Cisco 3110 User Manual

2-95
Cisco Catalyst Switch Module 3110 and 3012 for IBM BladeCenter System Message Guide
OL-12191-01
Chapter 2 Message and Recovery Procedures
SW_DAI Messages
Error Message SW_DAI-4-DHCP_SNOOPING_DENY: [dec] Invalid ARPs ([chars]) on [chars],
vlan [dec].([[enet]/[chars]/[enet]/[chars]/[time-of-day]]).
Explanation The switch has received ARP packets considered invalid by ARP inspection. The
packets are erroneous, and their presence might show attempted man-in-the-middle attacks in the
network. This log message appears when the sender’s IP and MAC address binding for the received
VLAN is not present in the DHCP snooping database. The first [dec] is the number of invalid ARP
packets. The first [chars] is either Req (request) or Res (response), and the second [chars] is the short
name of the ingress interface. The second [dec] is the ingress VLAN ID.
[enet]/[chars]/[enet]/[chars]/[time-of-day] is the MAC address of the sender, the IP address of the
sender, the MAC address of the target, the IP address of the target, and the time of day.
Recommended Action No action is required.
Error Message SW_DAI-6-DHCP_SNOOPING_PERMIT: [dec] ARPs ([chars]) on [chars], vlan
[dec].([[enet]/[chars]/[enet]/[chars]/[time-of-day]]).
Explanation The switch has received ARP packets that have been permitted because the sender’s IP
and MAC address match the DHCP snooping database for the received VLAN. The first [dec] is the
number of valid ARP packets. The first [chars] is either Req (request) or Res (response), and the
second [chars] is the short name of the ingress interface. The second [dec] is the ingress VLAN ID.
[enet]/[chars]/[enet]/[chars]/[time-of-day] is the MAC address of the sender, the IP address of the
sender, the MAC address of the target, the IP address of the target, and the time of day.
Recommended Action No action is required.
Error Message SW_DAI-4-INVALID_ARP: [dec] Invalid ARPs ([chars]) on [chars], vlan
[dec].([[enet]/[chars]/[enet]/[chars]/[time-of-day]]).
Explanation The switch has received ARP packets considered invalid by ARP inspection. The
packets do not pass one or more validation checks of the source or destination MAC address or the
IP address. The first [dec] is the number of invalid ARP packets. The first [chars] is either Req
(request), Res (response), or Invalid Opcode. The second [chars] is the short name of the ingress
interface. The second [dec] is the ingress VLAN ID. [enet]/[chars]/[enet]/[chars]/[time-of-day] is
the MAC address of the sender, the IP address of the sender, the MAC address of the target, the IP
address of the target, and the time of day.
Recommended Action No action is required.
Error Message SW_DAI-4-PACKET_BURST_RATE_EXCEEDED: [dec] packets received in [dec]
seconds on [chars].
Explanation The switch has received the given number of ARP packets in the specified burst interval.
The interface is in the error-disabled state when the switch receives packets at a higher rate than the
configured packet rate every second over the configured burst interval. The message is logged just
before the interface is error disabled and if the configured burst interval is more than a second. The
first [dec] is the number of packets, the second [dec] is the number of seconds, and [chars] is the
affected interface.
Recommended Action No action is required.

Cisco 3110 Specifications

General

Brand	Cisco
Model	3110
Category	Firewall
Language	English