Specifications

36 Error Messages Displayed When Editing the Configuration
658
Message Description
Relations between individual
force-authorized and common
force-authorized are inconsistent.
The authentication force-authorized enable command
cannot be set because force authentication is set for each type of
authentication functionality. Delete the following:
 dot1x force-authorized
 dot1x force-authorized vlan
 web-authentication force-authorized vlan
 web-authentication static-vlan force-authorized
 mac-authentication force-authorized vlan
 mac-authentication static-vlan force-authorized
36.1.20 IEEE 802.1X information
Table 36-20 IEEE 802.1X error messages
Message Description
dot1x(xxxxx): Cannot set "dot1x
port-control" because monitor session
mode is set now.
Port-based authentication cannot be set because port mirroring of
the xxxxx interface is enabled.
xxxxx:
ethernet <IF#>: Ethernet interface port number
dot1x(xxxxx): Cannot set " dot1x
authentication " command because
user-group or legacy mode
configuration(s) is set now.
The dot1x authentication command cannot be set because
the authentication method for each user ID or legacy mode is
enabled on the xxxxx interface.
Delete the following:
 dot1x vlan dynamic enable
 dot1x vlan dynamic radius-vlan
 web-authentication user-group
 web-authentication vlan
 mac-authentication interface
 mac-authentication vlan
dot1x(link-aggregation): Cannot set the
configuration because the ethernet <IF#>
belongs to the port-channel
IEEE 802.1X cannot be set because the specified ethernet <IF#>
belongs to a port channel.
<IF#>: Interface port number
dot1x(vlan dynamic): Cannot set "dot1x
vlan dynamic ignore-eapol-start"
because supplicant-detection is
disable-method.
The functionality for suppressing the re-authentication of requests
from a terminal cannot be set because disable is set as terminal
detection mode for VLAN-based authentication (dynamic).
dot1x(vlan dynamic): Cannot set "dot1x
vlan dynamic ignore-eapol-start"
because reauthentication mode is
invalid.
The functionality for suppressing the re-authentication of requests
from a terminal cannot be set because the re-authentication request
functionality of VLAN-based authentication (dynamic) is not
enabled.
dot1x(vlan dynamic): Cannot set "dot1x
vlan dynamic radius-vlan" because the
specified vlan <VLAN ID> is not found.
The specified VLAN <VLAN ID> cannot be registered as the radius
VLAN because the VLAN <VLAN ID> is not registered on the Switch.
<VLAN ID> : VLAN ID
dot1x(vlan dynamic): Cannot set "dot1x
vlan dynamic radius-vlan" because the
specified vlan <VLAN ID> is not
mac-vlan.
The specified VLAN <VLAN ID> cannot be registered as a radius
VLAN because VLAN <VLAN ID> is not a MAC VLAN.
<VLAN ID> : VLAN ID