Error Messages For Security And Qos Configurations - Cisco Catalyst 2950 Software Manual

Table A-1 Common ACL Error Messages (continued)
Error Message
%Error:Deny ACE not supported in access-group
within a class-map
%Error:System Defined and User Defined ACEs
can not exist together in access-group within
a class-map
%Error:System Defined ACEs of tcp and ip can
not exist together in access-group within a
class-map
%Error:Match Attach Filter :ONLY one ACL
allowed in a class-map
%Error:the ACL has a different mask than the
Policy-map
%Error:Service policy can not be configured
%Error:Service policy can not be supported -
Policers required exceed Maximum Allowed on
this interface
%Error:Service policy can not be supported -
Rules required exceed available resources in
ASIC.
%Error:Removing service-policy policy-map name
from interface interface_number
%Error:ASIC memory read write issues
%Error:ASIC Resources unavailable
%Error:Invalid mask
Catalyst 2950 Desktop Switch Software Configuration Guide
A-2
Appendix A
Explanation and Suggested Solution
A deny ACE is not supported in an access group within a class map.
In a class map, the access group can have ACLs that have either
system-defined masks or user-defined masks. A combination of
system-defined and user-defined masks cannot be used in an access
group within a class map.
In a class map, the access group cannot have system-defined ACEs of
both the Layer 4 and Layer 3. The access group can have either Layer
4 system-defined ACEs or Layer 3 system-defined ACEs.
In a class map, only one ACL is allowed.
This error message means that an attempt was made to add another
ACL in the class map.
In a policy map, all ACLs within the same class maps must have the
same mask.
This error message means that an attempt was made to create an ACL
with a different mask within a policy map.
The Catalyst 2950 switches support the policy-map global
configuration command with certain restrictions.
This error message means that the policy map cannot be configured
due to certain reasons. The exact cause is provided in separate error
messages that precede this error message.
A maximum of six policers are supported on an Fast Ethernet port and
60 policers on Gigabit Ethernet port.
This policy map cannot be supported because the number of policers
required on this interface are more than permitted.
The policy map cannot be supported because the number of resources
required to support this policy map are not available in the hardware.
In order to support this policy map, you need to reduce the number of
resources on this policy map.
A policy map is removed from an interface if it is found to be invalid.
There are multiple reasons for a policy map to become invalid
(incorrect number of policers, ACLs in a class map cannot be
supported, and so on).
If there is a policy map attached to an interface and you modify the
policy map so that it becomes invalid, the system removes the policy
map from the interface.
The error message means that the switch hardware is having problems.
This error message means that the hardware does not have sufficient
resources to support the user policies.
This error message means that the user-defined mask is not entered
correctly in the hardware.
Remove the mask, and re-enter it.

Error Messages for Security and QoS Configurations

78-11380-03