manualshive.com logo in svg

HP 3020, Руководство по выпуску, Страница: 30 / 34

Поделиться
Скачать
HP 3020 Скачать руководство пользователя страница 30

 

30

Release Notes for the Cisco Catalyst Blade Switch 3020 for HP, Cisco IOS Release 12.2(55)SE and Later

OL-22861-04

Documentation Updates

Error Message

DOT1X_SWITCH-5-ERR_PRIMARY_VLAN_NOT_FOUND: Attempt to assign VLAN 

[dec], whose primary VLAN does not exist or is shutdown, to 802.1x port [chars] 

AuditSessionID [chars] 

Explanation

An attempt was made to assign a private VLAN whose primary VLAN does not exist or 

is shut down. [dec] is the VLAN, the first [chars] is the port, and the second [chars] is the session ID. 

Recommended Action

Make sure that the primary VLAN exists and is not shut down. Verify that the 

private VLAN is associated with a primary VLAN. 

Note

This message applies to switches running the IP base image. 

Error Message

DOT1X_SWITCH-5-ERR_SEC_VLAN_INVALID: Attempt to assign secondary VLAN 

[dec] to non-PVLAN host 802.1x port [chars] AuditSessionID [chars] 

Explanation

An attempt was made to assign a secondary VLAN to a port that is not a private VLAN 

host port, which is not allowed. [dec] is the VLAN, the first [chars] is the port, and the second [chars] 
is the session ID. 

Recommended Action

Change the port mode so that it is configured as a private VLAN host port, or 

use a different VLAN that is not configured as a secondary VLAN. 

Error Message

DOT1X_SWITCH-5-ERR_SPAN_DST_PORT: Attempt to assign VLAN [dec] to 

802.1x port [chars], which is configured as a SPAN destination AuditSessionID 

[chars] 

Explanation

An attempt was made to assign a VLAN to an 802.1x port that is configured as a 

Switched Port Analyzer (SPAN) destination port. [dec] is the VLAN, the first [chars] is the port, and 
the second [chars] is the session ID. 

Recommended Action

Change the SPAN configuration so that the port is no longer a SPAN destination 

port, or change the configuration so that no VLAN is assigned. 

Error Message

DOT1X_SWITCH-5-ERR_VLAN_EQ_MDA_INACTIVE: Multi-Domain Authentication 

cannot activate because Data and Voice VLANs are the same on port AuditSessionID 

[chars] 

Explanation

Multi-Domain Authentication (MDA) host mode cannot start when the configured data 

VLAN on a port is the same as the voice VLAN. [chars] is the port session ID. 

Recommended Action

Change either the voice VLAN or the access VLAN on the interface so that they 

are not the same. MDA then starts.

Содержание 3020

Страница 1: ... that apply to them Verify that these release notes are correct for your switch If you are installing a new switch see the Cisco IOS release label on the switch packaging If your switch is on use the show version privileged EXEC command See the Finding the Software Version and Feature Set section on page 3 If you are upgrading to a new release see the software upgrade filename for the software ver...

Страница 2: ... System Requirements Hardware Requirements section on page 2 Software Requirements section on page 2 Hardware Requirements Software Requirements These are the supported operating systems and browsers for the device manager Windows 2000 XP Vista and Windows Server 2003 Internet Explorer 5 5 6 0 7 0 Firefox 1 5 2 0 or later Switch Description Supported by Minimum Cisco IOS Release Cisco Catalyst Bla...

Страница 3: ... flash device flash You can use the show version privileged EXEC command to see the software version that is running on your switch The second line of the display shows the version You can also use the dir filesystem privileged EXEC command to see the directory names of other software images that you might have stored in flash memory Deciding Which Files to Use The upgrade procedures in these rele...

Страница 4: ... HTML files in the tar file We recommend that you download the tar file from Cisco com and archive it on an internal host in your network You can also configure the switch as a TFTP server to copy files from one switch to another without using an external TFTP server by using the tftp server global configuration command For more information about the tftp server command see the Basic File Transfer...

Страница 5: ...Optional Ensure that you have IP connectivity to the TFTP server by entering this privileged EXEC command Switch ping tftp server address For more information about assigning an IP address and default gateway to the switch see the software configuration guide for this release Step 6 Download the image file from the TFTP server to the switch If you are installing the same version of software that i...

Страница 6: ...gured Support for VLAN assignment on a port configured for multi auth mode The RADIUS server assigns a VLAN to the first host to authenticate on the port and subsequent hosts use the same VLAN Voice VLAN assignment is supported for one IP phone Memory consistency check routines to detect and correct invalid ternary content addressable memory TCAM table entries Support for the Security Group Tag SC...

Страница 7: ...plicant controlled transient global configuration command to control access to the supplicant port during authentication Use the no form of this command to provide access to the supplicant port during the authentication period Limitations and Restrictions You should review this section before you begin working with the switch These are known limitations that will not be fixed and there is not alwa...

Страница 8: ...y timeout global configuration command to specify the amount of time that the client should keep trying to download the configuration and you do not enter a timeout value the default value is zero which should mean that the client keeps trying indefinitely However the client does not keep trying to download the configuration The workaround is to always enter a non zero value for the timeout value ...

Страница 9: ...through software Hence with multicast routing enabled the first few packets are sent from a port even when IGMP filtering is set to deny those groups on that port There is no workaround CSCdy82818 If an IGMP report packet has two multicast group records the switch removes or adds interfaces depending on the order of the records in the packet If the ALLOW_NEW_SOURCE record is before the BLOCK_OLD_S...

Страница 10: ...ear 01 01 32 BIT 4 OUTOFRANGE bit 1321 is not in the expected range of 0 to 1024 There is no impact to switch functionality There is no workaround CSCtg32101 SPAN and RSPAN Egress SPAN routed packets both unicast and multicast show the incorrect source MAC address For remote SPAN packets the source MAC address should be the MAC address of the egress VLAN but instead the packet shows the MAC addres...

Страница 11: ...nters privileged EXEC command output Valid IEEE 802 1Q frames of 64 to 66 bytes are correctly forwarded even though the port LED blinks amber and the frames are not counted on the interface statistics There is no workaround CSCec35100 VLAN If the number of VLANs times the number of trunk ports exceeds the recommended limit of 13 000 the switch can fail The workaround is to reduce the number of VLA...

Страница 12: ...ke sure that the switch has been properly configured as an AAA client on the ACS Cisco IOS Release 12 2 40 SE and later If the switch has interfaces with automatic QoS for voice over IP VoIP configured and you upgrade the switch software to Cisco IOS Release 12 2 40 SE or later when you enter the auto qos voip cisco phone interface configuration command on another interface you might see this mess...

Страница 13: ... the switch IP information If you use Internet Explorer Version 5 5 and select a URL with a nonstandard port at the end of the address for example www cisco com 84 you must enter http as the URL prefix Otherwise you cannot start the device manager Open Caveats Device Manager CSCtf57222 The chassis ID for the CBS3020 does not appear in the Device Manager window There is no workaround Cisco IOS CSCt...

Страница 14: ...953 A port that is programatically configured with auth default ACL does not allow any traffic on the switch except DHCP traffic If the configurations on the interface are cleared and the interface is restarted the auth default ACL configuration remains and the problem persists There is no workaround Resolved Caveats Caveats Resolved in Cisco IOS Release 12 2 55 SE5 page 14 Caveats Resolved in Cis...

Страница 15: ...es MA are received The workaround is to disable the sending of LLDP MA TLVs on peer hosts CSCtj88307 When you enter the default interface switchport or no switchport interface configuration command on the switch this message appears EMAC phy access error port 0 retrying There is no workaround CSCtj89743 CPU usage is high when a device connected to the switch is accessed using the https IP_address ...

Страница 16: ... are not vulnerable Cisco has released free software updates that address these vulnerabilities The HTTP server may be disabled as a workaround for the vulnerability described in this advisory This advisory is available at the following link http tools cisco com security center content CiscoSecurityAdvisory cisco sa 20120328 pai CSCts34688 The switch crashes due to the HACL Acl Manager memory frag...

Страница 17: ...iguration command Caveats Resolved in Cisco IOS Release 12 2 55 SE4 CSCta85026 The Dynamic Host Configuration Protocol DHCP CLI does not accept white spaces in raw ASCII option in the DHCP pool configuration submode This issue is seen in Cisco IOS Release 12 4 24 T1 and later There is no workaround CSCtg11547 In a VPN Routing and Forwarding VRF aware setup messages are not sent to the syslog serve...

Страница 18: ...o manually configure the access point port CSCtl51859 Neighbor discovery fails for IPv6 hosts connected to the switch when the IPv6 MLD snooping feature is enabled globally on the switch The workaround is to disable IPv6 MLD snooping on the switch CSCtl60151 The switch sometimes reloads after a CPU overload regardless of the process that is overloading the CPU This problem has been corrected CSCtn...

Страница 19: ...message about the redundant power supply RPS No RPS is actually present and the switch is instead powered by the blade chassis There is no workaround CSCth57488 The switch LEDs freeze or behave erratically The problem occurs with bootloader version 12 2 44 SE5 There is no workaround CSCtl05835 For changes in temperature the command line interface shows the updated temperature but the Simple Networ...

Страница 20: ...pace becomes available after the TCP session the closed There is no workaround CSCsx29696 On switches running Cisco IOS Release 12 2 35 SE or later connectivity issues might occur with these messages SUPQ 4 CPUHB_RECV_STARVE Still seeing receive queue stuck after throttling There is no workaround CSCsz18634 On a switch running Cisco IOS Release 12 2 46 SE the output of the show interfaces privileg...

Страница 21: ...co IOS Software and Cisco IOS XE Software allows a remote unauthenticated attacker to cause a reload of an affected device Repeated attempts to exploit this vulnerability could result in a sustained denial of service DoS condition Cisco has released free software updates that address this vulnerability This advisory is posted at http www cisco com warp public 707 cisco sa 20100922 igmp shtml Note ...

Страница 22: ...f the system messages Dec 25 19 03 57 463 AEST PLATFORM_ENV 1 TEMP Abnormal temperature detected Jan 2 04 04 46 600 AEST PLATFORM_ENV 1 TEMP Abnormal temperature detected Jan 7 06 33 36 067 AEST PLATFORM_ENV 1 TEMP Abnormal temperature detected This is an example of the output of the show environment all command switch show environment all TEMPERATURE is OK Temperature Value 39 Degree Celsius Temp...

Страница 23: ...ing configuration file The workaround is to reload the switch CSCti04980 After you upgrade the switch software to Cisco IOS Release 12 2 55 SE enhanced auto QoS commands are generated when auto QoS is enabled on an interface and mls qos command is not enabled on the switch If the mls qos command was already enabled on the switch enhanced auto QoS commands are generated only when you configure one ...

Страница 24: ...nfigure an IPv6 RIP routing process and enter router configuration mode for the process Step 3 maximum paths number paths Optional Define the maximum number of equal cost routes that IPv6 RIP can support The range is from 1 to 32 and the default is 16 routes Step 4 exit Return to global configuration mode Step 5 interface interface id Enter interface configuration mode and specify the Layer 3 inte...

Страница 25: ...figuration command followed by no shutdown interface configuration command to restart the interface Error Message AUTHMGR 5 VLANASSIGN VLAN dec assigned to Interface chars AuditSessionID chars Explanation A VLAN was assigned dec is the VLAN ID the first chars is the interface and the second chars is the session ID Recommended Action No action is required Error Message AUTHMGR 7 FAILOVER Failing ov...

Страница 26: ...the status of the authentication the second chars is the authentication method the third chars is the client ID the fourth chars is the interface and the fifth chars is the session ID Recommended Action No action is required Error Message DOT1X 4 MEM_UNAVAIL Memory was not available to perform the 802 1X action AuditSessionID chars Explanation The system memory is not sufficient to perform the IEE...

Страница 27: ...esolve the error by using the Output Interpreter Use the Bug Toolkit to look for similar reported problems If you still require assistance open a case with the TAC or contact your Cisco technical support representative and provide the representative with the gathered information Error Message HARDWARE 3 PORTNUM_ERROR traceback port number dec is invalid Explanation The port number is out of range ...

Страница 28: ...ror Message PILET 1 AUTHENTICATION_FAIL This Switch may not have been manufactured by Cisco or with Cisco s authorization This product may contain software that was copied in violation of Cisco s license terms If your use of this product is the cause of a support issue Cisco may deny operation of the product support under your warranty or under a Cisco technical support program such as Smartnet Pl...

Страница 29: ... on Interface chars AuditSessionID chars Explanation The authentication result was overridden The first chars is the client ID the second chars is the interface and the third chars is the session ID Recommended Action No action is required Error Message DOT1X_SWITCH 5 ERR_INVALID_PRIMARY_VLAN Attempt to assign primary VLAN dec to 802 1x port chars AuditSessionID chars Explanation An attempt was ma...

Страница 30: ... is the port and the second chars is the session ID Recommended Action Change the port mode so that it is configured as a private VLAN host port or use a different VLAN that is not configured as a secondary VLAN Error Message DOT1X_SWITCH 5 ERR_SPAN_DST_PORT Attempt to assign VLAN dec to 802 1x port chars which is configured as a SPAN destination AuditSessionID chars Explanation An attempt was mad...

Страница 31: ...ERR_VLAN_INVALID Attempt to assign invalid VLAN dec to 802 1x port chars AuditSessionID chars Explanation An attempt was made to assign an invalid VLAN to an 802 1x port The VLAN specified is out of range dec is the VLAN the first chars is the port and the second chars is the session ID Recommended Action Update the configuration to use a valid VLAN Error Message DOT1X_SWITCH 5 ERR_VLAN_NOT_FOUND ...

Страница 32: ...patible with RSPAN AuditSessionID chars Explanation Remote SPAN should not be enabled on a VLAN with IEEE 802 1x enabled dec is the VLAN the first chars is the port and the second chars is the session ID Recommended Action Either disable remote SPAN configuration on the VLAN or disable IEEE 802 1x on all the ports in this VLAN Error Message SPANTREE 2 BLOCK_BPDUGUARD_VP Received BPDU on port chars...

Страница 33: ...ification chars Explanation This message means that the VTP code encountered an unusual diagnostic situation chars is a description of the situation Recommended Action Find out more about the error by using the show tech support privileged EXEC command Copy the message exactly as it appears on the console or in the system log Research and attempt to resolve the error by using the Output Interprete...

Страница 34: ...stem Message Guide Obtaining Documentation Obtaining Support and Security Guidelines For information on obtaining documentation obtaining support providing documentation feedback security guidelines and also recommended aliases and general Cisco documents see the monthly What s New in Cisco Product Documentation which also lists all new and revised Cisco technical documentation at http www cisco c...

Отзывы:

Нет отзывов