Cisco Catalyst 2950 Software Manual page 347

Appendix A Error Messages for Security and QoS Configurations
Table A-1 Common ACL Error Messages (continued)
Error Message
%Error:Invalid rule
%Error:Invalid ingress port
%Error:Another security mask on this interface
%Error:Another qos mask on this interface
%Error:No sec mask on this interface
%Error:No qos mask on this interface
%Error:No sec rules on this interface
%Error:No qos rules on this interface
%Error:No free masks available
%Error:Invalid ace
%Error:Invalid sequence - IP protocol ACE not
allowed after TCP/UDP protocol ACE
78-11380-03
Explanation and Suggested Solution
This error message means that the hardware had a problem
programming the resource. Re-enter the command to program the
hardware.
This error message means that an invalid ingress port was detected by
the hardware. Re-enter the command for the interface.
This error message means that there is another security mask present
on the interface.
On any interface, only one security mask is allowed.
Remove all the security access groups on this interface, and attach the
security access group that is required.
This error message means that more than one QoS mask on the
interface.
On any interface, only one QoS mask is allowed.
Remove all the QoS policy maps on this interface, and attach the
policy map that is required.
This error message means that no security mask has been applied on
this interface.
Therefore, there is no security access group running on this interface.
This error message means that there is no QoS mask has been applied
on this interface.
Therefore, no QoS policy map is applied on the interface.
This error message means that there are no security resources on this
interface.
This error message means that there are no QoS resources on this
interface.
This error message means that there are no free masks available for the
user.
You have to use one of the user-defined masks that is already
configured. As an alternative, you can free up one of the masks by
removing all the policies that use that mask.
The ACE entered is invalid.
This is an error message that is preceded by a more explicit error
message that gives the reasons for the ACE being invalid.
In an ACL, a Layer 4 (TCP/UDP) ACE cannot precede a Layer 3 (IP
protocol) ACE.
Catalyst 2950 Desktop Switch Software Configuration Guide
A-3