2-25
Catalyst 4500 Series Switch Cisco IOS System Message Guide
OL-13091-01
Chapter 2 Messages and Recovery Procedures
DOT1X (802.1X) Messages
Error Message DOT1X-5-ERR_INVALID_TUNNEL_TYPE: Got an invalid value of [char] for
TUNNEL_TYPE [char]
Explanation
The provided TUNNEL_TYPE is either unsupported or invalid.
Recommended Action Change the value to reflect the correct tunnel type.
Error Message DOT1X-5-ERR_MULTI_ACCESS:Dot1x can not be enabled on voice vlan
configured ports.
Explanation
802.1X cannot be enabled on a voice VLAN-configured port. This condition is caused
by trying to set 802.1X port control to auto or force-unauthorized (force_unauth) mode on a voice
VLAN-configured port, which is not allowed.
Recommended Action Disable voice VLAN on the interface, and then enable 802.1X.
Error Message DOT1X-5-ERR_PER_USR_IP_ACL: Applied per-user IP ACL was unsuccessful
on interface [char]
Explanation
Dot1x could not successfully apply per-user IP ACL, one possible cause could be an
invalid pub from the RADIUS server.
Recommended Action Reconfigure the RADIUS pub.
Error Message DOT1X-5-ERR_PER_USR_MAC_ACL: Applied per-user MAC ACL was unsuccessful
on interface [char]
Explanation
802.1X cannot successfully apply a per-user MAC ACL possibly because of an invalid
pub from the RADIUS server.
Recommended Action Examine the RADIUS pub and configure a correct one.
Error Message DOT1X-5-ERR_PROTO_TUNNELLING:Dot1x can not be enabled on protocol
tunnelling enabled ports.
Explanation
802.1X cannot be enabled on the protocol tunneling-enabled port. This condition is
caused by trying to set 802.1X port control to auto or force-unauthorized (force_unauth) mode on
a protocol tunneling-enabled port, which is not allowed.
Recommended Action Disable protocol tunneling on the interface, and then enable 802.1X.
Error Message DOT1X-5-ERR_PVLAN_EQ_VVLAN: Dot1x can not be enabled on a port with
Access VLAN equal to Voice VLAN.
Explanation
The switch cannot enable 802.1X on the interface that uses the same VLAN number for
the access VLAN and the voice VLAN. This condition was caused by trying to set 802.1X
port-control to auto or force-unauthorized (force_unauth) mode on a voice VLAN that uses the
same VLAN as the access VLAN, which is not allowed.
Recommended Action Change the voice VLAN or access VLAN on the interface, and retry the
802.1X operation.