Cisco Aironet Access Point Software Configuration Guide for VxWorks
Appendix C - Event Log Messages

Table Of Contents

Event Log Messages

Message Formats

Default Format

Cisco Emblem Format

Message Descriptions

Statuses and Reasons


Event Log Messages


This appendix lists the SNMP and SYSLOG event notifications generated by the access point. This appendix contains these sections:

Message Formats

Message Descriptions

Statuses and Reasons

Message Formats

Event messages appear in either the default format or in the Cisco EMBLEM format. These sections describe the formats:

Default Format

Cisco Emblem Format

Default Format

This is the default format for syslog messages:

sysname time (severity): description

where:

sysname = the system name (MIB2 OID sysName)

time (wallclock) = YYYY/MM/DD HH:MM:SS

time (elapsed, less than 1 day) = HH:MM:SS

time (elapsed, equal to 1 day) = 1 day, HH:MM:SS

time (elapsed, greater than 1 day) = n days, HH:MM:SS

In the default format, messages look like this example:

dhcp-10-91-7-22 00:00:18 (Warning): Lost Authentication with Paren

Cisco Emblem Format

When you select yes for the Should Syslog Messages use the Cisco EMBLEM Format setting on the Event Notifications Setup page, the access point generates EMBLEM (Baseline Manageability Specification) standard compliant syslog messages. This is the format for EMBLEM messages:

ipaddress Counter: [yyyy mmm dd hh:mm:ss TimeZone +/-hh:mm]: %FACILITY-SEVERITY-MNEMONIC: Message-text

Without a timestamp, messages look like this example:

192.168.1.12 83: %APBR-6-STA_ASSOC_OK: [AP350-12] Station [TEST-LPT]000750abcd2a 
Associated

With a timestamp, messages look like this example:

192.168.1.12 85: 2002 SEP 12 13:52:12 PST -08:00: %APBR-6-STA_ASSOC_OK: [AP350-12] Station 
[TEST-LPT]000750abcd2a Associated

Messages in the EMBLEM format follow these conventions:

The timestamp is optional and is included only when the wall clock time is set on the access point.

The facility code for all messages is APBR. An optional subfacility code is not used.

Syslog message severity is calculated according to the following table:

Syslog Severity
EMBLEM Severity

SystemFatal
ProtocolFatal
PortFatal

LOG_EMERG (0)

SystemAlert
ProtocolAlert
PortAlert
ExternalAlert

LOG_ALERT (1)

SystemWarning
ProtocolWarning
PortWarning
ExternalWarning

LOG_WARNING (4)

SystemInfo
ProtocolInfo
PortInfo
ExternalInfo

LOG_INFO (6)


Message Descriptions

Table C-1 lists the event log messages.

Table C-1 Event Log Messages and Descriptions 

Severity
Event Description
EMBLEM Mnemonic
Possible Cause or Recommended Action

Protocol Info

Deauthenticating host, reason reason
host: host MAC address
reason: see "Statuses and Reasons" section

STA_DEAUTH

None.

Protocol Info

Station host Authenticated
host: host MAC address

STA_AUTH_OK

None.

Protocol Info

Station host Associated
host: host MAC address

STA_ASSOC_
OK

None.

Protocol Info

Station host Reassociated
host: host MAC address

STA_REASSOC_OK

None.

Protocol Info

Disassociating host, reason reason
host: host MAC address
reason: see "Statuses and Reasons" section

STA_DISASSOC

None.

Protocol Info

Associate Response from Parent host, status status
host: host MAC address
status: see "Statuses and Reasons" section

RCV_
ASSOCRSP

None.

Protocol Info

Unexpected Associate Response from host, status status
host: host MAC address
status: see "Statuses and Reasons" section

RCV_
ASSOCRSP_
LATE

None.

Protocol Info

Reassociate Response from Parent host, status status
host: host MAC address
status: see "Statuses and Reasons" section

RCV_RASSOC_RSP

None.

Protocol Info

Unexpected Reassociate Response from host, status status
host: host MAC address
status: see "Statuses and Reasons" section

RCV_
RASSOCRSP_
LATE

None.

Protocol Info

Disassociation from host, reason reason
host: host MAC address

RCV_
DISASSOC

None.

Protocol Info

Deauthentication from host, reason reason
host: host MAC address

RCV_DEAUTH

None.

Protocol Info

Received Unexpected 802.11 Management packet from host, subtype=subtype, length=length
host: host MAC address
subtype: the 802.11 Frame Control subtype
length: the length of the 802.11 packet

PRO80211_
MNGPKT_
LATE

None.

Port Info

Started driver for port port
port: the network interface name, such as awc0

NET_DRV_
START_OK

None.

Port Info

Stopped driver for port port
port: the network interface name, such as awc0

NET_DRV_
STOP_OK

None.

Port Info

Bound name protocol to device device
name: name of protocol, such as IP 4.4 TCP/IP
device: the network interface device name, such as awc0

NET_BIND_
PROT_OK

None.

External Info

Detected probable reset of host
host: host MAC address

DDP_CLNT_
RESET

The access point believes that another infrastructure device has restarted. If this message appears continuously, reboot the access point.

System Warning

Failed to create Forwarding Table Entry for Source host host
host: host MAC address
The Packet Router was unable to create a new entry due to lack of available memory.

PRTR_FTBL_
SRC_FAILED

If this message appears continuously, reboot the access point.

System Warning

Failed to create Forwarding Table Entry for Destination host host
host: host MAC address
The Packet Router was unable to create a new entry due to lack of available memory.

PRTR_FTBL_
DEST_FAILED

If this message appears continuously, reboot the access point.

System Warning

Host srcaddr has requested that this system's IP Address be set to newaddr
srcaddr: Source host's IP address
newaddr: Requested new IP address

PRTR_SYSIP_
REQ

IPSU is trying to set this access point's IP address. Check that the IPSU user is legitimate.

System Warning

Routine PktRouterRcvRtn is unable to Take the forwardTbl Guard semaphore

FWDTBL_
TAKE_FAILED

If this message appears continuously, reboot the access point.

System Warning

Routine PktRouterRcvRtn is attempting to recover the forwardTbl Guard semaphore

FWDTBL_
RECOVER

If this message appears continuously, reboot the access point.

System Warning

Routine PktRouterRcvRtn is unable to Give the forwardTbl Guard semaphore

FWDTBL_GIVE_FAILED

If this message appears continuously, reboot the access point.

System Warning

Unable to locate srchost in packet-forwarding table
srchost: MAC address of host

FWDTBL_
UNKNW_HOST

None.

System Warning

Received 802.11 Management Packet from non-802.11 station srchost
srchost: MAC address of host

PRO80211_
MNGPKT_RCV_
ERR1

A rogue 802.11 device might be on your network. Check your facility for rogue devices.

System Warning

Received 802.11 Management Packet from srchost on non-802.11 port ifDescr
srcHost: MAC address of host
ifDescr: name of network interface device

PRO80211_
MNGPKT_RCV_
ERR2

Your wireless LAN is under malicious attack. Search for and remove malicious devices.

System Warning

Received 802.11 Control Packet from srchost on non-802.11 port ifDescr
srchost: MAC address of host
ifDescr: name of network interface device

PRO80211_
RCV_INV_PORT

Your wireless LAN is under malicious attack. Search for and remove malicious devices.

System Warning

Received 802.11 Control Packet from non-802.11 station srchost
srchost: MAC address of host

PRO80211_RCV_INV_CTRL

A rogue 802.11 device might be on your network. Check your facility for rogue devices.

System Warning

Station srchost Associated with Encryption, then attempted to send an Unencrypted packet to desthost (length pktLen)
srchost: MAC address of source host
desthost: MAC address of destination host
pktLen: Length of the 802.11 packet received, in octets

STA_NOWEP

A misconfigured or rogue client device is on your wireless LAN. Find and correct or remove the client device.

Protocol Warning

Failed to set Primary Interface of srchost to port ifDescr
srchost: MAC address of host
ifDescr: name of network interface device

PRTR_PRIM_
INF_FAILED

If this message appears continuously, reboot the access point.

Protocol Warning

Station host cannot be Associated to itself
host: MAC address of host

STA_ASSOC_
SELF

A rogue 802.11 device might be on your network. Check your facility for rogue devices.

Protocol Warning

Station host Failed Authentication, status status
host: MAC address of host
status: see "Statuses and Reasons" section

STA_AUTH_
FAILED

A misconfigured or rogue client device is on your wireless LAN. Find and correct or remove the client device.

Protocol Warning

Lost Authentication with parent

PRNT_AUTH_
LOST

Might be caused by a poor radio link. Check for interference on your wireless LAN.

Protocol Warning

Station host cannot send 802.11 type packets because it is not in this BSS
host: MAC address of host
type: packet types (Authenticate, Deauthenticate, Associate, Reassociate, Disassociate)

PRO80211_
PKTBSS_ERR

Your wireless LAN contains a confused or rogue device. Find and correct or remove the device.

Protocol Warning

Station host must not send 802.11 type packets because it is not in this BSS
host: MAC address of host
type: packet types (Deauthenticate, , Disassociate)

PRO80211_
PKTBSS_ERR

Your wireless LAN contains a confused or rogue device. Find and correct or remove the device.

Protocol Warning

Received Truncated 802.11 Management Packet from srchost (was pktlen bytes, need reqlen bytes)
srchost: MAC address of host
pktlen: actual length of received packet
reqlen: required length of packet

PRO80211_
MNGPKT_TRNC

Your wireless LAN contains a confused or rogue device. Find and correct or remove the device.

Protocol Warning

Received Truncated Association Request from srchost (was pktlen bytes, need reqlen bytes)
srchost: MAC address of host
pktlen: actual length of received packet
reqlen: required length of packet

RCV_TRNC_
ASSOCREQ

Your wireless LAN contains a confused or rogue device. Find and correct or remove the device.

Protocol Warning

Received Truncated Association Response from srchost (was pktlen bytes, need reqlen bytes)
srchost: MAC address of host
pktlen: actual length of received packet
reqlen: required length of packet

RCV_TRNC_
ASSOCRSP

Your wireless LAN contains a confused or rogue device. Find and correct or remove the device.

Protocol Warning

Received Truncated Reassociation Request from srchost (was pktlen bytes, need reqlen bytes)
srchost: MAC address of host
pktlen: actual length of received packet
reqlen: required length of packet

RCV_TRNC_
RASSOCREQ

Your wireless LAN contains a confused or rogue device. Find and correct or remove the device.

Protocol Warning

Received Truncated Disassociation from srchost (was pktlen bytes, need reqlen bytes)
srchost: MAC address of host
pktlen: actual length of received packet
reqlen: required length of packet

RCV_TRNC_
DISASSOC

Your wireless LAN contains a confused or rogue device. Find and correct or remove the device.

Protocol Warning

Received Truncated Authentication from srchost (was pktlen bytes, need reqlen bytes)
srchost: MAC address of host
pktlen: actual length of received packet
reqlen: required length of packet

RCV_TRNC_
AUTH

Your wireless LAN contains a confused or rogue device. Find and correct or remove the device.

Protocol Warning

Received Truncated Deauthentication from srchost (was pktlen bytes, need reqlen bytes)
srchost: MAC address of host
pktlen: actual length of received packet
reqlen: required length of packet

RCV_TRNC_
DAUTHREQ

Your wireless LAN contains a confused or rogue device. Find and correct or remove the device.

Protocol Warning

Received Truncated 802.11 Control Packet from srchost (was pktlen bytes, need reqlen bytes)
srchost: MAC address of host
pktlen: actual length of received packet
reqlen: required length of packet

PRO80211_RCV_TRNC_CTRL

Your wireless LAN contains a confused or rogue device. Find and correct or remove the device.

Protocol Warning

Repeatedly failed to connect to DNS Server. Temporarily DISABLING DNS lookups. To re-enable, explicitly Disable then re-Enable DNS on the Name Server Setup page.

DNS_CON_
FAILED

The DNS server is down or the link to the DNS server is down. Check the server and the link to it.

Protocol Warning

Attempt to use SNMP while SNMP is disabled

SNMP_NOUSE_DISABLED

Check your SNMP configuration, or check for an SNMP attack.

Port Warning

Unable to allocate mBlk for packet from srchost to desthost on port ifDescr
srchost: MAC address of source host
desthost: MAC address of destination host
ifDescr: Name of network interface

PRTR_MBLK_
ERR

If this message appears continuously, reboot the access point.

Port Warning

Unable to allocate link-level header for packet from srchost to desthost on port ifDescr
srchost: MAC address of source host
desthost: MAC address of destination host
ifDescr: Name of network interface

PRTR_NO_PKT_HDR

If this message appears continuously, reboot the access point.

Port Warning

Failed to Send Packet on port ifDescr (error= errornum)
errornum: status error number

SEND_PCKT_
FAILED

None.

Port Warning

Failed to Address Packet from srchost to desthost on port ifDescr
srchost: MAC address of source host
desthost: MAC address of destination host
ifDescr: Name of network interface

PRTR_ADDR_
ERR

A device attempting to authenticate might have roamed during the authentication exchange.

Port Warning

Failed to parse header of packet from srchost to desthost on port ifDescr (error=erronum)
srchost: MAC address of source host
desthost: MAC address of destination host
ifDescr: Name of network interface
errornum: status error number

PRTR_PKT_
HDR_BAD

Your wireless LAN contains a confused or rogue device. Find and correct or remove the device.

Port Warning

Failed to allocate packet to host for procedure on port ifDescr
procedure: Authentication, Deathentication, Disassociation, Association Response, Reassociation Response
ifDescr: Name of network interface

PRO80211_
PKTALLOC_
ERR

If this message appears continuously, reboot the access point.

Port Warning

Failed to address or send packet to host (status=status)
host: MAC address of host
status: see "Statuses and Reasons" section

PRO80211_SND_ERROR

A device attempting to authenticate might have roamed during the authentication exchange.

Port Warning

Attempt to set ifAdminStatus of port ifDescr to unsupported value status
ifDescr: Name of network interface
status: see "Statuses and Reasons" section

NET_ADMSTAT_SET_FAILED

A network management station is misconfigured or malicious. Check the configuration of your network management stations.

External Warning

Received multicast MAC address srchost as SOURCE to destination desthost on port ifDescr
srchost: MAC address of source host
desthost: MAC address of destination host
ifDescr: Name of network interface

PRTR_RCV_
MCAST

Your wireless LAN contains a confused or rogue device. Find and correct or remove the device.

External Warning

Received NULL MAC address as SOURCE to destination desthost on port ifDescr
desthost: MAC address of destination host
ifDescr: Name of network interface

PRTR_RCV_
MAC0_SRC

Your wireless LAN contains a confused or rogue device. Find and correct or remove the device.

External Warning

Received NULL MAC address as DESTINATION from source srchost on port ifDescr
srchost: MAC address of source host
ifDescr: Name of network interface

PRTR_RCV_
MAC0_DEST

Your wireless LAN contains a confused or rogue device. Find and correct or remove the device.

External Warning

Network Bridge Loop: Received packet from Self destined to desthost on port ifDescr
desthost: MAC address of destination host
ifDescr: Name of network interface

BRLP_SADDR_PKT

Find and correct the bridge loop.

External Warning

Detected IP address 0.0.0.0 as a Destination address from source srchost on port ifDescr
srchost: MAC address of source host
ifDescr: Name of network interface

PRTR_IP0_DEST

Your wireless LAN contains a confused or rogue device. Find and correct or remove the device.

External Warning

Host srcaddr has incorrect IP address of this system (believes this address is dstaddr)
srcaddr: IP address of host
dstaddr: IP address

PRTR_HOSTIP_BAD

There is a problem with the ARP table on a device on your network. Find and correct or remove the device.

External Warning

Sorry, IPv6 protocol analysis not yet implemented (source srchost, destination desthost, port ifDescr
srchost: MAC address of source host
desthost: MAC address of destination host
ifDescr: Name of network interface

PRTR_IPV6_
ERR

None.

External Warning

Packet from srchost to desthost is using unknown IP version version
srchost: MAC address of source host
desthost: MAC address of destination host
version: IP protocol version number

PRTR_IPVER_
BAD

None.

External Warning

Received ARP packet from srchost to desthost of unknown MAC address format format, length length
srchost: MAC address of source host
desthost: MAC address of destination host
format: MAC address format number
length: ARP packet length

PRTR_ARP_
FMT_BAD

None.

External Warning

Attempt by srchost to Sieze Self IP Address via Proxy ARP to desthost
srchost: MAC address of source host
desthost: MAC address of destination host

PRTR_SEIZEIP

Your wireless LAN contains a rogue or misconfigured device with a duplicate IP address. Find and correct or remove the device.

External Warning

Sorry, IPv6 ARP not yet implemented (source srchost, destination desthost, port ifDescr
srchost: MAC address of source host
desthost: MAC address of destination host
ifDescr: Name of network interface

PRTR_ARP_
IPV6_ERR

None.

External Warning

Received ARP packet from srchost to desthost on port ifDescr of unrecognized length-byte IP address)
srchost: MAC address of source host
desthost: MAC address of destination host
ifDescr: Name of network interface
length: ARP packet length

PRTR_ARP_IP_BAD

There is a problem with the ARP table on a device on your network. Find and correct or remove the device.

External Warning

Received ARP packet from srchost to desthost on port ifDescr of unsupported protocol type type
srchost: MAC address of source host
desthost: MAC address of destination host
ifDescr: Name of network interface
type: protocol type number

PRTR_ARP_
PROT_BAD

There is a problem with the ARP table on a device on your network. Find and correct or remove the device.

System Fatal

Rebooting System due to Firmware Upgrade

SYS_REBOOT_
FW_UPD

Wait until the reboot is complete.

System Fatal

Rebooting System due to New Primary Interface ifDescr
ifDescr: Name of network interface

SYS_CFG_
REBOOT_INF

Wait until the reboot is complete.

System Fatal

Rebooting System due to Restoration of Factory Configuration

SYS_REBOOT_CFG_RSTR

Wait until the reboot is complete.

System Fatal

Rebooting System due to Administrator Request

SYS_REBOOT_ADMIN

Wait until the reboot is complete.

System Fatal

Rebooting System due to Hardware Address Change of Device ifDescr
ifDescr: Name of network interface

SYS_REBOOT_HW_ADDR

Wait until the reboot is complete.

System Fatal

Rebooting System due to change in Detailed Event Trace Buffer Size to size
size: new buffer size, in bytes

SYS_REBOOT_EBUF

Wait until the reboot is complete.

System Fatal

Rebooting System due to change in Forwarding Table Size to size
size: new table size, in bytes

SYS_REBOOT_
FWDTSIZE

Wait until the reboot is complete.

System Fatal

Failed to Set System IP Address to netaddr (DB_Status=status)
netaddr: new IP address number
status: see "Statuses and Reasons" section

PRTR_SYSIP_
REQ_FAILED

There is an IP address conflict on your network. Find and correct the conflicting addresses.

System Fatal

Failed to Set System IP Address to netaddr in Response to DHCP Ack (DB_Status=status)
netaddr: new IP address number
status: see "Statuses and Reasons" section

PRTR_DHCP_
FAILED

There is an IP address conflict on your network. Find and correct the conflicting addresses.

Protocol Fatal

Cannot allocate Protocol-Type List

PRTR_NO_LIST

Reboot the access point.

Protocol Fatal

Cannot bind Packet Router to port device
device: the network interface device name/unit number

PRTR_BIND_
PORT_FAILED

Reboot the access point.

Protocol Fatal

Unknown port ifDescr
ifDescr: Name of network interface

PRTR_BIND_
UNKNWN_
PORT

Reboot the access point.

Protocol Fatal

Unable to add AironetMcastAddrAll to port ifDescr
ifDescr: Name of network interface

PRTR_BIND_
MCAST_
FAILED

Reboot the access point.

Protocol Fatal

Unable to add AironetMcastAP_Only to port ifDescr
ifDescr: Name of network interface

PRTR_BIND_
MCASTAP_
FAILED

Reboot the access point.

Protocol Fatal

Unable to add AironetMcastBSS to port ifDescr
ifDescr: Name of network interface

PRTR_BIND_
MCASTBSS_
FAILED

Reboot the access point.

Protocol Fatal

Unable to add AironetMcastBSS to port ifDescr
ifDescr: Name of network interface

PRTR_BIND_
MCASTBSS_
FAILED

Reboot the access point.

Protocol Fatal

Cannot bind 802.11 Management to port device
device: the network interface device name/unit number

PRO80211_BIND_ERR1

Reboot the access point.

Protocol Fatal

Port ifDescr is not an 802.11 network
ifDescr: Name of network interface

PRO80211_BIND_ERR2

Reboot the access point.

Protocol Fatal

Unknown port ifDescr
ifDescr: Name of network interface

PRO80211_
PORT_UNKN

Reboot the access point.

Protocol Fatal

Cannot bind 802.11 Control to port device
device: the network interface device name/unit number

PRO80211_
CTRL_BIND_
ERR

Reboot the access point.

Protocol Fatal

Inconsistent VxWorks END control block for port ifDescr
ifDescr: Name of network interface

PRO80211_BIND_ERR3

Reboot the access point.

Port Fatal

Card for device ifDescr cannot be successfully configured (error status)
ifDescr: Name of network interface
status: radio status

DEV80211_CFG_BAD

The access point radio might have failed. Reload the access point firmware.

Port Fatal

Radio MAC for device ifDescr can not be Enabled (error status)
ifDescr: Name of network interface
status: device status number

MAC_ENABLE_FAILED

The access point radio might have failed. Reload the access point firmware.

Port Fatal

Radio Enable Failed with error "Bad Authentication Type." Temporarily Disabling WEP Encryption and re-Attempting Enable. This error may indicate tampering with the radio and/or its encryption keys!

RADIO_EN_
ERROR

Reset the access point WEP configuration. If this message appears continuously, reload the access point firmware.

Port Fatal

Card for device ifDescr cannot be successfully configured (error status)
ifDescr: Name of network interface
status: network interface card status

DEVAWC_CFG_BAD

Reset the access point radio configuration parameters to defaults and reconfigure the radio parameters.

Port Fatal

NIC MAC for device ifDescr cannot be Enabled (error status)
ifDescr: Name of network interface
status: network interface card status

DEVAWC_
DISABLE

The access point radio might have failed or it might be misconfigured. Reset the access point radio configuration parameters to defaults and reconfigure the radio parameters. If this message appears continuously, reload the access point firmware.

Port Fatal

Failed to start driver for port ifDescr (errno=errno)
ifDescr: Name of network interface
errno: error number

NET_DRV_
START_FAILED

If this message appears continuously, reboot the access point.

Port Fatal

Failed to stop driver for port ifDescr (errno=errno)
ifDescr: Name of network interface
errno: error number

NET_DRV_
STOP_FAILED

If this message appears continuously, reboot the access point.

Any (this alert mappable to any severity)

Packet from srcHost to dstHost, 802.2 DSAP pktType, length pktLen
srcHost: network name/address of source of packet
dstHost: network name/address of destination of packet
pktType: 802.2 packet type (ARP, for example)
pktLen: length of the packet, in bytes

RCV_PCKT_
ALERT

Disable packet trace if necessary.

Any (this alert mappable to any severity)

Packet from srcHost to dstHost, protocol pktType, length pktLen
srcHost: network name/address of source of packet
dstHost: network name/address of destination of packet
pktType: ethernet packet type (ex. ARP)
pktLen: length of the packet, in bytes

RCV_PCKT_
ALERT

Disable packet trace if necessary.

Protocol Info

Associated to Parent MAC address of AP

PRNT_ASSOC

None.

Protocol Warning

WEP Required in Associate Response from Parent host, though this system disallows WEP
host: MAC address of host

RCV_
ASSOCRSP_
ENC

WEP is misconfigured. Correct the WEP mismatch.

Protocol Warning

WEP Unavailable in Associate Response from Parent host, though this system requires WEP
host: MAC address of host

RCV_
ASSOCRSP_
UNENC

WEP is misconfigured. Correct the WEP mismatch.

External Warning

Received a DHCP message for an expired request from host
host: source IP address of host

PRTR_DHCP_
XID_EXP

The DHCP server or the link to the DHCP server might be down. Check the server and the link to it.

Port Info

Attempting auto-negotiation to establish Ethernet link

ETHER_CON_
FAILED

None.

System Warning

Failed to Update system firmware status
status: Correct file header or failed header

SYS_FW_UPD_FAIL

If this message appears continuously, reset the access point configuration to defaults and reconfigure.

System Warning

Updating all system firmware

SYS_FW_UPD_ALL

None.

System Info

Successfully updated system firmware

SYS_FW_UPD_OK

None.

System Warning

Updating selected system firmware

SYS_FW_UPD

None.

System Warning

Received DDP Packet from non-802.11 station source host
host: MAC address of host

DDP_RCV_PKT_ERR

A rogue 802.11 device might be on your network. Check your facility for rogue devices.

System Info

Failed in Turning off radio port when a Hot Standby AP took over

HSTNDBY_RAD_OFF_
FAILED

Power down root access point.

System Info

Hot standby AP is associated and the monitor starts

HSTNDBY_
ASSOC_OK

None.

System Info

Hot standby AP is waiting for being associated

HSTNDBY_
ASSOC_WAIT

If no association within 30 seconds verify the following:

Root access point operation.

Hot standby access point and root access point configurations match.

The root and standby access point test is successful.

System Info

Hot standby AP state indicates that the monitor mode setup failed

HSTNDBY_
MON_FAILED

Verify root access point operaton.

System Info

Hot Standby Disabled

HSTNDBY_DIS_OK

None.

System Info

HotStandby Failed to enable Hot Standby

HSTNDBY_
HSEN_FAILED

Verify the following:

Root access point operation.

Hot standby access point and root access point configurations match.

The root and standby access point link test is successful.

System Info

Hotstandby failed to set to the Active AP mode

HSTNDBY_ACT_FAILED

Verify hot standby and root access point configurations match and the standby access point link test is successful.

System Info

Hotstandby set to the Active AP mode

HSTNDBY_ACT_OK

None.

System Info

HotStandby starts to monitor the root AP

HSTNDBY_
STRT_MON

None.

System Info

HotStandby stays as a client but stopped its protection

HSTNDBY_
STOP

Start hot standby monitoring.

System Info

HotStandby Turning into hot standby mode

HSTNDBY_
TURN_ON

None.

System Info

Turned command the media port
command: ON or OFF
media: Ethernet or Radio

HSTNDBY_
ONOFF

None.

System Info

Failed in turning command the media port
command: ON or OFF
media: Ethernet or Radio

HSTNDBY_
ONOFF_FAILED

Verify the following:

Root access point operation.

Hot standby access point and root access point configurations match.

The root and standby access point link test is successful.

System Info

Turned off radio port because a Hot Standby AP took over

HSTNDBY_RAD_OFF

None.

Port Info

MAC-Address Authentication accepted for Station clientAddr
clientAddr: client MAC address

MACAUTH_OK

None.

Port Warning

MAC-Address Authentication denied for Station clientAddr
clientAddr: client MAC address

MACAUTH_
DENY

A rogue 802.11 device might be on your network. Check your facility for rogue devices.

Protocol Warning

No EAP-Authentication response for Station clientAddr from server serverName
clientAddr: client MAC address
serverName: authentication server name or IP addrs

MACAUTH_
NORESP

Check the authentication server and the link to it. Check for a shared-key mismatch on the access point or the authentication server. Check that the server IP address is correctly configured on the access point.

Protocol Warning

Station host Failed Reassociation, status
host: host MAC address
status: see "Statuses and Reasons" section

STA_REASSOC_FAILED

None.

Protocol Warning

WEP Required in Reassociate Response from Parent host, though this system disallows WEP
host: host MAC address

RCV_
RASSOCRSP_
ENC

WEP might be misconfigured. Check for a WEP mismatch.

Protocol Warning

WEP Unavailable in Reassociate Response from Parent host, though this system requires WEP
host: host MAC address

RCV_
RASSOCRSP_
UNENC

WEP might be misconfigured. Check for a WEP mismatch.

Protocol Warning

Received Truncated Reassociation Response from host (was length bytes, need frame bytes)
host: host MAC address
length: packet length
frame: ReassociationResponseFrame

RCV_TRNC_
RASSOCRSP

Your wireless LAN contains a confused or rogue device. Find and correct or remove the device.

System Fatal

Rebooting System due to Out Of Memory

SYS_REBOOT_MEM

None.

Protocol Info

Station host roamed host
host: host MAC address

STA_ROAMED

None.

Protocol Warning

Station clientAddr timed-out during EAP Authentication
clientAddr: client MAC address

EAP_TOUT

Either the client device or the authentication server might be misconfigured. Check the client and server configurations.

Protocol Warning

Station clientAddr, User username Failed EAP-Authentication
clientAddr: client MAC address
username:

EAP_AUTH_
FAILED

Either the client device or the authentication server might be misconfigured. Check the client and server configurations.

Protocol Info

Station clientAddr User username EAP-Authenticated
clientAddr: client MAC address
username:

EAP_AUTH_OK

Either the client device or the authentication server might be misconfigured. Check the client and server configurations.

Protocol Warning

No EAP-Authentication response for Station

EAP_NORESP

Either the client device or the authentication server might be misconfigured. Check the client and server configurations.

Protocol Warning

RADIUS verification failed for Server Name. Probable shared secret mismatch

EAP_SRV_VRF_FAILED

Check the access point and server configurations for a shared-key mismatch.

Protocol Fatal

Unable to add 802.1X multicast address to port ifDescr
IfDesc: Name of network interface

PRO80211_
1XMCAST_ERR

Reboot the access point.

Protocol Info

Lost Association with Parent

PRNT_ASSOC_LOST

None.

Protocol Fatal

Cannot bind 802.11 Control to port devName unit
DevName: AP name
Unit:

WNMP_BIND_
FAILED

Reboot the access point.

Protocol Fatal

Port ifDescr is not an 802.11 network
ifDescr: name of network descriptor

WNMP_MUX_
NOT80211_
PORT

Reboot the access point.

Protocol Fatal

Unknown port ifDescr
ifDescr: name of network descriptor

WNMP_
NOT80211_
PORT

Reboot the access point.

Protocol Fatal

Inconsistent VxWorks END control block for port ifDescr
ifDescr: name of network descriptor

WNMP_BAD_
PORTBLK

Reboot the access point.

System Fatal

Rebooting System due to Resetting Factory Defaults

SYS_REBOOT_CFG_
RESETALL

None.

Port Warning

Failure connecting to MAC-Authentication Server for Host host
host: host MAC address

MACAUTH_
CON_FAIL

Check the configuration on the authentication server.

System Fatal

Rebooting System due to change in 802.1X Protocol Version

SYS_REBOOT_
1X_VER

None.

System Information

Hot Standby Enable failed

HSTNDBY_EN_FAILED

Verify the following:

Root access point operation.

Hot standby access point and root access point configurations match.

The root and standby access point link test is successful.

System Information

Hot Standby Disable failed

HSTNDBY_DIS_FAILED

Verify the following:

Root access point operation.

Hot standby access point and root access point configurations match.

The root and standby access point link test is successful.

System Information

Hot Standby Enabled successfully

HSTNDBY_EN_OK

None.

System Information

Hotstandby lost its association with monitored AP

HSTNDBY_
ASSOC_LOST

Verify the following:

Root access point operation.

Hot standby access point and root access point configurations match.

The root and standby access point link test is successful.

System Information

Hotstandby lost its radio link to monitored AP

HSTNDBY_RAD_LOST

Verify the following:

Root access point operation.

Hot standby access point and root access point configurations match.

The root and standby access point link test is successful.

System Information

Hotstandby lost its ether link to monitored AP

HSTNDBY_ETH_LOST

Verify the following:

Root access point operation.

Hot standby access point and root access point configurations match.

The root and standby access point link test is successful.

System Fatal

Installation Keys Restored! Rebooting System

SYS_REBOOT_
INSTKEY

Reconfigure the access point.

System Information

RADIUS Accounting Start failed to get RADIUS ACCT manager

ACCT_CON_
FAILED

If this message appears continuously, reboot the access point.

System Information

Acct request call back to NULL session

AMNGR_REQ_NUL_SES

None.

System Information

Acct request call back to NULL entry

AMNGR_REQ_NUL_ENT

None.

System Information

Acct jobEntry time out on NULL session

AMNGR_JE_
NULL_SES

None.

System Information

Acct jobEntry time out on NULL entry

AMNGR_JE_
NULL_ENT

None.

System Information

Acct jobEntry time out when its manager is missing

AMNGR_JE_
TOUT

None.

System Information

Acct entry creation fail due to NULL entry802_11

AMNGR_NEW_ENT_FAILED

If this message appears continuously, reboot the access point.

System Information

Acct Stop could not find the AcctMgr

AMNGR_STOP_NOMGR

If this message appears continuously, reboot the access point.

System Information

Cannot stop ACCT due to session request failure

AMNGR_SES_
REQ_FAILED

If this message appears continuously, reboot the access point.

System Information

acctSessionFirst could not locate the AcctMgr

AMNGR_SES1_NOMGR

If this message appears continuously, reboot the access point.

System Information

Acct Start could not find the AcctMgr

AMNGR_START_NOMGR

If this message appears continuously, reboot the access point.

System Information

Cannot start ACCT due to session creation failure

AMNGR_INIT_NOSES1

If this message appears continuously, reboot the access point.

System Information

Cannot start ACCT due to session request failure

AMNGR_INIT_NOSES2

If this message appears continuously, reboot the access point.

System Information

Acct session creation fail due to NULL ACCT manager

AMNGR_
SESFAIL_
NOMGR

If this message appears continuously, reboot the access point.

System Information

Acct session creation fail due to NULL entry802_11

AMNGR_
SESFAIL_
NOENTRY

If this message appears continuously, reboot the access point.

System Information

Acct session creation fail at creating receive RevBuffer

AMNGR_
SESFAIL_
NORBUF

If this message appears continuously, reboot the access point.

System Information

Acct session creation fail at creating send Buffer

AMNGR_
SESFAIL_
NOSBUF

If this message appears continuously, reboot the access point.

System Information

No ACCT Server configured for OPEN authenticated client

AMNGR_
NOASERV_
OPEN

Accounting is enabled on the access point but no accounting server is configured. Configure an accounting server or, if a server is configured, check the server configuration.

System Information

No ACCT Server configured for SHAREDKEY authenticated client

AMNGR_
NOASERV_
SHARED

Accounting is enabled on the access point but no accounting server is configured. Configure an accounting server or, if a server is configured, check the server configuration.

System Information

No ACCT Server configured for NETWORK_EAP authenticated client

AMNGR_
NOASERV_EAP

Accounting is enabled on the access point but no accounting server is configured. Configure an accounting server or, if a server is configured, check the server configuration.

System Information

Acct manager_c failed at creating MSG queue

AMNGR_FAIL_QUE

If this message appears continuously, reboot the access point.

System Information

Acct manager_c failed at launching its own task

AMNGR_FAIL_TASK

Reboot the access point.

System Information

Acct manager_c received an ERROR from the queue

AMNGR_RCV_QERR

If this message appears continuously, reboot the access point.

System Information

Acct manager_c received a message for NULL session

AMNGR_RCV_
0SES_MSG

None.

System Information

RADIUS verification failed for Server server. Probable shared secret mismatch
server: RADIUS server DNS name/IP address

AMNGR_
RADAUTH_
FAILED

Check the accounting server configuration.

System Information

ACCT failed to send a message due to no configured server

AMNGR_SEND_FAILED_
NOSERV

Disable accounting on the access point, or configure an accounting server.

System Warning

Unable to start SSH server

SSHD_INIT_
FAILED

Reboot the access point.

Protocol Warning

Unable to start SSH connection

SSHD_CON_
INIT_FAILED

Reboot the access point.

Protocol Information

Disconnect remote user from ipAddr after exceeding max number of login attempts
ipAddr: IP address of SSH client

SSHD_LOGIN_
FAILED

None.

Protocol Warning

CRC compensation attack is detected. Disconnect remote user from ipAddr
ipAddr: IP address of SSH client

SSHD_CRC_
ATTACK

A user attacked a known security hole in the SSH protocol. Find and remove the user or disable SSH.

System Warning

BKeyRotation declared before proper initialization

BKR_NOT_INIT

Ignore this message unless it appears after bootup. If it appears after bootup, check the configuration and reboot the access point.

System Warning

BKeyRotation declared before initialization for VLAN vlanID.
vlanID: numeric VLAN identifier

BKR_VLAN_
NOT_INIT

Ignore this message unless it appears after bootup. If it appears after bootup, check the configuration and reboot the access point.

System Warning

Vlan vlanID is not Enabled. vlanID: numeric VLAN identifier

BKR_VLAN_
DISABLED

Ignore this message if the VLAN rotation period has been set to 0. If the VLAN rotation period is set to a value higher than 0, check the configuration and reboot the access point.

System Warning

Vlan vlanID Key Rotation Interval is 0.
vlanID: numeric VLAN identifier

BKR_KEY_
0PERIOD

Ignore this message if the VLAN rotation period has been set to 0. If the VLAN rotation period is set to a value higher than 0, check the configuration and reboot the access point.

System Warning

VLAN vlanID Key Index and Count are in conflicting states.
vlanID: numeric VLAN identifier

BKR_VLAN_
CONFLICT

Correct the VLAN configuration and reboot the access point.

System Warning

No WID timer for VLAN vlanID
vlanID: numeric VLAN identifier

BKR_VLAN_
NOWIDTIMER

Correct the VLAN configuration and reboot the access point.

System Fatal

BKeyPrivate1ISR msgQSend error, too many VLANs. Rotation stopped for VLAN vlanID.
vlanID: numeric VLAN identifier

BKR_STOP_
SENDERR

Correct the VLAN configuration and reboot the access point.

System Fatal

BKey1Proc's semBCreate returns error

BKR_KEY1_
LOCKERR

Correct the system configuration and reboot the access point.

System Warning

BKey1Proc:forwardTbl pointer is NULL

BKP_FTBL_ERR

Correct the radio configuration and reboot the access point.

System Warning

BKey1Proc:current interface pointer is NULL

BKP_INF_PTR_ERR

Correct the system configuration and reboot the access point.

System Warning

BKey1Proc:currIface pointer's IfEND is NULL

BKP_INF_
ENDPTR_ERR

Correct the system configuration and reboot the access point.

System Warning

BKey1Proc Too many radio interfaces to process

BKR_MANY_
RADIOS

Correct the system configuration and reboot the access point.

System Warning

BKey1Proc:DB_dot11PHYType instance is NULL

BKP_INF_
PHYINST_ERR

Correct the radio configuration and reboot the access point.

System Warning

BKey1Proc:DB_dot11PHYType is NULL

BKP_INF_PHY_ERR

Correct the radio configuration and reboot the access point.

System Warning

BKey1Proc cannot access the radio ifIndex interface structure.
ifIndex: MIB2 ifIndex of affected interface

BKR_KEY1_
NORADIOINF

Correct the radio configuration and reboot the access point.

System Warning

BKey1Proc cannott access the radio ifIndex control structure.
ifIndex: MIB2 ifIndex of affected interface

BKR_KEY1_
NORADIOCTRL

Correct the radio configuration and reboot the access point.

System Warning

BKey1Proc Can't access radio ifIndex Radio802_11_c data.
ifIndex: MIB2 ifIndex of affected interface

BKR_KEY1_
NODEV80211

Correct the radio configuration and reboot the access point.

System Warning

BKey1Proc Can't access radio ifIndex MIB.
ifIndex: MIB2 ifIndex of affected interface

BKR_KEY1_
NORADIOMIB

Correct the radio configuration and reboot the access point.

System Warning

BKey1Proc Can't access radio ifIndex AWC_MIB.
ifIndex: MIB2 ifIndex of affected interface

BKR_KEY1_
NORADIOAMIB

Correct the radio configuration and reboot the access point.

System Warning

BKey1Proc current default Key Index keyIdx and Count are in conflicting states. Using default key 0.
keyIdx: WEP key index

BKR_KEY1_
CONFLICT

Correct the system configuration and reboot the access point.

System Warning

BKey1Proc can't access AWC_MIB's DefaultKey for devEnhCtrl Index radioIndex

BKR_KEY1_
NOMIBDKEY

Correct the system configuration and reboot the access point.

System Warning

BKey1Proc is started before proper initialization

BKR_KEY1_
NOT_INIT

Ignore this message unless it appears after bootup. If it appears after bootup, check the configuration and reboot the access point.

System Warning

BKey1Proc has bad msg size or Xmit fatal error

BKR_KEY1_
BADSIZE

If this message persists, check the signal strength of associated client devices.

System Warning

BKey start task error

BKR_KEY1_
TASK_FAILED

If this message persists, correct the system configuration and reboot the access point.

System Warning

BKey task already started

BKR_KEY1_
TASK_STARTED

If this message persists and does not seem to have been triggered by a change to the system configuration, contact Cisco TAC.

System Warning

BKey declared before VLAN vlanID is ready.
vlanID: numeric VLAN identifier

BKR_VLAN_
NREADY

Ignore this message unless it appears after bootup. If it appears after bootup, check the configuration and reboot the access point.

System Fatal

BKeyXmit with VLAN vlanID not ready. Key rotation stopped.
vlanID: numeric VLAN identifier

BKR_XMIT_
VLAN_NREADY

Ignore this message if the VLAN rotation period has been set to 0. If the VLAN rotation period is set to a value higher than 0, check the configuration and reboot the access point.

System Warning

BKeyXmit finds no entry for VLAN vlanID.
vlanID: numeric VLAN identifier

BKR_XMIT_
NOVLAN

Ignore this message if the VLAN rotation period has been set to 0. If the VLAN rotation period is set to a value higher than 0, check the configuration and reboot the access point.

System Information

BKeyXmit terminating BKeyRotation for vlanId vlanID.
vlanID: numeric VLAN identifier

BKR_XMIT_
VLAN_STOP

None.

System Information

Bkey-MarkTime

BKP_MARK

None.

System Warning

BKeyXmit can't access AWC_MIB's DefaultKey

BKR_XMIT_
NOMIBKEY

Correct the system configuration and reboot the access point.

System Fatal

BKeyXmit NO MIB access, BKey rotation stopped for VLAN vlanID.
vlanID: numeric VLAN identifier

BKR_XMIT_
NOMIB

Correct the system configuration and reboot the access point.

System Warning

BKeyXmit radio is not OK

BKR_XMIT_
RADIO_BAD

Correct the radio configuration and reboot the access point.

Protocol Warning

VLAN (802.1Q) Tagging is Enabled, but no Native VLAN is Enabled

VLAN_NO_
NATIVE

Configure a native VLAN on the access point.

Protocol Warning

Unencrypted traffic is disallowed for VLAN vlanName, ID vlanID, but configuration does not guarantee an encryption mechanism
vlanName: textual VLAN name
vlanID: numeric VLAN identifier

VLAN_UNENC_TRAF

Check that the access point VLAN configuration is complete.

Protocol Warning

The user from Station host is not allowed Association via SSID ssidIdx
host: host MAC address
ssidIdx: numeric SSID index

STA_
DISALLOW_
SSID

None.

Protocol Warning

Default VLAN vlanID, for Infrastructure SSID ssidIdx is not enabled
vlanID: numeric VLAN identifier of default VLAN
ssidIdx: numeric Infrastructure SSID index

VLAN_INFRA_DISABLED

Check the VLAN configuration on the access point.

Protocol Warning

Default VLAN vlanID, for Infrastructure SSID is not the Native VLAN nativeVlanID
vlanID: numeric VLAN identifier of default VLAN
nativeVlanID: numeric VLAN identifier of Native VLAN

VLAN_INFRA_NOT_NATIVE

This message might appear if a bridge on the wireless LAN is in workgroup bridge mode. Check the VLAN configuration on the access point.

External Alert

Possible rogue AP rogueHost detected: Reason reasonText
rogueHost: rogue AP MAC address
reasonText: one of "Not running 802.1X", "Authentication timed out", "Reported username /password invalid", "AP failed client's challenge", or a numeric code

DDP_ROGUEAP

Check for a rogue access point on your network.

System Fatal

Rebooting System due to SNMP command

SYS_REBOOT_
SNMP

None.

System Warning

Ethernet Link Lost. Attempting to re-establish link to primary network

LOSS_
ETHERNET_
ACTION

None.

System Info

Ethernet Link Restored

LOSS_
ETHERNET_
RESTORED

None.


Statuses and Reasons

These are the status and reason phrases that can appear in event messages:

Successful

Unspecified Error

Previous Authentication No Longer Valid

Sender is Leaving (has left) ESS

Inactivity

Too Many Stations in BSS

Not Authenticated

Not Associated

Sender is Leaving (has left) BSS

Must Authenticate Before Associating

Can Not Support All Requested Capabilities

Can Not Confirm Association

Association Denied

Unsupported Authentication Algorithm

Authentication Transaction Sequence Number Out-of-Order

Authentication Challenge Failed

Authentication Transaction Timeout

Too Many Stations in BSS

Basic Rate Not Supported

Short Preambles Not Supported

PBCC Modulation Not Supported

Channel Agility Not Supported