ce is not allowed when another policy is already attached to the subinterface to which the PPP/PPPoE virtual-access interface is bound.