Switch common syslog

Syslog	Caption
Peer  software version is incompatible	Meaning：The versions of two  switch that build VSU is incompatible Cause：The version is incompatible Solution：Upgrading two switch to same firmware
%MAC-4-FLAPPING:  Station aaaa.aaaa.aaaa in VLAN 10 is flapping between gi1/2 and gi1/3	Meaning：Sometimes MAC address  aaaa.aaaa.aaaa learned from port 1/2, sometimes learned from 1/3 Cause：loop Solution：Troubleshooting loop
%PORT_SECURITY-4-ERR_RECOVER:  Interface GigabitEthernet 0/1 recover from an error.	Meaning：Gi0/1 port returned to  normal from errordisable state Cause：Loop Solution：Troubleshooting loop
%RLDP-3-LINK_DETECT_RECOVER:  rldp recover interface GigabitEthernet 0/7 from loop error	Meaning：Gi0/7 port returned to  normal from errordisable state Cause：Loop Solution：Troubleshooting loop
using  you PC SetMac program to perform SetMac Operation	Meaning：using you PC SetMac  program to perform SetMac Operation Cause：MAC address is cleared Solution：Creating hardware issue on caseportal.
:%NFPP_ARP_GUARD-4-SCAN:  Host<IP=1.1.1.1,MAC=0000.0000.0004,port=Gi4/1,VLAN=1> was detected	Meaning：Host<IP=1.1.1.1,MAC=0000.0000.0004,port=Gi4/1,VLAN=1>  was detected Cause：ARP-SCAN was detected Solution：Check whether the terminal device corresponding to 1.1.1.1 has ARP  scanning, if not, check whether there is a loop, if there is no loop, and  netork is normal, you can temporarily clear the log cache through 'clear nfpp  log' command.
%NFPP_ARP_GUARD-4-SCAN_TABLE_FULL:  ARP scan table is full	Meaning：The ARP scan table of  NFPP is full Cause：The ARP scan log of NFPP is full of buffers Solution：Check whether the terminal device corresponding to 1.1.1.1 has ARP  scanning, if not, check whether there is a loop, if there is no loop, and  netork is normal, you can temporarily clear the log cache through 'clear nfpp  log' command.
%NFPP_ARP_GUARD-4-DOS_DETECTED:  Host<IP=N/A,MAC=0000.0000.0004,port=Gi4/1,VLAN=1> was detected	Meaning：Host<IP=N/A,MAC=0000.0000.0004,port=Gi4/1,VLAN=1>  was detected Cause：The device receives more ARP messages from this address Solution: Check whether the terminal device corresponding to 1.1.1.1 has  ARP scanning, if not, check whether there is a loop, if there is no loop, and  netork is normal, you can temporarily clear the log cache through 'clear nfpp  log' command.
%NFPP_ARP_GUARD-4-ISOLATED:Host  <IP=N/A,MAC=0000.0000.0004,port=Gi4/1,VLAN=1> was isolated	Meaning：Host  <IP=N/A,MAC=0000.0000.0004,port=Gi4/1,VLAN=1> was isolated Cause：The device receives so much ARP messages from that address  beyond the isolation line Solution: Check if the terminal equipment corresponding to 0000.0000.0004  has ARP message flooding attack, if not, check whether there is a loop, if  there is no loop, and netork is normal, you can remove the isolation by the  command as below     Ruijie(config)#nfpp     Ruijie(config-nfpp)#arp-guard isolate-period  0
%LOGIN-5-LOGIN_SUCCESS:  User login from console OK.	Meaning：User login from console  OK. Cause：Login from console OK Solution：Normal
%LINEPROTO-5-UPDOWN:  Line protocol on Interface GigabitEthernet 0/24, changed state to up	Meaning：Interface protocol was  up Cause：Interface was up Solution：Prompt information, no operation required.If up and down  frequently, you need to check the physical link Cause or force duplex and  rate
%LINK-3-UPDOWN:  Interface GigabitEthernet 0/24, changed state to up	Meaning：Interface protocol was  up Cause：Interface was up Solution：Prompt information, no operation required.If up and down  frequently, you need to check the physical link Cause or force duplex and  rate
%LINEPROTO-5-UPDOWN:  Line protocol on Interface GigabitEthernet 0/24, changed state to down	Meaning：Interface protocol was  down Cause：Interface was down Solution：Prompt information, no operation required.If up and down  frequently, you need to check the physical link Cause or force duplex and  rate
%LINK-5-CHANGED:  Interface GigabitEthernet 0/24, changed state to administratively down	Meaning：Interface protocol was  down Cause：Interface was down Solution：Prompt information, no operation required.If up and down  frequently, you need to check the physical link Cause or force duplex and  rate
%LLDP-4-CREATEREM:  Port GigabitEthernet 0/24 created one new neighbor, Chassis ID is  00d0.f822.33aa, Port ID is Gi0/24	Meaning：Port GigabitEthernet  0/24 created one new neighbor, Chassis ID is 00d0.f822.33aa, Port ID is  Gi0/24 Cause：Connected a device on port 24 Solution：Prompt information, no operation required
%VSU-5-RRP_TOPO_CVG:  Topology converged.	Meaning：Topology is  Converging Cause：Topology is convergent during device startup for VSU Solution：Prompt information, no operation required
%VSU-5-RRP_TOPO_RECVG:  Topology re-converged	Meaning：Topology has changed  and is convergent Cause：The device topology of VSU has changed and VSU is convergent  again. Solution：Prompt information, no operation required
%VSU-6-CFG_SYNC:  [chars1] configuration has been successfully synchronized to MB  [dec]/[chars2].	Meaning：Backup Configuration  Successful Cause：Synchronization Configuration between Devices for VSU  Construction Solution：Prompt information, no operation required
%DP-6-FAN_OK:  Fan [dec] ok.	Meaning：Fan OK Cause：Fan was insert Solution：Prompt information, no operation required
%DP-3-FAN_FAILED:  Fan [dec] failed.	Meaning：Fan work failed Cause：Fan work failed Solution：Uisng 'show fan' command to see if Fan is available, and if  fail,try to Re-plug out and in the fan
%DP-5-FAN_REMOVED:  Fan [dec] removed.	Meaning：Fan was removed Cause：Fan was removed Solution：Prompt information, no operation required
%DP-6-POWER_OK:  Power [dec] ok.	Meaning: Power insertion Cause: power insertion Solution: Prompt information, no operation required
%DP-3-POWER_FAILED: Power [dec] failed.	Meaning: The power is plugged  in and cannot work properly. Cause: The power supply is plugged in and can not work properly. Solution: Plug in the power module, use 'show power' command to check  whether the power is OK
%DP-5-POWER_REMOVED:  Power [dec] removed.	Meaning: power pull-out Cause: power pull-out Solution: Prompt information, no operation required
%DEV-1-POWER:  The power not enough, current system in [dec] is in danger.	Meaning: The power supply in a  chassis is insufficient. Cause: insufficient power supply Solution: Please insert more power supply, replace more power supply or  power off part of the line card.
%DP-5-LC_PROB:  Probing card in slot [dec].	Meaning: detecting a line card  on a slot. Cause: The line card has not been loaded yet and is being detected and  identified. Solution: Prompt information, no operation required
%LOCAL_DP-5-LC_PROB:  Probing card in slot [dec] of local chassis.	Meaning: The line card in slot  is being probed. Cause: Line card in slot is being probed. Solution: Prompt information, no operation required
%REDUN-5-PROB:  Probing mainboard in slot [dec].	Meaning: Probing mainboard in  slot Cause: Probing mainboard in slot Solution: Prompt information, no operation required
%LOCAL_REDUN-5-PROB:  Probing mainboard in slot [dec] of local chassis.	Meaning: Probing mainboard in  slot of local chassis. Cause: Probing mainboard in slot [dec] of local chassis. Solution: Prompt information, no operation required

%REDUN-5-STARTING:  Module in slot [dec] has translated to initializing.	Meaning： mainboard was plugged  in Cause：mainboard was plugged in Solution：Prompt information, no operation required
%ACL-5-ACL80:  Not support ACL80.	Meaning：Not support  ACL80. Cause：Not support ACL80. Solution：Prompt information, no operation required
%ROUTE-3-ROUTE_TABLE_FULL:  Failed to add the route. The route table is full.	Meaning：Failed to add the  route. The route table is full. Cause：Failed to add the route. Solution：The route table is full.
%TCAM-4-TCAM_LOW:  TCAM resource shortage for excessive Input ACL.	Meaning: Common error message,  TCAM resource shortage for excessive Input ACL Cause: TCAM resource shortage for excessive Input ACL Solution: Reduce ACL entry configuration, or replace high-level equipment
%ARP-4-DUPADDR:  Duplicate address [IP_address] on [chars], sourced by [enet].	Meaning: IP address  conflict Cause: The IP address of a device in the network is the same as another IP  address in same network. Solution: Find the source of the conflict, modify the IP address of the  conflict device.
%ARP-4-STATICARPOVR:  Attempt to overwrite [enet1] for static ARP entry [IP_address] by [enet2]  [chars].	Meaning: The MAC address of  dynamic learning conflicts with the MAC address of the static ARP configured  on the device. Reasons: The MAC address of dynamic learning conflicts with the MAC address  of the static ARP configured on the device. Solution: Find the source of conflict
%ARP-4-ARPCHANGEMAC:ARP  entry [IP_address] on [chars1] changed [enet1] to [enet2] [chars2].	Meaning: The MAC address of  dynamic ARP has changed Cause: The same IP address has two devices in use Solution: Find the source of conflict and resolve IP address conflict
%DHCP_SNP-3-TRUST_PORT:  Failed to enable trust on interface [chars].	Meaning: Failed to enable trust  on interface Cause: Enable other security application under this port Solution: Check if other security applications are turned on under this  port, such as DOT1X Controlled.
%LLDP-4-AGEOUTREM：Port [chars1] one neighbor aged  out, Chassis ID is [chars2], Port ID is [chars3].	Meaning: lldp neighbor  information aging Cause: Devices leave from this port Solution: Check whether device disconnected abnormally, otherwise as a  prompt information, do not handle it.
%LLDP-4-ERRDETECT:  Port [chars1] detected loop, please check the network.	Meaning: Port detected  loop Cause: interface loop Solution: Checking network
%QOS-6-FAIL:  Can not configure acl.	Meaning: QOS cannot configure  ACL Cause: QOS cannot configure ACL Solution: Only prompt information, no processing required
%PORT-3-ERR_FRAME:  Received error frames on interface [chars1]. Please check the physical link.	Meaning: Received error frames  on interface Cause: Physical Link issue Solution: Check physical link, try to replace with a new cable
%DHCPD-4-LEASETHRESHOLD:  Pool [chars] lease threshold [dec]% exceeded.	Meaning: The DHCP address pool  has allocated more addresses than the percentage indicated in the  message. Cause: Remind you that the dhcp address pool will be fool Solution: Create new address pools, or decrease the lease period of address  pools to release some inactive address.
%DHCPD-4-PING_CONFLICT:  DHCP address conflict: server pinged [IP_address].	Meaning: The DHCP server detect  the collision of pre-assigned IP addresses, IP are being used by other  host. Cause: Some terminals have private IP addresses Solution: Find the terminal with the private address,or use the command on  access switch to prevent private IP address       Ruijie(config)#ip  dhcp snooping       Ruijie(config)#int  g0/24        Ruijie(config-if-GigabitEthernet   0/24)#ip dhcp snooping trust                  //set DHCP SNOOPING trust on uplink  port        Ruijie(config-if-GigabitEthernet   0/24)#exit       Ruijie(config)#int  rang g0/1 - 23       Ruijie(config-if-range)#ip  verify source port-security                         //Enable IP Source Guard on the  ports connected with PC
%PBR-3-INSTALL_FAIL:  Failed to install the sequence [dec] of route-map [chars1] applied on  [chars2] in hardware.	Meaning: The related  information of PBR module. Cause: Failed to install the sequence of route-map applied on  hardware. Solution: Simplify the configuration of routing graph, remove the policy  routing applied on the interface and re-apply it to the interface.
%PBR-6-GR_BEGIN:  PBR graceful restart begins.	Meaning：The related information  of PBR module. Cause：PBR graceful restart begins Solution：Prompt information, no operation required
%LLDP-4-ERRDETECT:  Native vlan for the port [chars1] may not match with the one for the neighbor  port.                    Port native  vlan=[chars2], neighbor port native vlan=[chars3].	Meaning: The native VLAN of the  port does not match the neighbor port.     [chars1] the lldp port of the local device     [chars2] the native VLAN of the local port     [chars3] the native VLAN of the neighbor port Cause: Usually due to the inconsistency of native VLAN in interface  configuration or one is trunk port and another one is access port Solution: modify the port configuration to be consistent
%SPANTREE-5-TOPOTRAP:  Topology Change Trap for instance [dec].	Meaning: Current ports change  from learning state to forwarding state or from forwarding state to  discarding state.     [dec]the instance ID. Cause: The network topology changed Solution: Prompt information, no operation required
%SPANTREE-2-BLOCK_BPDUGUARD:  Received BPDU on port [chars] with BPDU Guard enabled. Disabling port.	Meaning: The specified port  enabled the BPDU Guard and shutdown the port because it receives the BPDU  packet.    [chars] represents the port descriptor. Cause: Connect switch on the port which enabled BPDU Guard or network  loop Solution: Check whether the current network environment has loops and  whether the interface is configured with BPDU GUARD and connected with  switch.
%SPANTREE-6-RCVDTCBPDU:  Received tc bpdu on port [chars] on MST[dec].	Meaning: The port receives TC  BPDU, TC BPDU includes two categories: 1. TCN BPDU of STP protocol.     2. The BPDU of RSTP and MSTP protocol has Topology Change flag.        [chars] the port descriptor      [dec] the instance ID.        For STP and RSTP protocols, there  is no MST instance information. Cause: Network topology changes Solution: If the port receives TC BPDU frequently, it is necessary to  confirm whether the downlink device is abnormal.Check whether the network is  looped or not.

%LACP-5-BUNDLE:  Interface [chars] joined AggregatePort [dec].	Meaning：Interface joined  AggregatePort.       [chars] interface port  number。[dec]Aggregate port number Cause：Interface joined AggregatePort Solution：Prompt information, no operation required
%LACP-5-UNBUNDLE:  Interface [chars] left AggregatePort [dec].	Meaning：Interface left  AggregatePort. Cause：Interface left AggregatePort. Solution：Prompt information.
%SNMP-3-AUTHFAIL:  Authentication failure for SNMP req from host [IP_address]	Meaning：Authentication failure  for SNMP req from host Cause：The group attributes set on SNMP request terminal isn't same with the  configuration on switch Solution：Check the SNMP configuration
%RADIUS-3-NOSERVERS:  No Radius host configured.	Meaning：No Radius host  configured. Cause：No Radius host configured. Solution：Check the radius configuration and modify the configuration
%RADIUS-3-ALLDEADSERVER:  Group [chars]: No active radius servers found. Id [dec].	Meaning: None of radius servers  in the group responded to the request. Cause: Server hangs up Solution: Check the network connection status of the RADIUS server and make  sure that the server is running. If the server is running and the network  connection is normal, the request message may be discarded or blocked
%WEBAUTH-6-USER_ONLINE:  User Online: IP [ip-address], MAC [mac-address], Port [chars1], Time-limit  [chars2], Flow-limit [chars3].	Meaning: User online.     [ip-address]: User IP     [mac-address]: User MAC     [chars1]: User's port name.     [chars2]: User's available time.     [chars3]: User's available traffic. Cause: User is online Solution: Prompt information
%KEEPALIVE-3-TIMEOUT:  Peer mboard keepalive timeout.	Meaning: Peer mboard keepalive  timeout. Cause: Card reset Solution: Create hardware case on caseportal
%DEV-4-MODULE_POWER_OFF:  The card in slot [dec] is powered off.	Meaning: A board card is  powered off. Cause: Card is pulled out Solution: Prompt information
%POE-3-POE_PORTERROR:  Interface [chars1] failed！The Cause is [chars].	Meaning: Poe is disconnected  due to malfunction Cause: Poe failure Solution: Try to replace a cable line and device, and input into 'poe  legacy' to compel power supply.
%IPV4_UC_ROUTE-3-INSTALL_FAIL:  Failed to install [IP_address]/[dec] due to hardware conflict, lack of  hardware or memory.	Meaning: An IPv4 unicast  routing fails to add due to hardware resource conflict or insufficient memory  resources Cause: insufficient hardware items Solution: Remove unnecessary routing or replace high-performance devices
%ROUTE-3-ADD_HOST_ROUTE_FAIL:  Failed to add host [ip_address] due to shortage of hardware resources.	Meaning: Adding host routing  failed caused by insufficient hardware resources Cause: insufficient hardware items Solution: Remove unnecessary routing or replace high-performance devices
%REDUNDANCY-6-STATES_CHANGE:  Redundancy states changed: role [chars1], state [chars2].	Meaning: Hot-Standby role  changes. Cause: Engine Synchronization Information Solution: Prompt information
%SYS-5-COLDSTART:  System coldstart.	Meaning: The system  coldstart Cause: Restart caused by plug-in power or network power failure. Solution: Check the power supply
%SYS-5-WARMSTART:  System warmstart.	Meaning：System warmstart Cause：Used 'reload' command to restart device Solution：Prompt information