HP ProCurve Series 3400cl Release Notes page 77

Message
ACE parsing error, destination IP,
< ace-# > client < mac-address > port
< port-# >.
ACE parsing error, tcp/udp ports,
< ace-# > client < mac-address > port
< port-# >.
Port < port-# >, No RADIUS ACLs applied
on this port.
Rule limit per ACL exceeded. < ace-# >
client < mac-address > port < port-# >.
Duplicate mac. An ACl exists for
client. Deauthenticating second.
client < mac-address > port < port-# >.
Invalid Access-list entry length,
client < mac-address > port < port-# >.
Memory allocation failure for IDM
ACL.
ACE limit per port exceeded. client
< mac-address > port < port-# >.
Exceeded counter per port limit.
client < mac-address > port < port-# >.
Causes of Client Deauthentication Immediately After Authenticating
ACE formatted incorrectly in the RADIUS server
■
• "from", "any", or "to" keyword missing
• An IP protocol number in the ACE exceeds 255.
• An optional UDP or TCP port number is invalid.
■ A RADIUS-Based ACL limit has been exceeded. (Refer to
Based ACL Applications"
• The allowed maximum of one RADIUS-assigned ACL has already been reached on the
port through which the deauthenticated client is trying to access the network. (Each
client requiring a RADIUS-assigned ACL is a separate instance, even if multiple clients
are assigned the same ACL.)
• For a given port, the latest client authentication includes a RADIUS-Based ACL assign-
ment exceeding the maximum number of ACEs allowed on the port (30).
Meaning
Notifies of a problem with the destination IP field in the
indicated ACE of the access list for the indicated client on
the indicated switch port.
Notifies of a problem with the TCP/UDP port field in the
indicated ACE of the access list for the indicated client on
the indicated switch port.
Appears in response to the CLI show access-list radius
< port-# > command when there is not currently a RADIUS
ACL assigned to the port.
Notifies that an ACL has too many rules. A maximum of 30
(internal) ACEs are allowed per ACL. Refer to
page
Notifies that an ACL for this mac on this port already exists.
Notifies that the string configured for an ACE entry on
the Radius server exceeds 80 characters.
Notifies of a memory allocation failure for a RADIUS-based
ACL.
User Action?
Notifies that the maximum number of ACEs (30) allowed on
the port was exceeded.
Notifies that the internal counter (cnt) limit of 32 per port
was exceeded on port < port-# >. Refer to
on page 57.)
Release M.10.02 Enhancements
57.
Table 5, "Limits Affecting RADIUS-
Enhancements
Table 5 on
Table 5 on page 57.
67