Table Of Contents

Fault Descriptions

Access Point Faults

WLSE Fault

AAA Server Faults

Switch Faults

Router Fault

Fault Descriptions

---

This section provides the following information on the faults displayed in Faults > Display Faults. The following information is provided:

•Fault—The fault as it appears in the Display Faults table.

•Explanation—An explanation as to why the fault occurred.

•Related Setting—The threshold or policy you assigned to devices under Faults > Manage Fault Settings, when applicable.

•Recommended Action—An action that can be taken to clear the displayed fault.

Fault tables are provided for each device type:

•Access Point Faults

•WLSE Fault

•AAA Server Faults

•Switch Faults

•Router Fault

Access Point Faults

Table 2-1 Access Point Faults 

Fault Description	Type	Explanation	Related Setting	Recommended Action
AP is in a Degraded state number associated clients	Non-IOS and IOS	The fault threshold set for the degraded state has been exceeded. When this fault is cleared, the following message displays: AP is in OK state.	Manage Fault Settings > Thresholds > Access Point > Associated Clients	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
AP is in an Overloaded state number associated clients	Non-IOS and IOS	The fault threshold set for the overloaded state has been exceeded. When this fault is cleared, the following message displays: AP is in OK state.	Manage Fault Settings > Thresholds > Access Point > Associated Clients	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
AP is not registered with any WDS	IOS	The managed IOS access point is not registered with any WDS. For Radio Manager functionality to work, all IOS access points must register with a WDS. If an access point is not registered, it will be excluded from all the Radio Manager procedures, which will provide incorrect results.	Manage Fault Settings > Access Point > Thresholds > Registration Error	Verify that the WLCCP credentials for wireless domain services (WDS) are configured correctly. For more information, see the managing devices information in the online help or the User Guide for the CiscoWorks Wireless LAN Solution Engine, Release 2.5.
Broadcast Key Rotation is disabled	Non-IOS and IOS	The broadcast key rotation has been disabled. When this fault is cleared, the following message displays: Broadcast Key Rotation is enabled.	Manage Fault Settings > Security Policies > Key Rotation per VLAN	Log in to the access point and enable the broadcast key rotation interval.
Broadcast SSID is disabled	Non-IOS and IOS	Broadcast SSID has been disabled. When this fault is cleared, the following message displays: Broadcast SSID is enabled	Manage Fault Settings > Security Policies > Broadcast SSID Disabled	Log in to the access point and enable SSID for broadcast mode.
Client association rate is Degraded number per minute	Non-IOS and IOS	The fault threshold set for the degraded state has been exceeded. When this fault is cleared, the following message displays: Client association rate is OK.	Manage Fault Settings > Thresholds > Access Point > Association Rate	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
Client association rate is Overloaded number per minute	Non-IOS and IOS	The fault threshold set for the overloaded state has been exceeded. When this fault is cleared, the following message displays: Client association rate is OK.	Manage Fault Settings > Thresholds > Access Point > Association Rate	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
Client authentication error rate is Degraded number per minute	Non-IOS and IOS	The fault threshold set for the degraded state has been exceeded. When this fault is cleared, the following message displays: Client association error rate is OK.	Manage Fault Settings > Thresholds > Access Point > Authentication Error Rate	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
Client authentication error rate is Overloaded number per minute	Non-IOS and IOS	The fault threshold set for the overloaded state has been exceeded. When this fault is cleared, the following message displays: Client association error rate is OK.	Manage Fault Settings > Thresholds > Access Point > Authentication Error Rate	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
Device state is rogue access point	IOS	The WLSE detected a rogue access point. (This is an access point that is not being managed and is unknown to the WLSE.)	Manage Network-Wide Settings > Rogue AP Detection	Use Location Manager (select Radio Manager > Location Manager) to locate the rogue access point.
Device was not reachable via SNMP	Non-IOS and IOS	The SNMP Agent could be down. When this fault is cleared, the following message displays: Device was reachable via SNMP.	Manage Fault Settings > Thresholds > Access Point > SNMP Reachable	Make sure SNMP is enabled on the device and that the agent is not down. Take a MIB walk of the device to make sure sysup time is returning 0, which indicates Device is reachable.
		The SNMP community string in the access point has been changed, and then a discovery job is run.	Not applicable.	Change the SNMP community string on the WLSE to match the new community string on the access point, then run discovery again.
Duplicate IP is found	Non-IOS and IOS	WLSE discovery detects a second device with the same IP address in the network. When this fault is cleared, the following message displays: Duplicate IP is valid.	There is no setting associated with this fault.	Do one of the following: •Assign a new IP address to the device. •If you have substituted a device for the device with the same IP, and want to continue to use that IP, then delete the original device, and run discovery again.
		When changing the MAC address of the FastEthernet interface to the MAC address of a radio interface, the WLSE might detect the access point as a duplicate device. This is because during discovery, the uniqueness of the device is based on its FastEthernet MAC address.		Delete the device, and run discovery again.
EAP is disabled	Non-IOS and IOS	The EAP has been disabled. When this fault is cleared, the following message displays: EAP is enabled	Manage Fault Settings > Security Policies > EAP Enforced	Log in to the access point and enable the Network EAP and Open authentication.
EAP per SSID is disabled	Non-IOS and IOS	EAP per SSID has been disabled on the access point. When this fault is cleared, the following message displays: EAP per SSID is enabled	Manage Fault Settings > Security Policies > EAP Per SSID Enforced	Log in to the access point and enable the Network EAP and Open authentication per SSID.
Ethernet bandwidth utilization is Degraded (utilization %)	Non-IOS and IOS	The fault threshold set for the degraded state has been exceeded. When this fault is cleared, the following message displays: Ethernet bandwidth utilization is OK.	Manage Fault Settings > Thresholds > Access Point > Ethernet Port Utilization	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
Ethernet bandwidth utilization is Overloaded (utilization %)	Non-IOS and IOS	The fault threshold set for the overloaded state has been exceeded. When this fault is cleared, the following message displays: Ethernet bandwidth utilization is OK.	Manage Fault Settings > Thresholds > Access Point > Ethernet Port Utilization	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
Firmware version policy violation (version number)	Non-IOS and IOS	The wrong version number for policy checking has been entered. When this fault is cleared, the following message displays: Firmware version is valid.	Manage Fault Settings > Security Policies > Firmware Version	Make sure that the firmware version that is entered in the policy setting matches the firmware version on the access point.
		The access point is running an unauthorized firmware version. When this fault is cleared, the following message displays: Firmware version is valid.		Make sure that you have entered authorized versions in the policy setting. Update the firmware on the access point to an authorized version.
HotStandBy is active	Non-IOS and IOS	The access point that is configured for hot standby has become active. The following conditions could cause the hot standby access point to become active: the primary access point is down, the Ethernet port is down, or the Radio port is down. When this fault is cleared, the following message displays: HotStandBy is disabled.	Manage Fault Settings > Security Policies > HotStandBy Status	For non-IOS access points: 1. Check the primary access point, the Ethernet port, or the Radio port to see why the hot standby access point has been activated. 2. Correct the condition. For example, if the Radio Port on the formerly active access point was in a disabled state, then enable it using the access point GUI. 3. Launch the GUI for access point that is currently in Active Takeover mode. 4. Select the Hot Standby section and click Start Hot Standby mode to reconfigure the access point to Hot Standby mode.
				For IOS access points: 1. Check the primary access point, the Ethernet port, or the Radio port to see why the hot standby access point has been activated. 2. Correct the condition. For example, if the Radio Port on the formerly active access point was in a disabled state, then enable it using the access point GUI. 3. Launch the GUI for access point that is currently in Active Takeover mode. 4. Select Hot Standby, click Disabled , then click Apply. 5. Click Enabled, then enter the Radio MAC address of Monitored Radio Port, leave the Polling interval and Timeout for Each Polling fields blank,. 6. Click Apply to reconfigure the access point to Hot Standby mode.
HTTP access is enabled	Non-IOS	HTTP has been enabled on the access point. When this fault is cleared, the following message displays: HTTP access is disabled.	Manage Fault Settings > Security Policies > HTTP Disabled	Log in to the access point and disable HTTP access.
HTTP access without login is enabled	Non-IOS	The allowBrowseWithoutLogin setting on the access point is set. When this fault is cleared, the following message displays: HTTP access without login is disabled.	Manage Fault Settings > Security Policies > HTTP Authentication	Log in to the access point and disable the allowBrowseWithoutLogin setting.
Non 802.11 interference detected	IOS	The WLSE detected a non-802.11 interference.	Manage Network-Wide Settings > Interference Detection	Use AP Radio Scan (select Radio Manager > AP Radio Scan) to locate the rogue access point.
Packet Error is in Degraded state (error rate %)	Non-IOS and IOS	The fault threshold set for the degraded state has been exceeded. When this fault is cleared, the following message displays: Packet Error is in OK state.	Manage Fault Settings > Thresholds > Access Point > RF Port Packet Errors	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
Packet Error is in is in Overloaded state (error rate %)	Non-IOS and IOS	The fault threshold set for the overloaded state has been exceeded. When this fault is cleared, the following message displays: Packet Error is in OK state.	Manage Fault Settings > Thresholds > Access Point > RF Port Packet Errors	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
Port is administratively set to down	Non-IOS and IOS	The port has been set to Down by the administrator. When this fault is cleared, the following message displays: Port is up	This fault is not generated based on a threshold or policy violation.	There is no action necessary; the port has been deliberately shut down.
Port is down	Non-IOS and IOS	The port is operationally down. When this fault is cleared, the following message displays: Port is up	This fault is not generated based on a threshold or policy violation.	Check the device to determine why the port is down. If you have added or removed an interface from an access point, the WLSE might generate an erronous fault. S ee What are the results of adding or removing an interface from an access point?.
PSPF is disabled	Non-IOS	The PSPF port has been disabled. PSPF (Publicly Secure Packet Forwarding) is a feature that prevents client devices associated to a bridge or access point from inadvertently sharing files with other client devices on the wireless network. When the fault is cleared, the following message displays: The PSPF is enabled.	Manage Fault Settings > Security Policies > PSPF Enabled	Log in to the access point and enable the PSPF setting.
Retry Count rate is Degraded number per minute	Non-IOS and IOS	The fault threshold set for the degraded state has been exceeded. When the fault is cleared, the following message displays: Retry Count rate is OK	Manage Fault Settings > Thresholds > Access Point > Max Retry Counts	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
Retry Count rate is Overloaded number per minute	Non-IOS and IOS	The fault threshold set for the overloaded state has been exceeded. When the fault is cleared, the following message displays: Retry Count rate is OK	Manage Fault Settings > Thresholds > Access Point > Max Retry Counts	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
RF bandwidth utilization is Degraded (utilization %)	Non-IOS and IOS	The fault threshold set for the degraded state has been exceeded. When the fault is cleared, the following message displays: RF bandwidth utilization is OK	Manage Fault Settings > Thresholds > Access Point > RF Port Utilization	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
RF bandwidth utilization is Overloaded (utilization %)	Non-IOS and IOS	The fault threshold set for the overloaded state has been exceeded. When the fault is cleared, the following message displays: RF bandwidth utilization is OK	Manage Fault Settings > Thresholds > Access Point > RF Port Utilization	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
SNMP query received authorization error response	Non-IOS	The access point's user community strings do not have Admin, Ident, Firmware, SNMP privileges. The WLSE might not be able to access some SNMP information from the access point that requires these privileges. When the fault is cleared, the following message displays: Device was reachable via SNMP.	Manage Fault Settings > Thresholds > Access Point > SNMP Reachable	Make sure the SNMP community string set on the WLSE (Devices > Discover > Device Credentials > SNMP Communities) is the same as the string set on the access point (Setup > Security > User Information).
SSID policy violation SSID assigned to the access point	Non-IOS and IOS	The SSID entered in the WLSE is different from the SSID assigned to the access point. When the fault is cleared, the following message displays: SSID is valid.	Manage Fault Settings > Security Policies > SSID	If you configured different SSIDs among managed access points, you need to enter all of the SSIDs, or this fault will be generated for access points whose SSIDs are not listed.
		The access point is configured with an unauthorized SSID.		Make sure that you have entered authorized SSIDs in the SSID policy. Change the SSID on the access point to an authorized SSID.
	IOS	The SSID policy for an IOS access point is enabled, but the "guest mode" is disabled. This causes the access point to send an SSID made up of all zeros and equivalent to the length of the first configured SSID.	Manage Fault Settings > Security Policies > SSID	Enable the access point's guest mode.
Telnet access is enabled	Non-IOS	Telnet has been enabled on the access point. When this fault has been cleared, the following message displays: Telnet access is disabled	Manage Fault Settings > Security Policies > Telnet Disabled	Log in to the access point and disable the Telnet access setting.
User capabilities are not enforced	Non-IOS	The enableUserMgr setting is not set on the access point. When this fault has been cleared, the following message displays: User capabilities are enforced.	Manage Fault Settings > Security Policies > User Manager Enforced	Log in to the access point and enable the User Mgr setting.
Vlan WEP key length policy violation	Non-IOS and IOS	The WEP key length per VLAN setting has been violated. When this fault has been cleared, the following message displays: Vlan WEP key length is ok.	Manage Fault Settings > Security Policies > WEP Encryption per Vlan	Make sure the WEP key length selected in the policy setting matches the access point settings.
WDS appears down.	IOS	The WLSE failed to receive "keep active" messages from the WDS. This happens when the WDS is down or when the network is down.	Manage Fault Settings > Thresholds > WDS > WLSE-WDS Link Status	Check the network connectivity, the WDS status, and the WLSE and WDS credentials.
WEP Error is in Degraded state (error rate %)	Non-IOS and IOS	The fault threshold set for the degraded state has been exceeded. When this fault has been cleared, the following message displays: WEP Error is in OK state	Manage Fault Settings > Thresholds > Access Point > RF Port WEP Errors	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
WEP Error is in Overloaded state (error rate %)	Non-IOS and IOS	The fault threshold set for the overloaded state has been exceeded. When this fault has been cleared, the following message displays: WEP Error is in OK state	Manage Fault Settings > Thresholds > Access Point > RF Port WEP Errors	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
WEP is disabled	Non-IOS and IOS	WEP has been disabled. When this fault has been cleared, the following message displays: WEP is enabled.	Manage Fault Settings > Security Policies > WEP Enforced	Log in to the access point and enable WEP.
WEP key length policy violation	Non-IOS and IOS	The WEP key length setting has been violated. When this fault has been cleared, the following message displays: WEP key length is OK.	Manage Fault Settings > Security Policies > WEP Key Length	Check the WEP key settings on the access point to make sure they match the WLSE settings.
WNM failed to authenticate with WDS.	IOS	Authentication required to open a WLCCP channel between the WLSE and the WDS failed.	Manage Fault Settings > Thresholds > WDS > Authentication Failures	Verify that the WLSE credentials used to authenticate with the WDS are correct. For more information, see the managing devices information in the online help or the User Guide for the CiscoWorks Wireless LAN Solution Engine, Release 2.5.

WLSE Fault

Table 2-2 WLSE Fault 

Fault Description	Explanation	Related Setting	Recommended Action
Dot11mib view is not enabled on some Access Points. Please consult online help for details	The device is not configured with the iso (dot11 mib) view, and cannot be managed effectively by the WLSE. This can cause some WLSE report information to be missing and some WLSE faults may not be generated. When this fault has been cleared, the following message displays: No Dot11mib view misconfigurations detected.	Manage Fault Settings > Thresholds > WLSE > Dot11mib view enabled	Configure the devices and the WLSE as described in Devices are placed in Misconfigured Devices group after discovery and dot11mib fault is displayed..

AAA Server Faults

Table 2-3 Server Faults 

Fault Description	Server Type	Explanation	Related Setting	Recommended Action
Authentication failed. Please check EAP-MD5, LEAP, PEAP, or RADIUS credentials	EAP-MD5	The server is reachable but the credentials are incorrect. When this fault has been cleared, the following message displays: Authentication succeeded	Manage Fault Settings > Thresholds > EAP-MD5 /LEAP/ PEAP/RADIUS> Response Time	Make sure that the credentials are set correctly by selecting Devices > Discover > AAA Server.
EAP-MD5 server is not available	EAP-MD5	The EAP-MD5 server is not available. When this fault has been cleared, the following message displays: EAP-MD5 server is available	Manage Fault Settings > Thresholds > Leap > Response Time	Check the server configuration.
EAP-MD5 server is Degraded	EAP-MD5	The fault threshold set for the degraded state has been exceeded. When this fault has been cleared, the following message displays: EAP-MD5 server is OK	Manage Fault Settings > Thresholds > EAP-MD5 > Response Time	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
EAP-MD5 server is Overloaded	EAP-MD5	The fault threshold set for the overloaded state has been exceeded. When this fault has been cleared, the following message displays: EAP-MD5 server is OK	Manage Fault Settings > Thresholds > EAP-MD5 > Response Time	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
LEAP server is not available	LEAP	The LEAP server is not available. This can be caused if you have enabled this policy and you are using a non-Cisco client with EAP. When this fault has been cleared, the following message displays: LEAP server is available	Manage Fault Settings > Thresholds > Leap > Response Time	Check the server configuration.
LEAP server is Degraded	LEAP	The fault threshold set for the degraded state has been exceeded. When this fault has been cleared, the following message displays: LEAP server is OK.	Manage Fault Settings > Thresholds > Leap > Response Time	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
LEAP server is Overloaded	LEAP	The fault threshold set for the overloaded state has been exceeded. When this fault has been cleared, the following message displays: LEAP server is OK.	Manage Fault Settings > Thresholds > Leap > Response Time	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
PEAP server is not available	PEAP	The PEAP server is not available. When this fault has been cleared, the following message displays: PEAP server is available	Manage Fault Settings > Thresholds > Peap > Response Time	Check the server configuration.
PEAP server is Degraded	PEAP	The fault threshold set for the degraded state has been exceeded. When this fault has been cleared, the following message displays: PEAP server is OK.	Manage Fault Settings > Thresholds > Peap > Response Time	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
PEAP server is Overloaded	PEAP	The fault threshold set for the overloaded state has been exceeded. When this fault has been cleared, the following message displays: PEAP server is OK	Manage Fault Settings > Thresholds > Peap > Response Time	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
Radius server is not available	PEAP	The RADIUS server is not available. When this fault has been cleared, the following message displays: Radius server is available	Manage Fault Settings > Thresholds > Radius > Response Time	Check your server configuration.
Radius server is Degraded	PEAP	The fault threshold set for the degraded state has been exceeded. When this fault has been cleared, the following message displays: Radius server is OK.	Manage Fault Settings > Thresholds > Radius > Response Time	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
Radius server is Overloaded	PEAP	The fault threshold set for the overloaded state has been exceeded. When this fault has been cleared, the following message displays: Radius server is OK.	Manage Fault Settings > Thresholds > Radius > Response Time	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.

Switch Faults

Table 2-4 Switch Faults 

Fault Description	Explanation	Related Setting	Recommended Action
CPU utilization is Degraded (utilization %)	The fault threshold set for the degraded state has been exceeded. When this fault has been cleared, the following message displays: CPU utilization is Ok.	Manage Fault Settings > Thresholds > Switch > CPU Utilization	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
CPU utilization is Overloaded (utilization %)	The fault threshold set for the overloaded state has been exceeded. When this fault has been cleared, the following message displays: CPU utilization is Ok.	Manage Fault Settings > Thresholds > Switch > CPU Utilization	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
Device was not reachable via SNMP	The SNMP Agent on the switch is down. When this fault has been cleared, the following message displays: Device was reachable via SNMP.	Manage Fault Settings > Thresholds > Switch > SNMP Reachable	Make sure that the switch SNMP agent is active.
Module is down	The module is down. When this fault has been cleared, the following message displays: Module is up.	Manage Fault Settings > Thresholds > Switch > Module Status	Check the module in the switch and correct the problem.
Port could not agree with other end on duplex mode	The port could not agree with the far end on port duplex, and is in disagree(3) mode. When this fault has been cleared, the following message displays: Port duplex state is OK.	This fault is not generated based on a threshold or policy violation.	Make sure the duplex mode on both ends match.
Switch memory utilization is Degraded (utilization %)	The fault threshold set for the degraded state has been exceeded. When this fault has been cleared, the following message displays: Switch memory utilization is Ok.	Manage Fault Settings > Thresholds > Switch > Memory Utilization	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
Switch memory utilization is Overloaded (utilization %)	The fault threshold set for the overloaded state has been exceeded. When this fault has been cleared, the following message displays: Switch memory utilization is Ok.	Manage Fault Settings > Thresholds > Switch > Memory Utilization	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
Switch Port bandwidth utilization is Degraded (utilization %)	The fault threshold set for the degraded state has been exceeded. When this fault has been cleared, the following message displays: Switch port bandwidth utilization is Ok.	Manage Fault Settings > Thresholds > Switch > Port Utilization	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.
Switch Port bandwidth utilization is Overloaded (utilization %)	The fault threshold set for the overloaded state has been exceeded. When this fault has been cleared, the following message displays: Switch port bandwidth utilization is Ok.	Manage Fault Settings > Thresholds > Switch > Port Utilization	Verify that the fault threshold is set correctly. If the threshold is set correctly, review your network to determine the action necessary to clear the fault condition.

Router Fault

Table 2-5 Router Fault 

Fault Description	Explanation	Related Setting	Recommended Action
Device was not reachable via SNMP	The SNMP Agent on the switch is down. When this fault has been cleared, the following message displays: Device was reachable via SNMP.	Manage Fault Settings > Thresholds > Router > SNMP Reachable	Make sure that the router SNMP agent is active.