Advanced Search
Search Results
458 total results found
MERA150 - Failed to Create a Meraki Policy Object
Agent error code #MERA150 indicates the agent could not create the CIDR policy object for a granted IP. Common causes include: The organization has reached its policy object limit A transient Dashboard error or rate limit The API key's administrator lacks writ...
MERA151 - Failed to Delete a Meraki Policy Object
Agent error code #MERA151 indicates the agent removed an object from the group but could not delete the underlying policy object. The object is no longer enforced, but it remains in the organization as an orphan. Common causes include: A transient Dashboard er...
MERA152 - Failed to Read a Meraki Policy Object
Agent error code #MERA152 indicates the agent could not read a policy object referenced by the configured group. Common causes include: A transient Dashboard error or rate limit The object was deleted out-of-band between reading the group and reading the objec...
MERA400 - Invalid Response from the Meraki Dashboard
Agent error code #MERA400 indicates the Meraki Dashboard returned a response the agent could not parse. Common causes include: A proxy or captive portal returning HTML instead of the API response An unexpected API change Steps to Resolve Confirm requests reach...
Session limits and disconnecting sessions
Each Knocknoc user has a limit on how many things can be signed in and holding access at the same time. When that limit is reached, the user is shown a Session limit reached screen and asked to disconnect one of their active sessions before they can continue. ...
IPSet
Agent error codes raised by the IPSet backend.
200159 - User-ID Cannot Carry a Network Source
Agent error code #200159 occurs when a knoc's predefined source is a network, such as 192.168.100.48/29, and the knoc grants access by registering an IP against a dynamic address group tag. A registered IP is a single address, with no field for a netmask, and...
CHKP055 - Identity Awareness Cannot Hold a Network
Agent error code #CHKP055 occurs when a knoc's predefined source is a network, such as 192.168.100.48/29, and the knoc grants access through a Check Point Identity Awareness gateway. Identity Awareness maps one address per identity: add-identity takes a singl...
PFS104 - pfSense Host Alias Cannot Hold a Network
Agent error code #PFS104 indicates that a grant carried a whole network as its source (a predefined source configured as a CIDR range, not a single address), but the pfSense alias this Knoc manages is typed Host(s). A host alias can only hold single IP address...
IPSET050 - ipset Cannot Hold a Network
Agent error code #IPSET050 occurs when a knoc's predefined source is a network, such as 192.168.100.48/29, and the ipset the knoc points at stores single addresses rather than networks. An ipset has a type, fixed when the set is created. A hash:net set store...
Predefined IP sources
A knoc normally grants the IP address the user logged in from. Predefined sources change that: instead of the user's own address, the knoc grants a fixed list of addresses or networks whenever it is triggered. A user logs in, clicks the knoc, and the addresses...
nftables
Knocknoc integrates with nftables to dynamically control network access on a Linux host. When a user authenticates, their IP address is added to an nftables named set, and removed again when their access ends. Your own rules reference that set with @setname t...
Fastly
Agent error codes for the Fastly ACL backend (FSTL000-FSTL999).
FSTL001 - Authentication Failed
Agent error code #FSTL001 indicates Fastly rejected the API token in the agent's Fastly-Key header (HTTP 401). This is distinct from an authorization failure (#FSTL002), where the token is valid but cannot reach the service. Common causes include: The token h...
FSTL002 - Fastly Authorization Failed
Agent error code #FSTL002 indicates the API token authenticated but is not allowed to act on the configured service (HTTP 403). The Knoc wizard's Validate integration step reads the token's own record, so a read-only token is reported here rather than at the f...
FSTL003 - Fastly API TLS Error
Agent error code #FSTL003 indicates the TLS handshake with the Fastly API failed: the certificate could not be verified, was invalid, or did not match the host. Common causes include: A TLS-inspecting proxy presents its own certificate and its CA is not in the...
FSTL005 - Fastly API Rate Limit Exceeded
Agent error code #FSTL005 indicates Fastly answered with HTTP 429: the API token has made too many requests. The agent already retries a 429 a few times, honoring the Retry-After header, so this code means the limit was still in force after those retries. Com...
FSTL050 - Failed to Read the Fastly Service
Agent error code #FSTL050 indicates the agent could not read the configured Fastly service. It reads the service to find the active version, which is where the ACL lives. Common causes include: The Service ID is wrong (see also #FSTL051) The token cannot read ...