Packet Path Troubleshoot
PREVIEW — for evaluation, not the live site

Troubleshoot › Error Decoder › %PM-4-ERR_DISABLE

Decoder

What does %PM-4-ERR_DISABLE mean?

Port shut itself off (err-disabled): link-flap

%PM-4-ERR_DISABLE: link-flap error detected on Gi1/0/24, putting Gi1/0/24 in err-disable state
In plain English: The switch saw the link on this port drop and come back 5 times within 10 seconds (the default flap setting) and shut the port down on purpose to protect the network.

Platform: Cisco IOS / IOS XE. Values shown are the documented defaults — confirm them on your platform with the check commands below.

What it means

The switch saw the link on this port drop and come back 5 times within 10 seconds (the default flap setting) and shut the port down on purpose to protect the network. The port stays down until someone fixes the cause and re-enables it. This is the switch doing its job, not the switch failing.

Likely causes, in order

Check, in order

  1. show interfaces status err-disabledLists every port the switch has shut off, so you can see whether this is one port or many.
  2. show logging | include ERR_DISABLEShows the exact reason the switch recorded and when each shutdown happened. The times often tell the story.
  3. show interfaces Gi1/0/24 counters errorsClimbing CRC and input errors point at the physical layer: cable, optic, or port. Clean counters point at the device at the other end.

The fix

Did this fix it for you? One tap — anonymous, nothing to type, and nothing you send is ever published.

Full case: this error is one stop in a bigger fault. Work the complete playbook: Port Keeps Going Err-Disabled — checks, ranked causes, the fix, and verification.

Sources

More error messages

Decoder

%PORT_SECURITY-2-PSECURE_VIOLATION

Port security violation: port shut down

Decoder

%BGP-5-ADJCHANGE

BGP neighbor went down (or came up)

Decoder

%OSPF-5-ADJCHG

OSPF neighbor dropped