System Message Guide vA4(1.0), Cisco ACE Application Control Engine Module
Messages Listed by Severity Level
Downloads: This chapterpdf (PDF - 236.0KB) The complete bookPDF (PDF - 3.79MB) | Feedback

Messages Listed by Severity Level

Table Of Contents

Messages Listed by Severity Level

Alert Messages, Severity Level 1

Critical Messages, Severity Level 2

Error Messages, Severity Level 3

Warning Messages, Severity Level 4

Notification Messages, Severity Level 5

Informational Messages, Severity Level 6

Debugging Messages, Severity Level 7


Messages Listed by Severity Level


This chapter contains the following sections:

Alert Messages, Severity Level 1

Critical Messages, Severity Level 2

Error Messages, Severity Level 3

Warning Messages, Severity Level 4

Notification Messages, Severity Level 5

Informational Messages, Severity Level 6

Debugging Messages, Severity Level 7


Note The ACE does not send severity 0, emergency messages to syslog. These are comparable to a UNIX panic message and indicate an unstable system.


Alert Messages, Severity Level 1

The following messages appear at severity level 1, alerts:

%ACE-1-106021: Deny protocol reverse path check from source_address to dest_address on interface interface_name

%ACE-1-106028: WARNING: ACL Merge configuration download timeout in context Admin. Error while processing merged list. Incomplete rule is currently applied on interface interface-name. Configuration on this interface needs to be manually reverted.

%ACE-1-313006: ICMP Manager Initialization Failed. Reason : Variable1

%ACE-1-444006: License manager exiting: reason

%ACE-1-727001: HA: Peer IP address is not reachable. Error: error str.

%ACE-1-727002: HA: FT interface interface name to reach peer IP address is down. Error: error str

%ACE-1-727003: HA: Mismatch in context names detected for FT group FTgroupID. Cannot be redundant.

%ACE-1-727004: HA: Two actives have been detected for FT group FTgroupID.

%ACE-1-727005: HA: Config replication failed for context ctx name. Error : error str

%ACE-1-727006: HA: Peer is incompatible due to error str. Cannot be Redundant.

%ACE-1-727007: HA: Module Initialization failure - Error Error str.

%ACE-1-727008: HA: Failed to send heartbeats to peer. Internal error: Error str

%ACE-1-727009: HA: Communication failure for Peer Peer id Event: error str

%ACE-1-728001: Initialization failure (general) type variable1

%ACE-1-728002: Initialization failure (sticky) type variable1

%ACE-1-728003: Initialization failure (sticky hash) variable1 entries, variable2 min, variable3 max type variable4

%ACE-<severity depending on the printk severity>-901001: kernel message.

Critical Messages, Severity Level 2

The following messages appear at severity level 2, critical:

%ACE-2-100001: EOL function chars from library chars exited due to Signal dec

%ACE-2-199006 : Orderly reload started at when by whom. Reload reason: reason

%ACE-2-212007: SNMPD initialization failed while Variable1

%ACE-2-253012: Crypto file storage failure: All certificates/keys were removed. Error: text_string

%ACE-2-255007: Restore for context <ctx_name> failed for component <component> due to <reason>

%ACE-2-255008: Restore for all contexts failed in context <ctx_name> for component <component_name> due to <reason>

%ACE-2-253012: Crypto file storage failure: All certificates/keys were removed. Error: text_string

%ACE-2-443001: System experienced fatal failure. Char, reloading system

%ACE-2-444001: License checkout failure for feature feature_name reason

%ACE-2-444004: Evaluation license expired for feature feature_name

%ACE-4-444007: Installed feature_name license on Revision 6 or older hardware, will not take effect until next reboot.

%ACE-2-727010: HA: Data replication failed for context ctx name. Error code error str

%ACE-2-727011: HA: Configuration replication for context ctx name will not happen. Error: Error str

%ACE-2-727012: HA: FT Group group ID changed state to NewState. Reason: reason str.

%ACE-2-727013: HA: Peer Peer # is UP and reachable.

%ACE-2-727014: HA: Heartbeats from Peer Peer id have become unidirectional.

%ACE-2-727015: HA: Detected mismatch in heartbeat interval from Peer peer id. Modified interval to interval.

%ACE-2-727016: HA: replication_message

%ACE-2-727017: HA: FT Track track type track name is UP.

%ACE-2-727018: HA: FT Track track type track name is DOWN.

%ACE-HA_HB-2-727024: HA: HB state change for peer Peer_ID message failed due to CP queue full

Error Messages, Severity Level 3

The following messages appear at severity level 3, errors:

%ACE-3-211001: Memory allocation Error [; SIP packet dropped from vlanSource_interface:source_real_address/source_real_port (0.0.0.0:0) to Unknown:destination_address_on_source_interface/destination_port_on_source_interface (0.0.0.0:0)]

%ACE-3-212008: Failed while allocating memory in snmpd

%ACE-3-251001: Probe configuration error, memory allocation failure.

%ACE-3-251003: Could not load script script-name - File not found

%ACE-3-251004: Could not load script script-name - memory allocation failure

%ACE-3-251006: Health probe failed for server A.B.C.D on port P, internal error: error message

%ACE-3-251007: ICMP health probe failed for server A.B.C.D, internal error: error message

%ACE-3-251008: Health probe failed for server A.B.C.D on port P, connectivity error: server open timeout (no SYN ACK)

%ACE-3-251009: ICMP health probe failed for server A.B.C.D, connectivity error: error message

%ACE-3-251010: Health probe failed for server A.B.C.D on port P, error message

%ACE-3-251011: ICMP health probe failed for server A.B.C.D, error message.

%ACE-3-251012: Could not load script script-name - Error reading script-file

%ACE-3-251013: Could not load script script-name - Error getting file size

%ACE-3-251014: Could not probe server IP_address on port port_number for number consecutive tries - Internal error.

%ACE-3-255003: Backup for context <ctx_name> failed for component <component> due to <reason>

%ACE-3-255004: Backup for all contexts failed in context <ctx_name> for component <component> due to <reason>

%ACE-1-313007: ICMP Manager Memory Problem. Reason: Variable1

%ACE-3-322001: Deny MAC address MAC_address, possible spoof attempt on interface interface

%ACE-3-322002: ARP inspection check failed for arp {request|response} received from host MAC_address on interface interface. This host is advertising MAC Address MAC_address_1 for IP Address IP_address, which is {statically|dynamically} bound to MAC Address MAC_address_2.

%ACE-3-322003: ARP inspection check failed for arp {request|response} received from host MAC_address on interface interface. This host is advertising MAC Address MAC_address_1 for IP Address IP_address, which is not bound to any MAC Address.

%ACE-3-327001: Detected Encap table Full when allocating encap entry for IP interface interface_name

%ACE-3-440002: Addition failed for variable 1

%ACE-3-440003: Deletion failed for variable 2

%ACE-3-728005: Failed to transmit variable1 decision for connection from client variable2 type variable3

%ACE-3-728007: Internal configuration communications error (sticky) type variable1

%ACE-3-728008: Internal communications error (sticky) /source processor variable1 destination processor variable2 -- type variable3

%ACE-3-728009: Context ID variable1 requested variable2 of variable3 sticky entries. No action taken. -- type variable4

%ACE-3-728014: Internal cross-processor communications error (sticky) type variable1

%ACE-3-728015: Internal channel communications error (sticky) type variable1

%ACE-3-728017: Internal communications error (ha) -- type variable1

%ACE-3-728027: Received unhandled message of type variable1 from CP SrcSAP variable2.

%ACE-3-728031: Memory mapping for debug logging failed.

Warning Messages, Severity Level 4

The following messages appear at severity level 4, warning:

%ACE-4-106023: Deny protocol number | name src incoming-interface:src-ip dst outgoing-interface:dst-ip by access-group "acl-name"

%ACE-4-251002: The configured health probe script script-name for server A.B.C.D on port P is empty

%ACE-4-251005: Could not unload script script-name

%ACE-4-254001: ACL resource usage beyond maximum limit for context context_id. Free up some resources.

%ACE-4-254002: Minimum ACL resources could not be guaranteed for context context_id.

%ACE-4-313004: Denied ICMP type=icmp_type, from source_address on interface interface_name to dest_address:no matching session

%ACE-4-405001: Received ARP {request | response} collision from IP_address/mac_address on interface interface_name

%ACE-4-405201: ILS ctxid from vlan x:src_ip/src_prt to vlan y:dst_ip/dst_prt has wrong embedded address embedded addr in ILS payload

%ACE-4-406001: FTP port command low port: IP_address/port to IP_address on interface interface_name

%ACE-4-406002: FTP port command different address: IP_address(IP_address) to IP_address on interface interface_name

%ACE-4-410001: Dropped UDP DNS packet_type from source_interface:source_address/source_port to dest_interface:dest_address/dest_port; error_length_type length length bytes exceeds max_length_type limit of maximum_length bytes.

%ACE-4-411001: Line protocol on interface interface_name changed state to up

%ACE-4-411002: Line protocol on interface interface_name changed state to down

%ACE-4-411003: Interface interface_name changed state to administratively up

%ACE-4-411004: Interface interface_name changed state to administratively down

%ACE-4-412001: MAC MAC_address moved from interface_1 to interface_2

%ACE-4-442001: Health probe probe name detected real_server_name (interface interface_name) in serverfarm sfarm_name changed state to UP

%ACE-4-442002: Health probe probe name detected real_server_name (interface interface_name) in serverfarm sfarm_name changed state to DOWN

%ACE-4-442004: Health probe probe name detected real_server_name (interface interface_name) changed state to UP

%ACE-4-442005: Health probe probe name detected real_server_name (interface interface_name) changed state to DOWN

%ACE-4-442006: Real Server Real Server name changed state to inService/outOfService>

%ACE-4-442007: VIP in class: 'VIP' changed state from OUTOFSERVICE/INSERVICE to INSERVICE/OUTOFSERVICE

%ACE-4-444005: Evaluation license for feature feature_name will expire in num_days days num_hours hours

%ACE-4-444007: Installed feature_name license on Revision 6 or older hardware, will not take effect until next reboot.

%ACE-4-607005: SIP dropped packet from vlanSource_interface:source_real_address/source_real_port (source_NAT_address_on_destination_interface:source_NAT_port_on_destination_interface) to vlanDest_interface:destination_address_on_source_interface/ destination_port_on_source_interface (destintation_real_address_on_destination_interface:destination_real_port_on_destination_interface); Call-ID: Unknown Message Type: Unknown; invalid data buffer received

%ACE-4-728011: Context ID variable1 being variable2 should not have variable3 associated sticky groups -- type variable4

%ACE-4-728013: A cache alignment error variable1 was detected during initialization -- type variable2

%ACE-4-728016: HA data receive failure (type variable1)

%ACE-4-728019: Sticky resources were not variable1 for this context -- type variable2

%ACE-4-728024: Received an unknown variable1 type message (variable2) for Sticky from remote IXP variable3!

%ACE-LB_General-4-728032: Real Server variable1 in Serverfarm variable2 has reached configured threshold for HTTP retcode variable3

%ACE-4-728034: Real Server real_server_name in Serverfarm server_farm_name has reached configured threshold for Inband Health Monitoring

%ACE-4-729002: Regex resource usage beyond maximum limit for context context_id. Free up some resources.

%ACE-4-729003: Minimum regex resources could not be guaranteed for context context_id.

%ACE-4-750001: Sticky resource usage beyond maximum limit for context ctx id

%ACE-4-750002: Minimum sticky resources could not be guaranteed for context ctx id

%ACE-4-751001: Delay in message processing observed for <process_name> with pid <ppp>, message_id <mmm>, opcode <ooo>, src_sap <sss> ,dest_sap <ddd>

Notification Messages, Severity Level 5

The following messages appear at severity level 5, notifications:

%ACE-5-111008: User root executed the string command

%ACE-5-255001: Backup for context ctx_name is successful

%ACE-5-255002: Backup for all contexts is successful

%ACE-5-255005: Restore for context ctx_name is successful

%ACE-5-255006: Restore for all contexts successful

%ACE-5-303004: FTP cmd_string command unsupported - failed strict inspection, terminating connection from source_interface:source_address/source_port to dest_interface:dest_address/dest_interface

%ACE-5-304001: user source_address Accessed {URL} dest_address: url.

%ACE-5-415004:HTTP - matched mime_type in policy-map policy_map_name, content-type verification failed from source_address to dest_address/port_num Connection connection_ID

%ACE-5-415006: HTTP - matched class_map_name in policy_map_name, URI matched connection_action from source_address/port_num to dest_address/port_num Connection connection_ID

%ACE-5-415007: HTTP - matched class_map_name in policy-map policy_map_name, Body matched connection_action from IP_address/port_num to IP_address/port_num Connection connection_ID

%ACE-5-415008: HTTP - matched class_map_name in policy-map policy_map_name, Header matched connection_action from IP_address/port_num to IP_address/port_num Connection connection_ID

%ACE-5-415009: HTTP - matched class_map_name in policy-map policy_map_name, method matched - connection_action from IP_address/port_num to IP_address/port_num Connection connection_ID

%ACE-5-415010: HTTP - matched class_map_name in policy-map policy_map_name, transfer encoding matched connection_action from IP_address/port_num to IP_address/port_num Connection connection_ID

%ACE-5-415011: HTTP - policy-map policy_map_name:Protocol violation connection_action from IP_address/port_num to IP_address/port_num Connection connection_ID

%ACE-5-415021: HTTP - matched class_map_name in policy-map policy_map_name, URI length range matched connection_action from source_address/port_num to dest_address/port_num Connection connection_ID

%ACE-5-415022: HTTP - matched class_map_name in policy_map_name, Header length range matched connection_action from source_address/port_num to dest_address/port_num Connection connection_ID

%ACE-5-415023: HTTP - matched class_map_name in policy-map policy_map_name, body length range matched connection_action from source_interface:source_address/port_num to dest_interface:dest_address/port_num Connection connection_ID

%ACE-5-415024:HTTP - matched class_map_name in policy-map policy_map_name, Header content type matched connection_action from IP_address/port_num to IP_address/port_num Connection connection_ID

%ACE-5-415025: HTTP policy_map_name - Tunnel detected - connection_action from IP_address/port_num to IP_address/port_num connection connection_ID

%ACE-5-415026: HTTP policy_map_name: Instant Messenger detected connection_action from IP_address/port_num to IP_address/port_num connection connection_ID

%ACE-5-415027: HTTP policy_map_name: Peer-to-Peer detected connection_action from IP_address/port_num to IP_address/port_num connection connection_ID

%ACE-5-441001: Serverfarm name failed over to backupServerfarm (backup_name) in policy_map (lb_Policy_Map). Number of failovers = count1, number of times back in service = count2

%ACE-5-441002: Serverfarm name is back in service in policy_map (lb_Policy_Map). Number of failovers = count1, number of times back in service = count2

%ACE-5-441003: Serverfarm (name) failed in policy_map (policy_name) --> class_map (cmap_name) without backup. Number of failovers = count1, number of times back in service = count2

%ACE-4-442003: Real Server real_server_name in serverfarm sfarm_name changed state to new state

%ACE-5-444002: Installed license file license_file_name

%ACE-5-444003: Uninstalled license file license_file_name

%ACE-5-504001: Security context context-name was added to the system

%ACE-5-504002: Security context context-name was removed from the system

%ACE-5-727019: HA: Started alternate ping to IP address ip addr

%ACE-5-727020: HA: Stopped alternate ping to IP address ip addr.

%ACE-5-727021: HA: Peer is compatible.

%ACE-5-727022: HA: Started sending heartbeats to peer Peer id interval value and count cnt

%ACE-5-727023: HA: Stopped sending heartbeats to peer Peer id.

%ACE-HA_HB-2-727024: HA: HB state change for peer Peer_ID message failed due to CP queue full

%ACE-5-728004: Internal communications notice (general) type variable1

%ACE-5-728006: Internal communications error (messaging) msg subType variable1 -- type variable2

%ACE-5-728012: Context ID variable1 failed to receive return data -- type variable2

%ACE-5-728018: Proxy connection variable1 rebalanced to server variable2

%ACE-5-728028: Sticky mapping failed: variable1 variable2

Informational Messages, Severity Level 6

The following messages appear at severity level 6, informational:

%ACE-6-199008: DC controller: channel_number reason

%ACE-6-253001: Certificate certificate_information expired

%ACE-6-253002: Certificate certificate_information not yet valid

%ACE-6-253003: Certificate client_information is signed by an unknown CA

%ACE-6-253004: Certificate subject_of_certificate revoked, ssl-proxy: proxy_name, reason: reason

%ACE-6-253005: Signature for certificate_information is invalid

%ACE-6-253006: Error peer sent invalid or nonexistent certificate subject_of_peer_certificate, reason: reason

%ACE-6-253007: Certificate in file file_name is expired

%ACE-6-253008: CRL crl_name could not be retrieved, reason: reason

%ACE-6-253009: Certificate in file file_name is not yet valid

%ACE-6-302022: Built TCP connection id for interface:real-address/real-port (mapped-address/mapped-port) to interface:real-address/real-port (mapped-address/mapped-port)

%ACE-6-302023: Teardown TCP connection id for interface:real-address/real-port (mapped-address/mapped-port) to interface:real-address/real-port (mapped-address/mapped-port) duration hh:mm:ss bytes bytes [reason]

%ACE-6-302024: Built UDP connection id for interface:real-address/real-port (mapped-address/mapped-port) to interface:real-address/real-port (mapped-address/mapped-port)

%ACE-6-302025: Teardown UDP connection id for interface:real-address/real-port to interface:real-address/real-port duration hh:mm:ss bytes bytes

%ACE-6-302026: Built ICMP connection for faddr/NATed_ID gaddr/icmp_type laddr/icmpID

%ACE-6-302027: Teardown ICMP connection for faddr/NATed ID gaddr/icmp_type laddr/icmpID

%ACE-6-302028: Built TCP connection id for interface: real-address/real-port (mapped-address/mapped-port) to interface: real-address/real-port (mapped-address/mapped-port)

%ACE-6-302029: Teardown TCP connection id for interface: real-address/real-port to interface: real-address/real-port duration hh:mm:ss bytes bytes [reason]

%ACE-6-302030: Built UDP connection id for interface: real-address/real-port (mapped-address/mapped-port) to interface: real-address/real-port (mapped-address/mapped-port)

%ACE-6-302031: Teardown UDP connection id for interface: real-address/real-port to interface: real-address/real-port duration hh:mm:ss bytes bytes

%ACE-6-303003: FTP cmd_name command denied - failed strict inspection, terminating connection from source_interface:source_address/source_port to dest_interface:dest_address/dest_port

%ACE-6-305009: Built {dynamic|static} translation from interface_name [(acl-name)]:real_address to interface_name:mapped_address

%ACE-6-305010: Teardown {dynamic|static} translation from interface_name:real_address to interface_name:mapped_address duration time

%ACE-6-314001: Allocate media connection from ip_address1/port1 to ip_address2/port2

%ACE-6-607001: Pre-allocate SIP media secondary channel for source_interface:source_address/source_port to destination_interface:destination_address/destination_port from message_id message

%ACE-6-607002: SIP Received packet from vlanSource_interface:source_real_address/source_real_port (source_NAT_address_on_destination_interface:source_NAT_port_on_destination_interface) to vlanDest_interface:destination_address_on_source_interface/ destination_port_on_source_interface (destintation_real_address_on_destination_interface:destination_real_port_on_destination_interface); Call-ID: call_ID Message Type: type [description]

%ACE-6-607003: SIP Classification: Action_type and log SIP message_id from source_interface:source_address/source_port to destination_interface:destination_address/destination_port

%ACE-4-607005: SIP dropped packet from vlanSource_interface:source_real_address/source_real_port (source_NAT_address_on_destination_interface:source_NAT_port_on_destination_interface) to vlanDest_interface:destination_address_on_source_interface/ destination_port_on_source_interface (destintation_real_address_on_destination_interface:destination_real_port_on_destination_interface); Call-ID: Unknown Message Type: Unknown; invalid data buffer received

%ACE-6-608001: Pre-allocate Skinny connection_type secondary channel for source_interface:source_address/source_port to destination_interface:destination_address/destination_port from message_id message

%ACE-6-615003: VLAN VLAN-number not available for configuring an interface

%ACE-6-615004: VLAN VLAN-number available for configuring an interface

%ACE-6-728020: LB is configured to consume variable1 bytes of memory.

%ACE-6-728021: Found inconsistent sticky entry. Terminating variable1.

%ACE-6-728022: Invalid hash table index (variable1) used for variable2

%ACE-6-728023: variable1 variable2 sticky entries from ContextId variable3.

%ACE-6-728025: Dropped variable1 'variable2' messages (variable3 total) from IXP variable4 to IXP variable5!

%ACE-6-728026: Attempting to use invalid lookup key for variable1 processing.

%ACE-6-728030: Silently discarding HA data: variable1

Debugging Messages, Severity Level 7

%ACE-7-111009: User user executed cmd:string