2-22
Cisco Catalyst Switch Module 3110 and 3012 for IBM BladeCenter System Message Guide
OL-12191-01
Chapter 2 Message and Recovery Procedures
DOT1X_SWITCH Messages
Error Message
DOT1X_SWITCH-5-ERR_PRIMARY_VLAN_NOT_FOUND: Attempt to assign VLAN
[dec], whose primary VLAN does not exist or is shutdown, to 802.1x port [chars]
Explanation
An attempt was made to assign a private VLAN whose primary VLAN does not exist or
is shut down. [dec] is the VLAN, and [chars] is the port.
Recommended Action
Make sure the primary VLAN exists and is not shut down. Verify that the
private VLAN is associated with a primary VLAN.
Error Message
DOT1X_SWITCH-5-ERR_RADIUS_VLAN_NOT_FOUND: Attempt to assign
non-existent VLAN [chars] to dot1x port [chars]
Explanation
RADIUS attempted to assign a VLAN with a particular name or id to a supplicant on a
port, but the name or id could not be found on the switch. [dec] is the VLAN, and [chars] is the port.
Recommended Action
Make sure a VLAN with the specified name/id exists on the switch.
Error Message
DOT1X_SWITCH-5-ERR_SEC_VLAN_INVALID: Attempt to assign secondary VLAN
[dec] to non-PVLAN host 802.1x port [chars]
Explanation
An attempt was made to assign a secondary VLAN to a port that is not a private VLAN
host port, which is not allowed. [dec] is the VLAN, and [chars] is the port.
Recommended Action
Change the mode of the port so that it is configured as a private VLAN host
port, or use a different VLAN that is not configured as a secondary VLAN.
Error Message
DOT1X_SWITCH-5-ERR_SPAN_DST_PORT: Attempt to assign VLAN [dec] to
802.1x port [chars], which is configured as a SPAN destination
Explanation
An attempt was made to assign a VLAN to an IEEE 802.1x port that is configured as a
SPAN destination port. [dec] is the VLAN, and [chars] is the port.
Recommended Action
Change the SPAN configuration so that the port is no longer a SPAN
destination port, or change the configuration so that no VLAN is assigned.
Error Message
DOT1X_SWITCH-5-ERR_VLAN_EQ_MDA_INACTIVE: Multi-Domain Authentication
cannot activate because Data and Voice VLANs are the same on port [chars]
Explanation
Multi-Domain Authentication host mode cannot start if the configured data VLAN on a
port is the same as the voice VLAN. [chars] is the port.
Recommended Action
Change either the voice VLAN or the access VLAN on the interface so that
they are not equal. This causes Multi-Domain authentication to start.
