WS-C2960-24TC-L - %PLATFORM_PM-3-HOSTACCESSFAIL - error

jgeralsky · ‎06-12-2014

Hello,

I have issue with 3 ports on the switch.

Once I put he following commands under the port I got error message :

authentication control-direction in
authentication host-mode multi-auth
authentication port-control auto
authentication periodic
authentication timer restart 240
authentication timer reauthenticate server
authentication timer inactivity server
mab

*Jun 7 06:45:18: %PLATFORM_PM-3-HOSTACCESSFAIL: Unable to configure hardware to restrict host access on Fa0/17. Port may not behave as expected.
*Jun 7 06:45:18: %PM-4-ERR_DISABLE: port-mode-failure error detected on Fa0/17, putting Fa0/17 in err-disable state

I have the same configuration under other ports and I don't have any issue.

When I remove these commands , these 3 ports are working fine.

What's going on ? Can you help me to find the root cause ?

The device is WS-C2960-24TC-L, Version 12.2(58)SE2

The current configuration of port is here :

interface FastEthernet0/17

switchport access vlan 274
switchport mode access
switchport nonegotiate
switchport voice vlan 1293
speed 100
duplex full
mls qos trust dscp
spanning-tree portfast

Thank you,

Jan

nkarthikeyan · ‎06-12-2014

Hi,

These kind of error message you get whenever your TCAM gets full. It should not be popping up for 12.2(58)SE2. It was resolved in the earlier IOS versions itself. Need to do deep dive to find any un resolved caveats for this version of IOS.

Regards

Karthik

jgeralsky · ‎06-12-2014

Hi Kartnik,

I found some bugs related to these error message and one is describing our issue :

********************************************************

CSCui14520

Symptom:

Several ports which are 802.1X-enabled port go into err-disable intermittently.

Jan 21 13:56:09: PLATFORM_PM-3-HOSTACCESSFAIL Unable to configure hardware to restrict host access on Fa0/9. Port may not behave as expected.

Jan 21 13:56:09: PM-4-ERR_DISABLE port-mode-failure error detected on Fa0/9, putting Fa0/9 in err-disable state

Workaround:

"shut" / "no shut" the port

Last Modified:

Apr 7,2014

Status:

Terminated

Severity:

3 Moderate

Product:

Cisco Catalyst 2960 Series Switches

Known Affected Releases: (1)

12.2(53)SE2

Known Fixed Releases: (0)

No release planned to fix this bug

**********************************************************************************

nkarthikeyan · ‎06-12-2014

Hi,

Rather doing a manual shut/no shut you can enable auto recovery for error-disabled.

port-mode-failure     Enable timer to recover from port mode change failure

Hope this helps

Regards

Karthik