Can't find what you need?


• Ask the Community
• Create a Case
Reset Search
 

 

Article

ERS 4850 EAP: Failed qpa-RoleAssociation on port and EapUbpFailure message even though the config is working

« Go Back

Information

 
TitleERS 4850 EAP: Failed qpa-RoleAssociation on port and EapUbpFailure message even though the config is working
Symptoms
  • Desktop users and VOIP phone both received the UBP policies assigned to them
  • Every re-authentication for the PC on port 1/32 yielded QoS error that there are no available resources to install the UBP, although adequate resources were available
  • CLI reported the following messages:
ERS(config-if)#show log sort-reverse

Type Unit Time                          Idx  Src Message

---- ---- ----------------------------- ---- --- -------

I    1    2020-01-17 14:25:32 GMT-04:00 45160     Inconsistent MAC data detected across filter set members
I    1    2020-01-24 10:39:01 GMT-04:00 49555     Trap:  bsnEapUbpFailure
I    1    2020-01-24 10:39:01 GMT-04:00 49556     EAP: Failed qpa-RoleAssociation on port: 1/32, MAC xx:xx:xx:xx:xx:xx
I    1    2020-01-24 10:40:01 GMT-04:00 49557     User policy filter set element count exceeds available resources
I    1    2020-01-24 10:40:01 GMT-04:00 49558     Unable to apply pre-defined UBP filter set to new user (port 1/32)
I    1    2020-01-24 10:40:01 GMT-04:00 49559     Trap:  ntnQosPolicyEvolLocalUbpSessionFailure
I    2    2020-02-07 18:37:48 GMT-04:00 24343     Unable to apply pre-defined UBP filter set to new user (port 1/32)
I    2    2020-02-07 18:37:48 GMT-04:00 24342     Evaluation precedence conflict detected (UBP filter set data)
I    2    2020-02-07 18:37:48 GMT-04:00 24341     Evaluation precedence conflict detected (UBP filter set data)
I    2    2020-02-07 18:37:48 GMT-04:00 24343     Unable to apply pre-defined UBP filter set to new user (port 1/32)



 
Environment
  • ERS 4850
  • Software release 5.12.5
Cause
PC on port 1/32 was being wrongfully rejected because its UBP could not be installed due to some leftover data in QoS prior to UBP installation for the PC and not for any other device.
Resolution
  1. Group the UBP rules in a single block to avoid taking up 6 precedences when installing the PC's policy. This will prevent interference with other applications such as DHCP snooping which utilize filters, as UBP requires a continuous space of free precedences to successfully install.
  2. All PC UBP rules in a single block to occupy just one precedence.
  3. Reboot the switch/stack or bounce "qos agent ubp policy" after the change, the former is the preferred method
Additional notes
For resolution details please refer to EAP Clients periodically get put into "held" state

 

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255