Table Of Contents
Messages Listed by Severity Level
Alert Messages, User-Defined Severity
Alert Messages, Severity Level 1
Critical Messages, Severity Level 2
Error Messages, Severity Level 3
Warning Messages, Severity Level 4
Notification Messages, Severity Level 5
Informational Messages, Severity Level 6
Debugging Messages, Severity Level 7
Messages Listed by Severity Level
This appendix contains the following sections:
•
Alert Messages, User-Defined Severity
•Alert Messages, Severity Level 1
•Critical Messages, Severity Level 2
•Error Messages, Severity Level 3
•Warning Messages, Severity Level 4
•Notification Messages, Severity Level 5
•Informational Messages, Severity Level 6
•Debugging Messages, Severity Level 7
Note The FWSM does not send severity 0, emergency messages to syslog. These are comparable to a UNIX panic message and indicate an unstable system.
Alert Messages, User-Defined Severity
The following message appears at a user-defined severity level:
•Error Message %FWSM-6-106100: access-list acl_ID {permitted | denied | est-allowed} protocol interface_name/source_address(source_port) -> interface_name/dest_address(dest_port) hit-cnt number ({first hit | number-second interval})
By default, this message appears at severity level 6.
Alert Messages, Severity Level 1
The following messages appear at severity level 1, alerts:
•Error Message %FWSM-1-103003: (Primary) Other firewall network interface interface_number failed.
•Error Message %FWSM-1-103004: (Primary) Other firewall reports this firewall failed.
•Error Message %FWSM-1-103005: (Primary) Other firewall reporting failure.
•Error Message %FWSM-1-104001: (Primary) Switching to ACTIVE (cause: string).
•Error Message %FWSM-1-104002: (Primary) Switching to STNDBY (cause: string).
•Error Message %FWSM-1-104003: (Primary) Switching to FAILED.
•Error Message %FWSM-1-104004: (Primary) Switching to OK.
•Error Message %FWSM-1-105001: (Primary) Disabling failover.
•Error Message %FWSM-1-105002: (Primary) Enabling failover.
•Error Message %FWSM-1-105003: (Primary) Monitoring on interface interface_name waiting.
•Error Message %FWSM-1-105004: (Primary) Monitoring on interface interface_name normal.
•Error Message %FWSM-1-105005: (Primary) Lost Failover communications with mate on interface interface_name.
•Error Message %FWSM-1-105006: (Primary) Link status `Up' on interface interface_name.
•Error Message %FWSM-1-105007: (Primary) Link status `Down' on interface interface_name.
•Error Message %FWSM-1-105008: (Primary) Testing interface interface_name..
•Error Message %FWSM-1-105038: (Primary) Interface count mismatch
•Error Message %FWSM-1-105039: (Primary) Unable to verify the Interface count with mate. Failover may be disabled in mate.
•Error Message %FWSM-1-105040: (Primary) Mate failover version is not compatible.
•Error Message %FWSM-1-105042: (Primary) Failover interface OK.
•Error Message %FWSM-1-105043: (Primary) Failover interface failed.
•Error Message %FWSM-1-105044: (Primary) Mate operational mode mode is not compatible with my mode mode.
•Error Message %FWSM-1-105045: (Primary) Mate license (number contexts) is not compatible with my license (number contexts).
•Error Message %FWSM-1-106021: Deny protocol reverse path check from source_address to dest_address on interface interface_name.
•Error Message %FWSM-1-106022: Deny protocol connection spoof from source_address to dest_address on interface interface_name.
•Error Message %FWSM-1-106101: The number of ACL log deny-flows has reached limit (number).
•Error Message %FWSM-1-107001: RIP auth failed from IP_address: version=number, type=string, mode=string, sequence=number on interface interface_name.
•Error Message %FWSM-1-107002: RIP pkt failed from IP_address: version=number on interface interface_name
•Error Message %FWSM-1-709003: (Primary) Beginning configuration replication: Receiving from mate.
•Error Message %FWSM-1-709004: (Primary) End Configuration Replication (ACT).
•Error Message %FWSM-1-709005: (Primary) Beginning configuration replication: Receiving from mate.
•Error Message %FWSM-1-709006: (Primary) End Configuration Replication (STB).
Critical Messages, Severity Level 2
The following messages appear at severity level 2, critical:
•Error Message %FWSM-2-106001: Inbound TCP connection denied from IP_address/port to IP_address/port flags tcp_flags on interface interface_name
•Error Message %FWSM-2-106002: protocol Connection denied by outbound list acl_ID src inside_address dest outside_address
•Error Message %FWSM-2-106006: Deny inbound UDP from outside_address/outside_port to inside_address/inside_port on interface interface_name.
•Error Message %FWSM-2-106007: Deny inbound UDP from outside_address/outside_port to inside_address/inside_port due to DNS {Response|Query}.
•Error Message %FWSM-2-106013: Dropping echo request from IP_address to PAT address IP_address
•Error Message %FWSM-2-106016: Deny IP spoof from (IP_address) to IP_address on interface interface_name.
•Error Message %FWSM-2-106017: Deny IP due to Land Attack from IP_address to IP_address
•Error Message %FWSM-2-106018: ICMP packet type ICMP_type denied by outbound list acl_ID src inside_address dest outside_address
•Error Message %FWSM-2-106020: Deny IP teardrop fragment (size = number, offset = number) from IP_address to IP_address
•Error Message %FWSM-2-106024: Access rules memory exhausted
•Error Message %FWSM-2-108002: SMTP replaced string: out source_address in inside_address data: string
•Error Message %FWSM-2-109011: Authen Session Start: user 'user', sid number
•Error Message %FWSM-2-112001: (string:dec) FWSM Clear complete.
•Error Message %FWSM-2-201003: Embryonic limit exceeded nconns/elimit for outside_address/outside_port (global_address) inside_address/inside_port on interface interface_name
•Error Message %FWSM-2-214001: Terminating manager session from IP_address on interface interface_name. Reason: incoming encrypted data (number bytes) longer than number bytes
•Error Message %FWSM-2-215001:Bad route_compress() call, sdb= number
•Error Message %FWSM-2-304007: URL Server IP_address not responding, ENTERING ALLOW mode.
•Error Message %FWSM-2-304008: LEAVING ALLOW mode, URL Server is up.
•Error Message %FWSM-2-709007: Configuration replication failed for command command
Error Messages, Severity Level 3
The following messages appear at severity level 3, errors:
•Error Message %FWSM-3-105010: (Primary) Failover message block alloc failed
•Error Message %FWSM-3-106010: Deny inbound protocol src interface_name:dest_address/dest_port dst interface_name:source_address/source_port
•Error Message %FWSM-3-106011: Deny inbound (No xlate) string
•Error Message %FWSM-3-106014: Deny inbound icmp src interface_name: IP_address dst interface_name: IP_address (type dec, code dec)
•Error Message %FWSM-3-109010: Auth from inside_address/inside_port to outside_address/outside_port failed (too many pending auths) on interface interface_name.
•Error Message %FWSM-3-109013: User must authenticate before using this service
•Error Message %FWSM-3-109016: Can't find authorization ACL acl_ID on 'FWSM' for user 'user'
•Error Message %FWSM-3-109018: Downloaded ACL acl_ID is empty
•Error Message %FWSM-3-109019: Downloaded ACL acl_ID has parsing error; ACE string
•Error Message %FWSM-3-109020: Downloaded ACL has config error; ACE
•Error Message %FWSM-3-109023: User from src_IP_Adress/src_port to dest_IP_Address/dest_port on interface outside must authenticate before using this service.
•Error Message %FWSM-3-201002: Too many TCP connections on {static|xlate} global_address! econns nconns
•Error Message %FWSM-3-201004: Too many UDP connections on {static|xlate} global_address! udp conn limit
•Error Message %FWSM-3-201005: FTP data connection failed for IP_addr
•Error Message %FWSM-3-201006: RCMD backconnection failed for IP_address/port
•Error Message %FWSM-3-202001: Out of address translation slots!
•Error Message %FWSM-3-202005: Non-embryonic in embryonic list outside_address/outside_port inside_address/inside_port
•Error Message %FWSM-3-208005: (function:line_num) FWSM clear command return code
•Error Message %FWSM-3-210002: LU allocate block (bytes) failed.
•Error Message %FWSM-3-210005: LU allocate connection failed
•Error Message %FWSM-3-210006: LU look NAT for IP_address failed
•Error Message %FWSM-3-210007: LU allocate xlate failed
•Error Message %FWSM-3-210008: LU no xlate for inside_address/inside_port outside_address/outside_port
•Error Message %FWSM-3-211001: Memory allocation Error
•Error Message %FWSM-3-211003: CPU utilization for number seconds = percent
•Error Message %FWSM-3-212001: Unable to open SNMP channel (UDP port port) on interface interface_number, error code = code
•Error Message %FWSM-3-212002: Unable to open SNMP trap channel (UDP port port) on interface interface_number, error code = code
•Error Message %FWSM-3-212003: Unable to receive an SNMP request on interface interface_number, error code = code, will try again.
•Error Message %FWSM-3-212004: Unable to send an SNMP response to IP Address IP_address Port port interface interface_number, error code = code
•Error Message %FWSM-3-212005: incoming SNMP request (number bytes) on interface interface_name exceeds data buffer size, discarding this SNMP request.
•Error Message %FWSM-3-213001: PPTP control daemon socket io string, errno = number.
•Error Message %FWSM-3-213002: PPTP tunnel hashtable insert failed, peer = IP_address.
•Error Message %FWSM-3-213003: PPP virtual interface interface_number isn't opened.
•Error Message %FWSM-3-213004: PPP virtual interface interface_number client ip allocation failed.
•Error Message %FWSM-3-302302: ACL = deny; no sa created
•Error Message %FWSM-3-304003: URL Server IP_address timed out URL url
•Error Message %FWSM-3-304006: URL Server IP_address not responding
•Error Message %FWSM-3-305005: No translation group found for protocol src interface_name:dest_address/dest_port dst interface_name:source_address/source_port
•Error Message %FWSM-3-305008: Free unallocated global IP address.
•Error Message %FWSM-3-309001: Denied manager connection from IP_addr.
•Error Message %FWSM-3-313001: Denied ICMP type=number, code=code from IP_address on interface interface_name
•Error Message %FWSM-3-315001: Denied SSH session from IP_addr on interface int_name
•Error Message %FWSM-3-315004: Fail to establish SSH session because FWSM RSA host key retrieval failed.
•Error Message %FWSM-3-316001: Cannot create more ISAKMP peers, exceeding the limit of number peers.
•Error Message %FWSM-3-317001: No memory available for limit_slow
•Error Message %FWSM-3-317002: Bad path index of number for IP_address, number max
•Error Message %FWSM-3-317003: IP routing table creation failure - reason
•Error Message %FWSM-3-317004: IP routing table limit warning
•Error Message %FWSM-3-317005: IP routing table limit exceeded - reason, IP_address netmask
•Error Message %FWSM-3-318001: Internal error: reason
•Error Message %FWSM-3-318002: Flagged as being an ABR without a backbone area
•Error Message %FWSM-3-318003: Reached unknown state in neighbor state machine
•Error Message %FWSM-3-318004: area string lsid IP_address mask netmask adv IP_address type number
•Error Message %FWSM-3-318005: lsid IP_address adv IP_address type number gateway gateway_address metric number network IP_address mask netmask protocol hex attr hex net-metric number
•Error Message %FWSM-3-318006: if interface_name if_state number
•Error Message %FWSM-3-318007: OSPF is enabled on interface_name during idb initialization
•Error Message %FWSM-3-318008: OSPF process number is changing router-id. Reconfigure virtual link neighbors with our new router-id
•Error Message %FWSM-3-319001: Acknowledge for arp update for IP address dest_addr not received (number).
•Error Message %FWSM-3-319002: Acknowledge for route update for IP address dest_addr not received (number).
•Error Message %FWSM-3-319003: Arp update for IP address address to NPn failed.
•Error Message %FWSM-3-319004: Route update for IP address dest_addr failed (number).
•Error Message %FWSM-3-322001: Deny MAC address mac-address, possible spoof attempt on interface interface
•Error Message %FWSM-3-322002: ARP inspection check failed for arp {request|response} received from host mac-address on interface interface. This host is advertising MAC Address mac-address-1 for IP Address ip-address, which is {statically|dynamically} bound to MAC Address mac-address-2.
•Error Message %FWSM-3-322003:ARP inspection check failed for arp {request|response} received from host mac-address on interface interface. This host is advertising MAC Address mac-address-1 for IP Address ip-address, which is not bound to any MAC Address.
•Error Message %FWSM-3-404102: ISAKMP: Exceeded embryonic limit
•Error Message %FWSM-3-605001: HTTP daemon interface int_name: Connection denied from IP_addr
•Error Message %FWSM-3-702302: replay rollover detected...
•Error Message %FWSM-3-710003: {TCP|UDP} access denied by ACL from source_address/source_port to interface_name:dest_address/service
Warning Messages, Severity Level 4
The following messages appear at severity level 4, warning:
•Error Message %FWSM-4-106023: Deny protocol src [interface_name:source_address/source_port] dst interface_name:dest_address/dest_port [type {string}, code {code}] by access_group acl_ID
•Error Message %FWSM-4-106027:Failed to determine the security context for the packet:vlansource Vlan#:ethertype src sourceMAC dst destMAC
•Error Message %FWSM-4-109017: User at IP_address exceeded auth proxy connection limit (max)
•Error Message %FWSM-4-109022: exceeded HTTPS proxy process limit
•Error Message %FWSM-4-209003: Fragment database limit of number exceeded: src = IP_address,dest = IP_address, proto = protocol, id = number
•Error Message %FWSM-4-209004: Invalid IP fragment, size = bytes exceeds maximum size = bytes: src = IP_address, dest = IP_address, proto = protocol, id = number
•Error Message FWSM-4-209005: Discard IP fragment set with more than number elements: src = Too many elements are in a fragment set.
•Error Message %FWSM-4-307004: Telnet session limit exceeded. Connection request from IP_addr on interface int_name.
•Error Message %FWSM-4-308002: static global_address inside_address netmask netmask overlapped with global_address inside_address
•Error Message %FWSM-4-309004: Manager session limit exceeded. Connection request from IP_addr on interface int_name
•Error Message %FWSM-4-313004:Denied ICMP type=icmp_type, from src_IP_address oninterface intf_name to dest_IP_address:no matching session
•Error Message %FWSM-4-315005: SSH session limit exceeded. Connection request from IP_addr on interface int_name
•Error Message %FWSM-4-4000nn: IDS:number string from IP_address to IP_address on interface interface_name
•Error Message %FWSM-4-401001: Shuns cleared
•Error Message %FWSM-4-401002: Shun added: IP_address IP_address port port
•Error Message %FWSM-4-401003: Shun deleted: IP_address
•Error Message %FWSM-4-401004: Shunned packet: IP_address ==> IP_address on interface interface_name
•Error Message %FWSM-4-401005: Shun add failed: unable to allocate resources for IP_address IP_address port port
•Error Message %FWSM-4-402101: decaps: rec'd IPSEC packet has invalid spi for destaddr=dest_address, prot=protocol, spi=number
•Error Message %FWSM-4-402102: decapsulate: packet missing {AH|ESP}, destadr=dest_address, actual prot=protocol
•Error Message %FWSM-4-402103: identity doesn't match negotiated identity (ip) dest_address= dest_address, src_addr= source_address, prot= protocol, (ident) local=inside_address, remote=remote_address, local_proxy=IP_address/IP_address/port/port, remote_proxy=IP_address/IP_address/port/port
•Error Message %FWSM-4-402106: Rec'd packet not an IPSEC packet (ip) dest_address= dest_address, src_addr= source_address, prot= protocol
•Error Message %FWSM-4-403101: PPTP session state not established, but received an XGRE packet, tunnel_id=number, session_id=number
•Error Message %FWSM-4-403102: PPP virtual interface interface_name rcvd pkt with invalid protocol: protocol, reason: reason.
•Error Message %FWSM-4-403103: PPP virtual interface max connections reached.
•Error Message %FWSM-4-403104: PPP virtual interface interface_name requires mschap for MPPE.
•Error Message %FWSM-4-403106: PPP virtual interface interface_name requires RADIUS for MPPE.
•Error Message %FWSM-4-403107: PPP virtual interface interface_name missing aaa server group info
•Error Message %FWSM-4-403108: PPP virtual interface interface_name missing client ip address option
•Error Message %FWSM-4-403109: Rec'd packet not an PPTP packet. (ip) dest_address= dest_address, src_addr= source_address, data: string.
•Error Message %FWSM-4-403110: PPP virtual interface interface_name, user: user missing MPPE key from aaa server.
•Error Message %FWSM-4-404101: ISAKMP: Failed to allocate address for client from pool string
•Error Message %FWSM-4-405001: Received ARP {request | response} collision from IP_address/mac_address on interface interface_name
•Error Message %FWSM-4-405101: Unable to Pre-allocate H225 Call Signalling Connection for foreign_address outside_address[/outside_port] to local_address inside_address[/inside_port]
•Error Message %FWSM-4-405102: Unable to Pre-allocate H245 Connection for foreign_address outside_address[/outside_port] to local_address inside_address[/inside_port]
•Error Message %FWSM-4-405104: H225 message received from outside_address/outside_port to inside_address/inside_port before SETUP
•Error Message %FWSM-4-406001: FTP port command low port: IP_address/port to IP_address on interface interface_name
•Error Message %FWSM-4-406002: FTP port command different address: IP_address(IP_address) to IP_address on interface interface_name
•Error Message %FWSM-4-407002: Embryonic limit neconns/elimit for through connections exceeded.outside_address/outside_port to global_address (inside_address)/inside_port on interface interface_name
•Error Message %FWSM-4-407003: Established limit for RPC services exceeded number
•Error Message %FWSM-4-408001: IP route counter negative - reason, IP_address Attempt: number
•Error Message %FWSM-4-408002: ospf process id route type update address1 mask1 [distance1/metric1] via source IP:interface1 address2 mask2 [distance2/metric2] interface2
•Error Message %FWSM-4-409001: Database scanner: external LSA IP_address netmask is lost, reinstalls
•Error Message %FWSM-4-409002: db_free: external LSA IP_address netmask
•Error Message %FWSM-4-409003: Received invalid packet: reason from IP_address, interface_name
•Error Message %FWSM-4-409004: Received reason from unknown neighbor IP_address
•Error Message %FWSM-4-409005: Invalid length number in OSPF packet from IP_address (ID IP_address), interface_name
•Error Message %FWSM-4-409006: Invalid lsa: reason Type number, LSID IP_address from IP_address, IP_address, interface_name
•Error Message %FWSM-4-409007: Found LSA with the same host bit set but using different mask LSA ID IP_address netmask New: Destination IP_address netmask
•Error Message %FWSM-4-409008: Found generating default LSA with non-zero mask LSA type : number Mask : IP_address metric : number area : string
•Error Message %FWSM-4-409009: OSPF process number cannot start. There must be at least one up IP interface, for OSPF to use as router ID
•Error Message %FWSM-4-409010: Virtual link information found in non-backbone area: string
•Error Message %FWSM-4-409011: OSPF detected duplicate router-id IP_address from IP_address on interface interface_name
•Error Message %FWSM-4-409012: Detected router with duplicate router ID IP_address in area string
•Error Message %FWSM-4-409013: Detected router with duplicate router ID IP_address in Type-4 LSA advertised by IP_address
•Error Message %FWSM-4-410001: UDP DNS packet dropped due to domainname length check of 255 bytes: actual length:<n> bytes
•Error Message %FWSM-4-411001: Line protocol on interface interface_name changed state to up
•Error Message %FWSM-4-411002: Line protocol on interface interface_name changed state to down
•Error Message %FWSM-4-411003: Configuration status on interface interface_name changed state to administratively down
•Error Message %FWSM-4-411004: Configuration status on interface interface_name changed state to up
•Error Message %FWSM-4-412001:MAC <mac-address> moved from <interface-1> to <interface-2>
•Error Message %FWSM-4-412002:Detected bridge table full while inserting MAC <mac-address> on interface <interface>. Number of entries = <num>
•Error Message %FWSM-4-500004: Invalid transport field for protocol=protocol, from source_address/source_port to dest_address/dest_port
•Error Message %FWSM-4-605002: HTTP daemon connection limit exceeded
•Error Message %FWSM-4-612002: Auto Update failed:filename, version:number, reason:reason
•Error Message %FWSM-4-612003:Auto Update failed to contact:url, reason:reason
Notification Messages, Severity Level 5
The following messages appear at severity level 5, notifications:
•Error Message %FWSM-5-109012: Authen Session End: user 'user', sid number, elapsed number seconds
•Error Message %FWSM-5-111001: Begin configuration: IP_address writing to device
•Error Message %FWSM-5-111003: IP_address Erase configuration
•Error Message %FWSM-5-111004: IP_address end configuration: {FAILED|OK}
•Error Message %FWSM-5-111005: IP_address end configuration: OK
•Error Message %FWSM-5-111006: Console Login from user at IP_addr
•Error Message %FWSM-5-111007: Begin configuration: IP_address reading from device.
•Error Message %FWSM-5-111008: User user executed the command string
•Error Message %FWSM-5-199001: FWSM reload command executed from telnet (remote IP_address).
•Error Message %FWSM-5-304001: user source_address Accessed {JAVA URL|URL} dest_address: url.
•Error Message %FWSM-5-304002: Access denied URL chars SRC IP_addr DEST IP_addr: chars
•Error Message %FWSM-5-321001: Resource var1 limit of var2 reached.
•Error Message %FWSM-5-321002: Resource var1 rate limit of var2 reached.
•Error Message %FWSM-5-500003: Bad TCP hdr length (hdrlen=bytes, pktlen=bytes) from source_address/source_port to dest_address/dest_port, flags: tcp_flags, on interface interface_name
•
•Error Message %FWSM-5-501101: User transitioning priv level
•Error Message %FWSM-5-502101: New user added to local dbase: Uname: user Priv: privilege_level Encpass: string
•Error Message %FWSM-5-502102: User deleted from local dbase: Uname: user Priv: privilege_level Encpass: string
•Error Message %FWSM-5-502103: User priv level changed: Uname: user From: privilege_level To: privilege_level
•Error Message %FWSM-5-503001: Process number, Nbr IP_address on interface_name from string to string, reason
•Error Message %FWSM-5-504001: Security context context-name was added to the system
•Error Message %FWSM-5-504002: Security context context-name was removed from the system
•Error Message %FWSM-5-611103: User logged out: Uname: user
•Error Message %FWSM-5-612001: Auto Update succeeded:filename, version:number
Informational Messages, Severity Level 6
The following messages appear at severity level 6, informational:
•Error Message %FWSM-6-106012: Deny IP from IP_address to IP_address, IP options hex.
•Error Message %FWSM-6-106015: Deny TCP (no connection) from IP_address/port to IP_address/port flags tcp_flags on interface interface_name.
•Error Message %FWSM-6-106025: Failed to determine the security context for the packet:sourceVlan:sourceIP destIP sourcePort destPort protocol
•Error Message %FWSM-6-106026: Failed to determine the security context for the packet:sourceVlan:sourceIP destIP sourcePort destPort protocol
•Error Message %FWSM-6-106100: access-list acl_ID {permitted | denied | est-allowed} protocol interface_name/source_address(source_port) -> interface_name/dest_address(dest_port) hit-cnt number ({first hit | number-second interval})
•Error Message %FWSM-6-109001: Auth start for user user from inside_address/inside_port to outside_address/outside_port
•Error Message %FWSM-6-109002: Auth from inside_address/inside_port to outside_address/outside_port failed (server IP_address failed) on interface interface_name.
•Error Message %FWSM-6-109003: Auth from inside_address to outside_address/outside_port failed (all servers failed) on interface interface_name.
•Error Message %FWSM-6-109005: Authentication succeeded for user user from inside_address/inside_port to outside_address/outside_port on interface interface_name.
•Error Message %FWSM-6-109006: Authentication failed for user user from inside_address/inside_port to outside_address/outside_port on interface interface_name.
•Error Message %FWSM-6-109007: Authorization permitted for user user from inside_address/inside_port to outside_address/outside_port on interface interface_name.
•Error Message %FWSM-6-109008: Authorization denied for user user from outside_address/outside_port to inside_address/inside_port on interface interface_name.
•Error Message %FWSM-6-109024: Authorization denied from source_IP_Address/src_port to dest_IP_Address/dest_port (not authenticated) on interface interface_name using protocol
•Error Message %FWSM-6-109025: Authorization denied (acl=acl_ID) for user user from source_address/source_port to dest_address/dest_port on interface interface_name using protocol
•Error Message %FWSM-6-110001: No route to dest_address from source_address
•Error Message %FWSM-6-199002: FWSM startup completed. Beginning operation.
•Error Message %FWSM-6-199003: Reducing link MTU dec.
•Error Message %FWSM-6-199005: FWSM Startup begin
•Error Message %FWSM-6-210022: LU missed number updates
•Error Message %FWSM-6-302003: Built H245 connection for foreign_address outside_address/outside_port local_address inside_address/inside_port
•Error Message %FWSM-6-302004: Pre-allocate H323 UDP backconnection for foreign_address outside_address/outside_port to local_address inside_address/inside_port
•Error Message %FWSM-6-302010: connections in use, connections most used
•Error Message %FWSM-6-302012: Pre-allocate H225 Call Signalling Connection for faddr ip address/port to laddr ip address
•Error Message %FWSM-6-302013: Built {inbound|outbound} TCP connection id for faddr IP address/port gaddr IP address/port laddr IP address/port [(user)]
•Error Message %FWSM-6-302014: Teardown TCP connection id faddr IP address/port gaddr IP address/port laddr IP address/port duration hh:mm:ss bytes bytes [reason] [(user)]
•Error Message %FWSM-6-302015: Built UDP connection for faddr IP address/port gaddr IP address/port laddr IP address/port [(user)]
•Error Message %FWSM-6-302016: Teardown UDP connection id faddr IP address/port gaddr IP address/port laddr IP address/port duration hh:mm:ss bytes bytes [reason] [(user)]
•Error Message %FWSM-6-302020: Built {in | out}bound ICMP connection for faddr {faddr | icmp_seq_num} gaddr {gaddr | cmp_type} laddr laddr
•Error Message %FWSM-6-302021: Teardown ICMP connection for faddr {faddr | icmp_seq_num} gaddr {gaddr | cmp_type} laddr laddr
•Error Message %FWSM-6-303002: source_address {Stored|Retrieved} dest_address: mapped_address
•Error Message %FWSM-6-304004: URL Server IP_address request failed URL url
•Error Message %FWSM-6-305007: addrpool_free(): Orphan IP IP_address on interface interface_number
•Error Message %FWSM-6-305009: Built {dynamic|static} translation from interface_name:real_address to interface_name:mapped_address
•Error Message %FWSM-6-305010: Teardown {dynamic|static} translation from interface_name:real_address to interface_name:mapped_address duration time
•Error Message %FWSM-6-305011: Built {dynamic|static} {TCP|UDP|ICMP} translation from interface_name:real_address/real_port to interface_name:mapped_address/mapped_port
•Error Message %FWSM-6-305012: Teardown {dynamic|static} {TCP|UDP|ICMP} translation from interface_name:real_address/real_port to interface_name:mapped_address/mapped_port duration time
•Error Message %FWSM-6-307001: Denied Telnet login session from IP_addr on interface int_name.
•Error Message %FWSM-6-307002: Permitted Telnet login session from IP_addr
•Error Message %FWSM-6-307003: telnet login session failed from IP_addr (num attempts) on interface int_name.
•Error Message %FWSM-6-308001: FWSM console enable password incorrect for number tries (from IP_address)
•Error Message %FWSM-6-309002: Permitted manager connection from IP_address.
•Error Message %FWSM-6-311001: LU loading standby start
•Error Message %FWSM-6-311002: LU loading standby end
•Error Message %FWSM-6-311003: LU recv thread up
•Error Message %FWSM-6-311004: LU xmit thread up
•Error Message %FWSM-6-312001: RIP hdr failed from IP_address: cmd=string, version=number domain=string on interface interface_name
•Error Message %FWSM-6-314001: Pre-allocate RTSP UDP backconnection for foreign_address outside_address/outside_port to local_address inside_address/inside_port
•Error Message %FWSM-6-315002: Permitted SSH session from IP_addr on interface int_name for user "user_id"
•Error Message %FWSM-6-315003: SSH login session failed from IP_addr on (num attempts) on interface int_name by user "user_id"
•Error Message %FWSM-6-315011: SSH session from IP_address on interface interface_name for user user disconnected by SSH server, reason: reason
•Error Message %FWSM-6-321003: Resource var1 log level of var2 reached.
•Error Message %FWSM-6-321004: Resource var1 rate log level of var2 reached
•Error Message %FWSM-6-602101: PMTU-D packet number bytes greater than effective mtu number dest_addr=dest_address, src_addr=source_address, prot=protocol
•Error Message %FWSM-6-602102: Adjusting IPSec tunnel mtu...
•Error Message %FWSM-6-602301: sa created...
•Error Message %FWSM-6-602302: deleting sa
•Error Message %FWSM-6-603101: PPTP received out of seq or duplicate pkt, tnl_id=number, sess_id=number, seq=number.
•Error Message %FWSM-6-603102: PPP virtual interface interface_name - user: user aaa authentication started.
•Error Message %FWSM-6-603103: PPP virtual interface interface_name - user: user aaa authentication status
•Error Message %FWSM-6-603104: PPTP Tunnel created, tunnel_id is number, remote_peer_ip is remote_address, ppp_virtual_interface_id is number, client_dynamic_ip is IP_address, username is user, MPPE_key_strength is string
•Error Message %FWSM-6-603105: PPTP Tunnel deleted, tunnel_id = number, remote_peer_ip= remote_address
•Error Message %FWSM-6-603106: L2TP Tunnel created, tunnel_id is number, remote_peer_ip is remote_address, ppp_virtual_interface_id is number, client_dynamic_ip is IP_address, username is user
•Error Message %FWSM-6-603107: L2TP Tunnel deleted, tunnel_id = number, remote_peer_ip = remote_address
•Error Message %FWSM-6-604101: DHCP client interface interface_name: Allocated ip = IP_address, mask = netmask, gw = gateway_address
•Error Message %FWSM-6-604102: DHCP client interface interface_name: address released
•Error Message %FWSM-6-604103: DHCP daemon interface interface_name: address granted MAC_address (IP_address)
•Error Message %FWSM-6-604104: DHCP daemon interface interface_name: address released
•Error Message %FWSM-6-605003: HTTP daemon: Login failed from IP_addr for user "user_id"
•Error Message %FWSM-6-606001: PDM session number number from IP_address started
•Error Message %FWSM-6-606002: PDM session number number from IP_address ended
•Error Message %FWSM-6-607001: Pre-allocate SIP connection_type secondary channel for interface_name:IP_address/port to interface_name:IP_address from string message
•Error Message %FWSM-6-608001: Pre-allocate Skinny connection_type secondary channel for interface_name:IP_address to interface_name:IP_address/port from string message
•Error Message %FWSM-6-610101: Authorization failed: Cmd: command Cmdtype: command_modifier
•Error Message %FWSM-6-611101: User authentication succeeded: Uname: user
•Error Message %FWSM-6-611102: User authentication failed: Uname: user
•Error Message %FWSM-6-613001: Checksum Failure in database in area string Link State Id IP_address Old Checksum number New Checksum number
•Error Message %FWSM-6-613002: interface interface_name has zero bandwidth
•Error Message %FWSM-6-613003: IP_address netmask changed from area string to area string
•Error Message %FWSM-6-615001: vlan number not available for firewall interface
•Error Message %FWSM-6-615002: vlan number available for firewall interface
•Error Message %FWSM-6-616001:Pre-allocate MGCP data-channel connection for inside_ifc:inside_ip address to outside_ifc:outside_ipaddress/port from message_type message
Debugging Messages, Severity Level 7
The following messages appear at severity level 7, debugging:
•Error Message %FWSM-3-106011: Deny inbound (No xlate) string
•Error Message %FWSM-7-111009:User user executed cmd:string
•Error Message %FWSM-7-199007:IP detected an attached application using port port while removing context
•Error Message %FWSM-7-199008:Protocol detected an attached application using local port local_port and destination port dest_port
•Error Message %FWSM-7-199009: ICMP detected an attached application while removing a context
•Error Message %FWSM-7-304005: URL Server IP_address request pending URL url
•Error Message %FWSM-7-304009: Ran out of buffer blocks specified by url-block command
•Error Message %FWSM-7-701001: alloc_user() out of Tcp_user objects
•Error Message %FWSM-7-701002: alloc_user() out of Tcp_proxy objects
•Error Message %FWSM-7-702301: lifetime expiring...
•Error Message %FWSM-7-702303: sa_request...
•Error Message %FWSM-7-703001: H.225 message received from interface_name:ip_address/port to interface_name:ip_address/port is using an unsupported version number
•Error Message %FWSM-7-703002: Received H.225 Release Complete with newConnectionNeeded for interface_name:ip_address to interface_name:ip_address/port
•Error Message %FWSM-7-709001: FO replication failed: cmd=command returned=code
•Error Message %FWSM-7-709002: FO unreplicable: cmd=command
•Error Message %FWSM-7-710002: {TCP|UDP} access permitted from source_address/source_port to interface_name:dest_address/service
•Error Message %FWSM-7-710005: {TCP|UDP} request discarded from source_address/source_port to interface_name:dest_address/service
