Avaya 2330/4134 Troubleshooting Manual Download Page 1

Page: 1 / 394

Troubleshooting

Avaya Secure Router 2330/4134

Release 10.3.5

NN47263-700

Issue 04.03

August 2013

Summary of Contents for 2330/4134

Page 1: ...Troubleshooting Avaya Secure Router 2330 4134 Release 10 3 5 NN47263 700 Issue 04 03 August 2013...

Page 2: ...f Heritage Nortel Software for which the scope of the license is detailed below Where the order documentation does not expressly identify a license type the applicable license will be a Designated Sys...

Page 3: ...countries Downloading Documentation For the most current versions of Documentation see the Avaya Support website http support avaya com Contact Avaya Support See the Avaya Support website http suppor...

Page 4: ...4 Troubleshooting August 2013 Comments infodev avaya com...

Page 5: ...ive or unresponsive session 21 Clearing an inactive session 21 Removing an unresponsive session 22 Defining default boot parameters 22 Upgrading the normal and golden bootroms 22 Determining what modu...

Page 6: ...oes not work 56 Chapter 6 Troubleshooting a physical media problem 57 Troubleshooting cable connections 57 Loopback testing 57 Loopback testing for T1 interfaces 57 Loopback testing for T3 interfaces...

Page 7: ...96 Troubleshooting a operational failure 97 Troubleshooting GVRP 99 Troubleshooting a configuration failure 99 Troubleshooting an operational failure 100 Troubleshooting IGMP Snooping 102 Troubleshoo...

Page 8: ...pf route 139 debug ospf all 139 Debug command options for OSPFv3 for IPv6 140 debug ipv6 ospf events 140 debug ipv6 ospf ifsm 140 debug ipv6 ospf lsa 141 debug ipv6 ospf nfsm 141 debug ipv6 ospf nsm 1...

Page 9: ...mands 157 Troubleshooting PIM SM 163 PIM SM debugging commands 163 Troubleshooting IGMP 167 IGMP debugging commands 167 Troubleshooting IPv6 Multicast 169 IPv6 Multicast debugging commands 169 Trouble...

Page 10: ...ging commands 208 Troubleshooting Static VPN Peer to Peer 213 Troubleshooting Static VPN ABOT 215 Troubleshooting Dynamic VPN Peer to Peer over IP IP tunnels 217 Troubleshooting Dynamic VPN ABOT over...

Page 11: ...rms 316 Remote T1 link reports clock slip or frame drop errors 319 Network clock misconfigured does not lock or displays as bad clock 320 Configuration of BRI T1 or PRI port as clock source produces e...

Page 12: ...esses cpu history process 373 show processes cpu show config 373 show processes cpu utilization format 373 Chapter 18 Secure Router 2330 4134 system error messages 375 Message severity levels 375 Conf...

Page 13: ...0 4134 Documentation Roadmap NN47263 103 for a list of the documentation for this product Training Ongoing product training is available For more information or to register you can access the Web site...

Page 14: ...support avaya com for the most up to date documentation product notices and knowledge articles You can also search for release notes downloads and resolutions to issues Use the online service request...

Page 15: ...ature related ISDN BR voice bundles with point to multipoint ISDN BR voice bundles with a default TEI mode of point to multipoint will not come up until the bundle is manually updated to point to poin...

Page 16: ...New in this release 16 Troubleshooting August 2013 Comments infodev avaya com...

Page 17: ...s 1 What are the symptoms of the problem The more information you have about the symptoms of the problem the more easily you can identify the cause Note that the symptoms of a problem and the underlyi...

Page 18: ...most likely in the physical or data link layer A single protocol on multiple ports in one slot If so the problem is most likely in the configuration of the network layer protocol Multiple protocols on...

Page 19: ...ecessary to log on to the Secure Router 2330 4134 Procedure steps To log on to the Secure Router 2330 4134 enter the username and password login admin password setup Viewing debug commands through tel...

Page 20: ...user password When a password for a non admin user is lost the only method of recovery is to remove the affected account and recreate it using the following procedure Procedure steps 1 Enter Configur...

Page 21: ...s when occupied by an inactive or unresponsive session This section describes steps used if an administrator level user needs to gain access to Configuration Mode in the Secure Router 2330 4134 but is...

Page 22: ...sessions use the command show users Using this command will display which session or user owns Configuration Mode conf term Defining default boot parameters This procedure describes the steps necessar...

Page 23: ...parameters BOOT c 4 When prompted enter the name of the device from which you prefer the router boots Boot dev ftp cf0 cf1 usb0 cf0 5 Enter the boot file name Boot file name SR4134 Z OR SR2330 Z 6 Ent...

Page 24: ...by pressing any key see Step 2 18 Follow Steps 3 to 13 19 Enter the number that corresponds to the type of bootrom image that you are updating you must update the golden bootrom at this time Save boot...

Page 25: ...Annex A SR000406 0E6 ADSL_AN X_B Small 1 port ADSL2 Annex B SR000406 1E6 BRI_2ST Small 2 port ST interface ISDN BRI for both TDM and Packet SR000000 9E5 FXO_2M Small Secure Router Voice Interface card...

Page 26: ...bit SR000406 2E6 SERV_M OD Medium Secure Router 4134 Server Module with SCS no user license included 250 user maximum SR430400 4E6 SERV_M OD Medium Secure Router 4134 Server Module with SCS 50 user li...

Page 27: ...dule are identified by slot subslot numbers For example if the VCM_A is in slot 7 then the modules plugged into it are slot subslot 7 1 7 2 7 3 and 7 4 The functionality of the Clear Channel DS3 and t...

Page 28: ...ation device filename The filename used ifname The interface name passwd The password used to authenticate on the FTP TFTP server source The source device username The username used to authenticate on...

Page 29: ...To view the current alarms for any T3 port on the Secure Router 4134 enter show module alarms t3 slot port Packet capture This section describes the usage of Packet Capture PCap as a troubleshooting...

Page 30: ...fied with a default value of 0 which captures the entire packet The maximum and default memory that can be used by a packet capture session is 5 MB but can be configured to a lower value Captured pack...

Page 31: ...Example SR debug pcap debug pcap capture Use this command to access packet capture related commands Syntax no debug pcap capture capname Table 2 Variable definition Variable Value capname The name for...

Page 32: ...red Syntax snaplen 0 65535 Example SR debug pcap capture cap1 SR debug pcap capture cap1 snaplen 1000 debug pcap capture count Use this command to configure the number of packets to be captured Syntax...

Page 33: ...p capture cap1 SR debug pcap capture cap1 wrap debug pcap capture size Use this command to configure the buffer size Syntax size 64 5120 Example SR debug pcap capture cap1 SR debug pcap capture cap1 s...

Page 34: ...p1 SR debug pcap capture cap1 attach bundle bun1 debug pcap capture commit Use this command to commit packet capture configurations Syntax commit Example SR debug pcap capture cap1 SR debug pcap captu...

Page 35: ...e dump Syntax dump Example SR debug pcap capture cap1 SR debug pcap capture cap1 dump debug pcap capture clear stats Use this command to clear packet capture statistics Syntax clear stats Example SR d...

Page 36: ...ions 6 debug pcap enable Use this command to enable or disable all configured packet capture sessions Syntax no debug pcap enable Example SR debug pcap enable debug pcap cleanup Use this command to de...

Page 37: ...Use this command to save the packets captured Syntax no debug pcap save local filename network address path Table 8 Variable definition Variable Value address The network address filename The filenam...

Page 38: ...cap dump debug pcap clear stats Use this command to clear packet capture statistics Syntax no debug pcap clear stats Example SR debug pcap clear stats Interpreting LEDs This section describes how to i...

Page 39: ...is section describes the LED behavior for the fan tray FAN LED Green The fan tray is installed and all fans are functioning normally Red The fan tray is not present or one or more fans have failed Off...

Page 40: ...es are installed but one or more are malfunctioning For more information see the status LEDs on the small modules Off If the Secure Router 4134 2330 is powered and the LED is off no small modules are...

Page 41: ...rify the hardware serial number Procedure steps To show the hardware serial run the following command show system configuration Verifying what software version is running This procedure describes the...

Page 42: ...r provides this information if you have previously configured it My IP address 10 10 13 14 8 Enter the subnet mask the router provides this information if you have previously configured it My subnet m...

Page 43: ...WARNING Configuration changes not yet saved 3 When prompted enter the name of the device from which you prefer the router boots Boot dev ftp cf0 cf1 usb0 usb0 4 Enter the boot file name the router pr...

Page 44: ...utoUpdate 1 NormalBTupd 2 GoldenBTupd 3 NoUpd 0 If you select 0 1 or 2 the router returns the following BOOT PARAMETERS HAVE BEEN SAVED 14 Reboot the Secure Router 4134 to activate changes or continue...

Page 45: ...another local device or send to a network FTP or TFTP server Procedure steps 1 Enter the command to copy to a local device file copy source filename destination filename 2 Enter the command to upload...

Page 46: ...are to transmit a predefined pattern of bits in the payload for a selected channel Test equipment at the far end of the connection can then detect that pattern and test the data for bit errors or the...

Page 47: ...for testing patterntype The BERT test pattern type Possible choices are 2 11 2 11 pattern 2 15 2 15 pattern 2 20 2 20 pattern QRSS QRSS pattern default Showing BERT test results and status To display...

Page 48: ...odule type Applicable modules are T1 E1 T3 and CT3 Only modules that are present will be available for testing Resetting to factory defaults This procedure describes the steps necessary to reset the S...

Page 49: ...boot Important This command is issued from the CLI root 2 When prompted press any key to stop the auto boot The boot menu appears 3 Press X to reset the switch to factory defaults Importing a saved co...

Page 50: ...er the host and filename For example host X X X X fileName path folder system cfg Viewing the current configuration This procedure describes the steps necessary to view the current system configuratio...

Page 51: ...performs a self test At the successful conclusion of the self test sequence LED activity begins The following table describes LED behavior at power up Table 15 Secure Router 4134 LED behavior at powe...

Page 52: ...roblem You can identify a power problem by the inactivity of the LEDs and the fans on the Avaya Secure Router 2000 4134 Use the procedure in this section to troubleshoot a power problem Procedure step...

Page 53: ...power reaching the router LEDs are active Ensure that the power cable is firmly connected to the router and to the electrical outlet or DC power source and that associated breakers are in the on posit...

Page 54: ...ical Support Be sure to note whether the fans are running or not Console problem Use the procedure in this section if you have verified that power is reaching the Secure Router 2330 4134 and the chass...

Page 55: ...image is compatible with the interface modules that are installed in the chassis and that the image supports the features and functionality you are attempting to use For example Secure Router Release...

Page 56: ...hines in an attempt to determine the source of the error You can also check and compare routing tables on a problem machine and a functioning machine If you are not able to ping the Secure Router 2330...

Page 57: ...ack testing Perform loopback tests to troubleshoot a circuit For example use a loopback test on a port to verify that the port is functioning When you use loopback testing to verify the circuit functi...

Page 58: ...ariable definitions Variable Value ansi_fdl inband_standard inband_alternate The loop code for the remote line loopback test The default value is ansi_fdl FDL loop code as defined in ANSI T1 403 Loopb...

Page 59: ...on the CT3 module interfaces Procedure steps 1 To access loopback testing commands enter test ct3 slot port 2 To begin a loopback test of a local line at the CT3 level enter loopback line_ct3 3 To be...

Page 60: ...DTE mode enter dte_loop 3 To begin a line test for a serial interface in DCE mode enter dce_loop line 4 To begin a cable test for a serial interface in DCE mode enter dce_loop cable 5 To begin a remot...

Page 61: ...AT 4 applicable to 4 port module only Status of interface 4 Red The port is not configured Green A call is in progress Yellow The port is configured and ready to accept calls Embedded LEDs at the RJ11...

Page 62: ...The interface is in a loopback mode or is running diagnostics Green The link or channel is active and receiving a valid signal To view T1 E1 alarms run the following command show module alarms t1 e1...

Page 63: ...section describes steps you use to troubleshoot CT3 The following table describes the LED states for the CT3 Medium Module Table 21 CT3 Module LEDs LED Description STAT General module status Off No po...

Page 64: ...ng a valid signal When you power on the Secure Router 2330 4134 with a serial configuration the serial interface software polls the port hardware status to ensure the connected cable matches the port...

Page 65: ...outer 4134 supports only one port of any WAN data Small Module If you install a 2 port Small Module in Slot 2 and use the Small Module for data connections one port only is functional port 1 This limi...

Page 66: ...point to point ISDN debugging commands debug isdn Use this command to configure ISDN debugging Syntax no debug isdn Example SR debug isdn debug isdn all Use this command to enable or disable all ISDN...

Page 67: ...ages Syntax no debug isdn q921 bundle Table 27 Variable definition Variable Value bundle The bundle name Example SR debug isdn q921 test debug isdn q921 timers Use this command to display q 921 timers...

Page 68: ...931 timers Syntax no debug isdn q931 timers bundle Table 30 Variable definition Variable Value bundle The bundle name Example SR debug isdn q931 timers test debug isdn physical layer Use this command...

Page 69: ...undle name Example SR debug isdn data path test debug isdn test isdn call Use this command to make an ISDN call Syntax no debug isdn test isdn call bundle Table 33 Variable definition Variable Value b...

Page 70: ...dle The bundle name Example SR debug isdn isdn status test debug isdn q931Statistics Use this command to display or reset q 931 statistics Syntax no debug isdn q931Statistics bundle Table 36 Variable...

Page 71: ...ntax no debug isdn q921Statistics bundle Table 37 Variable definition Variable Value bundle The bundle name Example SR debug isdn q921Statistics test Troubleshooting ISDN Troubleshooting August 2013 7...

Page 72: ...Troubleshooting a physical media problem 72 Troubleshooting August 2013 Comments infodev avaya com...

Page 73: ...face interface command to display a detailed information including state and counters for an Ethernet interface Use the show interface bundles to display all the configured bundle interfaces and a sum...

Page 74: ...ebug gvrp all cli event packet timer debug igmp all decode encode event fsm tib debug igmp snooping all event packet timer debug lacp all event packet timer debug spanning tree all cli event packet ti...

Page 75: ...e topology If all switches has to be in same region then check whether there equal number of instances on all the switches and check whether the same VLANs are mapped to same instance ID on all switch...

Page 76: ...ce Troubleshooting an operational failure Traffic looping Check the states of spanning tree state machine using the show spanning tree detail command In the case the bridge is a root bridge all the li...

Page 77: ...affic looping did not stop then shutdown the redundant path links Bridge is selected as a Root bridge even though there is another bridge with the Lower Priority Issue the show spanning tree detail co...

Page 78: ...to see whether the port is receiving any BPDU using the show spanning tree statistics command The number of packets received should be incrementing on a regular basis if this bridge is not root bridge...

Page 79: ...e almost same as the number of BPDU packets transmitted by sender switch Problem with interoperating with CISCO device Check whether the cisco interoperability command is enabled on port connected to...

Page 80: ...command Ports configured as Port Fast BPDU Guard are in Disable Discarding states Make sure the port in not receiving any BPDUs Use debug tracing to monitor the packets received by port with the debug...

Page 81: ...r precedence for regional root selection Check the path cost of the ports to the CIST root bridge The lower the path cost the more changes the bridge becoming regional root If the root bridge is outsi...

Page 82: ...ets Troubleshooting a Frame Relay connection This section details the commands used to troubleshoot a Frame Relay connection Frame Relay debugging commands debug fr Use this command to access Frame Re...

Page 83: ...debug fr pvc info test 200 debug fr bundle info Use this command to show detailed frame relay bundle interface information Syntax debug fr bundle info bundle Table 39 Variable definition Variable Val...

Page 84: ...rection tx Transmit direction rx Receive direction Example SR debug fr packet lmi debug_direction tx debug fr packet inverse arp Use this command to dump FR inverse arp packets Syntax no debug fr pack...

Page 85: ...no debug fr mfr Example SR debug fr mfr debug fr mfr states Use this command to print the current state of links in an MFR bundle Syntax no debug fr mfr states bundle Table 42 Variable definition Vari...

Page 86: ...onfiguration and status Syntax no debug fr frf20 bundle 16 1022 Table 43 Variable definition Variable Value bundle The bundle name Example SR debug fr frf20 test 200 Troubleshooting a PPP connection T...

Page 87: ...command to display PPP states information Syntax no debug ppp pppstates Example SR debug ppp pppstates debug ppp debug_link Use this command to set link specific debug Syntax no debug ppp debug_link...

Page 88: ...formation Syntax no debug ppp ipcp Example SR debug ppp ipcp debug ppp bcp Use this command to display bcp debug information Syntax no debug ppp bcp Example SR debug ppp bcp debug ppp ipv6cp Use this...

Page 89: ...the interface is not created or the interface is not a member of the VLAN Make sure the interfaces is created and it s VLAN membership using the show bridge port command Troubleshooting an operational...

Page 90: ...nctionally or characteristic unless used in an interface configure vlan database configure vlan vlan vid name WORD To bind a VLAN to an interface use the following command configure interface ethernet...

Page 91: ...ion rule id ip4 ipaddr netmask ipaddr vlan vid The valid range for the Rule Id is 1 12 The IP address field can be either an IP address or a subnet protocol based VLAN classification rule If the proto...

Page 92: ...e vlan command Assigning a VLAN Classification Rule to an interface fails Make sure the interface is in Hybrid mode using the show bridge port command Configuration fails with Rule Subnet overlaps wit...

Page 93: ...the interface again Shutdown and restart the interface Hot Swap the card if possible Troubleshooting VLAN stacking Troubleshooting a configuration failure The configuration command may fail because of...

Page 94: ...roubleshooting port mirroring Use the following procedures to troubleshoot port mirroring problems Troubleshooting a configuration failure The port mirroring feature is supported only on the non CPU E...

Page 95: ...ed for this card error There can not be more than one Analyzer port on each card Use the show mirror command to get a list of the configured Monitored and Analyzer ports Troubleshooting an operational...

Page 96: ...the link aggregation is forced to be formed without any LACP negotiation In other words the switch will neither send the LACP packet nor process any incoming LACP packet configure interface ethernet 6...

Page 97: ...down You should have verified the port states prior to adding them in the channel group Use show interface interface command to verify the port state In the case the interface is in down state check...

Page 98: ...cp all packet event timer command Use the no form of the command to stop debugging Traffic rate is low Verify the sum of the port rates on both sides using the show interface interface command Verify...

Page 99: ...outer 2330 4134 Configuration Layer 2 Ethernet NN47263 501 for information 2 Configure the port GVRP configure interface ethernet 6 1 gvrp configure interface ethernet 6 1 gvrp gvrp enable GVRP must b...

Page 100: ...debug gvrp cli command Use the no form of the command to stop debugging Troubleshooting an operational failure VLANs are not learned Verify the port state using the show bridge port command Verify the...

Page 101: ...ide of the link configure gvrp configure gvrp no gvrp enable configure interface ethernet 5 1 gvrp configure interface ethernet 5 1 gvrp no gvrp enable configure interface ethernet 5 1 gvrp gvrp enabl...

Page 102: ...t IGMP Snooping Troubleshooting a configuration failure VLAN not present Error Invalid vlan id 3 For IGMP Snooping to be enabled on a VLAN the VLAN has to be present during configuration Refer user gu...

Page 103: ...following symptoms Multicast traffic is not received by host Multicast traffic is flooded to all the ports in the VLAN IGMP Snooping is not working properly 1 Ensure the host ports ports connected to...

Page 104: ...interface is not seen it means that the IGMP messages from Host interface is not received by IGMP Snooping module Verify the IGMP Snooping counters using the show ip igmp snooping statistics command...

Page 105: ...module is not getting any messages from the ports 7 Recover from the issue If the multicast group association with host interface is not seen try the following options a Ensure the host interface rece...

Page 106: ...d explicitly using no mrouter interface name command Dynamic mrouter ports can be cleared using the clear ip igmp snooping mrouter command Troubleshooting a Data Link Layer problem 106 Troubleshooting...

Page 107: ...mp data 0 1 Table 44 Variable definitions Variable Value 0 1 Enables or disables the dump of data Enter 0 to disable and 1 to enable The default value is 0 Example SR debug oam cfm dump data 0 debug o...

Page 108: ...er a value in the range of 0 to 4 The default value is 0 The level values correspond to the following descriptions 0 none 1 major 2 minor 3 detail 4 flood value Specifies the feature Use quotation mar...

Page 109: ...ebug oam cfm debug feature LT LPORT MIP debug level 3 debug oam no cfm Use the command in this section to end the output of CFM related debug and dump messages Syntax no cfm Example SR debug oam no cf...

Page 110: ...Troubleshooting Ethernet CFM 110 Troubleshooting August 2013 Comments infodev avaya com...

Page 111: ...ify the Interfaces Check that routers are connected the interfaces are UP and configured correctly by issuing the following commands show interface show ip interface brief 2 Verify the Routing Protoco...

Page 112: ...1 Ensure all MPLS prerequisites are satisfied 2 Ensure the static FTN and static ILM are configured properly with valid interface and labels show mpls static ftn show mpls static ilm 3 Check the forwa...

Page 113: ...and commands used to troubleshoot LDP LSPs LDP session fail to establish Label Binding Failure Ensure all MPLS prerequisites are satisfied Ensure the LDP protocol is enabled globally Issue the command...

Page 114: ...Ensure the LDP protocol is enabled on the interface Issue the command show ldp interface Troubleshooting an MPLS problem 114 Troubleshooting August 2013 Comments infodev avaya com...

Page 115: ...nsure advertise labels are enabled in the LDP mode and in the peer router show ldp advertise labels Check the FEC table to get the FEC Label binding for a particular prefix show ldp fec Check the LDP...

Page 116: ...s checked with the show command For LDP start with debug ldp events this will give all the events of LDP Make sure the protocol messages are sending out and receiving Make sure the state machine is wo...

Page 117: ...k the particular MPLS LDP route is selected show ip route database 8 Make sure the forwarding entry and route database are in sync 9 Check the LDP LSP statistics for transmitted packets show mpls stat...

Page 118: ...ubleshoot RSVP TE LSPs RSVP session fails to establish Follow the below steps to troubleshoot the problem Procedure steps 1 Ensure all the MPLS prerequisites are satisfied 2 Ensure the RSVP protocol i...

Page 119: ...se error codes Table 46 Error scenarios Error scenario Cause Corrective Action Routing Problem Routing issues RSVP trying to send packets but not able to send to peer Problem can be solved by adding t...

Page 120: ...ailed analysis you can issue the debug rsvp commands If there are more sessions there will be more prints to the console and the user needs to filter this information by lsp id of the particular sessi...

Page 121: ...re RSVP session is UP Check the session status show mpls traffic eng lsp session show mpls traffic eng lsp session session name 2 Ensure the map routes are configured properly for the particular LSP 3...

Page 122: ...onfiguration correct in the peer routers and in the entire Lsp path Execute the command traffic eng lsp restart in lsp mode to restart the particular lsp Check to see if the session comes up after the...

Page 123: ...5 Check the Tunnel is UP and running and verify the session forwarding entry and route data base are in sync show mpls table forwarding show ip route show ip route database 6 Check the static L2VPN VC...

Page 124: ...g ldp vc 6 Check the MPLS forwarding statistics for L2VPN traffic show mpls stats ftn show mpls stats interface 7 If the statistics are not getting updated check the incoming data packet show interfac...

Page 125: ...followed by the no shutdown command on that interface to try and clear the issue The route tracing feature is also useful in identifying points of failure in the network You use route tracing for netw...

Page 126: ...lt value is udp sipaddress ipaddr The source IP address for the probing packet Enter the IP address in IPv4 format if you are using the trace command Enter the IP address in IPv6 format the address pr...

Page 127: ...selected and FIB for it to be active and in operation in the forwarding plane The preceding command options for displaying the entire database or a specific destination provide this detail If the rou...

Page 128: ...lows on specific interfaces To debug issues at the interface enable OSPF packet tracing on a specific interface The following figure shows IPv4 command options for OSPF packet tracing on an interface...

Page 129: ...LSA generation and processing and related aspects use the following specific command options debug ospf lsa debug ipv6 ospf lsa debug ospf events debug ipv6 ospf events debug ospf route debug ipv6 osp...

Page 130: ...summary of the OSPF operations and configuration on the system show ip ospf show ipv6 ospf show ip protocols ospf show ipv6 protocols ospf Use the following commands and related options to collect ver...

Page 131: ...processes clear ip ospf clear ipv6 ospf Be aware that clearing the OSPF processes deletes all OSPF routes affecting all adjacencies in the router which also has a corresponding effect on the OSPF netw...

Page 132: ...pv6 summary show ip protocols bgp Use the following commands to get information about the BGP routes learned and the route status show bgp ipv4 show bgp ipv6 The following figure shows the command syn...

Page 133: ...n The following figure shows the CLI command options you use to clear BGP routes Figure 15 clear bgp all command options You can also selectively delete BGP routes based on the Secure Router 2330 4134...

Page 134: ...v6 rip options Figure 17 debug ipv6 rip command options Use the following commands for debugging issues related to route learning and packet flows debug rip packet debug ipv6 rip packet debug rip even...

Page 135: ...ow ipv6 rip database RIP clear options In certain situations you must delete specific RIP routes to delete stale information or you must force RIP to delete its entire database and relearn all routes...

Page 136: ...nts Use this command to debug OSPF event information Syntax no debug ospf events event Table 48 Variable definition Variable Value event The event type Available options are abr ABR events asbr ASBR e...

Page 137: ...mers debug ospf lsa Use this command to debug OSPF Link State Advertisement Syntax no debug ospf lsa flooding generate install maxage refresh Table 50 Variable definition Variable Value flooding LSA f...

Page 138: ...rmation Syntax no debug ospf nsm interface redistribute Table 52 Variable definition Variable Value interface The RIB interface redistribute RIB redistribution Example SR debug ospf nsm interface debu...

Page 139: ...d to debug OSPF route information Syntax no debug ospf route ase ia install spf Table 54 Variable definition Variable Value ase External route calculation information ia Inter area route calculation i...

Page 140: ...ue event The type of event Possible choices are abr OSPF ABR events asbr OSPF ASBR events lsa OSPF LSA events nssa OSPF NSSA events os OSPF OS interaction events router OSPF router events vlink OSPF v...

Page 141: ...LSA generation install LSA Installation maxage LSA MaxAge processing refresh LSA Refreshment debug ipv6 ospf nfsm Use this command to debug OSPFv3 Neighbor State Machine debug ipv6 ospf nfsm events st...

Page 142: ...e description detail Detailed information hello OSPF Hello ls ack OSPF Link state acknowledgement ls request OSPF Link state request ls update OSPF Link state update recv Packets received send Packets...

Page 143: ...GP for IPv6 This section describes debug command options that you use to troubleshoot issues with BGP and BGP for IPv6 debug bgp Use this command to debug the Border Gateway Protocol Syntax no debug b...

Page 144: ...Syntax no debug bgp events Example SR debug bgp events debug bgp filters Use this command to debug BGP filters Syntax no debug bgp filters Example SR debug bgp filters debug bgp fsm Use this command...

Page 145: ...mple SR debug bgp nsm debug bgp updates Use this command to debug BGP updates Syntax no debug bgp updates in out Table 62 Variable definition Variable Value in Debug inbound updates out Debug outgoing...

Page 146: ...s command to configure RIP debugging Syntax no debug rip Example SR debug rip debug rip all Use this command to enable all RIP debugging Syntax no debug rip all Example SR debug rip all debug rip even...

Page 147: ...e Value detail Detailed information displayed recv Debug RIP receive packets send Debug RIP send packets Example SR debug rip packet detail Debug command options for RIPng for IPv6 This section descri...

Page 148: ...tax no debug ipv6 rip events Example SR debug ipv6 rip events debug ipv6 rip nsm Use this command to debug RIPng and NSM communications Syntax no debug ipv6 rip nsm Example SR debug ipv6 rip nsm debug...

Page 149: ...rip packet recv Example SR debug ipv6 rip packet recv debug ipv6 rip packet send Use this command to debug RIPng send packets Syntax no debug ipv6 rip packet send Example SR debug ipv6 rip packet send...

Page 150: ...to debug VRRP error messages Syntax no debug ip vrrp error Example SR debug ip vrrp error debug ip vrrp state Use this command to debug VRRP state transitions Syntax no debug ip vrrp state Example SR...

Page 151: ...VRRP packet errors Syntax no debug ip vrrp packet Table 64 Variable definition Variable Value all All packets arp ARP packets recv Packets received send Packets sent Example SR debug ip vrrp packet al...

Page 152: ...Troubleshooting unicast routing 152 Troubleshooting August 2013 Comments infodev avaya com...

Page 153: ...acing the multicast distribution tree for specific groups and sources in the network The multicast traceroute tool mtrace is similar to the traceroute tool for unicast traffic Use mtrace to trace IPv4...

Page 154: ...of the multicast forwarding entry including the incoming interface the list of outgoing interfaces as well as when the entry was created The up time and expiry time is useful for determining how long...

Page 155: ...p multicast Use this command to debug IP multicast information Syntax no debug ip multicast Example SR debug ip multicast debug ip multicast all Use this command to enable all IPv4 multicast debugging...

Page 156: ...ticast register debug ip multicast stats Use this command to debug multicast statistics Syntax no debug ip multicast stats Example SR debug ip multicast stats debug ip multicast vif Use this command t...

Page 157: ...debug dvmrp all Use this command to enable all DVMRP debugging Syntax no debug dvmrp all Example SR debug dvmrp all debug dvmrp events Use this command to debug DVMRP events Syntax no debug dvmrp eve...

Page 158: ...ug DVMRP neighbor events Syntax no debug dvmrp events neighbor Example SR debug dvmrp events neighbor debug dvmrp events packet Use this command to debug DVMRP packet events Syntax no debug dvmrp even...

Page 159: ...mfc Use this command to debug multicast forwarding cache events Syntax no debug dvmrp mfc Example SR debug dvmrp mfc debug dvmrp mib Use this command to debug the DVMRP MIB Syntax no debug dvmrp mib...

Page 160: ...ple SR debug dvmrp packet graft debug dvmrp packet graft ack Use this command to debug graft ack packets Syntax no debug dvmrp packet graft ack Example SR debug dvmrp packet graft ack debug dvmrp pack...

Page 161: ...s Syntax no debug dvmrp packet probe Example SR debug dvmrp packet probe debug dvmrp packet prune Use this command to debug prune packets Syntax no debug dvmrp packet prune Example SR debug dvmrp pack...

Page 162: ...Example SR debug dvmrp timer probe debug dvmrp timer prune Use this command to debug all prune timers Syntax no debug dvmrp timer prune Example SR debug dvmrp timer prune debug dvmrp timer route Use...

Page 163: ...sparse mode Use this command to debug PIM Sparse Mode Syntax no debug pim sparse mode Example SR debug pim sparse mode debug pim sparse mode all Use this command to enable all PIM debugging Syntax no...

Page 164: ...g the PIM MIB Syntax no debug pim sparse mode mib Example SR debug pim sparse mode mib debug pim sparse mode nexthop Use this command to debug the PIM next hop Syntax no debug pim sparse mode nexthop...

Page 165: ...ices are all All packets hello Hello packets register PIM register messages jp Join Prune messages bsr BSR messages assert PIM assert messages crp CRP messages in Incoming PIM packets out Outgoing PIM...

Page 166: ...SR debug pim sparse mode timer assert debug pim sparse mode timer bsr Use this command to debug PIM bootstrap timers Syntax no debug pim sparse mode timer bsr Example SR debug pim sparse mode timer bs...

Page 167: ...e timer register Use this command to debug PIM register timers Syntax no debug pim sparse mode timer register Example SR debug pim sparse mode timer register Troubleshooting IGMP IGMP debugging comman...

Page 168: ...nd to enable IGMP encode debugging Syntax no debug igmp encode Example SR debug igmp encode debug igmp events Use this command to enable IGMP event debugging Syntax no debug igmp events Example SR deb...

Page 169: ...t IPv6 Multicast debugging commands debug ipv6 multicast Use this command to debug multicast information Syntax no debug ipv6 multicast Example SR debug ipv6 multicast debug ipv6 multicast all Use thi...

Page 170: ...Example SR debug ipv6 multicast mrt debug ipv6 multicast register Use this command to debug multicast PIM register messages Syntax no debug ipv6 multicast register Example SR debug ipv6 multicast regi...

Page 171: ...pv6 pim Use this command to access next level IPv6 PIM commands Syntax no debug ipv6 pim Example SR debug ipv6 pim debug ipv6 pim sparse mode Use this command to access debug commands for PIM SM for I...

Page 172: ...to debug PIM MFC updates Syntax no debug ipv6 pim sparse mode mfc Example SR debug ipv6 pim sparse mode mfc debug ipv6 pim sparse mode mib Use this command to debug the PIM MIB Syntax no debug ipv6 p...

Page 173: ...bug a PIM packet Syntax no debug ipv6 pim sparse mode packet packettype Table 67 Variable definition Variable Value packettype The packet type to debug Possible choices are all All packets hello Hello...

Page 174: ...ipv6 pim sparse mode timer debug ipv6 pim sparse mode timer assert Use this command to debug assert timers Syntax no debug ipv6 pim sparse mode timer assert Example SR debug ipv6 pim sparse mode timer...

Page 175: ...e timers Syntax no debug ipv6 pim sparse mode timer joinprune Example SR debug ipv6 pim sparse mode timer joinprune debug ipv6 pim sparse mode timer register Use this command to debug register timers...

Page 176: ...MLD decode debugging Syntax no debug mld decode Example SR debug mld decode debug mld encode Use this command to enable MLD encode debugging Syntax no debug mld encode Example SR debug mld encode debu...

Page 177: ...mmand to enable MLD FSM debugging Syntax no debug mld fsm Example SR debug mld fsm debug mld tib Use this command to enable MLD Tree Info Base debugging Syntax no debug mld tib Example SR debug mld ti...

Page 178: ...Troubleshooting IPv4 and IPv6 multicast routing 178 Troubleshooting August 2013 Comments infodev avaya com...

Page 179: ...he show interface bundle bundlename to display ADSL bundle status and configuration ADSL SM Card initialization If the ADSL card is not working or no LEDs are illuminated Solution Check the LED status...

Page 180: ...REEN Power on and the module is operational LINK STAT Indicates the status of the WAN bundle OFF Interface isout of service Yellow Bundle not configured or when PVC link is down GREEN Bundle is UP Use...

Page 181: ...Processor MPC8349 Memory Size 1G Model Number SR4134 Serial Number MT 80 Runtime 10 2 0 0 Created Jul 24 2009 04 44 23 Boot 0 0 0 45 NORMAL Boot NorBoot 0 0 0 45 GolBoot 0 0 0 45 Slot SubSlot Card Typ...

Page 182: ...module configuration sample output for layer 1 parameters MT 6013 show module configuration xdsl 1 1 Software Version 3 10L 06 A2pB022g d20h adsl ADSL driver and PHY status Status ShowtimeRetrain Reas...

Page 183: ...ard type show module configuration sample output for software version MT 6013 show module configuration xdsl 1 1 Software Version 3 10L 06 A2pB022g d20h adsl ADSL driver and PHY status Status Showtime...

Page 184: ...ocols are supported PPPoA PPPoE IPoA IPoE MPoA Verify the authentication parameters for PPPoA and PPPoE bundles Verify the ADSL bundle configuration using the show interface bundle adslBundleName comm...

Page 185: ...d ISP Verify that the sent username password is configured Ensure that the user understands the need to configure peer name and password for CHAP authentication for PPPoA Configuration steps for PAP a...

Page 186: ...isting WAN bundle interface xdsl2 SR configure interface bundle xdsl2 atm SR configure interface bundle xdsl2 atm pvc 0 35 Configuring existing PVC connection SR configure interface bundle xdsl2 atm p...

Page 187: ...ts Rx 0 Err Packets Tx 0 Bytes Tx 0 Packets Tx 0 Dropped Tx 0 Overruns Tx 0 ATM QoS Configurations Class_vc Name bqos Service Category nrtvbr PCR Value 235 SCR Value 2300 MBS value 100 ADSL Traffic is...

Page 188: ...Troubleshooting ADSL 188 Troubleshooting August 2013 Comments infodev avaya com...

Page 189: ...how commands on page 189 Debug trace commands on page 190 Common issues on page 190 SIP survivability show commands show ssm sip server status show ssm sip server configuration show ssm sip server sta...

Page 190: ...n The SIP survivability features are only supported in release 10 2 0 0 and later Verify that the current release on the Avaya Secure Router 2330 4134 is supported by using the show version command Fi...

Page 191: ...address for SIP survivability using bind ip command under configure voice service voip ssm Figure 22 Sample output for SSM enable Figure 23 Sample Bind IP configuration for SSM SSM stuck in backup mo...

Page 192: ...n using show ssm cac status If none is configured configure the CAC links WAN or LAN links through which central SIP server is reachable using the cac max calls CLI command under configure voice servi...

Page 193: ...tion command If none are configured configure the SIP domain name for the deployment using the domain CLI command under configure voice service voip ssm sip server Figure 29 Sample SIP domain configur...

Page 194: ...ty User Guide NN47263 510 Figure 32 show ssm licensed users sample output Unable to call from SIP client Possible cause 1 SIP client not registered Solution Verify whether SIP client is registered usi...

Page 195: ...using default gateway command under the configure voice service voip ssm subtree Possible cause 2 Bandwidth not available for the call Solution Verify current simultaneous call count and maximum numbe...

Page 196: ...Troubleshooting SIP survivability 196 Troubleshooting August 2013 Comments infodev avaya com...

Page 197: ...rmitted or denied one must know where these subnets are located In simple cases there may be only one directly connected subnet to protect from the internet But anything more complicated than a single...

Page 198: ...of the system The console printing simply cannot keep up with packet rates on network interfaces Thus Avaya has implemented a feature within the debug firewall all command will somewhat counter intuit...

Page 199: ...exit show firewall algs Does the packet leave the firewall You may find the answer to this with a packet sniffer or with an interface based packet capture But debug firewall packet will also show whic...

Page 200: ...5 255 0 any any Policy 12 describes the range of addresses starting from 30 1 1 0 and continuing up through almost all the available IP address range to 255 255 255 0 Policy 12 does not describe the s...

Page 201: ...h numpkts The number of packets to display The default is 100 protocol Match a protocol by identifying number Possible choices are 1 ICMP protocol 6 TCP protocol 17 UDP protocol 47 GRE protocol 50 ESP...

Page 202: ...used to equipment which expresses NAT policy on the egress untrusted interface not the ingress interface trusted In the Secure Router several different forms of NAT may be configured Most commonly th...

Page 203: ...h have a NATing action Getting details After comparing the configured policy to the goals and map you will move into seeing the events with debug and show commands NAT is part of the firewall so the c...

Page 204: ...area name the backup interface for example firewall global nat failover wan1 wan2 Troubleshooting VPN This section details techniques used to troubleshoot VPN Before getting started Avaya Secure Rout...

Page 205: ...all policies to allow your VPN traffic in Each Secure Router must know the IP route to the far end protected network s behind the peer security gateway s IPsec VPNs have a well deserved reputation for...

Page 206: ...p in mind that an IKE initiator and an IKE responder will log different chains of events From an initiator s perspective scan through the logged events for good messages From a responder s perspective...

Page 207: ...firewall and VPN systems Common errors Lack of a firewall policy on the internet side to allow IKE in Mismatching some parameters of phase I or phase II Read through those log events If you are using...

Page 208: ...mmand to enable or disable tunnel debug commands Syntax no debug ip tunnel Example SR debug ip tunnel debug ip tunnel all Use this command to debug all tunnel messages Syntax no debug ip tunnel all Ex...

Page 209: ...messages Syntax no debug ip tunnel decap Example SR debug ip tunnel decap debug ip tunnel packet Use this command to debug packet trace messages Syntax no debug ip tunnel packet Example SR debug ip t...

Page 210: ...g commands Syntax no debug ipv6 tunnel Example SR debug ipv6 tunnel debug ipv6 tunnel all Use this command to debug all messages Syntax no debug ipv6 tunnel all Example SR debug ipv6 tunnel all debug...

Page 211: ...sages Syntax no debug ipv6 tunnel decap Example SR debug ipv6 tunnel decap debug ipv6 tunnel packet Use this command to debug packet trace messages Syntax no debug ipv6 tunnel packet Example SR debug...

Page 212: ...es Syntax no debug crypto ike Example SR debug crypto ike debug crypto ipsec mode spd Use this command to debug nailed up tunnel related messages Syntax no debug crypto ipsec mode spd Example SR debug...

Page 213: ...interface configuration enter show crypto interfaces Verify that the public VPN interface is configured as an untrusted interface and that the internal network interfaces are configured as trusted in...

Page 214: ...200 in permit address 30 1 1 0 24 10 1 1 0 24 exit 5 To display the statistics for connections that are occurring through the firewall enter show firewall connections all Verify that traffic is passi...

Page 215: ...d counters enter show crypto ike sa all 13 To display the IPSEC SA statistics enter show crypto ipsec sa all Troubleshooting Static VPN ABOT Use the following steps to troubleshoot static routing over...

Page 216: ...llowing is a sample configuration firewall internet policy 101 in permit protocol udp port any 4500 self In cases where the NAT is enabled on one of the peers you do not need to open port 4500 You als...

Page 217: ...are some additional commands that can be useful for debugging static VPN debug crypto ike enables IKE negotiation debug debug crypto ipsec enables IPSec policy related debug debug crypto ca enables P...

Page 218: ...emote identity 3 When the tunnel protection command is applied to a tunnel interface the command creates an IKE policy with the following default attributes Encryption algorithm 3des Hash Algorithm sh...

Page 219: ...has to be assigned to the IPIP tunnel to make it a layer 3 interface When configuring the tunnel the tunnel source must be an interface name rather than an IP address as the IP address can change For...

Page 220: ...p2 The tunnel protection command also creates an IPSec policy with the following default attributes Protocol esp Mode transport Encryption Algorithm 3des Hash Algorithm sha1 hmac A sample configuratio...

Page 221: ...bles debug for interface state change messages debug dhcp client enables DHCP client debug messages for VPN ABOT Secure Router to Avaya VPN router interoperability tips In both static and dynamic tunn...

Page 222: ...P IP encapsulated tunnels Note that with tunnel routing you must configure an IP address on the tunnel interface and you must enable routing for both the tunnel interface and the interface on which th...

Page 223: ...hop for the routes learned over the tunnel interface Procedure steps 1 To display the IP interfaces enter show ip interfaces brief 2 To display the RIP enabled interfaces enter show ip rip interface V...

Page 224: ...he cause debug ospf route This debug command can be used to debug issues in routing calculations For example if the adjacency has reached the Full state but an expected route in the router is missing...

Page 225: ...420 bytes As a result one of the following changes is required on the Secure Router OSPF settings Set OSPF MTU to 1500 interface tunnel toNVR ip ospf mtu 1500 Set OSPF to ignore MTU mismatch interface...

Page 226: ...Adjacency Problem Commands to Diagnose OSPF neighbors have duplicate Router IDs show ip ospf show ip ospf interface show router id Troubleshooting security 226 Troubleshooting August 2013 Comments in...

Page 227: ...s system command shows the global auto qos status and the status of global QoS whether enabled or disabled Auto QoS status Auto QoS functions as a tool to apply the default QoS configurations for an i...

Page 228: ...A parameters such as delay jitter and packet loss SLA feature can be used To view the statistics of the configured SLA profile show sla profile sla id command can be used To view all the active and in...

Page 229: ...n show qos chassis policy map command is executed Policy maps are used to configure class maps with required parameters for classification CBQ and policing These policy maps can be mapped to any valid...

Page 230: ...rfaces to which this policy map is mapped For detailed information about a class show qos chassis policy map map name class class name The configurations displayed include classification keys assigned...

Page 231: ...rTCM The steps included configuring policing are create policy map class map and policer srTCM trTCM and issue the service policy input command in order to apply the policy map to the interface You ca...

Page 232: ...essful mapping of the policy map The show qos chassis service policy command lists all the policy maps that are mapped to all the available interfaces When the same command is entered with interface n...

Page 233: ...d classes on the interface can be verified by show qos chassis interface type interface name class class name inbound outbound These commands will list all the configurations that are done on the clas...

Page 234: ...Troubleshooting Quality of Service 234 Troubleshooting August 2013 Comments infodev avaya com...

Page 235: ...Marking After classification marking a field in the packet such that it can be easily recognized later for instance an http packet from a certain source needs to be classified only once after which i...

Page 236: ...commands But the user can view only the statistics at that time If the user wants to have the statistics for every hour then the user has to manually take a log from the CLI To make this process as a...

Page 237: ...S QoS The command show qos chassis interface name mpls lsp lsp name will display the MPLS configuration Interface RED The command show qos chassis red bundle name will display interface RED configurat...

Page 238: ...alid classification type requested Problem description In MF classification tree Each level should have unique classification type i e all the classes in same level should have the same classification...

Page 239: ...map should be created successfully Troubleshooting tips We can t assign same classification key values for the classes at the same level because this may lead to confusion while classifying the packe...

Page 240: ...ew value If we do so it will add the new key as additional one instead of over write the existing one Prerequisite Policy map should be created successfully Troubleshooting tips First give no form of...

Page 241: ...is attached to a interface the user may perceive packet count is 0 or very less for a class Giving the command show qos chassis interface interface name can see packet flow Prerequisite Policy map sho...

Page 242: ...nario 2 Troubleshooting tips Check whether any of the QoS feature like monitoring policing or CBQ is enabled Troubleshooting Quality of Service 242 Troubleshooting August 2013 Comments infodev avaya c...

Page 243: ...lable packet capturing tools Capture the packet and analyze it with the MF tree configured Not all the packets are classified Symptom The user can perceive less number of packets are getting classifie...

Page 244: ...d only if it is not mapped to any of the interfaces Prerequisite Policy map should be created and attached to an interface successfully Troubleshooting tips To what are all the interfaces the policy m...

Page 245: ...to a crypto interface successfully Troubleshooting tips Remove the policy map from the crypto if you want to do IPv6 related changes But this policy map can not be re attached to the crypto interface...

Page 246: ...ed with policing parameter in kbps policy map is attached to a logical interface Try to reconfigure the policing parameters in percentage Troubleshooting Quality of Service 246 Troubleshooting August...

Page 247: ...cription When we modify the CBQ we should take of the interface bandwidth Since the modification is in percentage sometimes the percentage value may lead to bandwidth allocation for a class as less th...

Page 248: ...cy profile Problem description Maximum number of classes that we can configure for policy map is 750 beyond which current implementation is not supported Prerequisite Policy map with 750 classes is cr...

Page 249: ...lass class name which will display class statistics on an interface will provide lot of information like policing parameters configured actions associated with each conformance level and the statistic...

Page 250: ...om User may see that marking is not working based on the conformance level assigned by the policer Problem description Three actions can be configured for different conformance level Troubleshooting t...

Page 251: ...should not exceed 99 percent 2 Parent class should be configured with a valid Peak Rate that is greater than or equal to the requested Committed Rate of the child class 3 Sum of CR of child classes to...

Page 252: ...llowing can be the reasons Actual CR or PR value not the percentage for the interface should not be less than 1 Kbps Example CR percent of 1 for an interface with bandwidth of 9 Kbps will result in CR...

Page 253: ...t to that interface and modify the CBQ parameters in the actual policy map Packets getting dropped for a class when CBQ enabled Symptom More number of packets will be dropped for a particular class Pr...

Page 254: ...escription PBR is achieved through QoS PBR is configured as one of the actions for all packets matching the rules of a class map Sometimes user may see that PBR is not working i e packets are sent to...

Page 255: ...up Based on the correctness of the PBR configuration the PBR status will be displayed Make sure the PBR status is UP using the show qos chassis ethernet 0 2 class c1 command Chassis QoS troubleshootin...

Page 256: ...en applying auto qos will fail for that interface Case 2 For applying auto qos on bundle interfaces a minimum of 28 class buffers is needed Buffers are calculated based on the interface bandwidth So i...

Page 257: ...ccessfully created Troubleshooting tips Remove all the manual configurations in the specified direction outbound for bundle and inbound for ethernet Use show qos chassis interface type interface name...

Page 258: ...erequisite SLA profile has to be successfully configured with SLA type Troubleshooting tips Remove the previous configuration by executing no command and configure with the required SLA type Wait till...

Page 259: ...ough which the SLA packets are sent may be overloaded with more traffic Prerequisite SLA should be properly configured and scheduled Troubleshooting tips Synchronize the clock between the two nodes an...

Page 260: ...nterfaces can be uploaded to a file server through historical statistics To enable this feature some of the configurations like FTP server IP address FTP username and password and upload interval The...

Page 261: ...p and running but it should be assigned with an IP address Prerequisite Historical statistics configured Troubleshooting tips Configure a valid IP address to that interface Marking Marking is not happ...

Page 262: ...s CoS marking done by the previous stages For complete details on the CoS marking at different stages refer to QoS user guide The show qos module system command shows the global user priority based Co...

Page 263: ...he show qos module ethernet command shows the default queue assignment and dscp user priority CoS markings for packets coming on the interface Module QoS troubleshooting Troubleshooting August 2013 26...

Page 264: ...ified in the class map The show qos module policing cos map ip command shows the CoS markings based on previous DSCP value and the conformance level assigned to the packet by the Policer This is used...

Page 265: ...les which can be associated with same set of actions A packet is said to be classified into a class if it matches any of the classification rules in that class The actions associated with the class wi...

Page 266: ...shows all the policy maps servicing different interface The service policy of an interface can be seen in the show qos module ethernet command too Troubleshooting Quality of Service 266 Troubleshooti...

Page 267: ...iolating packets rate limit Policing can be enabled on the ingress Network Module interface It can be configured for each class in the policy map that is mapped to an ingress interface If policing is...

Page 268: ...f display shows the policing configuration for a class map within a policy map The show qos module system command shows the global accounting status Troubleshooting Quality of Service 268 Troubleshoot...

Page 269: ...ense that it also incorporates the packet s conformance level DP into consideration so that traffic with high DP is dropped first Two packet dropping mechanisms namely the tail drop and random detect...

Page 270: ...The congestion profile attached to an interface can be seen in show qos module ethernet command output too Troubleshooting Quality of Service 270 Troubleshooting August 2013 Comments infodev avaya com...

Page 271: ...of the queues for transmission Each of the queues in the Network Module ports can be scheduled using either Strict Priority SP or D WRR Deficit Weighted Round Robin The show qos module ethernet comma...

Page 272: ...red rate and burst Module QoS supports shaping both at port level and at queue level Shaping can be enabled independently for ports and queues The show qos module ethernet command shows the port and q...

Page 273: ...QoS also supports buffer limits at the queue level to allow fair sharing of buffers and packet descriptors across the queues associated with a port Module QoS also supports flow control using 802 3x s...

Page 274: ...perator to study the behavior of traffic flows flow aggregates over any given period of time The show qos module system command shows the global sampling interval and sampling period configuration It...

Page 275: ...The show qos module policy map command shows if flow rate monitoring is enabled for a class map or not and the rate monitoring statistics Module QoS troubleshooting Troubleshooting August 2013 275...

Page 276: ...lt or basic QoS treatment in a system It is supported at both interface and at global level The show qos module system command shows the global auto qos configuration Troubleshooting Quality of Servic...

Page 277: ...The show qos module ethernet command shows the interface level auto qos configuration Module QoS troubleshooting Troubleshooting August 2013 277...

Page 278: ...e completely if required The QoS enforcement stages involving congestion management scheduling and so on can also be managed by the operator However every packet transiting the Ethernet will get subje...

Page 279: ...The show qos module ethernet command shows the interface level qos status Module QoS troubleshooting Troubleshooting August 2013 279...

Page 280: ...The number of policers that can be created is limited 300 If you have already utilized all policer entries on the Router you encounter this error message ERROR Configured policers already reached the...

Page 281: ...ooting tips Some of the reasons that could result in the above behavior are described below Wrong rules are configured for the class map Traffic sent won t be classified to a class map unless the pack...

Page 282: ...ppen Instead use ipv4 rule to match packets based on MAC address since the packet payload contains IPv4 header Accounting not enabled for the class map For the user to see the classification counters...

Page 283: ...attached to the interface on which the traffic is sent Verify that the policy map is attached to the interface with one of the following commands show qos module service policy show qos module policy...

Page 284: ...rk if the service policy interface is the egress interface QoS not enabled on the interface QoS must be enabled on the interface on which the service policy is mapped Verify that QoS is enabled on the...

Page 285: ...ot able to delete a policy map Symptom User may not be able to delete a policy map configured and an error message is displayed Troubleshooting Module QoS Error conditions Troubleshooting August 2013...

Page 286: ...llowing command to see the service policy mappings show qos module service policy 3 Unable to map a policy map to an interface Symptom User may not be able to map a service policy to an interface and...

Page 287: ...ng is required Otherwise policing may not work and rate limiting may not happen Troubleshooting tips Some of the reasons that could result in the above behavior are described below Wrong policing conf...

Page 288: ...using the following commands show qos module policy map m1 detail show qos module system Troubleshooting Quality of Service 288 Troubleshooting August 2013 Comments infodev avaya com...

Page 289: ...isabled By default when policing configuration is configured for a class map policing will be enabled However user can disable it anytime Troubleshooting Module QoS Error conditions Troubleshooting Au...

Page 290: ...he policy map in which the class map and its policing configuration is done should be properly attached to the ingress interface on which the traffic is coming into the DUT Verify that the policy map...

Page 291: ...icing for the class map Description User may see that the conformance counters are incrementing but rate limiting is not happening Troubleshooting tips Some of the reasons that could result in the abo...

Page 292: ...the packets Troubleshooting tips Some of the reasons that could result in the above behavior are described below CoS remark is not configured for the class Policing based CoS remarking needs to be en...

Page 293: ...ring statistics are not incrementing Troubleshooting tips Some of the reasons that could result in the above behavior are described below Enable flow rate monitoring for the class User has to explicit...

Page 294: ...ng to work for a class the rate sampling has to be started from the global context Verify that rate sampling is in progress using the following command show qos module system Troubleshooting Quality o...

Page 295: ...not able to enable rate monitoring for a class map Troubleshooting tips Some of the reasons that could result in the above behavior are described below Accounting is not enabled Before enabling rate m...

Page 296: ...rate sampling is in progress User has to stop the global rate sampling before enabling the rate monitoring for a class map Use the following command to verify that rate sampling is in progress show q...

Page 297: ...ppening and not random drop Troubleshooting tips Some of the reasons that could result in the above behavior are described below Enable random detect on the interface User has to explicitly enable ran...

Page 298: ...map can be attached to an interface If a service policy already exists for an interface remove the previous policy map and attach the new policy map to the interface To verify if a service policy exis...

Page 299: ...qos To verify if a service policy exists for a policy map use the following command show qos module service policy 12 PBR is not working Symptom Policy based redirection is not working for a policy ma...

Page 300: ...ctness of the PBR configuration the PBR status will be displayed Make sure the PBR status is UP using the following command show qos module policy map m1 detail Troubleshooting Quality of Service 300...

Page 301: ...ld be enabled on the interface on which the policy map is attached Verify that qos is enabled on the interface using the following command show qos module service policy Troubleshooting Module QoS Err...

Page 302: ...Troubleshooting Quality of Service 302 Troubleshooting August 2013 Comments infodev avaya com...

Page 303: ...ng blocks The ISDN Signaling CAS Signaling FXS FXO Signaling and SIP Signaling block take care of the corresponding protocol signaling The Media Stream Manager is in charge of the digital signal proce...

Page 304: ...no debug cas slot slot subslot port debug_identifier debug level Table 70 Variable definitions Variable Value slot subslot port Specifies the port number of the voice card debug level Specifies the de...

Page 305: ...ed number Filters debugging information based on called number Example SR debug ccsip api debug ccsip errors Use this command to enable output of SIP error messages Use the no form of this command to...

Page 306: ...es calling num calling number called num called number Table 73 Variable definitions Variable Value calling num calling number Filters debugging information based on calling number called num called n...

Page 307: ...debug pots Use this command to enable FXS FXO POTS related debugging Use the no form of this command to disable the debug messages Syntax no debug pots slot slot subslot port Table 76 Variable definit...

Page 308: ...ecific debugs isdn Enables ISDN adaptor specific debugs cas Enables CAS adaptor specific debugs pots Enables POTS adaptor specific debugs fsm Enables state machine specific debugs media Enables media...

Page 309: ...lot on page 325 Unable to make calls on T1 PRI on page 325 Unable to make calls on T1 CAS on page 330 FXS FXO port status LEDs on page 332 No dial tone on the analog FXS phones or ports on page 333 Un...

Page 310: ...Voice compatible software image not installed The SIP Media Gateway features are only supported in release 10 1 0 0 and later Verify that the Secure Router 2330 4134 is running the minimum release of...

Page 311: ...ed Voice Module PVM on the Secure Router 4134 or Packetized Voice Internal Module PVIM on the Secure Router 2330 must be installed for the Secure Router to support the SIP Media Gateway features Ensur...

Page 312: ...e Secure Router 4134 To display the presence of the internal PVM module listed as VoIP_A card type enter the show chassis command Troubleshooting a SIP Media Gateway problem 312 Troubleshooting August...

Page 313: ...upport hot swap for the internal PVM module If the PVM module is inserted at run time this can damage the main board or the PVM module Electrostatic alert To prevent damage from electrostatic discharg...

Page 314: ...44 show voice dsp status sample output for maximum DSP channels To upgrade the DSP channel capacity contact Avaya customer support for a DSP license upgrade You must provide Avaya customer support wit...

Page 315: ...Configuration SIP Media Gateway NN47263 508 for upgrade details You can load the license using the system licenses pvm_channels command Figure 46 system licenses pvm_channels sample response After you...

Page 316: ...t 1 This limitation also applies to the 2 port T1 E1 and ISDN BRI Small Modules if they are configured for voice traffic only port 2 1 is functional This limitation does not apply to FXS or FXO voice...

Page 317: ...aming format ESF or D4 SF and the linecoding format B8ZS or AMI Make sure these configurations match at both ends The most common configuration for framing format is ESF and for linecode is B8ZS the d...

Page 318: ...ng to a channel bank or patch panel a straight cable is typically required Peer configured as E1 Make sure that the peer you are connected to is a T1 source and not E1 Normally sources can be configur...

Page 319: ...t the T1 E1 module version is listed as CPLD version 5 Older version 4 cards can still be used for data links but should not be used for voice New version 5 cards support both data and voice links Use...

Page 320: ...is configured as the clock slave to the remote end and the remote end is configured as the clock master If both the Secure Router 2330 4134 and the peer are configured as slaves neither end of the li...

Page 321: ...to the clock from the remote peer Figure 54 show network clocks sample output for locking clock source As shown in the preceding figure you must wait a period of time for the phase locked loop PLL to...

Page 322: ...or PRI port as clock source produces error To configure a BRI T1 or PRI port as the network clock source the port must be configured for voice You cannot specify a data port as the clock source The fo...

Page 323: ...r T1 or BRI are off The Secure Router 2330 4134 supports hot swap of identical external modules If you boot up and the LEDs on a module are off the module may be in the process of being hot swapped To...

Page 324: ...no shutdown command and reboot the chassis Figure 60 module no shutdown sample output for hot swap To verify that the card is in the normal state after the reboot enter the show chassis command again...

Page 325: ...page 323 to troubleshoot a module in the hot swap state Unable to make calls on T1 PRI If you cannot make calls on a T1 PRI port see the following sections for troubleshooting instructions Verify the...

Page 326: ...ing configuration only timeslots 1 to 12 can be used for calls SR configure interface bundle pri1 SR configure interface bundle pri1 link pri_t1 1 1 1 12 voice Display the configuration status You can...

Page 327: ...s To verify that the D channel is up use the show interface bundle command Figure 63 show interface bundle sample output to verify PRI D channel Verify Layer 2 status When layer 2 is up both sides con...

Page 328: ...ISDN troubleshooting you can also perform Layer 3 traces using the debug isdn q931 command The following figures show sample Layer 3 traces for a successful ISDN call flow Troubleshooting a SIP Media...

Page 329: ...Figure 65 debug isdn q931 sample output Common problems and solutions Troubleshooting August 2013 329...

Page 330: ...ou cannot make calls on a T1 CAS port make sure the T1 CAS configuration is correct The following is a typical configuration config term module t1 1 2 cas group timeslots 1 24 em wink start exit voice...

Page 331: ...ommand to check the state of the link for the CAS port Figure 67 show module configuration all sample output Perform call trace For further CAS troubleshooting you can also perform a call trace using...

Page 332: ...the FXS FXO cards can be used for debugging If the LEDs are off the card is not detected or is in hot swap shutdown mode The following table describes how to interpret the other LED colors LED color D...

Page 333: ...summary sample output Unable to make FXS calls If you are unable to make FXS calls refer to the following sections for troubleshooting Verify that the port and dial peer are enabled Make sure the por...

Page 334: ...e 10 1 Perform call trace For further FXS troubleshooting you can perform a call trace using the debug voice cc pots command The following figures show sample call traces of successful FXS calls first...

Page 335: ...Figure 73 debug voice cc pots sample output Common problems and solutions Troubleshooting August 2013 335...

Page 336: ...Figure 74 debug voice cc pots sample output continued Troubleshooting a SIP Media Gateway problem 336 Troubleshooting August 2013 Comments infodev avaya com...

Page 337: ...Figure 75 debug voice cc pots sample output continued Common problems and solutions Troubleshooting August 2013 337...

Page 338: ...no calls can be completed the FXS phones might not be registered To troubleshoot this issue refer to the following sections Verify SIP registrar configuration You can verify whether the SIP registrar...

Page 339: ...es 3600 Verify that registration is configured on the dial peer If FXS phones are still not registered then verify whether registration is enabled for the dial peer corresponding to the FXS port using...

Page 340: ...assword specified in the authentication command must match to the username and password configured on the registrar To verify the FXS registration status use the show sip ua register status command Fi...

Page 341: ...r is configured with the appropriate destination pattern and is not shut down using the show dial peer voice summary command Figure 81 show dial peer voice summary sample output Verify DTMF dialing on...

Page 342: ...rther FXO troubleshooting you can perform a call trace using the debug voice cc pots command The following figures show sample call traces of successful FXO calls Troubleshooting a SIP Media Gateway p...

Page 343: ...Figure 83 debug voice cc pots sample output Common problems and solutions Troubleshooting August 2013 343...

Page 344: ...Figure 84 debug voice cc pots sample output continued Troubleshooting a SIP Media Gateway problem 344 Troubleshooting August 2013 Comments infodev avaya com...

Page 345: ...Figure 85 debug voice cc pots sample output continued Common problems and solutions Troubleshooting August 2013 345...

Page 346: ...rom SIP Server All Secure Router 2330 4134 call routing is performed by the central SIP Server In cases where no calls can be completed the Secure Router 2330 4134 may not be reachable from Troublesho...

Page 347: ...uting command Digit stripping enabled or digit forwarding disabled To successfully terminate a call to a POTS dial peer digit stripping must be disabled or digit forwarding must be enabled The followi...

Page 348: ...on the Secure Router 2330 4134 the call cannot be completed The following figure shows a sample output for the debug voice cc routing command in which the dialed destination number is not found Figure...

Page 349: ...e a dial peer with a destination pattern of 3087771004 Dialed number is busy The following figure shows a sample output for the debug voice cc routing command in which the Returning CC 486 message ind...

Page 350: ...ce cc routing command in which the Returning CC 503 message indicates that a PRI T1 link is down Figure 93 debug voice cc routing sample output To display the T1 module status enter the show module co...

Page 351: ...how module configuration all command Figure 95 show module configuration all sample output To display the ISDN PRI D channel status enter the show interface bundle command The following figure shows t...

Page 352: ...s dormant Figure 97 show voice port sample output To troubleshoot the issue make sure that the T1 PRI cables are connected correctly Also verify the D channel and link status from the PBX side Also se...

Page 353: ...mple output To display the T1 CAS status enter the show module configuration t1 command The following figure shows that alarms have been detected on the module Figure 99 show module configuration samp...

Page 354: ...lso if the SIP server is configured with FQDN then verify whether the FQDN can be resolved Be sure that the DNS server is specified on the Secure Router 2330 4134 using the ip pname_server command The...

Page 355: ...ured using the show sip ua status command Figure 101 show sip ua status sample output In this case no SIP server is configured You can also verify whether any VoIP dial peers are configured using the...

Page 356: ...er by entering the following commands config term dial peer voice voip 100 session target ipv4 47 100 107 46 5060 destination pattern 408 T no shutdown exit exit Codec mismatch To troubleshoot a poten...

Page 357: ...Figure 103 debug ccsip message sample output Common problems and solutions Troubleshooting August 2013 357...

Page 358: ...ffered in the INVITE message are not configured on the Secure Router 2330 4134 and the call is therefore rejected Verify the configured codec by entering the show voice service voip command Troublesho...

Page 359: ...ails on configuring the Mediation Server module see Avaya Secure Router 2330 4134 Configuration SIP Media Gateway NN47263 508 After you have assigned in IP address to the Mediation Server module you c...

Page 360: ...ve Directory of OCS 2007 3 Verify that the Mediation Server properties namely Communication Server Listen IP address Default Location Profile Office Communication Server next hop PSTN Gateway next hop...

Page 361: ...OCS Mediation Server logs on the Secure Router 4134 Mediation Server module To collect the OCS Mediation Server logs on the Secure Router 4134 Mediation Server module perform the following procedure...

Page 362: ...og box 3 Initiate a call between an OCS Client and a PSTN user When the call is completed successfully or not click Stop Logging Troubleshooting a SIP Media Gateway problem 362 Troubleshooting August...

Page 363: ...r logs in the Snooper window Network packet capture You can use third party packet capture tools to capture the network packets flowing in and out of the Mediation Server The Mediation Server module h...

Page 364: ...rnet interface 4 When the correct interface is specified click Start 5 In the Filter window you have the option of specifying a filter to limit the number of packets you want to filter Select sip to c...

Page 365: ...diation Server responds with an ACK From this trace it is likely that the OCS Client through the Mediation Server is trying to reach a non existent user or the Secure Router 4134 is not configured to...

Page 366: ...o a USB drive Use the procedure in this section to create a backup copy of the image and configuration on the Mediation Server Module Prerequisites Ensure you have an application available with which...

Page 367: ...ins the cloned image into the USB slot of the Mediation Server Module 2 Connect a display monitor and a USB keyboard to the Mediation Server Module 3 Power up the Secure Router 4134 4 Launch the softw...

Page 368: ...Troubleshooting a SIP Media Gateway problem 368 Troubleshooting August 2013 Comments infodev avaya com...

Page 369: ...d Red threshold indicates that CPU utilization is above optimum range Specified by the user To configure the CPU utilization threshold and enable threshold notification see configure process cpu thres...

Page 370: ...ured You can enter multiples of 10 up to a maximum of 300 seconds Default 30 type cont this type generates notification periodically at the interval specified once this type generates notification onc...

Page 371: ...to stop the history collection for a process Syntax stop history WORD Table 80 Variable definitions Variable Value WORD Name of the process Example SR debug process stop history rxPoll CPU utilization...

Page 372: ...ons Variable Value display format seconds displays CPU utilization history in seconds maximum 300 seconds for total and maximum 60 seconds for individual process minutes displays CPU utilization histo...

Page 373: ...processes cpu history process rxPoll show processes cpu show config Use this command to view the configuration of the CPU utilization monitor Syntax show processes cpu show config Example SR show proc...

Page 374: ...isplays CPU utilization of processes that were invoked at least once all displays full information Example SR show processes cpu utilization format brief SR show processes cpu utilization format invok...

Page 375: ...adversely affecting other activities on the network Ensure you configure syslog and console reporting for the specific options you are troubleshooting Message severity levels The Secure Router 2330 4...

Page 376: ...Procedure steps 1 To access configuration mode enter configure terminal 2 To enable or disable syslog messages enter system logging syslog enable disable Specifying the device to which the Secure Rou...

Page 377: ...ive Syslog Servers Because the Syslog servers are logged simultaneously they all contain the same Syslog records To achieve backward compatibility with the existing Syslog implementation the provision...

Page 378: ...Specifying the syslog messages to report Use the commands in this section to specify the syslog messages that the Secure Router 2330 4134 reports Procedure steps 1 To access configuration mode enter c...

Page 379: ...ttack fwl conn firewall connection fwl rsm firewall reassembly hdlc hdlc protocol on wan links ike Internet Key Exchange ipsec IP security protocol AH or ESP ipsl2tp IPSEC L2TP for L2TP server isdn IS...

Page 380: ...ng mstp MSTP system logging L2 CTRL L2 Control Packets logging cfm CFM priority The severity level of the message Valid values are the following emerg log emergency messages only alert log alert messa...

Page 381: ...ariable Value ip address Specifies the source address by IP address interface name Specifies the source address by interface name Configuring the system for console logging Use the commands in this se...

Page 382: ...messages that indicate a possible fault in the system The following table provides a list of Secure Router 2330 4134 syslog error messages that indicate a possible fault condition in the Secure Route...

Page 383: ...n timer_create error CRITICAL FORWARDING Cache hold_down timer_connect error CRITICAL FORWARDING Error starting route6 cache timer CRITICAL FORWARDING error bringing down static route ip address mask...

Page 384: ...ICAL MLPPP ioctl PPP_SET_CONFIG failed for remote lcp MTU mlppp config for bundle name CRITICAL MLPPP ioctl PPP_GET_CONFIG failed for local MLP mlppp config for bundle name CRITICAL MLPPP ioctl PPP_SE...

Page 385: ...RITICAL PPP ioctl PPP_GET_CONFIG failed for local lcp MTU ppp config for bundle name CRITICAL PPP ioctl PPP_SET_CONFIG failed for local lcp MTU ppp config for bundle name CRITICAL PPP ioctl PPP_GET_CO...

Page 386: ...ve timer not initialized for interface name timer ERROR FORWARDING Sending keepalive packet gives an error for interface name ERROR FORWARDING ipMuxIfProxyArpSet unit x out of range ERROR FORWARDING i...

Page 387: ...TION ALARMS Modem service is off NOTIFCATION ALARMS terminate Remote Modem cli service NOTIFCATION ALARMS Remote Modem cli service is up NOTIFCATION ALARMS Remote Modem cli service is down NOTIFCATION...

Page 388: ...th_ exceeded EAPOL Socket buffer NOTIFCATION L2 CTRL hsl_af_garp_l2_sock_queue_length_e xceeded GARP Socket buffer Queue Count Exceeded Dropping packets NOTIFCATION L2 CTRL hsl_af_igs_l2_sock_queue_le...

Page 389: ...G FR frPhreceive rc x DEBUGGING HDLC GHDLC open successful dev ghdlc fd x DEBUGGING ISDN Sending SETUP messageon bundle name slot port x y channel z and called number is string DEBUGGING ISDN Incoming...

Page 390: ...lppp config for bundle name DEBUGGING MLPPP ioctl PPP_GET_CONFIG successful for remote lcp MTU mlppp config for bundle name DEBUGGING MLPPP ioctl PPP_SET_CONFIG successful for remote lcp MTU mlppp con...

Page 391: ...PPP_GET_CONFIG successful for remote lcp get ppp config for bundle name DEBUGGING PPP ioctl PPP_GET_CONFIG successful for local lcp MRU ppp config for bundle name DEBUGGING PPP ioctl PPP_SET_CONFIG s...

Page 392: ...ity Level Module Message DEBUGGING PPP ioctl PPP_SET_CONFIG successful for local BCP for bundle name Secure Router 2330 4134 system error messages 392 Troubleshooting August 2013 Comments infodev avay...

Page 393: ...LEDs on page 38 4 If unit has power but is unresponsive try to telnet to the router If Telnet is successful show the running configuration to obtain more information that could be useful for a diagnos...

Page 394: ...d configuration from the network 8 If a console or telnet session is unresponsive you can recover access without having to reboot See Obtaining Configuration Mode access when occupied by an inactive o...

Search results

Summary of Contents for 2330/4134

Reviews:

Avaya 2330/4134, Troubleshooting Manual, Page: 1 / 394

Search results

Summary of Contents for 2330/4134

Reviews: