A Syslog messages

TABLE 57 Brocade Syslog messages (Continued)

Message level

Message

Explanation

Warning

list <ACL-num> denied <ip-proto>

 

<src-ip-addr> (<src-tcp/udp-port>)

 

(Ethernet <portnum> <mac-addr>)->

 

<dst-ip-addr> (<dst-tcp/udp-port>),

 

1 event(s)

Indicates that an Access Control List (ACL) denied (dropped) packets.

The <ACL-num>indicates the ACL number. Numbers 1 – 99 indicate standard ACLs. Numbers 100 – 199 indicate extended ACLs.

The <ip-proto>indicates the IP protocol of the denied packets.

The <src-ip-addr> is the source IP address of the denied packets.

The <src-tcp/udp-port> is the source TCP or UDP port, if applicable, of the denied packets.

The <portnum> indicates the port number on which the packet was denied.

The <mac-addr>indicates the source MAC address of the denied packets.

The <dst-ip-addr> indicates the destination IP address of the denied packets.

The <dst-tcp/udp-port> indicates the destination TCP or UDP port number, if applicable, of the denied packets.

Warning

Locked address violation at interface

 

e<portnum>, address <mac-address>

Indicates that a port on which you have configured a lock-address filter received a packet that was dropped because the packet source MAC address did not match an address learned by the port before the lock took effect.

The e<portnum> is the port number. The <mac-address>is the MAC address that was denied by the address lock. Assuming that you configured the port to learn only the addresses that have valid access to the port, this message indicates a security violation.

Warning

mac filter group denied packets on port

 

<portnum> src macaddr <mac-addr>,

 

<num> packets

Indicates that a MAC address filtergroup configured on a port has denied packets. The <portnum> is the port on which the packets were denied.

The <mac-addr>is the source MAC address of the denied packets.

The <num> indicates how many packets matching the values above were dropped during the five-minute interval represented by the log entry.

Warning

multicast no software resource:

IGMP or MLD snooping has run out of

 

resource-name, rate limited number

software resources. This message is

 

 

rate-limited to appear a maximum of once

 

 

every 10 minutes. The rate-limited number

 

 

shows the number of non-printed warnings.

296

Brocade ICX 6650 Administration Guide

 

53-1002600-01

Page 314
Image 314
Brocade Communications Systems 6650 List ACL-num denied ip-proto, Ethernet portnum mac-addr, Eportnum, address mac-address