CMLS-541 — ACL level 1 inconsistency
The first level of ACL is reserved for the SYSTEM.ACL usage. No new sections of this type can be specified at proxy level. The only possible usage at proxy level is to append some proxy specific configuration directives and only names used in SYSTEM.ACLs (and a special name '*') can be used here. Moreover, relevant SYSTEM.ACLs must contain proxy name in the SERVICE list.
You have been used a name %2which is either not an SYSTEM.ACL name, or the corresponding SYSTEM.ACL does not have particular proxy name in SERVICE list.
The exact CML path to the configuration node where the error occurs is printed at the beginning of the message (before the colon).