Appendix - Cisco Catalyst 2950 Software Manual

Error Messages for Security and QoS
Configurations
This appendix describes the error messages for configuring network security with ACLs and configuring
QoS. In
on ACPs, see the
These error messages are applicable only if you have installed the enhanced software image on your
switch.
Table A-1 Common ACL Error Messages
Error Message
%Error:Class-map has a different mask than the
Policymap
%Error:Class-maps have a mix of System Defined
and User Defined masks within the Policymap
%Error:System Defined ACEs of tcp and ip can
not exist together in a policy-map
%Error:Service-Policy is not supported on VLAN
interface
%Error:Invalid policy_map
%Error:Match Numbered Attach Filter :ONLY one
ACL allowed in a class-map
78-11380-03
Table A-1, Access Control Parameters (ACPs) are referred to as masks. For more information
"Understanding Access Control Parameters" section on page
Explanation and Suggested Solution
The policy map has a different mask than the class map.
Use the same mask in both the class map and the policy map.
In a policy map, the class maps can have ACLs that use either a
system-defined mask or a user-defined mask. A combination of
system-defined and user-defined masks cannot be used in the multiple
class maps that are a part of a policy map.
A policy map can contain multiple class maps that all use the same
user-defined mask or the same system-defined mask.
A combination of Layer 3 system-defined ACEs and Layer 4
system-defined ACEs is not supported in a policy map. You cannot
have masks such as permit tcp/udp any any and permit ip any any
within the same policy map.
A policy map must have either Layer 4 system-defined ACEs or
Layer 3 system-defined ACEs.
A policy map cannot be attached to a VLAN interface.
A policy map can be attached only to physical interfaces.
The policy map is invalid due to multiple reasons.
Normally, this error message is preceded by a more explicit error
message that gives details about the reasons for the invalidity of the
policy map.
Only one ACL can be allowed in a class map. This error means that
there was an attempt to add another numbered ACL in the class map.
A P P E N D I X
Catalyst 2950 Desktop Switch Software Configuration Guide
A
12-4.
A-1