A-2
Catalyst 2950 Desktop Switch Software Configuration Guide
78-11380-03
AppendixA Error Messages for Security and QoS Configurations
%Error:Deny ACE not supported in access-group
within a class-map
A deny ACE is not supported in an access group within a class map.
%Error:System Defined and User Defined ACEs
can not exist together in access-group within
a class-map
In a class map, the access group can have ACLs that have either
system-defined masks or user-defined masks. A combination of
system-defined and user-defined masks cannot be used in an access
group within a class map.
%Error:System Defined ACEs of tcp and ip can
not exist together in access-group within a
class-map
In a class map, the access group cannot have system-defined ACEs of
both the Layer 4 and Layer 3. The access group can have either Layer
4 system-defined ACEs or Layer 3 system-defined ACEs.
%Error:Match Attach Filter :ONLY one ACL
allowed in a class-map
In a class map, only one ACL is allowed.
This error message means that an attempt was made to add another
ACL in the class map.
%Error:the ACL has a different mask than the
Policy-map
In a policy map, all ACLs within the same class maps must have the
same mask.
This error message means that an attempt was made to create an ACL
with a different mask within a policy map.
%Error:Service policy can not be configured
The Catalyst 2950 switches support the policy-map global
configuration command with certain restrictions.
This error message means that the policy map cannot be configured
due to certain reasons. The exact cause is provided in separate error
messages that precede this error message.
%Error:Service policy can not be supported -
Policers required exceed Maximum Allowed on
this interface
A maximum of six policers are supported on an Fast Ethernet port and
60 policers on Gigabit Ethernet port.
This policy map cannot be supported because the number of policers
required on this interface are more than permitted.
%Error:Service policy can not be supported -
Rules required exceed available resources in
ASIC.
The policy map cannot be supported because the number of resources
required to support this policy map are not available in the hardware.
In order to support this policy map, you need to reduce the number of
resourcesonthispolicymap.
%Error:Removing service-policy policy-map name
from interface interface_number
A policy map is removed from an interface if it is found to be invalid.
There are multiple reasons for a policy map to become invalid
(incorrect number of policers, ACLs in a class map cannot be
supported, and so on).
If there is a policy map attached to an interface and you modify the
policy map so that it becomes invalid, the system removes the policy
map from the interface.
%Error:ASIC memory read write issues
The error message means that the switch hardware is having problems.
%Error:ASIC Resources unavailable
This error message means that the hardware does not have sufficient
resources to support the user policies.
%Error:Invalid mask
This error message means that the user-defined mask is not entered
correctly in the hardware.
Remove the mask, and re-enter it.
Table A-1 Common ACL Error Messages (continued)
Error Message Explanation and Suggested Solution