Cisco 2100 Series, Руководство по настройке

Страница: 752 / 796

D-36
Cisco Wireless LAN Controller Configuration Guide
OL-17037-01
Appendix D Troubleshooting
Using the Debug Facility
•
debug packet logging acl eth rule_index action dst src type vlan
where
–
rule_index is a value between 1 and 6 (inclusive).
– action is permit, deny, or disable.
–
dst is the destination MAC address.
– src is the source MAC address.
–
type is the two-byte type code (such as 0x800 for IP, 0x806 for ARP). This parameter also
accepts a few common string values such as “ip” (for 0x800) or “arp” (for 0x806).
– vlan is the two-byte VLAN ID.
•
debug packet logging acl ip rule_index action src dst proto src_port dst_port
where
–
proto is a numeric or any string recognized by getprotobyname(). The controller supports the
following strings: ip, icmp, igmp, ggp, ipencap, st, tcp, egp, pup, udp, hmp, xns-idp, rdp,
iso-tp4, xtp, ddp, idpr-cmtp, rspf, vmtp, ospf, ipip, and encap.
– src_port is the UDP/TCP two-byte source port (for example, telnet, 23) or “any.” The controller
accepts a numeric or any string recognized by getservbyname(). The controller supports the
following strings: tcpmux, echo, discard, systat, daytime, netstat, qotd, msp, chargen, ftp-data,
ftp, fsp, ssh, telnet, smtp, time, rlp, nameserver, whois, re-mail-ck, domain, mtp, bootps, bootpc,
tftp, gopher, rje, finger, www, link, kerberos, supdup, hostnames, iso-tsap, csnet-ns,
3com-tsmux, rtelnet, pop-2, pop-3, sunrpc, auth, sftp, uucp-path, nntp, ntp, netbios-ns,
netbios-dgm, netbios-ssn, imap2, snmp, snmp-trap, cmip-man, cmip-agent, xdmcp, nextstep,
bgp, prospero, irc, smux, at-rtmp, at-nbp, at-echo, at-zis, qmtp, z3950, ipx, imap3, ulistserv,
https, snpp, saft, npmp-local, npmp-gui, and hmmp-ind.
–
dst_port is the UDP/TCP two-byte destination port (for example, telnet, 23) or “any.” The
controller accepts a numeric or any string recognized by getservbyname(). The controller
supports the same strings as those for the
src_port.
• debug packet logging acl eoip-eth rule_index action dst src type vlan
•
debug packet logging acl eoip-ip rule_index action src dst proto src_port dst_port
• debug packet logging acl lwapp-dot11 rule_index action dst src bssid snap_type
where
– bssid is the Basic Service Set Identifier.
–
snap_type is the Ethernet type.
• debug packet logging acl lwapp-ip rule_index action src dst proto src_port dst_port
Note To remove all configured ACLs, enter this command: debug packet logging acl clear-all .
Step 3 To configure the format of the debug output, enter this command:
debug packet logging format { hex2pcap | text2pcap }
The debug facility supports two output formats: hex2pcap and text2pcap. The standard format used by
IOS supports the use of hex2pcap and can be decoded using an HTML front end. The text2pcap option
is provided as an alternative so that a sequence of packets can be decoded from the same console log file.
Figure D-8 shows an example of hex2pcap output, and Figure D-9 shows an example of text2pcap
output.