCONFIG_INCONSISTENT· 626

RPR_LAGGCONFIG_INCONSISTENT_OVER· 626

RPR_MISCABLING·· 627

RPR_MISCABLING_OVER· 627

RPR_PROTECTION_INCONSISTENT· 627

RPR_PROTECTION_INCONSISTENT_OVER· 628

RPR_SEC_MAC_DUPLICATE· 628

RPR_SEC_MAC_DUPLICATE_OVER· 628

RPR_TOPOLOGY_INCONSISTENT· 629

RPR_TOPOLOGY_INCONSISTENT_OVER· 629

RPR_TOPOLOGY_INSTABILITY· 629

RPR_TOPOLOGY_INSTABILITY_OVER· 630

RPR_TOPOLOGY_INVALID·· 630

RPR_TOPOLOGY_INVALID_OVER· 630

RRPP messages· 630

RRPP_RING_FAIL· 631

RRPP_RING_RESTORE· 631

RTM messages· 631

RTM_TCL_NOT_EXIST· 631

RTM_TCL_MODIFY· 632

RTM_TCL_LOAD_FAILED·· 632

SCMD messages· 632

PROCESS_ABNORMAL· 633

PROCESS_ACTIVEFAILED·· 633

SCM_ABNORMAL_REBOOT· 634

SCM_ABNORMAL_REBOOTMDC· 634

SCM_ABORT_RESTORE· 635

SCM_INSMOD_ADDON_TOOLONG·· 635

SCM_KERNEL_INIT_TOOLONG·· 635

SCM_KILL_PROCESS· 636

SCM_PROCESS_STARTING_TOOLONG·· 637

SCM_PROCESS_STILL_STARTING·· 638

SCM_SKIP_PROCESS· 638

SCRLSP messages· 639

SCRLSP_LABEL_DUPLICATE· 639

SESSION messages· 639

SESSION_IPV4_FLOW·· 640

SESSION_IPV6_FLOW·· 641

SFLOW messages· 642

SFLOW_HARDWARE_ERROR· 642

SHELL messages· 642

SHELL_CMD·· 642

SHELL_CMD_CONFIRM·· 643

SHELL_CMD_EXECUTEFAIL· 643

SHELL_CMD_INPUT· 643

SHELL_CMD_INPUT_TIMEOUT· 644

SHELL_CMD_INVALID_CHARACTER· 644

SHELL_CMD_MATCHFAIL· 644

SHELL_CMDDENY· 645

SHELL_CMDFAIL· 645

SHELL_COMMIT· 645

SHELL_COMMIT_DELAY· 646

SHELL_COMMIT_REDELAY· 646

SHELL_COMMIT_ROLLBACK· 646

SHELL_COMMIT_ROLLBACKDONE· 647

SHELL_COMMIT_WILLROLLBACK· 647

SHELL_CRITICAL_CMDFAIL· 647

SHELL_LOGIN· 648

SHELL_LOGOUT· 648

SLSP messages· 648

SLSP_LABEL_DUPLICATE· 649

SMLK messages· 649

SMLK_LINK_SWITCH· 649

SNMP messages· 649

SNMP_ACL_RESTRICTION· 650

SNMP_AUTHENTICATION_FAILURE· 650

SNMP_GET· 650

SNMP_INFORM_LOST· 651

SNMP_NOTIFY· 652

SNMP_SET· 653

SNMP_USM_NOTINTIMEWINDOW·· 653

SSHC messages· 653

SSHC_ALGORITHM_MISMATCH· 654

SSHC_AUTH_PASSWORD_FAIL· 654

SSHC_AUTH_PUBLICKEY_FAIL· 654

SSHC_CERT_VERIFY_FAIL· 655

SSHC_CONNECT_FAIL· 656

SSHC_DECRYPT_FAIL· 656

SSHC_DISCONNECT· 657

SSHC_ENCRYPT_FAIL· 657

SSHC_HOST_NAME_ERROR· 657

SSHC_KEY_EXCHANGE_FAIL· 658

SSHC_MAC_ERROR· 658

SSHC_PUBLICKEY_NOT_EXIST· 658

SSHC_VERSION_MISMATCH· 659

SSHS messages· 659

SSHS_ACL_DENY· 659

SSHS_ALGORITHM_MISMATCH· 660

SSHS_AUTH_EXCEED_RETRY_TIMES· 660

SSHS_AUTH_FAIL· 661

SSHS_AUTH_KBDINT_FAIL· 661

SSHS_AUTH_PWD_FAIL· 662

SSHS_AUTH_TIMEOUT· 662

SSHS_AUTH_SUCCESS· 662

SSHS_AUTHOR_FAIL· 663

SSHS_CERT_VERIFY_FAIL· 664

SSHS_CONNECT· 665

SSHS_DECRYPT_FAIL· 665

SSHS_DISCONNECT· 666

SSHS_ENCRYPT_FAIL· 666

SSHS_LOG·· 667

SSHS_MAC_ERROR· 667

SSHS_REACH_SESSION_LIMIT· 668

SSHS_REACH_USER_LIMIT· 668

SSHS_SCP_OPER· 668

SSHS_SFTP_OPER· 669

SSHS_SRV_UNAVAILABLE· 669

SSHS_VERSION_MISMATCH· 670

STAMGR messages· 670

STAMGR_ADD_FAILVLAN· 670

STAMGR_ADDBAC_INFO·· 670

STAMGR_ADDSTA_INFO·· 671

STAMGR_AUTHORACL_FAILURE· 671

STAMGR_AUTHORUSERPROFILE_FAILURE· 672

STAMGR_CLIENT_OFFLINE· 672

STAMGR_CLIENT_ONLINE· 673

STAMGR_DELBAC_INFO·· 673

STAMGR_DELSTA_INFO·· 673

STAMGR_DOT1X_LOGIN_FAILURE· 674

STAMGR_DOT1X_LOGIN_SUCC· 674

STAMGR_DOT1X_LOGOFF· 675

STAMGR_MACA_LOGIN_FAILURE· 675

STAMGR_MACA_LOGIN_SUCC· 676

STAMGR_MACA_LOGOFF· 676

STAMGR_STAIPCHANGE_INFO·· 677

STAMGR_TRIGGER_IP· 677

STM messages· 677

STM_AUTO_UPDATE_FAILED·· 678

STM_AUTO_UPDATE_FINISHED·· 679

STM_AUTO_UPDATING·· 679

STM_LINK_DOWN· 680

STM_LINK_TIMEOUT· 680

STM_LINK_UP· 680

STM_MERGE· 681

STM_MERGE_NEED_REBOOT· 681

STM_MERGE_NOT_NEED_REBOOT· 681

STM_SAMEMAC· 682

STM_SOMER_CHECK· 682

STP messages· 682

STP_BPDU_PROTECTION· 683

STP_BPDU_RECEIVE_EXPIRY· 683

STP_CONSISTENCY_CHECK· 683

STP_CONSISTENCY_RESTORATION· 684

STP_DETECTED_TC· 684

STP_DISABLE· 684

STP_DISCARDING·· 685

STP_DISPUTE· 685

STP_ENABLE· 686

STP_FORWARDING·· 686

STP_LOOP_PROTECTION· 686

STP_LOOPBACK_PROTECTION· 687

STP_NOT_ROOT· 687

STP_NOTIFIED_TC· 687

STP_PORT_TYPE_INCONSISTENCY· 688

STP_PVID_INCONSISTENCY· 688

STP_PVST_BPDU_PROTECTION· 688

STP_ROOT_PROTECTION· 689

SYSLOG messages· 689

SYSLOG_LOGFILE_FULL· 689

SYSLOG_NO_SPACE· 689

SYSLOG_RESTART· 690

SYSLOG_RTM_EVENT_BUFFER_FULL· 690

TACACS messages· 690

TACACS_AUTH_FAILURE· 691

TACACS_AUTH_SUCCESS· 691

TACACS_DELETE_HOST_FAIL· 691

TELNETD messages· 691

TELNETD_ACL_DENY· 692

TELNETD_REACH_SESSION_LIMIT· 692

TRILL messages· 692

TRILL_DUP_SYSTEMID·· 693

TRILL_INTF_CAPABILITY· 693

TRILL_LICENSE_EXPIRED·· 693

TRILL_LICENSE_EXPIRED_TIME· 694

TRILL_LICENSE_UNAVAILABLE· 694

TRILL_MEM_ALERT· 694

TRILL_NBR_CHG·· 695

VCF messages· 695

VCF_AGGR_CREAT· 695

VCF_AGGR_DELETE· 696

VCF_AGGR_FAILED·· 696

VCF_AUTO_ANALYZE_USERDEF· 696

VCF_AUTO_NO_USERDEF· 697

VCF_AUTO_START· 697

VCF_AUTO_STATIC_CMD·· 698

VCF_BGP· 698

VCF_DOWN_LINK· 699

VCF_GET_IMAGE· 699

VCF_GET_TEMPLATE· 700

VCF_INSTALL_IMAGE· 700

VCF_IRF_FINISH· 701

VCF_IRF_FOUND·· 701

VCF_IRF_REBOOT· 702

VCF_IRF_START· 702

VCF_LOOPBACK_START· 703

VCF_LOOPBACK_START_FAILED·· 703

VCF_LOOPBACK_ALLOC· 704

VCF_LOOPBACK_NO_FREE_IP· 704

VCF_LOOPBACK_RECLAIM·· 705

VCF_REBOOT· 705

VCF_SKIP_INSTALL· 706

VCF_STATIC_CMD_ERROR· 706

VCF_UP_LINK· 707

VLAN messages· 707

VLAN_CREATEFAIL· 707

VLAN_FAILED·· 708

VLAN_QINQETHTYPE_FAILED·· 708

VLAN_VLANMAPPING_FAILED·· 708

VLAN_VLANTRANSPARENT_FAILED·· 709

VRRP messages· 709

VRRP_STATUS_CHANGE· 710

VRRP_VF_STATUS_CHANGE· 711

VRRP_VMAC_INEFFECTIVE· 711

VSRP messages· 711

VSRP_BIND_FAILED·· 712

VXLAN messages· 712

VXLAN_LICENSE_UNAVAILABLE· 712

WEB messages· 712

LOGIN· 713

LOGIN_FAILED·· 713

LOGOUT· 713

WIPS messages· 713

APFLOOD·· 714

AP_CHANNEL_CHANGE· 714

ASSOCIATEOVERFLOW·· 714

HONEYPOT· 715

HTGREENMODE· 715

MAN_IN_MIDDLE· 715

WIPS_DOS· 716

WIPS_FLOOD·· 716

WIPS_MALF· 717

WIPS_SPOOF· 718

WIPS_WEAKIV· 718

WIRELESSBRIDGE· 719

 


Introduction

This document includes the following system messages:

·     Messages specific to Release 63xx of the switch.

·     Messages for the Comware 7 software platform version based on which Release 63xx was produced. Some platform system messages might not be available on the switch.

This document is intended only for managing H3C Fixed-Port Campus Switches. Do not use this document for any other device models.

This document assumes that the readers are familiar with data communications technologies and H3C networking products.

System log message format

By default, the system log messages use one of the following formats depending on the output destination:

·     Log host:

<PRI>TIMESTAMP Sysname %%vendorMODULE/severity/MNEMONIC: location; CONTENT

·     Destinations except for the log host:

Prefix TIMESTAMP Sysname MODULE/severity/MNEMONIC: CONTENT

 

 

NOTE:

Log message examples in this document use the format for destinations except the log host. They do not contain elements available only for the log host, including the location element.

 

Table 1 System log message elements

Element

Description

<PRI>

Priority identifier. It is calculated by using the following formula:

Priority identifier=facilityx8+severity

Where:

·     Facility is specified by using the info-center loghost command. A log host uses this parameter to identify log sources and filter log messages.

·     Severity represents the importance of the message. For more information about severity levels, see Table 2.

Prefix

Message type identifier. This element is contained in the system log messages sent to non-log-host destinations.

The element uses the following symbols to indicate message severity:

·     Percentage sign (%)—Informational and higher levels.

·     Asterisk (*)—Debug level.

TIMESTAMP

Date and time when the event occurred.

The following are commands for configuring the timestamp format:

·     Log host—Use the info-center timestamp loghost command.

·     Non-log host destinationsUse the info-center timestamp command.

Sysname

Name or IP address of the device that generated the message.

%%vendor

Manufacturer flag. This element is %%10 for H3C.

This element is contained only in messages sent to the log host.

MODULE

Name of the module that produced the message.

severity

Severity level of the message. (For more information about severity levels, see Table 2.)

MNEMONIC

Text string that uniquely identifies the system message. The maximum length is 32 characters.

location

Optional. This element identifies where the message occurred. This element is contained only in messages sent to the log host.

This element presents location information for the message in the following format:

-attribute1=x-attribute2=y…-attributeN=z

The following are examples of location attributes:

·     -MDC=XX, which represents the MDC on which the message occurred.

·     -DevIp=XXX.XXX.XXX.XXX, which represents the source IP of the message.

·     -Slot=XX, which represents the slot on which the message occurred.

·     -Chassis=XX-Slot=XX, which represents the chassis and slot on which the message occurred.

This element is separated from the message description by using a semicolon (;).

CONTENT

Text string that contains detailed information about the event or error.

For variable fields in this element, this document uses the representations in Table 3.

 

System log messages are classified into eight severity levels from 0 to 7. The lower the number, the higher the severity, as shown in Table 2.

Table 2 System log message severity levels

Level

Severity

Description

0

Emergency

The system is unusable. For example, the system authorization has expired.

1

Alert

Action must be taken immediately. For example, traffic on an interface exceeds the upper limit.

2

Critical

Critical condition. For example, the device temperature exceeds the upper limit, the power module fails, or the fan tray fails.

3

Error

Error condition. For example, the link state changes or a storage card is unplugged.

4

Warning

Warning condition. For example, an interface is disconnected, or the memory resources are used up.

5

Notification

Normal but significant condition. For example, a terminal logs in to the device, or the device reboots.

6

Informational

Informational message. For example, a command or a ping operation is executed.

7

Debug

Debugging message.

 

For variable fields in the message text, this document uses the representations in Table 3. The values are case insensitive, even though the representations are uppercase letters.

Table 3 Variable field representations

Representation

Information type

INT16

Signed 16-bit decimal number.

UINT16

Unsigned 16-bit decimal number.

INT32

Signed 32-bit decimal number.

UINT32

Unsigned 32-bit decimal number.

INT64

Signed 64-bit decimal number.

UINT64

Unsigned 64-bit decimal number.

DOUBLE

Two dot-separated signed 32-bit decimal numbers. The format is [INTEGER].[INTEGER].

HEX

Hexadecimal number.

CHAR

Single character.

STRING

Character string.

IPADDR

IP address.

MAC

MAC address.

DATE

Date.

TIME

Time.

 

Managing and obtaining system log messages

You can manage system log messages by using the information center.

By default, the information center is enabled. Log messages can be output to the console, monitor terminal, log buffer, log host, and log file.

To filter log messages, use the info-center source command to specify log output rules. A log output rule specifies the source modules and the lowest severity level of log messages that can be output to a destination. A log message is output if its severity level is higher than or equal to the specified level. For example, if you specify a severity level of 6 (informational), log messages that have a severity level from 0 to 6 are output.

For more information about using the information center, see the network management and monitoring configuration guide for the product.

Obtaining log messages from the console terminal

Access the device through the console port. Real-time log messages are displayed on the console terminal.

Obtaining log messages from a monitor terminal

Monitor terminals refer to terminals that access the device through the AUX, VTY, or TTY lines (for example, Telnet). To obtain log messages from a monitor terminal, use the following guidelines:

·     To display log messages on the monitor terminal, you must configure the terminal monitor command.

·     For monitor terminals, the lowest level of log messages that can be displayed is determined by both the terminal logging level and info-center source commands.

 

 

NOTE:

Settings for the terminal monitor and terminal logging level commands take effect only on the current login session. The default settings for the commands restore at a relogin.

 

Obtaining log messages from the log buffer

Use the display logbuffer command to display history log messages in the log buffer.

Obtaining log messages from the log file

By default, the log file feature automatically saves logs from the log file buffer to the log file every 24 hours. You can use the info-center logfile frequency command to change the automatic saving internal.

To manually save logs to the log file, use the logfile save command. The log file buffer is cleared each time a save operation is performed.

By default, you can obtain the log file from the cfa0:/logfile/ path if the CF card is not partitioned. If the CF card is partitioned, the file path is cfa1:/logfile/.

To view the contents of the log file on the device, use the more command.

Obtaining log messages from a log host

Use the info-center loghost command to specify the service port number and IP address of a log host. To specify multiple log hosts, repeat the command.

For a successful log message transmission, make sure the specified port number is the same as the port number used on the log host. The default service port number is 514.

Software module list

Table 4 lists all software modules that might produce system log messages. This document uses "OPENSRC" to represent all open source modules.

Table 4 Software module list

Module name representation

Module name expansion

AAA

Authentication, Authorization and Accounting

ACL

Access Control List

ANCP

Access Node Control Protocol

APMGR

Access Point Management

ARP

Address Resolution Protocol

ATK

Attack Detection and Prevention

ATM

Asynchronous Transfer Mode

BFD

Bidirectional Forwarding Detection

BGP

Border Gateway Protocol

BLS

Blacklist

CFD

Connectivity Fault Detection

CFGMAN

Configuration Management

CONNLMT

Connection Limit

DEV

Device Management

DHCP

Dynamic Host Configuration Protocol

DHCPR

IPv4 DHCP Relay

DHCPS

DHCP Server

DHCPS6

DHCPv6 Server

DHCPSP4

DHCP Snooping

DHCPSP6

DHCPv6 Snooping

DIAG

Diagnosis

DLDP

Device Link Detection Protocol

DOT1X

802.1X

DRNI

Distributed Resilient Network Interconnect

EDEV

Extended-Device Management

ERPS

Ethernet Ring Protection Switching

ETH

Ethernet

ETHOAM

Ethernet Operation, Administration and Maintenance

EVB

Edge Virtual Bridging

EVIISIS

Ethernet Virtual Interconnect Intermediate System-to-Intermediate System

FCOE

Fibre Channel Over Ethernet

FCLINK

Fibre Channel Link

FCZONE

Fibre Channel Zone

FIB

Forwarding Information Base

FILTER

Filter

FIPSNG

FIP Snooping

FS

File System

FTP

File Transfer Protocol

HA

High Availability

HQOS

Hierarchical QoS

HTTPD

Hypertext Transfer Protocol Daemon

IFNET

Interface Net Management

IKE

Internet Key Exchange

IP6ADDR

IPv6 Addressing

IPADDR

IP Addressing

IPFW

IP Forwarding

IPSEC

IP Security

IPSG

IP Source Guard

IRDP

ICMP Router Discovery Protocol

IRF

Intelligent Resilient Framework

ISIS

Intermediate System-to-Intermediate System

ISSU

In-Service Software Upgrade

L2PT

Layer 2 Protocol Tunneling

L2TPV2

Layer 2 Tunneling Protocol Version 2

L2VPN

Layer 2 VPN

LAGG

Link Aggregation

LDP

Label Distribution Protocol

LLDP

Link Layer Discovery Protocol

LOAD

Load Management

LOGIN

Login

LPDT

Loopback Detection

LS

Local Server

LSPV

LSP Verification

MAC

Media Access Control

MACA

MAC Authentication

MACSEC

MAC Security

MBFD

MPLS BFD

MBUF

Memory buffer

MDC

Multitenant Device Context

MFIB

Multicast Forwarding Information Base

MGROUP

Mirroring group

MPLS

Multiprotocol Label Switching

MTLK

Monitor Link

NAT

Network Address Translation

NETCONF

Network Configuration Protocol

ND

Neighbor Discovery

NQA

Network Quality Analyzer

NTP

Network Time Protocol

OAP

Open Application Platform

OPENSRC (FreeRADIUS)

Open Source

OBJP

Object Policy

OFP

OpenFlow Protocol

OPTMOD

Optical Module

OSPF

Open Shortest Path First

OSPFV3

Open Shortest Path First Version 3

PKTCPT

Packet Capture

PFILTER

Packet Filter

PBB

Provider Backbone Bridge

PBR

Policy-Based Routing

PCE

Path Computation Element

PEX

Port Extender

PIM

Protocol Independent Multicast

PING

Packet Internet Groper

PKI

Public Key Infrastructure

PKT2CPU

Packet to CPU

PoE

Power over Ethernet

PORTAL

Portal

PORTSEC

Port Security

PPP

Point to Point Protocol

PWDCTL

Password Control

QOS

Quality of Service

RADIUS

Remote Authentication Dial In User Service

RDDC

Redundancy

RIP

Routing Information Protocol

RIPNG

Routing Information Protocol Next Generation

RM

Routing Management

RPR

Resilient Packet Ring

RRPP

Rapid Ring Protection Protocol

RTM

Real-Time Event Manager

SCMD

Service Control Manager Daemon

SCRLSP

Static CRLSP

SESSION

Session

SFLOW

Sampler Flow

SHELL

Shell

SLSP

Static LSP

SMLK

Smart Link

SNMP

Simple Network Management Protocol

SSHC

Secure Shell Client

SSHS

Secure Shell Server

STAMGR

Station Management

STM

Stack Topology Management

STP

Spanning Tree Protocol

SYSEVENT

System Event

SYSLOG

System Log

TACACS

Terminal Access Controller Access Control System

TELNETD

Telnet Daemon

TRILL

Transparent Interconnect of Lots of Links

VCF

Vertical Converged Framework

VLAN

Virtual Local Area Network

VRRP

Virtual Router Redundancy Protocol

VSRP

Virtual Service Redundancy Protocol

VXLAN

Virtual eXtensible LAN

WEB

Web

WIPS

Wireless Intrusion Prevention System

 

Using this document

This document categorizes system log messages by software module. The modules are ordered alphabetically. Except for OPENSRC, the system log messages for each module are listed in alphabetic order of their mnemonic names. The OPENSRC messages are unordered because they use the same mnemonic name (SYSLOG). For each OPENSRC message, the section title uses a short description instead of the mnemonic name.

This document explains messages in tables. Table 5 describes information provided in these tables.

Table 5 Message explanation table contents

Item

Content

Example

Message text

Presents the message description.

ACL [UINT32] [STRING] [UINT64] packet(s).

Variable fields

Briefly describes the variable fields in the order that they appear in the message text.

The variable fields are numbered in the "$Number" form to help you identify their location in the message text.

$1: ACL number.

$2: ID and content of an ACL rule.

$3: Number of packets that matched the rule.

Severity level

Provides the severity level of the message.

6

Example

Provides a real message example. The examples do not include the "<PRI>TIMESTAMP Sysname %%vendor" part or the "Prefix TIMESTAMP Sysname" part, because information in this part varies with system settings.

ACL/6/ACL_STATIS_INFO: ACL 2000 rule 0 permit source 1.1.1.1 0 logging 10000 packet(s).

Explanation

Explains the message, including the event or error cause.

Number of packets that matched an ACL rule. This message is sent when the packet counter changes.

Recommended action

Provides recommended actions. For informational messages, no action is required.

No action is required.

 

 

AAA messages

This section contains AAA messages.

AAA_FAILURE

Message text

-AAAType=[STRING]-AAADomain=[STRING]-Service=[STRING]-UserName=[STRING]; AAA failed.

Variable fields

$1: AAA type.

$2: AAA scheme.

$3: Service.

$4: Username.

Severity level

5

Example

AAA/5/AAA_FAILURE: -AAAType=AUTHOR-AAADomain=domain1-Service=login-UserName=cwf@system; AAA failed.

Explanation

An AAA request was rejected.

The following are the common reasons:

·     No response was received from the server.

·     The username or password was incorrect.

·     The service type that the user applied for was incorrect.

Recommended action

1.     Verify that the device is correctly connected to the server.

2.     Enter the correct username and password.

3.     Verify that the server settings are the same as the settings on the device.

4.     If the problem persists, contact the technical support.

 

AAA_LAUNCH

Message text

-AAAType=[STRING]-AAADomain=[STRING]-Service=[STRING]-UserName=[STRING]; AAA launched.

Variable fields

$1: AAA type.

$2: AAA scheme.

$3: Service.

$4: Username.

Severity level

6

Example

AAA/6/AAA_LAUNCH: -AAAType=AUTHEN-AAADomain=domain1-Service=login-UserName=cwf@system; AAA launched.

Explanation

An AAA request was received.

Recommended action

No action is required.

 

AAA_SUCCESS

Message text

-AAAType=[STRING]-AAADomain=[STRING]-Service=[STRING]-UserName=[STRING]; AAA succeeded.

Variable fields

$1: AAA type.

$2: AAA scheme.

$3: Service.

$4: Username.

Severity level

6

Example

AAA/6/AAA_SUCCESS: -AAAType=AUTHOR-AAADomain=domain1-Service=login-UserName=cwf@system; AAA succeeded.

Explanation

An AAA request was accepted.

Recommended action

No action is required.

 

ACL messages

This section contains ACL messages.

ACL_ACCELERATE_NO_RES

Message text

Failed to accelerate [STRING] ACL [UINT32]. The resources are insufficient.

Variable fields

$1: ACL type.

$2: ACL number.

Severity level

4

Example

ACL/4/ACL_ACCELERATE_NO_RES: Failed to accelerate IPv6 ACL 2001. The resources are insufficient.

Explanation

Hardware resources were insufficient for accelerating an ACL.

Recommended action

Delete some rules or disabled ACL acceleration for other ACLs to release hardware resources.

 

ACL_ACCELERATE_NONCONTIGUOUSMASK

Message text

Failed to accelerate ACL [UINT32]. ACL acceleration supports only contiguous wildcard masks.

Variable fields

$1: ACL number.

Severity level

4

Example

ACL/4/ACL_ACCELERATE_NONCONTIGUOUSMASK: Failed to accelerate ACL 2001. ACL acceleration supports only contiguous wildcard masks.

Explanation

ACL acceleration failed because rules containing noncontiguous wildcard masks exist in the ACL.

Recommended action

Check the ACL rules and delete the unsupported configuration.

 

ACL_ACCELERATE_NOT_SUPPORT

Message text

Failed to accelerate [STRING] ACL [UINT32]. The operation is not supported.

Variable fields

$1: ACL type.

$2: ACL number.

Severity level

4

Example

ACL/4/ACL_ACCELERATE_NOT_SUPPORT: Failed to accelerate IPv6 ACL 2001. The operation is not supported.

Explanation

ACL acceleration failed because the system does not support ACL acceleration.

Recommended action

No action is required.

 

ACL_ACCELERATE_NOT_SUPPORTHOPBYHOP

Message text

Failed to accelerate IPv6 ACL [UINT32]. ACL acceleration does not support the rules that contain the hop-by-hop keywords.

Variable fields

$1: ACL number.

Severity level

4

Example

ACL/4/ACL_ACCELERATE_NOT_SUPPORTHOPBYHOP: Failed to accelerate IPv6 ACL 2001. ACL acceleration does not support the rules that contain the hop-by-hop keywords.

Explanation

ACL acceleration failed for the IPv6 ACL because rules containing the hop-by-hop keyword exist in the ACL.

Recommended action

Check the ACL rules and delete the unsupported configuration.

 

ACL_ACCELERATE_NOT_SUPPORTMULTITCPFLAG

Message text

Failed to accelerate IPv6 ACL [UINT32]. ACL acceleration does not support specifying multiple TCP flags in one rule.

Variable fields

$1: ACL number.

Severity level

4

Example

ACL/4/ACL_ACCELERATE_NOT_SUPPORTMULTITCPFLAG: Failed to accelerate IPv6 ACL 2001. ACL acceleration does not support specifying multiple TCP flags in one rule.

Explanation

ACL acceleration failed for the IPv6 ACL because rules containing multiple TCP flags exist in the ACL.

Recommended action

Check the ACL rules and delete the unsupported configuration.

 

ACL_ACCELERATE_UNK_ERR

Message text

Failed to accelerate [STRING] ACL [UINT32].

Variable fields

$1: ACL type.

$2: ACL number.

Severity level

4

Example

ACL/4/ACL_ACCELERATE_UNK_ERR: Failed to accelerate IPv6 ACL 2001.

Explanation

ACL acceleration failed because of an unknown error.

Recommended action

No action is required.

 

ACL_IPV6_STATIS_INFO

Message text

IPv6 ACL [UINT32] [STRING] [UINT64] packet(s).

Variable fields

$1: ACL number.

$2: ID and content of an IPv6 ACL rule.

$3: Number of packets that matched the rule.

Severity level

6

Example

ACL/6/ACL_IPV6_STATIS_INFO: IPv6 ACL 2000 rule 0 permit source 1:1::/64 logging 1000 packet(s).

Explanation

The number of packets matching the IPv6 ACL rule changed.

Recommended action

No action is required.

 

ACL_NO_MEM

Message text

Failed to configure [STRING] ACL [UINT] due to lack of memory.

Variable fields

$1: ACL type.

$2: ACL number.

Severity level

3

Example

ACL/3/ACL_NO_MEM: Failed to configure ACL 2001 due to lack of memory.

Explanation

Configuring the ACL failed because memory is insufficient.

Recommended action

Use the display memory-threshold command to check the memory usage.

 

ACL_STATIS_INFO

Message text

ACL [UINT32] [STRING] [UINT64] packet(s).

Variable fields

$1: ACL number.

$2: ID and content of an IPv4 ACL rule.

$3: Number of packets that matched the rule.

Severity level

6

Example

ACL/6/ACL_STATIS_INFO: ACL 2000 rule 0 permit source 1.1.1.1 0 logging 10000 packet(s).

Explanation

The number of packets matching the IPv4 ACL rule changed.

Recommended action

No action is required.

 

 

ANCP messages

This section contains ANCP messages.

ANCP_INVALID_PACKET

Message text

-NeighborName=[STRING]-State=[STRING]-MessageType=[STRING]; The [STRING] value [STRING] is wrong, and the value [STRING] is expected.

Variable fields

$1: ANCP neighbor name.

$2: Neighbor state.

$3: Message type.

$4: Field.

$5: Wrong value of the field.

$6: Expected value of the field.

Severity level

6

Example

ANCP/6/ANCP_INVALID_PACKET: -NeighborName=Dslam-State=SYNSENT-MessageType=SYNACK; The Sender Instance value 0 is wrong, and the value 1 is expected.

Explanation

The system received an adjacency message that had a field with a wrong value.

Recommended action

No action is required.

 

 

APMGR messages

This section contains access point management messages.

APMGR_AC_MEM_ALERT

Message text

The memory utilization has reached the threshold.

Variable fields

N/A

Severity level

4

Example

APMGR/4/APMGR_AC_MEM_ALERT: The memory utilization has reached the threshold.

Explanation

The AP failed to come online because the memory utilization exceeded the limit.

Recommended action

Stop creating manual APs and prevent APs from coming online.

 

APMGR_ADD_AP_FAIL

Message text

AP [STRING] failed to come online using serial ID [STRING]: MAC address [STRING] is being used by AP [STRING].

Variable fields

$1: AP name.

$2: Serial ID.

$3: MAC address.

$4: AP name.

Severity level

4

Example

APMGR/4/ APMGR_ADD_AP_FAIL: AP ap1 failed to come online using serial ID 01247ef96: MAC address 0023-7961-5201 is being used by AP ap2.

Explanation

The AP failed to come online because a manual AP that has the same MAC address already exists on the AC.

Recommended action

Delete either the manual AP that has the MAC address or the serial ID.

 

APMGR_ADDBAC_INFO

Message text

Add BAS AC [STRING].

Variable fields

$1: MAC address of the BAS AC.

Severity level

6

Example

APMGR/6/APMGR_ADDBAC_INFO: Add BAS AC 3ce5-a616-28cd.

Explanation

The BAS AC was connected to the master AC.

Recommended action

No action is required.

 

APMGR_AP_OFFLINE

Message text

AP [STRING] went offline. State changed to Idle.

Variable fields

$1: AP name.

Severity level

6

Example

APMGR/6/APMGR_AP_OFFLINE: AP ap1 went offline. State changed to Idle.

Explanation

The AP went offline. The state of the AP changed to Idle.

Recommended action

If the AP went offline abnormally, check the debugging information to locate the issue and resolve it.

 

APMGR_AP_ONLINE

Message text

AP [STRING] went online. State changed to Run.

Variable fields

$1: AP name.

Severity level

6

Example

APMGR/6/APMGR_AP_ONLINE: AP ap1 went online. State changed to Run.

Explanation

The AP came online. The state of the AP changed to Run.

Recommended action

No action is required.

 

APMGR_CWC_IMG_DOWNLOAD_COMPLETE

Message text

System software image file [STRING] downloading through the CAPWAP tunnel to AC [STRING] completed.

Variable fields

$1: Image file name.

$2: AC IP address.

Severity level

6

Example

APMGR/6/APMGR_CWC_IMG_DOWNLOAD_COMPLETE: System software image file 5800.ipe downloading through the CAPWAP tunnel to AC 192.168.10.1 completed.

Explanation

The AP downloaded the image file from the AC successfully.

Recommended action

No action is required.

 

APMGR_CWC_IMG_DOWNLOAD_START

Message text

Started to download the system software image file [STRING] through the CAPWAP tunnel to AC [STRING].

Variable fields

$1: Image file name.

$2: AC IP address.

Severity level

6

Example

APMGR/6/APMGR_CWC_IMG_DOWNLOAD_START: Started to download the system software image file 5800.ipe through the CAPWAP tunnel to AC 192.168.10.1.

Explanation

The AP started to download the image file from the AC.

Recommended action

Make sure the AP is correctly connected to the AC.

 

APMGR_CWC_IMG_NO_ENOUGH_SPACE

Message text

Insufficient flash memory space for downloading system software image file [STRING].

Variable fields

$1: Image file name.

Severity level

6

Example

APMGR/6/APMGR_CWC_IMG_NO_ENOUGH_SPACE: Insufficient flash memory space for downloading system software image file 5800.ipe.

Explanation

The AP failed to download the image file from the AC because of insufficient flash memory.

Recommended action

Delete files not in use from the AP.

 

APMGR_CWC_LOCAL_AC_DOWN

Message text

CAPWAP tunnel to Central AC [STRING] went down. Reason: [STRING].

Variable fields

$1: IP address of the central AC.

$2: Reason:

·     Added local AC IP address.

·     Deleted local AC IP address.

·     Local AC interface used for CAPWAP tunnel went down.

·     Local AC config changed.

·     N/A

Severity level

4

Example

APMGR/4/APMGR_CWC_LOCAL_AC_DOWN: CAPWAP tunnel to Central AC 2.2.2.1 went down. Reason: Added local AC IP address.

Explanation

The CAPWAP tunnel between the central AC and the local AC was terminated for a specific reason.

Recommended action

To resolve the issue:

1.     Examine the network connection between the central AC and the local AC.

2.     Verify that the central AC is correctly configured.

3.     Verify that the local AC is correctly configured.

4.     If the issue persists, contact the technical support.

 

APMGR_CWC_LOCAL_AC_UP

Message text

CAPWAP tunnel to Central AC [STRING] went up.

Variable fields

$1: IP address of the central AC.

Severity level

6

Example

APMGR/6/APMGR_CWC_LOCAL_AC_UP: CAPWAP tunnel to Central AC 2.2.2.1 went up.

Explanation

The central AC has established a CAPWAP tunnel with the local AC.

Recommended action

No action is required.

 

APMGR_CWC_REBOOT

Message text

AP in state [STRING] is rebooting. Reason: [STRING]

Variable fields

$1: AP state.

$2: Reason:

·     AP was reset.

·     Image was downloaded successfully.

·     AP stayed in idle state for a long time.

Severity level

6

Example

APMGR/6/APMGR_CWC_REBOOT: AP in State Run is rebooting. Reason: AP was reset.

Explanation

The AP rebooted for a specific reason.

Recommended action

No action is required.

 

APMGR_CWC_RUN_DOWNLOAD_COMPLETE

Message text

File [STRING] successfully downloaded through the CAPWAP tunnel to AC [STRING].

Variable fields

$1: File name.

$2: AC IP address.

Severity level

6

Example

APMGR/6/APMGR_CWC_RUN_DOWNLOAD_COMPLETE: File ac.cfg successfully downloaded through the CAPWAP tunnel to AC 192.168.10.1.

Explanation

The AP downloaded the file from the AC successfully.

Recommended action

No action is required.

 

APMGR_CWC_RUN_DOWNLOAD_START

Message text

Started to download the file [STRING] through the CAPWAP tunnel to AC [STRING].

Variable fields

$1: File name.

$2: AC IP address.

Severity level

6

Example

APMGR/6/APMGR_CWC_RUN_DOWNLOAD_START: Started to download the file ac.cfg through the CAPWAP tunnel to AC 192.168.10.1.

Explanation

The AP started to download the file from the AC.

Recommended action

Make sure the AP is correctly connected to the AC.

 

APMGR_CWC_RUN_NO_ENOUGH_SPACE

Message text

Insufficient flash memory space for downloading file [STRING].

Variable fields

$1: File name.

Severity level

6

Example

APMGR/6/APMGR_CWC_RUN_NO_ENOUGH_SPACE: Insufficient flash memory space for downloading file ac.cfg.

Explanation

The AP failed to download the file from the AC because of insufficient flash memory.

Recommended action

Delete files not in use from the AP.

 

APMGR_CWC_TUNNEL_DOWN

Message text

CAPWAP tunnel to AC [STRING] went down. Reason: [STRING].

Variable fields

$1: AC IP address.

$2: Reason:

·     Added AP IP address.

·     Deleted AP IP address.

·     AP interface used for CAPWAP tunnel went down.

·     AP config changed.

·     AP was reset.

·     Number of echo retransmission attempts exceeded the limit.

·     Full retransmission queue.

·     Data channel timer expired.

·     Backup AC IP address changed.

·     Backup tunnel changed to master tunnel.

·     Failed to change backup tunnel to master tunnel.

·     Backup method changed.

·     N/A.

Severity level

6

Example

APMGR/6/APMGR_CWC_TUNNEL_DOWN: CAPWAP tunnel to AC 192.168.10.1 went down. Reason: AP was reset.

Explanation

The CAPWAP tunnel between the AP and the AC was terminated for a specific reason.

Recommended action

Examine the network connection between the AP and the AC.

 

APMGR_CWC_TUNNEL_UP

Message text

[STRING] CAPWAP tunnel to AC [STRING] went up.

Variable fields

$1: Tunnel type:

·     Master.

·     Backup.

$2: AC IP address.

Severity level

6

Example

APMGR/6/APMGR_CWC_TUNNEL_UP: Master CAPWAP tunnel to AC 192.168.10.1 went up.

Explanation

The AP was connected to the AC successfully and entered Run state.

Recommended action

No action is required.

 

APMGR_CWS_IMG_DOWNLOAD_COMPLETE

Message text

System software image file [STRING] downloading through the CAPWAP tunnel for AP [STRING] completed.

Variable fields

$1: Image file name.

$2: AP name.

Severity level

6

Example

APMGR/6/APMGR_ CWS_IMG_DOWNLOAD_COMPLETE: System software image file 5800.ipe downloading through the CAPWAP tunnel for AP ap2 completed.

Explanation

The AP downloaded the image file from the AC successfully.

Recommended action

No action is required.

 

APMGR_CWS_IMG_DOWNLOAD_START

Message text

AP [STRING] started to download the system software image file [STRING].

Variable fields

$1: AP name.

$2: Image file name.

Severity level

6

Example

APMGR/6/APMGR_CWS_IMG_DOWNLOAD_START: AP ap1 started to download the system software image file 5800.ipe.

Explanation

The AP started to download the image file from the AC.

Recommended action

No action is required.

 

APMGR_CWS_LOCAL_AC_DOWN

Message text

CAPWAP tunnel to local AC [STRING] went down. Reason: [STRING].

Variable fields

$1: IP address of the local AC.

$2: Reason:

·     Neighbor dead timer expired.

·     Local AC was deleted.

·     Serial number changed.

·     Processed join request in Run state.

·     Failed to retransmit message.

·     N/A

Severity level

4

Example

APMGR/4/APMGR_CWS_LOCAL_AC_DOWN: CAPWAP tunnel to local AC 1.1.1.1 went down. Reason: Serial number changed.

Explanation

The CAPWAP tunnel between the central AC and the local AC was terminated for a specific reason.

Recommended action

To resolve the issue:

1.     Examine the network connection between the central AC and the local AC.

2.     Verify that the central AC is correctly configured.

3.     Verify that the local AC is correctly configured.

4.     If the issue persists, contact the technical support.

 

APMGR_CWS_LOCAL_AC_UP

Message text

CAPWAP tunnel to local AC [STRING] went up.

Variable fields

$1: IP address of the local AC.

Severity level

6

Example

APMGR/6/APMGR_CWS_LOCAL_AC_UP: CAPWAP tunnel to local AC 1.1.1.1 went up.

Explanation

The central AC has established a CAPWAP tunnel with the local AC.

Recommended action

No action is required.

 

APMGR_CWS_RUN_DOWNLOAD_COMPLETE

Message text

File [STRING] successfully downloaded through the CAPWAP tunnel for AP [STRING].

Variable fields

$1: File name.

$2: AP name.

Severity level

6

Example

APMGR/6/APMGR_CWS_RUN_DOWNLOAD_COMPLETE: File ac.cfg successfully downloaded through the CAPWAP tunnel for AP ap2.

Explanation

The AP downloaded the file from the AC successfully.

Recommended action

No action is required.

 

APMGR_CWS_RUN_DOWNLOAD_START

Message text

AP [STRING] started to download the file [STRING].

Variable fields

$1: AP name.

$2: File name.

Severity level

6

Example

APMGR/6/APMGR_CWS_RUN_DOWNLOAD_START: AP ap1 started to download the file ac.cfg.

Explanation

The AP started to download the file from the AC.

Recommended action

No action is required.

 

APMGR_CWS_TUNNEL_DOWN

Message text

CAPWAP tunnel to AP [STRING] went down. Reason: [STRING].

Variable fields

$1: AP name.

$2: Reason:

·     Neighbor dead timer expired.

·     AP was reset.

·     AP was deleted.

·     Serial number changed.

·     Processed join request in Run state.

·     Failed to retransmit message.

·     Received WTP tunnel down event from AP.

·     Backup AC closed the backup tunnel.

·     Tunnel switched.

·     N/A.

Severity level

6

Example

APMGR/6/APMGR_CWS_TUNNEL_DOWN: CAPWAP tunnel to AP ap1 went down. Reason: AP was reset.

Explanation

The AP went offline for a specific reason.

Recommended action

To resolve the issue:

1.     Examine the network connection between the AP and the AC.

2.     Verify that the AP is correctly configured.

3.     Verify that the AC is correctly configured.

4.     If the issue persists, contact the technical support.

 

APMGR_CWS_TUNNEL_UP

Message text

[STRING] CAPWAP tunnel to AP [STRING] went up.

Variable fields

$1: Tunnel type:

·     Master.

·     Backup.

$2: AP name.

Severity level

6

Example

APMGR/6/APMGR_CWS_TUNNEL_UP: Backup CAPWAP tunnel to AP ap1 went up.

Explanation

The AP came online and entered Run state.

Recommended action

No action is required.

 

APMGR_DELBAC_INFO

Message text

Delete BAS AC [STRING].

Variable fields

$1: MAC address of the BAS AC.

Severity level

6

Example

APMGR/6/APMGR_DELBAC_INFO: Delete BAS AC 3ce5-a616-28cd.

Explanation

The BAS AC was disconnected from the master AC.

Recommended action

No action is required.

 

APMGR_LOCAL_AC_OFFLINE

Message text

Local AC [STRING] went offline. State changed to Idle.

Variable fields

$1: Name of the local AC.

Severity level

6

Example

APMGR/6/APMGR_LOCAL_AC_OFFLINE: Local AC ac1 went offline. State changed to Idle.

Explanation

The local AC went offline. The state of the local AC changed to Idle.

Recommended action

1.     If the local AC went offline abnormally, check the debugging information to locate the issue and resolve it.

2.     If the issue persists, contact the technical support.

 

APMGR_LOCAL_AC_ONLINE

Message text

Local AC [STRING] went online. State changed to Run.

Variable fields

$1: Name of the local AC.

Severity level

6

Example

APMGR/6/APMGR_LOCAL_AC_ONLINE: Local AC ac1 went online. State changed to Run.

Explanation

The local AC came online. The state of the local AC changed to Run.

Recommended action

No action is required.

 

ARP messages

This section contains ARP messages.

ARP_ACTIVE_ACK_NO_REPLY

Message text

No ARP reply from IP [STRING] was received on interface [STRING].

Variable fields

$1: IP address.

$2: Interface name.

Severity level

6

Example

ARP/6/ARP_ACTIVE_ACK_NO_REPLY: No ARP reply from IP 192.168.10.1 was received on interface GigabitEthernet1/0/1.

Explanation

The ARP active acknowledgement feature did not receive an ARP reply after it sent an ARP request to the sender IP of an ARP message.

This message indicates the risk of attacks.

Recommended action

1.     Verify that the learned ARP entries on the device are consistent with the existing legal devices. When gateways and servers are on the network, check the ARP entries for these devices first.

2.     If the ARP entries are correct and the attack continues, contact the technical support.

 

ARP_ACTIVE_ACK_NOREQUESTED_REPLY

Message text

Interface [STRING] received from IP [STRING] an ARP reply that was not requested by the device.

Variable fields

$1: Interface name.

$2: IP address.

Severity level

6

Example

ARP/6/ARP_ACTIVE_ACK_NOREQUESTED_REPLY: Interface GigabitEthernet1/0/1 received from IP 192.168.10.1 an ARP reply that was not requested by the device.

Explanation

The ARP active acknowledgement feature received an unsolicited ARP reply from a sender IP.

This message indicates the risk of attacks.

Recommended action

No action is required. The device discards the ARP reply automatically.

 

ARP_BINDRULETOHW_FAILED

Message text

Failed to download binding rule to hardware on the interface [STRING], SrcIP [IPADDR], SrcMAC [MAC], VLAN [UINT16], Gateway MAC [MAC].

Variable fields

$1: Interface name.

$2: Source IP address.

$3: Source MAC address.

$4: VLAN ID.

$5: Gateway MAC address.

Severity level

5

Example

ARP/5/ARP_BINDRULETOHW_FAILED: Failed to download binding rule to hardware on the interface GigabitEthernet1/0/1, SrcIP 1.1.1.132, SrcMAC 0015-E944-A947, VLAN 1, Gateway MAC 00A1-B812-1108.

Explanation

The system failed to set a binding rule to the hardware on an interface. The message is sent in any of the following situations:

·     The resources are not sufficient for the operation.

·     The memory is not sufficient for the operation.

·     A hardware error occurs.

Recommended action

To resolve the problem:

1.     Execute the display qos-acl resource command to check if the ACL resources for the operation are sufficient.

¡     If yes, proceed to step 2.

¡     If no, delete unnecessary configuration to release ACL resources. If no configuration can be deleted, proceed to step 2.

2.     Execute the display memory command to check if the memory for the operation is sufficient.

¡     If yes, proceed to step 3.

¡     If no, delete unnecessary configuration to release memory. If no configuration can be deleted, proceed to step 3.

3.     Delete the configuration and perform the operation again.

 

ARP_DETECTION_LOG

Message text

Detected an ARP attack on interface [STRING]: IP [STRING], MAC [STRING], VLAN [STRING]. [UINT32] packet(s) dropped.

Variable fields

$1: Interface name.

$2: IP address.

$3: MAC address.

$4: VLAN ID.

$5: Number of dropped packets.

Severity level

5

Example

ARP/5/ARP_INSPECTION: -MDC=1; Detected an ARP attack on interface GigabitEthernet1/0/1: IP 1.1.1.1, MAC 1-1-1, VLAN 100. 2 packet(s) dropped.

Explanation

An ARP attack was detected on an interface and attack packets were dropped.

Recommended action

Check the source of the ARP attack.

 

ARP_DUPLICATE_IPADDR_DETECT

Message text

Detected an IP address conflict. The device with MAC address [STRING] connected to interface [STRING] in VSI [STRING] and the device with MAC address [STRING] connected to interface [STRING] in VSI [STRING] were using the same IP address [IPADDR].

Variable fields

$1: MAC address.

$2: Interface name. (The interface can be a tunnel interface, Layer 3 interface, or Ethernet service instance.)

$3: VSI name.

$4: MAC address.

$5: Interface name. (The interface can be a tunnel interface, Layer 3 interface, or Ethernet service instance.)

$6: VSI name.

$7: Conflicting IP address.

Severity level

4

Example

ARP/4/ARP_DUPLICATE_IPADDR_DETECT: Detected an IP address conflict. The device with MAC address 00-00-01 connected to interface GigabitEthernet1/0/1 service-instance 1000 in VSI vpna and the device with MAC address 00-00-02 connected to interface tunnel 10 in VSI vpna were using the same IP address 192.168.1.1.

Explanation

This message is sent when an interface receives an ARP message in which the sender information conflicts with an existing ARP entry. The sender IP address is the same as the IP address in the entry, but the MAC addresses are different.

Recommended action

Change the IP address on either of the two devices.

 

ARP_DYNAMIC

Message text

The maximum number of dynamic ARP entries for the device reached.

Variable fields

N/A

Severity level

6

Example

ARP/6/ARP_DYNAMIC: The maximum number of dynamic ARP entries for the device reached.

Explanation

The maximum number of dynamic ARP entries for the device was reached.

Recommended action

No action is required.

 

ARP_DYNAMIC_IF

Message text

The maximum number of dynamic ARP entries for interface [STRING] reached.

Variable fields

$1: Interface name.

Severity level

6

Example

ARP/6/ARP_DYNAMIC_IF: The maximum number of dynamic ARP entries for interface GigabitEthernet1/0/1 reached.

Explanation

The maximum number of dynamic ARP entries for the specified interface was reached.

Recommended action

No action is required.

 

ARP_DYNAMIC_SLOT

Message text

Pattern 1:

The maximum number of dynamic ARP entries for slot [INT32] reached.

Pattern 2:

The maximum number of dynamic ARP entries for chassis [INT32] slot [INT32] reached.

Variable fields

Pattern 1:

$1: Slot number.

Pattern 2:

$1: Chassis number.

$2: Slot number.

Severity level

6

Example

ARP/6/ARP_DYNAMIC_SLOT: The maximum number of dynamic ARP entries for slot 2 reached.

Explanation

Pattern 1:

The maximum number of dynamic ARP entries for the slot was reached.

Pattern 2:

The maximum number of dynamic ARP entries for the slot on the chassis was reached.

Recommended action

No action is required.

 

ARP_ENTRY_CONFLICT

Message text

The software entry for [STRING] on [STRING] and the hardware entry did not have the same [STRING].

Variable fields

$1: IP address.

$2: VPN instance name. If the ARP entry belongs to the public network, this field displays the public network.

$3: Inconsistent items:

¡     MAC address.

¡     output interface.

¡     output port.

¡     outermost layer VLAN ID.

¡     second outermost layer VLAN ID.

¡     VSI index.

¡     link ID.

Severity level

6

Example

ARP/6/ARP_ENTRY_CONFLICT: The software entry for 1.1.1.1 on the VPN a and the hardware entry did not have the same MAC address, output port, VSI index, and link ID.

ARP/6/ARP_ENTRY_CONFLICT: The software entry for 1.1.1.2 on the public  network and the hardware entry did not have the same MAC address, output port, VSI index, and link ID.

Explanation

The software entry for the specified IP address is not the same as the hardware entry. For example, they do not have the same output interface.

Recommended action

No action is required. ARP automatically refreshes the hardware entries.

 

ARP_HOST_IP_CONFLICT

Message text

The host [STRING] connected to interface [STRING] cannot communicate correctly, because it uses the same IP address as the host connected to interface [STRING].

Variable fields

$1: IP address.

$2: Interface name.

$3: Interface name.

Severity level

4

Example

ARP/4/ARP_HOST_IP_CONFLICT: The host 1.1.1.1 connected to interface GigabitEthernet1/0/1 cannot communicate correctly, because it uses the same IP address as the host connected to interface GigabitEthernet1/0/2.

Explanation

The sender IP address in a received ARP message conflicted with the IP address of a host connected to another interface.

Recommended action

Check whether the hosts that send the ARP messages are legitimate. Disconnect the illegal host from the network.

 

ARP_LOCALPROXY_ENABLE_FAILED

Message text

Failed to enable local proxy ARP on interface [STRING].

Variable fields

$1: Interface name.

Severity level

4

Example

ARP/4/ARP_LOCALPROXY_ENABLE_FAILED: -MDC=1-Slot=2; Failed to enable local proxy ARP on interface VSI-interface 1.

Explanation

This message is sent when the device fails to enable local proxy ARP on an interface in a slot. If the interface resides on the MPU, the slot number is 0.

Recommended action

1.     Verify that the card supports local proxy ARP.

2.     Verify that sufficient hardware resources are available.

 

ARP_RATE_EXCEEDED

Message text

The ARP packet rate ([UINT32] pps) exceeded the rate limit ([UINT32] pps) on interface [STRING] in the last [UINT32] seconds.

Variable fields

$1: ARP packet rate.

$2: ARP limit rate.

$3: Interface name.

$4: Interval time.

Severity level

4

Example

ARP/4/ARP_RATE_EXCEEDED: The ARP packet rate (100 pps) exceeded the rate limit (80 pps) on interface GigabitEthernet1/0/1 in the last 10 seconds.

Explanation

An interface received ARP messages at a higher rate than the rate limit.

Recommended action

Verify that the hosts at the sender IP addresses are legitimate.

 

ARP_RATELIMIT_NOTSUPPORT

Message text

Pattern 1:

ARP packet rate limit is not support on slot [INT32].

Pattern 2:

ARP packet rate limit is not support on chassis [INT32] slot [INT32].

Variable fields

Pattern 1:

$1: Slot number.

Pattern 2:

$1: Chassis number.

$2: Slot number.

Severity level

6

Example

ARP/6/ARP_RATELIMIT_NOTSUPPORT: ARP packet rate limit is not support on slot 2.

Explanation

Pattern 1:

ARP packet rate limit is not supported on the slot.

Pattern 2:

ARP packet rate limit is not supported on the slot of the chassis was reached.

Recommended action

Verify that the host at the sender IP address is legitimate.

 

ARP_SENDER_IP_INVALID

Message text

Sender IP [STRING] was not on the same network as the receiving interface [STRING].

Variable fields

$1: IP address.

$2: Interface name.

Severity level

6

Example

ARP/6/ARP_SENDER_IP_INVALID: Sender IP 192.168.10.2 was not on the same network as the receiving interface GigabitEthernet1/0/1.

Explanation

The sender IP of a received ARP message was not on the same network as the receiving interface.

Recommended action

Verify that the host at the sender IP address is legitimate.

 

ARP_SENDER_MAC_INVALID

Message text

Sender MAC [STRING] was not identical to Ethernet source MAC [STRING] on interface [STRING].

Variable fields

$1: MAC address.

$2: MAC address.

$3: Interface name.

Severity level

6

Example

ARP/6/ARP_SENDER_MAC_INVALID: Sender MAC 0000-5E14-0E00 was not identical to Ethernet source MAC 0000-5C14-0E00 on interface GigabitEthernet1/0/1.

Explanation

An interface received an ARP message. The sender MAC address in the message body was not identical to the source MAC address in the Ethernet header.

Recommended action

Verify that the host at the sender MAC address is legitimate.

 

ARP_SENDER_SMACCONFLICT

Message text

Packet was discarded because its sender MAC address was the MAC address of the receiving interface.

Interface: [STRING], sender IP: [STRING], target IP: [STRING].

Variable fields

$1: Interface name.

$2: Sender IP address.

$3: Target IP address.

Severity level

6

Example

ARP/6/ ARP_SENDER_SMACCONFLICT: Packet discarded for the sender MAC address is the same as the receiving interface.

Interface: GigabitEthernet1/0/1 sender IP: 1.1.2.2 target IP: 1.1.2.1,

Explanation

The sender MAC address of a received ARP packet conflicts with the MAC address of the device.

Recommended action

No action is required.

 

ARP_SENDER_SMACCONFLICT_VSI

Message text

Packet was discarded because its sender MAC address was the MAC address of the receiving interface.

Interface: [STRING], sender IP: [STRING], target IP: [STRING],VSI index: [UINT32], link ID: [UINT32].

Variable fields

$1: Interface name.

$2: Sender IP address.

$3: Target IP address.

$4: VSI index.

$5: Link ID.

Severity level

6

Example

ARP/6/ ARP_SENDER_SMACCONFLICT_VSI: Packet discarded for the sender MAC address is the same as the receiving interface.

Interface: VSI3 sender IP: 1.1.2.2 target IP: 1.1.2.1, VSI Index: 2, Link ID: 0

Explanation

The sender MAC address of a received ARP packet conflicts with the MAC address of the device. The receiving interface is a VSI interface.

Recommended action

No action is required.

 

ARP_SRC_MAC_FOUND_ATTACK

Message text

An attack from MAC [STRING] was detected on interface [STRING].

Variable fields

$1: MAC address.

$2: Interface name.

Severity level

6

Example

ARP/6/ARP_SRC_MAC_FOUND_ATTACK: An attack from MAC 0000-5E14-0E00 was detected on interface GigabitEthernet1/0/1.

Explanation

The source MAC-based ARP attack detection feature received more ARP packets from the same MAC address within 5 seconds than the specified threshold.

This message indicates the risk of attacks.

Recommended action

Verify that the host at the source MAC address is legitimate.

 

ARP_SUP_ENABLE_FAILED

Message text

Failed to enable ARP flood suppression on VSI [STRING].

Variable fields

$1: VSI name.

Severity level

4

Example

ARP/4/ARP_SUP_ENABLE_FAILED: -MDC=1; Failed to enable ARP flood suppression on VSI vpna.

Explanation

This message is sent when the system failed to enable ARP flood suppression for a VSI. The minimum interval between two log messages is 2 seconds. To make the system send the message successfully, wait for a minimum of 2 seconds before you enable ARP flood suppression for another VSI.

Recommended action

1.     Verify that the device supports ARP flood suppression.

2.     Verify that the hardware resources are sufficient.

 

ARP_TARGET_IP_INVALID

Message text

Target IP [STRING] was not the IP of the receiving interface [STRING].

Variable fields

$1: IP address.

$2: Interface name.

Severity level

6

Example

ARP/6/ARP_TARGET_IP_INVALID: Target IP 192.168.10.2 was not the IP of the receiving interface GigabitEthernet1/0/1.

Explanation

The target IP address of a received ARP message was not the IP address of the receiving interface.

Recommended action

Verify that the host at the sender IP address is legitimate.

 

ARP_THRESHOLD_REACHED

Message text

The alarm threshold for dynamic ARP entry learning was reached on interface [STRING].

Variable fields

$1: Interface name.

Severity level

4

Example

ARP/4/ARP_THRESHOLD_REACHED: The alarm threshold for dynamic ARP entry learning was reached on interface GigabitEthernet1/0/1.

Explanation

This message is sent when the alarm threshold for dynamic ARP learning was reached on GigabitEthernet 1/0/1.

Recommended action

Verify that the number of learned dynamic ARP entries matches the actual number of devices in the network and no ARP attack sources exist in the network.

 

ARP_USER_DUPLICATE_IPADDR_DETECT

Message text

Detected a user IP address conflict. New user (MAC [STRING], SVLAN [STRING], CVLAN [STRING]) connecting on interface [STRING] and old user (MAC [STRING], SVLAN [STRING], CVLAN [STRING]) connecting on interface [STRING] were using the same IP address [IPADDR].

Variable fields

$1: MAC address of a new user.

$2: Outer VLAN to which the new user belongs.

$3: Inner VLAN to which the new user belongs.

$4: Name of the interface connecting to the new user.

$5: MAC address of an old user.

$6: Outer VLAN to which the old user belongs.

$7: Inner VLAN to which the old user belongs.

$8: Name of the interface connecting to the old user.

$9: IP address.

Severity level

6

Example

ARP/6/ARP_USER_DUPLICATE_IPADDR_DETECT: Detected a user IP address conflict. New user (MAC 0010-2100-01e1, SVLAN 100, CVLAN 10) connecting on interface GigabitEthernet1/0/1 and old user (MAC 0120-1e00-0102, SVLAN 100, CVLAN 10) connecting on interface GigabitEthernet1/0/1 were using the same IP address 192.168.1.1.

Explanation

ARP detected a user IP address conflict. The IP address of a new user is the same as the IP address of an old user.

Recommended action

Verify that all users have different IP addresses.

 

ARP_USER_MOVE_DETECT

Message text

Detected a user (IP address [IPADDR], MAC address [STRING]) moved to another interface. Before user move: interface [STRING], SVLAN [STRING], CVLAN [STRING]. After user move: interface [STRING], SVLAN [STRING], CVLAN [STRING].

Variable fields

$1: IP address of the user.

$2: MAC address of the user.

$3: Interface name before the migration.

$4: Outer VLAN to which the user belongs before the migration.

$5: Inner VLAN to which the user belongs before the migration.

$6: Interface name after the migration.

$7: Outer VLAN to which the user belongs after the migration.

$8: Inner VLAN to which the user belongs after the migration.

Severity level

6

Example

ARP/6/ARP_USER_MOVE_DETECT: Detected a user (IP address 192.168.1.1, MAC address 0010-2100-01e1) moved to another interface. Before user move: interface GigabitEthernet1/0/1, SVLAN 100, CVLAN 10. After user move: interface GigabitEthernet1/0/2, SVLAN 100, CVLAN 10.

Explanation

ARP detected a user accesses the network through another port.

Recommended action

Use the display arp user-move record command to verify that the migration is legitimate.

 

DUPIFIP

Message text

Duplicate address [STRING] on interface [STRING], sourced from [STRING].

Variable fields

$1: IP address.

$2: Interface name.

$3: MAC Address.

Severity level

6

Example

ARP/6/DUPIFIP: Duplicate address 1.1.1.1 on interface GigabitEthernet1/0/1, sourced from 0015-E944-A947.

Explanation

ARP detected a duplicate address.

The sender IP in the received ARP packet was being used by the receiving interface.

Recommended action

Modify the IP address configuration.

 

DUPIP

Message text

IP address [STRING] conflicted with global or imported IP address, sourced from [STRING].

Variable fields

$1: IP address.

$2: MAC Address.

Severity level

6

Example

ARP/6/DUPIP: IP address 30.1.1.1 conflicted with global or imported IP address, sourced from 0000-0000-0001.

Explanation

The sender IP address of the received ARP packet conflicted with the global or imported IP address.

Recommended action

Modify the IP address configuration.

 

DUPVRRPIP

Message text

IP address [STRING] conflicted with VRRP virtual IP address on interface [STRING], sourced from [STRING].

Variable fields

$1: IP address.

$2: Interface name.

$3: MAC address.

Severity level

6

Example

ARP/6/DUPVRRPIP: IP address 1.1.1.1 conflicted with VRRP virtual IP address on interface GigabitEthernet1/0/1, sourced from 0015-E944-A947.

Explanation

The sender IP address of the received ARP packet conflicted with the VRRP virtual IP address.

Recommended action

Modify the IP address configuration.

 

 

ATK messages

This section contains attack detection and prevention messages.

ATK_ICMP_ADDRMASK_REQ

Message text

IcmpType(1058)=[UINT32]; RcvIfName(1023)=[STRING]; SrcIPAddr(1003)=[IPADDR]; DSLiteTunnelPeer(1040)=[STRING]; DstIPAddr(1007)=[IPADDR]; RcvVPNInstance(1041)=[STRING]; Action(1049)=[STRING]; BeginTime_c(1011)=[STRING]; EndTime_c(1012)=[STRING]; AtkTimes(1050)=[UINT32].

Variable fields

$1: ICMP message type.

$2: Receiving interface name.

$3: Source IP address.

$4: IP address of the peer DS-Lite tunnel interface.

$5: Destination IP address.

$6: Name of the receiving VPN instance.

$7: Actions against the attack.

$8: Start time of the attack.

$9: End time of the attack.

$10: Attack times.

Severity level

5

Example

ATK/5/ATK_ICMP_ADDRMASK_REQ: IcmpType(1058)=17; RcvIfName(1023)=Ethernet0/0/2; SrcIPAddr(1003)=9.1.1.1; DSLiteTunnelPeer(1040)=--; DstIPAddr(1007)=6.1.1.1; RcvVPNInstance(1041)=--; Action(1049)=logging; BeginTime_c(1011)=20131011091319; EndTime_c(1012)=20131011091819; AtkTimes(1050)=2.

Explanation

This message is sent when ICMP address mask request logs are aggregated.

Recommended action

No action is required.

 

ATK_ICMP_ADDRMASK_REQ_RAW

Message text

IcmpType(1058)=[UINT32]; RcvIfName(1023)=[STRING]; SrcIPAddr(1003)=[IPADDR]; DSLiteTunnelPeer(1040)=[STRING]; DstIPAddr(1007)=[IPADDR]; RcvVPNInstance(1041)=[STRING]; Action(1049)=[STRING].

Variable fields

$1: ICMP message type.

$2: Receiving interface name.

$3: Source IP address.

$4: IP address of the peer DS-Lite tunnel interface.

$5: Destination IP address.

$6: Name of the receiving VPN instance.

$7: Actions against the attack.

Severity level

5

Example

ATK/5/ATK_ICMP_ADDRMASK_REQ_RAW: IcmpType(1058)=17; RcvIfName(1023)=Ethernet0/0/2; SrcIPAddr(1003)=9.1.1.1; DSLiteTunnelPeer(1040)=--; DstIPAddr(1007)=6.1.1.1; RcvVPNInstance(1041)=--; Action(1049)=logging.

Explanation

If log aggregation is enabled, for ICMP address mask requests of the same attributes, this message is sent only when the first request is received.

If log aggregation is disabled, this message is sent every time an ICMP address mask request is received.

Recommended action

No action is required.

 

ATK_ICMP_ADDRMASK_REQ_RAW_SZ

Message text

IcmpType(1058)=[UINT32]; SrcZoneName(1025)=[STRING]; SrcIPAddr(1003)=[IPADDR]; DSLiteTunnelPeer(1040)=[STRING]; DstIPAddr(1007)=[IPADDR]; RcvVPNInstance(1041)=[STRING]; Action(1049)=[STRING].

Variable fields

$1: ICMP message type.

$2: Source security zone name.

$3: Source IP address.

$4: IP address of the peer DS-Lite tunnel interface.

$5: Destination IP address.

$6: Name of the receiving VPN instance.

$7: Actions against the attack.

Severity level

5

Example

ATK/5/ATK_ICMP_ADDRMASK_REQ_RAW_SZ: IcmpType(1058)=17; SrcZoneName(1025)=Trust; SrcIPAddr(1003)=9.1.1.1; DSLiteTunnelPeer(1040)=--; DstIPAddr(1007)=6.1.1.1; RcvVPNInstance(1041)=--; Action(1049)=logging.

Explanation

If log aggregation is enabled, for ICMP address mask requests of the same attributes, this message is sent only when the first request is received.

If log aggregation is disabled, this message is sent every time an ICMP address mask request is received.

Recommended action

No action is required.

 

ATK_ICMP_ADDRMASK_REQ_SZ

Message text

IcmpType(1058)=[UINT32]; SrcZoneName(1025)=[STRING]; SrcIPAddr(1003)=[IPADDR]; DSLiteTunnelPeer(1040)=[STRING]; DstIPAddr(1007)=[IPADDR]; RcvVPNInstance(1041)=[STRING]; Action(1049)=[STRING]; BeginTime_c(1011)=[STRING]; EndTime_c(1012)=[STRING]; AtkTimes(1050)=[UINT32].

Variable fields

$1: ICMP message type.

$2: Source security zone name.

$3: Source IP address.

$4: IP address of the peer DS-Lite tunnel interface.

$5: Destination IP address.

$6: Name of the receiving VPN instance.

$7: Actions against the attack.

$8: Start time of the attack.

$9: End time of the attack.

$10: Attack times.

Severity level

5

Example

ATK/5/ATK_ICMP_ADDRMASK_REQ_SZ: IcmpType(1058)=17; SrcZoneName(1025)=Trust; SrcIPAddr(1003)=9.1.1.1; DSLiteTunnelPeer(1040)=--; DstIPAddr(1007)=6.1.1.1; RcvVPNInstance(1041)=--; Action(1049)=logging; BeginTime_c(1011)=20131011091319; EndTime_c(1012)=20131011091819; AtkTimes(1050)=2.

Explanation

This message is sent when ICMP address mask request logs are aggregated.

Recommended action

No action is required.

 

ATK_ICMP_ADDRMASK_RPL

Message text

IcmpType(1058)=[UINT32]; RcvIfName(1023)=[STRING]; SrcIPAddr(1003)=[IPADDR]; DSLiteTunnelPeer(1040)=[STRING]; DstIPAddr(1007)=[IPADDR]; RcvVPNInstance(1041)=[STRING]; Action(1049)=[STRING]; BeginTime_c(1011)=[STRING]; EndTime_c(1012)=[STRING]; AtkTimes(1050)=[UINT32].

Variable fields

$1: ICMP message type.

$2: Receiving interface name.

$3: Source IP address.

$4: IP address of the peer DS-Lite tunnel interface.

$5: Destination IP address.

$6: Name of the receiving VPN instance.

$7: Actions against the attack.

$8: Start time of the attack.

$9: End time of the attack.

$10: Attack times.

Severity level

5

Example

ATK/5/ATK_ICMP_ADDRMASK_RPL: IcmpType(1058)=18; RcvIfName(1023)=Ethernet0/0/2; SrcIPAddr(1003)=9.1.1.1; DSLiteTunnelPeer(1040)=--; DstIPAddr(1007)=6.1.1.1; RcvVPNInstance(1041)=--; Action(1049)=logging; BeginTime_c(1011)=20131011091319; EndTime_c(1012)=20131011091819; AtkTimes(1050)=2.

Explanation

This message is sent when ICMP address mask reply logs are aggregated.

Recommended action

No action is required.

 

ATK_ICMP_ADDRMASK_RPL_RAW

Message text

IcmpType(1058)=[UINT32]; RcvIfName(1023)=[STRING]; SrcIPAddr(1003)=[IPADDR]; DSLiteTunnelPeer(1040)=[STRING]; DstIPAddr(1007)=[IPADDR]; RcvVPNInstance(1041)=[STRING]; Action(1049)=[STRING].

Variable fields

$1: ICMP message type.

$2: Receiving interface name.

$3: Source IP address.

$4: IP address of the peer DS-Lite tunnel interface.

$5: Destination IP address.

$6: Name of the receiving VPN instance.

$7: Actions against the attack.

Severity level

5

Example

ATK/5/ATK_ICMP_ADDRMASK_RPL_RAW: IcmpType(1058)=18; RcvIfName(1023)=Ethernet0/0/2; SrcIPAddr(1003)=9.1.1.1; DSLiteTunnelPeer(1040)=--; DstIPAddr(1007)=6.1.1.1; RcvVPNInstance(1041)=--; Action(1049)=logging.

Explanation

If log aggregation is enabled, for ICMP address mask replies of the same attributes, this message is sent only when the first reply is received.

If log aggregation is disabled, this message is sent every time an ICMP address mask reply is received.

Recommended action

No action is required.

 

ATK_ICMP_ADDRMASK_RPL_RAW_SZ

Message text

IcmpType(1058)=[UINT32]; SrcZoneName(1025)=[STRING]; SrcIPAddr(1003)=[IPADDR]; DSLiteTunnelPeer(1040)=[STRING]; DstIPAddr(1007)=[IPADDR]; RcvVPNInstance(1041)=[STRING]; Action(1049)=[STRING].

Variable fields

$1: ICMP message type.

$2: Source security zone name.

$3: Source IP address.

$4: IP address of the peer DS-Lite tunnel interface.

$5: Destination IP address.

$6: Name of the receiving VPN instance.

$7: Actions against the attack.

Severity level

5

Example

ATK/5/ATK_ICMP_ADDRMASK_RPL_RAW_SZ: IcmpType(1058)=18; SrcZoneName(1025)=Trust; SrcIPAddr(1003)=9.1.1.1; DSLiteTunnelPeer(1040)=--; DstIPAddr(1007)=6.1.1.1; RcvVPNInstance(1041)=--; Action(1049)=logging.

Explanation

If log aggregation is enabled, for ICMP address mask replies of the same attributes, this message is sent only when the first reply is received.

If log aggregation is disabled, this message is sent every time an ICMP address mask reply is received.

Recommended action

No action is required.

 

ATK_ICMP_ADDRMASK_RPL_SZ

Message text

IcmpType(1058)=[UINT32]; SrcZoneName(1025)=[STRING]; SrcIPAddr(1003)=[IPADDR]; DSLiteTunnelPeer(1040)=[STRING]; DstIPAddr(1007)=[IPADDR]; RcvVPNInstance(1041)=[STRING]; Action(1049)=[STRING]; BeginTime_c(1011)=[STRING]; EndTime_c(1012)=[STRING]; AtkTimes(1050)=[UINT32].

Variable fields

$1: ICMP message type.

$2: Source security zone name.

$3: Source IP address.

$4: IP address of the peer DS-Lite tunnel interface.

$5: Destination IP address.

$6: Name of the receiving VPN instance.

$7: Actions against the attack.

$8: Start time of the attack.

$9: End time of the attack.

$10: Attack times.

Severity level

5

Example

ATK/5/ATK_ICMP_ADDRMASK_RPL_SZ: IcmpType(1058)=18; SrcZoneName(1025)=Trust; SrcIPAddr(1003)=9.1.1.1; DSLiteTunnelPeer(1040)=--; DstIPAddr(1007)=6.1.1.1; RcvVPNInstance(1041)=--; Action(1049)=logging; BeginTime_c(1011)=20131011091319; EndTime_c(1012)=20131011091819; AtkTimes(1050)=2.

Explanation

This message is sent when ICMP address mask reply logs are aggregated.

Recommended action

No action is required.

 

ATK_ICMP_ECHO_REQ

Message text

IcmpType(1058)=[UINT32]; RcvIfName(1023)=[STRING]; SrcIPAddr(1003)=[IPADDR]; DSLiteTunnelPeer(1040)=[STRING]; DstIPAddr(1007)=[IPADDR]; RcvVPNInstance(1041)=[STRING]; Action(1049)=[STRING]; BeginTime_c(1011)=[STRING]; EndTime_c(1012)=[STRING]; AtkTimes(1050)=[UINT32].

Variable fields

$1: ICMP message type.

$2: Receiving interface name.

$3: Source IP address.

$4: IP address of the peer DS-Lite tunnel interface.

$5: Destination IP address.

$6: Name of the receiving VPN instance.

$7: Actions against the attack.

$8: Start time of the attack.

$9: End time of the attack.

$10: Attack times.

Severity level

5

Example

ATK/5/ATK_ICMP_ECHO_REQ: IcmpType(1058)=8; RcvIfName(1023)=Ethernet0/0/2; SrcIPAddr(1003)=9.1.1.1; DSLiteTunnelPeer(1040)=--; DstIPAddr(1007)=6.1.1.1; RcvVPNInstance(1041)=--; Action(1049)=logging; BeginTime_c(1011)=20131011091319; EndTime_c(1012)=20131011091819; AtkTimes(1050)=2.

Explanation

This message is sent when ICMP echo request logs are aggregated.

Recommended action

No action is required.

 

ATK_ICMP_ECHO_REQ_RAW

Message text

IcmpType(1058)=[UINT32]; RcvIfName(1023)=[STRING]; SrcIPAddr(1003)=[IPADDR]; DSLiteTunnelPeer(1040)=[STRING]; DstIPAddr(1007)=[IPADDR]; DstPort(1004)=[UINT16]; RcvVPNInstance(1041)=[STRING]; Action(1049)=[STRING].

Variable fields

$1: ICMP message type.

$2: Receiving interface name.

$3: Source IP address.

$4: IP address of the peer DS-Lite tunnel interface.

$5: Destination IP address.

$6: Destination port number.

$7: Name of the receiving VPN instance.

$8: Actions against the attack.

Severity level

5

Example

ATK/5/ATK_ICMP_ECHO_REQ_RAW: IcmpType(1058)=8; RcvIfName(1023)=Ethernet0/0/2; SrcIPAddr(1003)=9.1.1.1; DstPort(1004)=22; DSLiteTunnelPeer(1040)=--; DstIPAddr(1007)=6.1.1.1; RcvVPNInstance(1041)=--; Action(1049)=logging.

Explanation

If log aggregation is enabled, for ICMP echo requests of the same attributes, this message is sent only when the first request is received.

If log aggregation is disabled, this message is sent every time an ICMP echo request is received.

Recommended action

No action is required.

 

ATK_ICMP_ECHO_REQ_RAW_SZ

Message text

IcmpType(1058)=[UINT32]; SrcZoneName(1025)=[STRING]; SrcIPAddr(1003)=[IPADDR]; DSLiteTunnelPeer(1040)=[STRING]; DstIPAddr(1007)=[IPADDR]; DstPort(1004)=[UINT16]; RcvVPNInstance(1041)=[STRING]; Action(1049)=[STRING].

Variable fields

$1: ICMP message type.

$2: Source security zone name.

$3: Source IP address.

$4: IP address of the peer DS-Lite tunnel interface.

$5: Destination IP address.

$6: Destination port number.

$7: Name of the receiving VPN instance.

$8: Actions against the attack.

Severity level

5

Example

ATK/5/ATK_ICMP_ECHO_REQ_RAW_SZ: IcmpType(1058)=8; SrcZoneName(1025)=Trust; SrcIPAddr(1003)=9.1.1.1; DstPort(1004)=22; DSLiteTunnelPeer(1040)=--; DstIPAddr(1007)=6.1.1.1; RcvVPNInstance(1041)=--; Action(1049)=logging.

Explanation

If log aggregation is enabled, for ICMP echo requests of the same attributes, this message is sent only when the first request is received.

If log aggregation is disabled, this message is sent every time an ICMP echo request is received.

Recommended action

No action is required.

 

ATK_ICMP_ECHO_REQ_SZ

Message text

IcmpType(1058)=[UINT32]; SrcZoneName(1025)=[STRING]; SrcIPAddr(1003)=[IPADDR]; DSLiteTunnelPeer(1040)=[STRING]; DstIPAddr(1007)=[IPADDR]; RcvVPNInstance(1041)=[STRING]; Action(1049)=[STRING]; BeginTime_c(1011)=[STRING]; EndTime_c(1012)=[STRING]; AtkTimes(1050)=[UINT32].

Variable fields

$1: ICMP message type.

$2: Source security zone name.

$3: Source IP address.

$4: IP address of the peer DS-Lite tunnel interface.

$5: Destination IP address.

$6: Name of the receiving VPN instance.

$7: Actions against the attack.

$8: Start time of the attack.

$9: End time of the attack.

$10: Attack times.

Severity level

5

Example

ATK/5/ATK_ICMP_ECHO_REQ_SZ: IcmpType(1058)=8; SrcZoneName(1025)=Trust; SrcIPAddr(1003)=9.1.1.1; DSLiteTunnelPeer(1040)=--; DstIPAddr(1007)=6.1.1.1; RcvVPNInstance(1041)=--; Action(1049)=logging; BeginTime_c(1011)=20131011091319; EndTime_c(1012)=20131011091819; AtkTimes(1050)=2.

Explanation

This message is sent when ICMP echo request logs are aggregated.

Recommended action

No action is required.

 

ATK_ICMP_ECHO_RPL

Message text

IcmpType(1058)=[UINT32]; RcvIfName(1023)=[STRING]; SrcIPAddr(1003)=[IPADDR]; DSLiteTunnelPeer(1040)=[STRING]; DstIPAddr(1007)=[IPADDR]; RcvVPNInstance(1041)=[STRING]; Action(1049)=[STRING]; BeginTime_c(1011)=[STRING]; EndTime_c(1012)=[STRING]; AtkTimes(1050)=[UINT32].

Variable fields

$1: ICMP message type.

$2: Receiving interface name.

$3: Source IP address.

$4: IP address of the peer DS-Lite tunnel interface.

$5: Destination IP address.

$6: Name of the receiving VPN instance.

$7: Actions against the attack.

$8: Start time of the attack.

$9: End time of the attack.

$10: Attack times.

Severity level

5

Example

ATK/5/ATK_ICMP_ECHO_RPL: IcmpType(1058)=0; RcvIfName(1023)=Ethernet0/0/2; SrcIPAddr(1003)=9.1.1.1; DSLiteTunnelPeer(1040)=--; DstIPAddr(1007)=6.1.1.1; RcvVPNInstance(1041)=--; Action(1049)=logging; BeginTime_c(1011)=20131011091319; EndTime_c(1012)=20131011091819; AtkTimes(1050)=2.

Explanation

This message is sent when ICMP echo reply logs are aggregated.

Recommended action

No action is required.

 

ATK_ICMP_ECHO_RPL_RAW

Message text

IcmpType(1058)=[UINT32]; RcvIfName(1023)=[STRING]; SrcIPAddr(1003)=[IPADDR]; DSLiteTunnelPeer(1040)=[STRING]; DstIPAddr(1007)=[IPADDR]; RcvVPNInstance(1041)=[STRING]; Action(1049)=[STRING].

Variable fields

$1: ICMP message type.

$2: Receiving interface name.

$3: Source IP address.

$4: IP address of the peer DS-Lite tunnel interface.

$5: Destination IP address.