Ruijie Community

Title: Switch common syslog [Print this page]

Author: GTAC-Daisy    Time: 2019-9-29 18:17
Title: Switch common syslog
Edited by Daisy at 2019-9-30 15:04

SyslogCaption
Peer  software version is incompatible Meaning:The versions of two  switch that build VSU is incompatible
Cause:The version is incompatible
Solution:Upgrading two switch to same firmware
%MAC-4-FLAPPING:  Station aaaa.aaaa.aaaa in VLAN 10 is flapping between gi1/2 and gi1/3Meaning:Sometimes MAC address  aaaa.aaaa.aaaa learned from port 1/2, sometimes learned from 1/3
Cause:loop
Solution:Troubleshooting loop
%PORT_SECURITY-4-ERR_RECOVER:  Interface GigabitEthernet 0/1 recover from an error.Meaning:Gi0/1 port returned to  normal from errordisable state
Cause:Loop
Solution:Troubleshooting loop
%RLDP-3-LINK_DETECT_RECOVER:  rldp recover interface GigabitEthernet 0/7 from loop errorMeaning:Gi0/7 port returned to  normal from errordisable state
Cause:Loop
Solution:Troubleshooting loop
using  you PC SetMac program to perform SetMac Operation Meaning:using you PC SetMac  program to perform SetMac Operation
Cause:MAC address is cleared
Solution:Creating hardware issue on caseportal.
:%NFPP_ARP_GUARD-4-SCAN:  Host<IP=1.1.1.1,MAC=0000.0000.0004,port=Gi4/1,VLAN=1> was detectedMeaning:Host<IP=1.1.1.1,MAC=0000.0000.0004,port=Gi4/1,VLAN=1>  was detected
Cause:ARP-SCAN was detected
Solution:Check whether the terminal device corresponding to 1.1.1.1 has ARP  scanning, if not, check whether there is a loop, if there is no loop, and  netork is normal, you can temporarily clear the log cache through 'clear nfpp  log' command.
%NFPP_ARP_GUARD-4-SCAN_TABLE_FULL:  ARP scan table is fullMeaning:The ARP scan table of  NFPP is full
Cause:The ARP scan log of NFPP is full of buffers
Solution:Check whether the terminal device corresponding to 1.1.1.1 has ARP  scanning, if not, check whether there is a loop, if there is no loop, and  netork is normal, you can temporarily clear the log cache through 'clear nfpp  log' command.
%NFPP_ARP_GUARD-4-DOS_DETECTED:  Host<IP=N/A,MAC=0000.0000.0004,port=Gi4/1,VLAN=1> was detectedMeaning:Host<IP=N/A,MAC=0000.0000.0004,port=Gi4/1,VLAN=1>  was detected
Cause:The device receives more ARP messages from this address
Solution: Check whether the terminal device corresponding to 1.1.1.1 has  ARP scanning, if not, check whether there is a loop, if there is no loop, and  netork is normal, you can temporarily clear the log cache through 'clear nfpp  log' command.
%NFPP_ARP_GUARD-4-ISOLATED:Host  <IP=N/A,MAC=0000.0000.0004,port=Gi4/1,VLAN=1> was isolatedMeaning:Host  <IP=N/A,MAC=0000.0000.0004,port=Gi4/1,VLAN=1> was isolated
Cause:The device receives so much ARP messages from that address  beyond the isolation line
Solution: Check if the terminal equipment corresponding to 0000.0000.0004  has ARP message flooding attack, if not, check whether there is a loop, if  there is no loop, and netork is normal, you can remove the isolation by the  command as below
    Ruijie(config)#nfpp
    Ruijie(config-nfpp)#arp-guard isolate-period  0
%LOGIN-5-LOGIN_SUCCESS:  User login from console OK.Meaning:User login from console  OK.
Cause:Login from console OK
Solution:Normal
%LINEPROTO-5-UPDOWN:  Line protocol on Interface GigabitEthernet 0/24, changed state to upMeaning:Interface protocol was  up
Cause:Interface was up
Solution:Prompt information, no operation required.If up and down  frequently, you need to check the physical link Cause or force duplex and  rate
%LINK-3-UPDOWN:  Interface GigabitEthernet 0/24, changed state to upMeaning:Interface protocol was  up
Cause:Interface was up
Solution:Prompt information, no operation required.If up and down  frequently, you need to check the physical link Cause or force duplex and  rate
%LINEPROTO-5-UPDOWN:  Line protocol on Interface GigabitEthernet 0/24, changed state to downMeaning:Interface protocol was  down
Cause:Interface was down
Solution:Prompt information, no operation required.If up and down  frequently, you need to check the physical link Cause or force duplex and  rate
%LINK-5-CHANGED:  Interface GigabitEthernet 0/24, changed state to administratively downMeaning:Interface protocol was  down
Cause:Interface was down
Solution:Prompt information, no operation required.If up and down  frequently, you need to check the physical link Cause or force duplex and  rate
%LLDP-4-CREATEREM:  Port GigabitEthernet 0/24 created one new neighbor, Chassis ID is  00d0.f822.33aa, Port ID is Gi0/24Meaning:Port GigabitEthernet  0/24 created one new neighbor, Chassis ID is 00d0.f822.33aa, Port ID is  Gi0/24
Cause:Connected a device on port 24
Solution:Prompt information, no operation required
%VSU-5-RRP_TOPO_CVG:  Topology converged.Meaning:Topology is  Converging
Cause:Topology is convergent during device startup for VSU
Solution:Prompt information, no operation required
%VSU-5-RRP_TOPO_RECVG:  Topology re-convergedMeaning:Topology has changed  and is convergent
Cause:The device topology of VSU has changed and VSU is convergent  again.
Solution:Prompt information, no operation required
%VSU-6-CFG_SYNC:  [chars1] configuration has been successfully synchronized to MB  [dec]/[chars2].Meaning:Backup Configuration  Successful
Cause:Synchronization Configuration between Devices for VSU  Construction
Solution:Prompt information, no operation required
%DP-6-FAN_OK:  Fan [dec] ok.Meaning:Fan OK
Cause:Fan was insert
Solution:Prompt information, no operation required
%DP-3-FAN_FAILED:  Fan [dec] failed.Meaning:Fan work failed
Cause:Fan work failed
Solution:Uisng 'show fan' command to see if Fan is available, and if  fail,try to Re-plug out and in the fan
%DP-5-FAN_REMOVED:  Fan [dec] removed.Meaning:Fan was removed
Cause:Fan was removed
Solution:Prompt information, no operation required
%DP-6-POWER_OK:  Power [dec] ok.Meaning: Power insertion
Cause: power insertion
Solution: Prompt information, no operation required
%DP-3-POWER_FAILED: Power [dec] failed.Meaning: The power is plugged  in and cannot work properly.
Cause: The power supply is plugged in and can not work properly.
Solution: Plug in the power module, use 'show power' command to check  whether the power is OK
%DP-5-POWER_REMOVED:  Power [dec] removed.Meaning: power pull-out
Cause: power pull-out
Solution: Prompt information, no operation required
%DEV-1-POWER:  The power not enough, current system in [dec] is in danger.Meaning: The power supply in a  chassis is insufficient.
Cause: insufficient power supply
Solution: Please insert more power supply, replace more power supply or  power off part of the line card.
%DP-5-LC_PROB:  Probing card in slot [dec].Meaning: detecting a line card  on a slot.
Cause: The line card has not been loaded yet and is being detected and  identified.
Solution: Prompt information, no operation required
%LOCAL_DP-5-LC_PROB:  Probing card in slot [dec] of local chassis.Meaning: The line card in slot  is being probed.
Cause: Line card in slot is being probed.
Solution: Prompt information, no operation required
%REDUN-5-PROB:  Probing mainboard in slot [dec].Meaning: Probing mainboard in  slot
Cause: Probing mainboard in slot
Solution: Prompt information, no operation required
%LOCAL_REDUN-5-PROB:  Probing mainboard in slot [dec] of local chassis.Meaning: Probing mainboard in  slot of local chassis.
Cause: Probing mainboard in slot [dec] of local chassis.
Solution: Prompt information, no operation required

Author: GTAC-Daisy    Time: 2019-9-30 09:25
Edited by Daisy at 2019-9-30 15:11

%REDUN-5-STARTING:  Module in slot [dec] has translated to initializing.Meaning: mainboard was plugged  in
Cause:mainboard was plugged in
Solution:Prompt information, no operation required
%ACL-5-ACL80:  Not support ACL80.Meaning:Not support  ACL80.
Cause:Not support ACL80.
Solution:Prompt information, no operation required
%ROUTE-3-ROUTE_TABLE_FULL:  Failed to add the route. The route table is full.Meaning:Failed to add the  route. The route table is full.
Cause:Failed to add the route.
Solution:The route table is full.
%TCAM-4-TCAM_LOW:  TCAM resource shortage for excessive Input ACL.Meaning: Common error message,  TCAM resource shortage for excessive Input ACL
Cause: TCAM resource shortage for excessive Input ACL
Solution: Reduce ACL entry configuration, or replace high-level equipment
%ARP-4-DUPADDR:  Duplicate address [IP_address] on [chars], sourced by [enet].Meaning: IP address  conflict
Cause: The IP address of a device in the network is the same as another IP  address in same network.
Solution: Find the source of the conflict, modify the IP address of the  conflict device.
%ARP-4-STATICARPOVR:  Attempt to overwrite [enet1] for static ARP entry [IP_address] by [enet2]  [chars].Meaning: The MAC address of  dynamic learning conflicts with the MAC address of the static ARP configured  on the device.
Reasons: The MAC address of dynamic learning conflicts with the MAC address  of the static ARP configured on the device.
Solution: Find the source of conflict
%ARP-4-ARPCHANGEMAC:ARP  entry [IP_address] on [chars1] changed [enet1] to [enet2] [chars2].Meaning: The MAC address of  dynamic ARP has changed
Cause: The same IP address has two devices in use
Solution: Find the source of conflict and resolve IP address conflict
%DHCP_SNP-3-TRUST_PORT:  Failed to enable trust on interface [chars].Meaning: Failed to enable trust  on interface
Cause: Enable other security application under this port
Solution: Check if other security applications are turned on under this  port, such as DOT1X Controlled.
%LLDP-4-AGEOUTREM:Port [chars1] one neighbor aged  out, Chassis ID is [chars2], Port ID is [chars3].Meaning: lldp neighbor  information aging
Cause: Devices leave from this port
Solution: Check whether device disconnected abnormally, otherwise as a  prompt information, do not handle it.
%LLDP-4-ERRDETECT:  Port [chars1] detected loop, please check the network.Meaning: Port detected  loop
Cause: interface loop
Solution: Checking network
%QOS-6-FAIL:  Can not configure acl.Meaning: QOS cannot configure  ACL
Cause: QOS cannot configure ACL
Solution: Only prompt information, no processing required
%PORT-3-ERR_FRAME:  Received error frames on interface [chars1]. Please check the physical link.Meaning: Received error frames  on interface
Cause: Physical Link issue
Solution: Check physical link, try to replace with a new cable
%DHCPD-4-LEASETHRESHOLD:  Pool [chars] lease threshold [dec]% exceeded.Meaning: The DHCP address pool  has allocated more addresses than the percentage indicated in the  message.
Cause: Remind you that the dhcp address pool will be fool
Solution: Create new address pools, or decrease the lease period of address  pools to release some inactive address.
%DHCPD-4-PING_CONFLICT:  DHCP address conflict: server pinged [IP_address].Meaning: The DHCP server detect  the collision of pre-assigned IP addresses, IP are being used by other  host.
Cause: Some terminals have private IP addresses
Solution: Find the terminal with the private address,or use the command on  access switch to prevent private IP address
      Ruijie(config)#ip  dhcp snooping
      Ruijie(config)#int  g0/24
       Ruijie(config-if-GigabitEthernet   0/24)#ip dhcp snooping trust           
      //set DHCP SNOOPING trust on uplink  port
       Ruijie(config-if-GigabitEthernet   0/24)#exit
      Ruijie(config)#int  rang g0/1 - 23
      Ruijie(config-if-range)#ip  verify source port-security                  
      //Enable IP Source Guard on the  ports connected with PC
%PBR-3-INSTALL_FAIL:  Failed to install the sequence [dec] of route-map [chars1] applied on  [chars2] in hardware.Meaning: The related  information of PBR module.
Cause: Failed to install the sequence of route-map applied on  hardware.
Solution: Simplify the configuration of routing graph, remove the policy  routing applied on the interface and re-apply it to the interface.
%PBR-6-GR_BEGIN:  PBR graceful restart begins.Meaning:The related information  of PBR module.
Cause:PBR graceful restart begins
Solution:Prompt information, no operation required
%LLDP-4-ERRDETECT:  Native vlan for the port [chars1] may not match with the one for the neighbor  port.                    Port native  vlan=[chars2], neighbor port native vlan=[chars3].Meaning: The native VLAN of the  port does not match the neighbor port.
    [chars1] the lldp port of the local device
    [chars2] the native VLAN of the local port
    [chars3] the native VLAN of the neighbor port
Cause: Usually due to the inconsistency of native VLAN in interface  configuration or one is trunk port and another one is access port
Solution: modify the port configuration to be consistent
%SPANTREE-5-TOPOTRAP:  Topology Change Trap for instance [dec].Meaning: Current ports change  from learning state to forwarding state or from forwarding state to  discarding state.
    [dec]the instance ID.
Cause: The network topology changed
Solution: Prompt information, no operation required
%SPANTREE-2-BLOCK_BPDUGUARD:  Received BPDU on port [chars] with BPDU Guard enabled. Disabling port.Meaning: The specified port  enabled the BPDU Guard and shutdown the port because it receives the BPDU  packet.
   [chars] represents the port descriptor.
Cause: Connect switch on the port which enabled BPDU Guard or network  loop
Solution: Check whether the current network environment has loops and  whether the interface is configured with BPDU GUARD and connected with  switch.
%SPANTREE-6-RCVDTCBPDU:  Received tc bpdu on port [chars] on MST[dec].Meaning: The port receives TC  BPDU, TC BPDU includes two categories: 1. TCN BPDU of STP protocol.
    2. The BPDU of RSTP and MSTP protocol has Topology Change flag.  
     [chars] the port descriptor
     [dec] the instance ID.
       For STP and RSTP protocols, there  is no MST instance information.
Cause: Network topology changes
Solution: If the port receives TC BPDU frequently, it is necessary to  confirm whether the downlink device is abnormal.Check whether the network is  looped or not.

Author: GTAC-Daisy    Time: 2019-9-30 14:53
Edited by Daisy at 2019-9-30 15:24

%LACP-5-BUNDLE:  Interface [chars] joined AggregatePort [dec].Meaning:Interface joined  AggregatePort.
      [chars] interface port  number。[dec]Aggregate port number
Cause:Interface joined AggregatePort
Solution:Prompt information, no operation required
%LACP-5-UNBUNDLE:  Interface [chars] left AggregatePort [dec].Meaning:Interface left  AggregatePort.
Cause:Interface left AggregatePort.
Solution:Prompt information.
%SNMP-3-AUTHFAIL:  Authentication failure for SNMP req from host [IP_address]Meaning:Authentication failure  for SNMP req from host
Cause:The group attributes set on SNMP request terminal isn't same with the  configuration on switch
Solution:Check the SNMP configuration
%RADIUS-3-NOSERVERS:  No Radius host configured.Meaning:No Radius host  configured.
Cause:No Radius host configured.
Solution:Check the radius configuration and modify the configuration
%RADIUS-3-ALLDEADSERVER:  Group [chars]: No active radius servers found. Id [dec].Meaning: None of radius servers  in the group responded to the request.
Cause: Server hangs up
Solution: Check the network connection status of the RADIUS server and make  sure that the server is running. If the server is running and the network  connection is normal, the request message may be discarded or blocked
%WEBAUTH-6-USER_ONLINE:  User Online: IP [ip-address], MAC [mac-address], Port [chars1], Time-limit  [chars2], Flow-limit [chars3].Meaning: User online.
    [ip-address]: User IP
    [mac-address]: User MAC
    [chars1]: User's port name.
    [chars2]: User's available time.
    [chars3]: User's available traffic.
Cause: User is online
Solution: Prompt information
%KEEPALIVE-3-TIMEOUT:  Peer mboard keepalive timeout.Meaning: Peer mboard keepalive  timeout.
Cause: Card reset
Solution: Create hardware case on caseportal
%DEV-4-MODULE_POWER_OFF:  The card in slot [dec] is powered off.Meaning: A board card is  powered off.
Cause: Card is pulled out
Solution: Prompt information
%POE-3-POE_PORTERROR:  Interface [chars1] failed!The Cause is [chars].Meaning: Poe is disconnected  due to malfunction
Cause: Poe failure
Solution: Try to replace a cable line and device, and input into 'poe  legacy' to compel power supply.
%IPV4_UC_ROUTE-3-INSTALL_FAIL:  Failed to install [IP_address]/[dec] due to hardware conflict, lack of  hardware or memory.Meaning: An IPv4 unicast  routing fails to add due to hardware resource conflict or insufficient memory  resources
Cause: insufficient hardware items
Solution: Remove unnecessary routing or replace high-performance devices
%ROUTE-3-ADD_HOST_ROUTE_FAIL:  Failed to add host [ip_address] due to shortage of hardware resources. Meaning: Adding host routing  failed caused by insufficient hardware resources
Cause: insufficient hardware items
Solution: Remove unnecessary routing or replace high-performance devices
%REDUNDANCY-6-STATES_CHANGE:  Redundancy states changed: role [chars1], state [chars2].
   
Meaning: Hot-Standby role  changes.
Cause: Engine Synchronization Information
Solution: Prompt information
%SYS-5-COLDSTART:  System coldstart.Meaning: The system  coldstart
Cause: Restart caused by plug-in power or network power failure.
Solution: Check the power supply
%SYS-5-WARMSTART:  System warmstart.Meaning:System warmstart
Cause:Used 'reload' command to restart device
Solution:Prompt information





Welcome to Ruijie Community (https://community.ruijienetworks.com/) Powered by Discuz! X3.2