Table of Contents
Advertisement
Chapter 2
Messages and Recovery Procedures
Error Message SUPQ-4-RECV_QUEUE_STUCK: Receive queue Stuck for asic [dec] queue
[dec].
SW_DAI Messages
This section contains the dynamic ARP inspection (DAI) messages.
Note
Error Message SW_DAI-4-ACL_DENY: [dec] Invalid ARPs ([chars]) on [chars], vlan
[dec].([[enet]/[chars]/[enet]/[chars]/[time-of-day]]).
Error Message SW_DAI-4-DHCP_SNOOPING_DENY: [dec] Invalid ARPs ([chars]) on [chars],
vlan [dec].([[enet]/[chars]/[enet]/[chars]/[time-of-day]]).
OL-9641-01
This message means that the system has detected that the receive queue is not being
Explanation
cleared in a reasonable time. The first [dec] is the ASIC, and the second [dec] is the queue number.
Copy the message exactly as it appears on the console or in the system log.
Recommended Action
Research and attempt to resolve the error by using the Output Interpreter. Use the Bug Toolkit to
look for similar reported problems. If you still require assistance, open a case with the TAC, or
contact your Cisco technical support representative, and provide the representative with the gathered
information. For more information about these online tools and about contacting Cisco, see the
Message Traceback Reports" section on page
These messasges apply only to the Cisco ME 3400 switch.
This message means that the switch has received ARP packets considered invalid by
Explanation
ARP inspection. The packets are erroneous, and their presence shows that administratively denied
packets were seen in the network. This log message appears when ACLs either explicitly or
implicitly deny packets (with static ACL configuration). These packets show attempted
man-in-the-middle attacks in the network. The first [dec] is the number of invalid ARP packets. The
first [chars] is either Req (request) or Res (response), and the second [chars] is the short name of the
ingress interface. The second [dec] is the ingress VLAN ID.
[enet]/[chars]/[enet]/[chars]/[time-of-day] is the MAC address of the sender, the IP address of the
sender, the MAC address of the target, the IP address of the target, and the time of day.
No action is required.
Recommended Action
This message means that the switch has received ARP packets considered invalid by
Explanation
ARP inspection. The packets are erroneous, and their presence might show attempted
man-in-the-middle attacks in the network. This log message appears when the sender's IP and MAC
address binding for the received VLAN is not in the DHCP snooping database. The first [dec] is the
number of invalid ARP packets. The first [chars] is either Req (request) or Res (response), and the
second [chars] is the short name of the ingress interface. The second [dec] is the ingress VLAN ID.
[enet]/[chars]/[enet]/[chars]/[time-of-day] is the MAC address of the sender, the IP address of the
sender, the MAC address of the target, the IP address of the target, and the time of day.
Recommended Action
No action is required.
1-4.
Cisco ME 3400 and 2400 Ethernet Access Switch System Message Guide
SW_DAI Messages
"Error
2-69
Advertisement
Table of Contents
