DCA Events
The following are the events related to DCA.
Event ID: 2400 (Severity: Warning)
Message | <CLIENT_ACCESS_MODE> (MACAUTH/WEBAUTH/802.1X/SNMP/LMA/LLDP) client- ACCESS_MODE (LMA/RADIUS) assigned VID validation error. MAC <MAC_ADDRESS> port PORT_NAME VLAN-Id VLAN_ID or unknown. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Warning |
Description | This log event informs the RADIUS VID Validation error. |
Event ID: 2401 (Severity: Warning)
Message | <CLIENT_ACCESS_MODE>(MACAUTH/WEBAUTH/802.1x) client RADIUS-assigned priority-Regen validation error- MAC <MAC_ADDRESS> port <PORT_NUM>. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Warning |
Description | This log event informs that there is invalid COS value received from RADIUS server. |
Event ID: 2402 (Severity: Warning)
Message | <CLIENT_ACCESS_MODE> client untagged VLAN-id arbitration error- MAC <MAC_ADDRESS> port <PORT_NUM>. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Warning |
Description | This log event informs the untagged VLAN-id arbitration error. |
Event ID: 2403 (Severity: Warning)
Message | <CLIENT_ACCESS_MODE> client tagged VLANs arbitration error- MAC <MAC_ADDRESS> port <PORT_NUM>. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Warning |
Description | This log event informs the client tagged VLAN arbitration error. |
Event ID: 2404 (Severity: Warning)
Message | <CLIENT_ACCESS_MODE> client priority regeneration (aka COS) arbitration error- MAC <MAC_PORT> port <PORT_NUM>. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Warning |
Description | This log event informs the client priority regeneration arbitration error (COS). |
Event ID: 2405 (Severity: Warning)
Message | <CLIENT_ACCESS_MODE> client max ingress bandwidth (aka rate-limiting) arbitration error- MAC <MAC_ADDRESS> port <PORT_NUM>. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Warning |
Description | This log event informs maximum ingress bandwidth arbitration (rate-limiting) error. |
Event ID: 2411 (Severity: Warning)
Message | <CLIENT_ACCESS_MODE> client max egress bandwidth (aka rate-limiting) arbitration error- MAC <MAC_ADDRESS> port <PORT_NUM>. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Warning |
Description | This log event informs maximum egress bandwidth arbitration (rate-limiting) error. |
Event ID: 3210
Message | <CLIENT_ACCESS_MODE> client max dynamic port-access settings arbitration error- MAC <MAC_ADDRESS> port <PORT_NUM>. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Information |
Description | This log event informs the maximum dynamic port-access settings arbitration error. |
Event ID: 3211
Message | Illegal combination of attributes 'HP-Port-Auth-Mode-Dot1x' and 'HP-Port-Client-Limit-Dot1x' received on port <PORT_NUM> for <CLIENT_ACCESS_MODE> client <MAC_ADDRESS>. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Information |
Description | This log event informs illegal combination of attributes received in the RADIUS packet. |
Event ID: 3212
Message | Conflict occurred between configuration and attribute 'HP-Port-Auth-Mode-MA' received on port <PORT_NUM> for <CLIENT_ACCESS_MODE> client <MAC_ADDRESS>. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Information |
Description | This log event informs that there is conflict between the configuration and received attribute in RADIUS packet. |
Event ID: 3213
Message | Invalid value of attribute 'HP-Port-Auth-Mode-MA' received on port <PORT_NUM> for <CLIENT_ACCESS_MODE> client <MAC_ADDRESS>. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Information |
Description | This log event informs that invalid value of attribute received in RADIUS VSA. |
Event ID: 3214 (Severity: Warning)
Message | Authentication failed for client <MAC_ADDRESS> on port <PORT_NUM>: unknown ACL name in attribute Filter-Id. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Warning |
Description | This log event informs that the authentication of the client failed since unknown ACL name in the Filter-Id attribute. |
Event ID: 3215 (Severity: Warning)
Message | Authentication failed for client <MAC_ADDRESS> on port <PORT_NUM>: the ACL specified by the Filter-Id attribute contains a source address or application port qualifier. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Warning |
Description | This log event informs that the authentication failed for a client since the ACL specified by the Filter-Id attribute contains a source address or application port qualifier. |
Event ID: 3216 (Severity: Warning)
Message | <CLIENT_ACCESS_MODE> client <MAC_ADDRESS> rejected; PVLAN validation error; port <PORT_NUM> cannot be a member of multiple VLANs in a single PVLAN instance. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Warning |
Description | This log event informs that the client is rejected due to PVALN validation error. Port cannot be a member of multiple VLANs in a single PVLAN instance. |
Event ID: 3217 (Severity: Warning)
Message | <CLIENT_ACCESS_MODE> client <MAC_ADDRESS> rejected; PVLAN validation error; port <PORT_NUM> cannot be a tagged member in secondary VLANs. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Warning |
Description | This log event informs that the client is rejected due to PVLAN validation error. Port cannot be a tagged member in secondary VLANs. |
Event ID: 3218 (Severity: Warning)
Message | <CLIENT_ACCESS_MODE> client <MAC_ADDRESS> rejected; PVLAN validation error; port <PORT_NUM> cannot be a member of primary VLANs as well as secondary VLANs. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Warning |
Description | This log event informs that the client is rejected due to PVLAN validation error. Port cannot be a member of primary VLANs as well as secondary VLANs. |
Event ID: 3350 (Severity: Warning)
Message | <CLIENT_ACCESS_MODE> unable to permit client- no available MAC-based VLAN entries- MAC <MAC_ADDRESS> port <PORT_NUM>. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Warning |
Description | This log event informs since no available MAC based VLAN entries are found, hence unable to permit the client. |
Event ID: 3351
Message | <CLIENT_ACCESS_MODE>: Invalid port speed PORT_SPEED received in HP-PORT_SPEED VSA for client <MAC_ADDRESS> on port <PORT_NUM>. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Information |
Description | This log event informs that invalid port speed received on HP-PORT_SPEED VSA for client. |
Event ID: 3352
Message | <CLIENT_ACCESS_MODE>: HP-PORT_SPEED VSA not applied for client <MAC_ADDRESS> on port <PORT_NUM> as dynamic port speed is not enabled on the port. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Information |
Description | This log event informs that HP-PORT_SPEED VSA is not applied for a client on a port as dynamic port speed is not enabled on the port. |
Event ID: 3353
Message | <CLIENT_ACCESS_MODE>: Multiple clients on port PORT_SPEED. Port speed is set to HP-PORT_SPEED VSA received from first client. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Information |
Description | This log event informs that the port speed is set to HP-PORT_SPEED VSA received from the first client. |
Event ID: 3354
Message | <CLIENT_ACCESS_MODE>: There are existing clients on port <PORT_NUM>. HP-PORT_SPEED VSA not applied for <MAC_CLIENT> client. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Information |
Description | This log event informs that the HP-PORT_SPEED VSA is not applied as there are existing clients on the port. |
Event ID: 3355
Message | <CLIENT_ACCESS_MODE>: Port <PORT_NUM> does not support the port speed <PORT_SPEED> received in HP-PORT_SPEED VSA for client <MAC_ADDRESS>. Client is not authenticated. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Information |
Description | This log event informs that the client is not authenticated since the port does not support the port speed received in the HP-<PORT_SPEED>-VSA. |
Event ID: 3356
Message | <CLIENT_ACCESS_MODE> client request to change port <VLAN_ID> failed because maximum number of VLAN-port instances is reached- MAC <MAC_ADDRESS> port <PORT_NUM>. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Information |
Description | This log event informs that the client request to change port <VLAN_ID> failed because maximum number of VLAN-port instances is reached. |
Event ID: 3357
Message | <CLIENT_ACCESS_MODE> client request to change port tagged VLAN membership failed because maximum number of VLAN-port instances is reached- MAC <MAC_ADDRESS> port <PORT_NUM>. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Information |
Description | This log event informs that the client request to change port tagged VLAN membership failed because maximum number of VLAN-port instanced is reached. |
Event ID: 3358
Message | Conflict occurred due to attribute <HP-Port-Auth-Mode-MA> received on port <PORT_NAME> for <RMON ACCESS STR> client <MAC STR>. |
Platforms | K, KA, KB, RA, WB, WC, YA, YB, YC |
Category | DCA |
Severity | Information |
Description | This log event informs the user of an illegal combination of dyn port-access attribute and client access mode. |
Event ID: 5204 (Severity: Warning)
Message | Failed to apply user role <USER_ROLE_STR> to <CLIENT_ID> client <CLIENT_MODE> on port <PORT_NAME>: user role is invalid. |
Platforms | K, KA, KB, RA, WB, WC, YA, YC |
Category | DCA |
Severity | Warning |
Description | User role VSA received for the client is invalid or does not exist. |
Event ID: 5205 (Severity: Warning)
Message | Failed to apply user role <USER_ROLE_STR> to <CLIENT_ID> client <CLIENT_MODE> on port <PORT_NAME> user roles are disabled. |
Platforms | K, KA, KB, RA, WB, WC, YA, YC |
Category | DCA |
Severity | Warning |
Description | Client has received a user role VSA from Radius, but user roles are not enabled. |
Event ID: 5206 (Severity: Warning)
Message | Failed to apply user role <USER_ROLE_STR> to <CLIENT_ID> client <CLIENT_MODE> on port <PORT_NAME>: profile does not exist. |
Platforms | K, KA, KB, RA, WB, WC, YA, YC |
Category | DCA |
Severity | Warning |
Description | This informs the user that the captive portal profile specified in the role being applied does not exist. |
Event ID: 5207 (Severity: Warning)
Message | Failed to apply user role <USER_ROLE_STR> to <CLIENT_ID> client <CLIENT_MODE> on port <PORT_NAME>: RADIUS sent conflicting <CAPTIVE_PORTAL_URL> VSA. |
Platforms | K, KA, KB, RA, WB, WC, YA, YC |
Category | DCA |
Severity | Warning |
Description | This informs the user that a Radius redirect URL has been received that is invalid in the current user role configuration. |
Event ID: 5208 (Severity: Warning)
Message | Failed to apply user role <USER_ROLE_STR> to <CLIENT_ID> client <CLIENT_MODE> on port <PORT_NAME>: required <CAPTIVE_PORTAL_URL> VSA was not sent. |
Platforms | K, KA, KB, RA, WB, WC, YA, YC |
Category | DCA |
Severity | Warning |
Description | When a client falls back to initial role, the initial role must contain a custom redirect URL when captive portal is in use. |
Event ID: 5209 (Severity: Warning)
Message | Failed to apply user role <USER_ROLE_STR> to <CLIENT_ID> client <CLIENT_MODE> on port <PORT_NAME>: user policy does not exist. |
Platforms | K, KA, KB, RA, WB, WC, YA, YC |
Category | DCA |
Severity | Warning |
Description | When using captive portal and user role, a user policy is required for redirect ACLs. This message informs the user when the policy is missing. |
Event ID: 5210 (Severity: Warning)
Message | Failed to apply user role <USER_ROLE_STR> to <CLIENT_ID> client <CLIENT_MODE> on port <PORT_NAME>: captive portal profile is not allowed with local MAC authentication. |
Platforms | K, KA, KB, RA, WB, WC, YA, YC |
Category | DCA |
Severity | Warning |
Description | When using captive portal and user role, captive portal profile is invalid with LMA. |
Event ID: 5211 (Severity: Warning)
Message | Failed to apply user role <USER_ROLE_STR> to <CLIENT_ID> client <CLIENT_MODE> on port <PORT_NAME>: reauthentication period is not allowed with local MAC authentication. |
Platforms | K, KA, KB, RA, WB, WC, YA, YC |
Category | DCA |
Severity | Warning |
Description | When using user role, re-authentication period is invalid with LMA. |
Event ID: 5212 (Severity: Warning)
Message | Failed to apply user role <USER_NAME> to <CLIENT_MAC> client <ACCESS_MODE> on port <PORT_NAME> since HPE-CPPM-SECONDARY-ROLE VSA was not sent. |
Platforms | KB, WC |
Category | DCA |
Severity | Warning |
Description | In Downloaded role if redirect is configured as VSA a secondary role VSA is expected. |
Event ID: 5213
Message | Conflict in secondary user role. Hence ignoring the secondary role VSA. Applying secondary user role <USER_NAME> to <CLIENT_MAC> client <ACCESS_MODE> on port <PORT_NAME>. |
Platforms | KB, WC |
Category | DCA |
Severity | Information |
Description | In Downloaded role if redirect is configured as secondary role name and secondary role VSA is sent, ignore VSA. |
Event ID: 5563
Message | Failed to apply user role <NAME> with tunnel redirect to <ACCESS-MODE> client <MAC> on port <PORT_NAME> as user tunnel is not operational. |
Platforms | KB, WC |
Category | DCA |
Severity | Information |
Description | This log event informs the user that Tunneled-node-server-redirect is enabled in the user role but per user tunnel feature is disabled. |
Event ID: 5619 (Severity: Warning)
Message | <USR ROLE> Deauthenticating client <MAC> on port <PORT>- downloaded user role <USR ROLE> is not valid as <REASON>. |
Platforms | KB, WB, WC, YC |
Category | DCA |
Severity | Warning |
Description | This log event informs the user that parsing of the CLI commands given in the ClearPass failed. |
Event ID: 5620 (Severity: Warning)
Message | <USR ROLE> client <MAC> on port <PORT> assigned to initial role as downloading failed for user role <REASON>. |
Platforms | KB, WB, WC, YC |
Category | DCA |
Severity | Warning |
Description | Informs the user that downloading the user role from the ClearPass is failed. |
Event ID: 5621 (Severity: Warning)
Message | <USR ROLE> client <MAC> on port <PORT> deauthenticated as downloadable user role is not enabled. |
Platforms | KB, WB, WC, YC |
Category | DCA |
Severity | Warning |
Event ID: 5630 (Severity: Warning)
Message | Faulty line: <LINE_NO>. |
Platforms | KB, WB, WC, YC |
Category | DCA |
Severity | Warning |
Description | Shows the line at which the parsing of the downloaded user role failed. |
Event ID: 5722 (Severity: Warning)
Message | Failed to apply user role <USER_ROLE_NAME> to <CLIENT_MAC> client <ACCESS_MODE> on port <PORT>: log-off period is not allowed with LMA/WMA. |
Platforms | WC |
Category | DCA |
Severity | Warning |
Event ID: 5723
Message | Client <MAC_ADDR> on port <PORT_NAME> on VLAN <VID_NAME> cannot be MAC pinned as the client is applied with user-role having log-off period. |
Platforms | WC |
Category | DCA |
Severity | Information |
Event ID: 5724 (Severity: Warning)
Message | Failed to apply user role <USER_NAME> to <CLIENT_MAC> client <ACCESS_MODE> on port <PORT_NAME>: User-role with log-off period cannot be applied when clients are in Initial- Critical or OpenAuth role. |
Platforms | WC |
Category | DCA |
Severity | Warning |
Event ID: 5725 (Severity: Warning)
Message | Failed to apply user role: Invalid log-off period value <LOG_OFF_PERIOD>. |
Platforms | WC |
Category | DCA |
Severity | Warning |
Event ID: 5726
Message | Deauthenticating client <CLIENT_MAC_ADDR> on port <PORT_NAME> : log-off period expired. |
Platforms | WC |
Category | DCA |
Severity | Information |
Event ID: 5755 (Severity: Warning)
Message | The maximum number of netdestination entries has been reached. |
Platforms | WB, WC, YC |
Category | DCA |
Severity | Warning |
Description | This message shows that the parsing has failed when max number of netdestination entries has been reached. |
Event ID: 5797 (Severity: Warning)
Message | admin-edge-port in user role <USER_NAME> to <ACCESS_MODE> client <CLIENT_MAC> on port <PORT_NAME> is applicable after MSTP/PVST is enabled or once port becomes part of PVST enabled VLAN. |
Platforms | KB, WC, YC |
Category | DCA |
Severity | Warning |
Event ID: 5798 (Severity: Warning)
Message | Failed to apply user role <USER_NAME> to <ACCESS_MODE> client <CLIENT_MAC> on port <PORT_NAME>: device attribute is not allowed with Web Auth. |
Platforms | KB, WC, YC |
Category | DCA |
Severity | Warning |
Event ID: 5799 (Severity: Warning)
Message | Failed to apply user role <USER_NAME> to <ACCESS_MODE> client <CLIENT_MAC> on port <PORT_NAME>: device attributes cannot be applied for Initial/Critical/OpenAuth client. |
Platforms | KB, WC, YC |
Category | DCA |
Severity | Warning |
Event ID: 5800 (Severity: Warning)
Message | Failed to apply user role <USER_NAME> to <ACCESS_MODE> client <CLIENT_MAC> on port <PORT_NAME>: device attribute is already applied on this port. |
Platforms | KB, WC, YC |
Category | DCA |
Severity | Warning |
Event ID: 5801 (Severity: Warning)
Message | Failed to apply user role <USER_NAME> to <ACCESS_MODE> client <CLIENT_MAC> on port <PORT_NAME>: cached reauth period is not allowed with LMA/WMA. |
Platforms | KB, WC, YC |
Category | DCA |
Severity | Warning |
Event ID: 5802 (Severity: Warning)
Message | Failed to apply user role <USER_NAME> to <ACCESS_MODE> client <CLIENT_MAC> on port <PORT_NAME>: cached reauth period cannot be applied for Initial/Critical/OpenAuth client. |
Platforms | KB, WC, YC |
Category | DCA |
Severity | Warning |
Event ID: 5803 (Severity: Warning)
Message | Failed to apply user role <USER_NAME> to <ACCESS_MODE> client <CLIENT_MAC> on port <PORT_NAME>: PoE Port or PoE Port State is invalid. |
Platforms | KB, WC, YC |
Category | DCA |
Severity | Warning |
Event ID: 5804 (Severity: Warning)
Message | Failed to apply user role <USER_NAME> to <ACCESS_MODE> client <CLIENT_MAC> on port <PORT_NAME>: PoE Alloc value is invalid. |
Platforms | KB, WC, YC |
Category | DCA |
Severity | Warning |
Event ID: 5805 (Severity: Warning)
Message | Failed to apply user role <USER_NAME> to <ACCESS_MODE> client <CLIENT_MAC> on port <PORT_NAME>: PoE Priority value is invalid. |
Platforms | KB, WC, YC |
Category | DCA |
Severity | Warning |
Event ID: 5806 (Severity: Warning)
Message | Failed to apply user role <USER_NAME> to <ACCESS_MODE> client <CLIENT_MAC> on port <PORT_NAME>: CDP/LLDP bypass enabled on port. |
Platforms | KB, WC, YC |
Category | DCA |
Severity | Warning |
Event ID: 5814 (Severity: Warning)
Message | Failed to apply user role <USER_ROLE_NAME> to <CLIENT_NAME> client <ACCESS_MODE> on port <PORT_NAME_STRING>: Port-Mode cannot be enabled with LMA. |
Platforms | KB, WC, YC |
Category | DCA |
Severity | Warning |