Cisco Catalyst 3750-X

2-25
Catalyst 3750-X, 3750-E, 3560-X, and 3560-E Switch System Message Guide
OL-9772-05
Chapter 2 Message and Recovery Procedures
DOT1X_SWITCH Messages
Error Message DOT1X_SWITCH-5-ERR_PRIMARY_VLAN_NOT_FOUND: Attempt to assign VLAN
[dec], whose primary VLAN does not exist or is shutdown, to 802.1x port [chars]
AuditSessionID [chars]
Explanation An attempt was made to assign a private VLAN whose primary VLAN does not exist or
is shut down. [dec] is the VLAN, the first [chars] is the port, and the second [chars] is the session ID.
Recommended Action Make sure that the primary VLAN exists and is not shut down. Verify that the
private VLAN is associated with a primary VLAN.
Note This message applies to switches running the IP base image.
Error Message DOT1X_SWITCH-5-ERR_RADIUS_VLAN_NOT_FOUND: Attempt to assign
non-existent VLAN [chars] to dot1x port [chars]
Explanation RADIUS attempted to assign a VLAN with a particular name or ID to a supplicant on a
port, but the name or ID could not be found on the switch. [dec] is the VLAN, and [chars] is the port.
Recommended Action Make sure a VLAN with the specified name/ID exists on the switch.
Error Message DOT1X_SWITCH-5-ERR_SEC_VLAN_INVALID: Attempt to assign secondary VLAN
[dec] to non-PVLAN host 802.1x port [chars] AuditSessionID [chars]
Explanation An attempt was made to assign a secondary VLAN to a port that is not a private VLAN
host port, which is not allowed. [dec] is the VLAN, the first [chars] is the port, and the second [chars]
is the session ID.
Recommended Action Change the port mode so that it is configured as a private VLAN host port, or
use a different VLAN that is not configured as a secondary VLAN.
Error Message DOT1X_SWITCH-5-ERR_SPAN_DST_PORT: Attempt to assign VLAN [dec] to
802.1x port [chars], which is configured as a SPAN destination AuditSessionID
[chars]
Explanation An attempt was made to assign a VLAN to an 802.1x port that is configured as a
Switched Port Analyzer (SPAN) destination port. [dec] is the VLAN, the first [chars] is the port, and
the second [chars] is the session ID.
Recommended Action Change the SPAN configuration so that the port is no longer a SPAN
destination port, or change the configuration so that no VLAN is assigned.
Error Message DOT1X_SWITCH-5-ERR_VLAN_EQ_MDA_INACTIVE: Multi-Domain Authentication
cannot activate because Data and Voice VLANs are the same on port AuditSessionID
[chars]
Explanation Multi-Domain Authentication (MDA) host mode cannot start when the configured data
VLAN on a port is the same as the voice VLAN. [chars] is the port session ID.
Recommended Action Change either the voice VLAN or the access VLAN on the port so that they are
not the same.