Troubleshooting的工具

Troubleshooting的工具有許多種,可以用路由器的診斷命令,Cisco網絡管理工具(CiscoWorks)和規程分析儀等等方法.下面我們主要介紹路由器的診斷命令.

路由器診斷命令有四種:

• 用 show 命令
  
• 用 debug 命令
  
• 用 ping 命令
  
• 用 trace 命令

用 show 命令

Show是一個很有用的監控命令和解決系統出現問題的工具.下面是幾個通常用到的show命令:

• show interface---顯示接口統計信息.
  
  一些常用的show interface命令:
  
  • show interface ethernet
    
  • show interface tokenring
    
  • show interface serial
    
• show controllers---顯示接口卡控制器統計信息.
  
  一些常用的show controllers命令:
  
  • show controllers cxbus
    
  • show controllers e1
    
• show running-config---顯示當前路由器正在運行的配置.
  
• show startup-config---顯示存在NVRAM配置.
  
• show flash---Flash memory內容.
  
• show buffers---顯示路由器中buffer pools統計信息.
  
• show memory---路由器使用內存情況的統計信息,包括空閑池統計信息.
  
• show processes---路由器活動進程信息.
  
• show version---顯示系統硬件,軟件版本,配置文件和啟動的系統映象.

用 debug 命令

在超級用戶模式下的debug命令能夠提供端口傳輸信息,節點產生的錯誤消息,診斷協議包和其它有用的troubleshooting數據.

注意:使用debug命令要注意,它會佔用系統資源,引起一些不可預測現象.終止使用debug命令請用no debug all命令.

Debug命令默認是顯示在控制台端口上的,可用log buffer命令把輸出定向到buffers裡面.若是telnet過去的,可用Router#terminal monitor監控到控制台信息.

用ping命令

Ping確定網絡連通.

用 trace 命令

Trace命令跟蹤路由器包傳輸.

TCP/IP連接的Troubleshooting

現象:主機到本地路由器的以太口不通

建議:我們可以把路由器的以太網口看作是普通主機的以太網卡,這就成了一個局域網連接問題,

1. 用show interface ethernet number命令
   Router#show interface ethernet 0
   Ethernet is up,line protocol is down
   
2. 若Ethernet is down,請把線纜(同軸線纜或雙絞線)接上.若已接上,ethernet依然是down,請找你的代理聯系.
   
3. 若Ethernet is admsinstratively down.
   Router#conf t
   Router(config)#interface ethernet 0
   Router(config-if)#no shutdown
   Router(config-if)#^Z
   Router#
   
4. 若Ethernet is up,而line protocol is down.
   主機10M網卡接到路由器100M的以太口上面,它不是自適應的(目前版本).反之無問題.
   若是同軸線纜請檢查線纜,T型頭,終結器,是否連接正確.
   若是雙絞線請檢查線纜是否正確,中間是否通過HUB連接,若是直連主機要用交叉線.
   若是100BaseTX接口,需要用五類雙絞線.
   若是一個接口提供兩種物理介質,如粗纜AUI和UTPRJ45,默認為AUI的.要用RJ45需要:
   Router#conf t
   Router(config)#interface ethernet 0
   Router(config-if)#media-type 10baset
   Router(config-if)#^Z
   Router#
   
5. 若Ethernet is up,line protocol is up;但ping不通.
   請查看路由器以太口的IP地址,是否與主機IP地址在同一個網段上.
   
6. 經過以上幾個步驟,問題仍未解決,請找你的代理聯系.

現象:主機到對方路由器廣域網口或以太網口不通.

建議:假設主機到本地路由器的以太口已通.

1. 在路由器上檢查兩個廣域網口之間是否通,若不通,請看下面關廣域網的troubleshooting.
   
2. 若路由器兩個廣域網口之間是通的.
   在主機上用"netstat -rn"命令查找路由,若沒有請用"route add"加入.
   以SCO UNIX為例:
   #netstat -rn
   #route add 目的網段 掩碼 網關 1
   或
   #vi /etc/gateways
   net 目的網段 gateway 本地路由器以太口地址 metric 1 passive
   
3. 若主機上有默認網關,檢查路由器路由協議配置.
   Router#show ip route
   Router#show running-config
   .
   .
   .
   router eigrp 1
   network ...
   network ...
   兩端路由器配置路由協議是否一致,是否在一個自治系統裡面."network"加入的網段是否正確.

現象:主機到對方目的主機不通.

建議:按以下步驟解決.

1. 檢查主機到本地路由器的以太口.
   
2. 檢查兩個廣域網口.
   
3. 檢查主機到對方路由器廣域網口.
   
4. 檢查主機到對方路由器以太網口.
   可用telnet命令遠程登錄到對方路由器上,按檢查本地主機到本地路由器的以太口的方法檢查對方局域網連接情況.
   
5. 重復3和4,檢查對方到本地情況.
   
6. 經過以上幾個步驟,問題仍未解決,請找你的代理聯系.

串口連接遇到問題的Troubleshooting

現象:在專線連接時,路由器直連的兩個廣域網口間不通.

建議:我們可以把兩個路由器廣域網口之間分成三段,如圖所示:

路由器A--1---MODEMA----2----MODEMB--3--路由器B

我們的任務就是要檢查出是哪一段不通並解決它.

1. 用show interface serial number命令
   
2. 若是Serial is down,表示路由器到本地的MODEM之間無載波信號CD.
   連接串口和MODEM,開啟MODEM.看MODEM的發送燈TD是否亮,TD燈亮表示路由器有信號發送給MODEM.TD燈若不亮,請檢查MODEM,線纜(最好用Cisco所配的)和端口.你可以用另外一個串口再試試看.
   
3. 若Serial is up,但line protocol is down.有幾種可能:
   a.本地路由器未作配置.
   b.遠端路由器未開或未配置.
   路由器兩端需要配置相同的協議打包方式.例如:路由器A打包HDLC,路由器B打包PPP,那兩台路由器的line protocol始終是down的.改變打包方式:
   Router#conf t
   Router(config)#interface serial 0
   Router(config-if)#encapsulation ppp
   Router(config-if)#^Z
   Router#
   c.若是使用Newbridge的26XX,27XX的DTU設備,它不發送CD信號,請在路由器上設置:
   Router#configure terminal
   Router(config)#int serial 0
   Router(config-if)#ignored-dcd
   Router(config-if)#^Z
   Router#
   d.MODEM之間沒通,即專線沒通.
   解決辦法:作測試環路.請電信局幫助確定具體出現問題是哪一段線路.若作環路成功,line protocol會變成up(looped).
   
4. 若Serial is up,但line protocol is up(looped).
   用show running-config看看端口是否作了loopback配置,若有刪調它.
   MODEM是否作了環路測試.
   專線是否作了環路測試.
   
5. 若Serial is admsinstratively down,line protocol is down.
   Router#conf t
   Router(config)#interface serial 0
   Router(config-if)#no shutdown
   Router(config-if)#^Z
   Router#

電話撥號連接的Troubleshooting

要解決用電話撥號網連接出現的問題,首先要:

確定路由器與MODEM之間已連接

明白show line輸出的含義

確定路由器與MODEM之間已連接

我們在路由器上用反Telnet(Reverse Telnet Session)到MODEM,來確定路由器與MODEM之間的連接.也就是說,反向登錄到MODEM上面可對它用AT指令作配置.具體步驟如下:

1. 在路由器控制台上,用命令
   telnet ip-address 20yy
   其中 ip-address 是一個活動端口的地址, yy 是連接MODEM的line線.例如,下面例子是用IP地址192.169.53.52連接到輔助口上:
   telnet 192.169.53.52 2001
   
2. 如果連接被拒絕,可能有其它用戶連接在該口上.用show users EXEC命令決定是否被佔用,若是,clear line清除它;若沒有,重試反Telnet.
   
3. 如果連接仍被拒絕,確認MODEM控制modem inout.
   
4. 確定路由器txspeed和rxspeed與MODEM設置的數率一致.
   
5. 反Telnet登錄成功,AT命令確定應答OK.

明白show line輸出的含義

Show line line-number EXEC是非常有用的trobbleshooting命令.

現象:MODEM和路由器間無連接.試用反登錄無反應或用戶收到"Connection Refused by Foreign Host"信息.

建議:

1. 用show line看MODEM一欄是否是"inout",若不是,在路由器上:
   Router#conf t
   Router(config)#line aux 0
   Router(config-line)#modem inout
   Router(config-line)#^Z
   Router#
   
2. 確定正確的線纜.
   
3. 硬件問題,請與你的代理聯系.

現象:MODEM不撥號.

建議:MODEM不撥號,排除掉硬件,線纜的可能,就是:

1. 不感興趣的包.用show running-config檢查路由器配置,是否設置了dialer-list截段了你想傳送的包,若是請重新配置access-list表.
   
2. Chat script配置錯誤.打開debug信息.
   Router#debug dialer
   %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0, changed state to down
   %LINK-3-UPDOWN: Interface Serial0, changed state to down
   %LINK-3-UPDOWN: Interface Async1, changed state to down
   Async1: re-enable timeout
   Async1: sending broadcast to default destination get_free_dialer: faking it
   Async1: Dialing cause: Async1: ip PERMIT
   Async1:No holdq created - not configured
   Async1: Attempting to dial 8292
   CHAT1: Attempting async line dialer script
   CHAT1: Dialing using Modem script: backup & System script: none -- failed, not connected
   CHAT1: process started
   CHAT1: Asserting DTR
   CHAT1: Chat script backup started
   CHAT1: Expecting string:
   Async1: sending broadcast to default destination -- failed, not connected
   CHAT1: Timeout expecting:
   CHAT1: Chat script backup finished, status = Connection timed out; remote host not responding
   Async1: disconnecting call
   ......

幀中繼連接的Troubleshooting

1. 用show interface serial查看interface和line protocol是否up.確定連接的線纜正確.
   
2. 如果interface is up,但line protocol是down.用show frame-relay lmi查看幀中繼的LMI類型.
   
3. 用show frame-relay map查看打包類型.
   
4. 用show frame-relay pvc查看PVC.
   
5. 打開debug信息.

X.25連接的Troubleshooting

1. 確定兩個X.25端口連接上.
   MODEM狀態:若線路已連通,MODEM的CD燈和RD燈應該亮,表示X.25交換機有數據發送過來.
   我們也可以用pad 本地或對方的X.121地址,若能pad過去,說明行X.25網鏈路層已通.
   Router#pad 28050103(對方的X.121地址)
   
2. 用show interface serial命令.若serial is down,line protocol is down請檢查路由器與MODEM連接線纜,換另外串口重試.
   
3. 若serial is up,但line protocol is down.請與電信局聯系,檢查LAPB參數是否匹配.
   
4. 若serial is up,line protocol is up.但ping對方廣域網口不通.
   用show running-config查看串口是否作了x25 map ip設置.
   X.25設置中,最大虛電路數值是否超過了申請的值.
   

5. 若對方連接的不是路由器,而是一塊X.25網卡(以博達卡為例)
   環境:
   知識:博達X.25卡上
   #cd /etc/x.25
   #vi x25.profile 		(網卡參數設定文件)
     LOCADDR         28050103	(本地X.25端口X.121地址)
     VC		  16
     IVC		  0      	(呼入VC數)
     OVC		  0	 	(呼出VC數)
     PVC		  0		 (永久VC數)
     X25TIMEOUT	  60		 (拆鏈時間)
   故,SVC=VC-IVC-OVC-PVC.
   #x25reset     			(重啟X.25網卡)
   #x25link      			(監控當前狀態信息)
   #vi x25.addr		(地址對應文件,IP層能互相通信,要把X.121地址與IP地址對應起來)
     130.132.128.4		28050104	SVC	0
     130.132.128.3		28050103	SVC	0
   #cd /etc
   #vi tcp  加上
     ifconfig  x25 130.132.128.3 -arp network 255.255.0.0
   一般X.25連接出現問題都是一方的IP地址與X.121地址之間映射沒有設定.

與IBM主機連接的Troubleshooting

• DLSw+ Troubleshooting
• STUN Troubleshooting
• CIP Troubleshooting

DLSw+ Troubleshooting

在用DLSw+通過路由器實現PU2.0/2.1與IBM大型主機之間連接,我們要同時用show dlsw和show interface serial命令解決出現的問題.

1. 首先檢查DLSw+定義的兩個對等peers是否連通
   Router#show dlsw peers
   Peers:	             state	  pkts-rx   pkts-tx   type   drops  ckts   TCP    uptime
     TCP 17.18.15.1    CONNECT    16080      8400   conf          0     0     0  00.03.27
     TCP 1.1.12.1      DISCONN        0         0   conf          0     0     0  00.00.00

   Peers --- 對應"dlsw remote-peer"定義的對等peers IP地址.
   state --- 表示與對等peers的連接狀態.
   其中:CONNECT表示對等peers已建立.
        CAP_EXG表示與遠程peer交換性能信息.
        WAIT_RD是建立peer連接的最一步,等待遠程peer應答信息.
        DISCONN表示與對等peers沒有建立連接,請參閱TCP/IP Troubleshooting檢查TCP連接故障.
        WAN_BUSY表示TCP傳輸隊列已滿,不能傳輸數據.

2. 若對等peers已建立連接,請查看性能交換信息.
   Router#show dlsw capabilities
   DLSw: Capabilities for peer 172.18.15.166
   vendor id (OUI) : '00C' (cisco)
   version number : 1
   release number : 0
   init pacing window : 20
   unsupported saps : none
   num of tcp sessions :1
   loop prevent support : no
   icanreach mac-exclusive : no
   icanreach netbios-excl. : no
   reachable mac addresses : none
   reachable netbios names : none
   cisco version number : 1
   peer group number : 0
   border peer capable : no
   peer cost : 3
   biu-segment configured : no
   local-ack configured: yes
   priority configured: no
   version string :
   Cisco Internetwork Operating System Software
   IOS (tm) GS Software (GS7-K-M), Experimental Version 11.1(10956) [sbales 139]
   Copyright (c) 1986-1996 by cisco Systems, Inc.
   Compiled Thu 30-May-96 09:12 by sbales8
   

3. 交換過性能信息,就要尋找目的MAC地址了,顯示出所有的路由器能夠到達的MAC地址(本地和遠端)
   Router#show dlsw reachability
   DLSw MAC address reachability cache list
   Mac Addr        status     Loc.    peer/port            rif
   0000.810f.6500  FOUND      LOCAL   TBridge-001    --no rif--
   0006.e918.7b70  FOUND      LOCAL   TBridge-001    --no rif--
   1000.5ae3.03f7  FOUND      LOCAL   TBridge-001    --no rif--
   7500.9221.0000  FOUND      REMOTE  16.201.30.250(2065) max-lf(4472)
   7500.9221.0000  SEARCHING  LOCAL
   
   DLSw NetBIOS Name reachability cache list
   NetBIOS Name    status     Loc.    peer/port            rif
   SXUSER2         FOUND      LOCAL   TBridge-001    --no rif--

   若本地MAC地址和目的MAC地址狀態均是FOUND,請參看第五步.
   SEARCHING表示在尋找本地MAC地址或目的MAC地址.此時用show interface serial命令查看該口連接的PU狀態.
   NOT_FOUND表示沒有收到對PU輪詢的應答.
   VERIFY表示確認緩存內信息.

4. 在SERACHING本地MAC地址或目的MAC地址.
   Router#show interface serial 0
   Serial1 is up, line protocol is up
     Hardware is HD64570
     MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, rely 255/255, load 1/255
     Encapsulation SDLC, loopback not set
       Router link station role: SECONDARY (DTE)
       Router link station metrics:
         group poll not enabled
         poll-wait 40000 seconds
         N1 (max frame size)  12016 bits
         modulo 8
         sdlc vmac: 4000.5555.00--
     sdlc addr C1 state is DISCONNECT
         cls_state is CLS_STN_CLOSED
         VS 0, VR 0, Remote VR 0, Current retransmit count 0
         Hold queue: 0/200 IFRAMEs 0/0
         TESTs 0/0 XIDs 0/0, DMs 0/0 FRMRs 0/0
         RNRs 0/0 SNRMs 0/0 DISC/RDs 0/0 REJs 0/0 chain: C1/C1
     Last input never, output never, output hang never
     Last clearing of "show interface" counters never
     Queueing strategy: fifo
     Output queue 0/40, 0 drops; input queue 0/75, 0 drops
     5 minute input rate 0 bits/sec, 0 packets/sec
     5 minute output rate 0 bits/sec, 0 packets/sec
        0 packets input, 0 bytes, 0 no buffer
        Received 0 broadcasts, 0 runts, 0 giants
        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
        0 packets output, 0 bytes, 0 underruns
        0 output errors, 0 collisions, 19 interface resets
        0 output buffer failures, 0 output buffers swapped out
        6 carrier transitions
        DCD=up  DSR=up  DTR=up  RTS=up  CTS=up
   說明:
   Encapsulation SDLC---串口打包方式為SDLC.
   Router link station role: SECONDARY (DTE)---目前端口作secondary,由"sdlc role"命令設置.
   sdlc vmac: 4000.5555.00-- ---由"sdlc vmac"設置的MAC地址.注意它的最兩位是留給PU地址的.
         在本例中,端口MAC地址是4000.5555.00C1.
   sdlc addr C1 state is DISCONNECT ---該端口連接PU C1當前狀態.有以下幾種狀態:
         DISCONNECT -與PU未連接,次站沒有發TEST或XID幀請求建立連接.請檢查下面連接的PU是否啟動
   		 SNA進程,若是用DCE線纜連接PU請檢查線纜是否正確,若是MODEM連接到遠端PU上,請
   		 檢查MODEM狀態燈.
   
      DISCSENT-路由器發送斷開請求(DISC)給次站,正在等待次站應答.
   
      SNRMSENT-路由器發送連接請求(SNRM)給次站,正在等待次站應答.這個狀態出現在作主站的路由器
                 上.若是在作主站路由器上出現SNRMSENT狀態,檢查下端PU是否開機,路由器端口與PU上
                 SDLC口連接的MODEM是否已通(MODEM的DTR,CD,RXD,TXD燈應常亮).一句話,出現SNRMSENT
                 狀態是路由器端口與它下端PU之間問題.
   
      CONNECT-PU連接正常.路由器和它連接的次站正常連接.
   
      THEMBUSY-PU發送RNR幀.次站告訴路由器暫時不能接收任何信息.
   
      USBUSY-路由器發送RNR幀.路由器告訴次站暫時不能接收任何信息.路由器已接收到次站對SNRM幀的
               應答幀UA,試圖建立SDLC或LLC2會話.
   
      BOTHBUSY-雙方均發送RNR幀.告訴對方暫時不能接收任何信息.
   
      ERROR-違反SDLC協議.路由器正在等待次站應答.
   
      SNRMSEEN-路由器作次站,接收到SNRM幀.

5. 當雙方MAC地址都找到,開始建立鏈路了.
   Router#show dlsw curcuit
   Index           local addr(lsap)    remote addr(dsap)  state
   1818740         1000.5ae3.430d(04)  4000.5555.00c1(04) CONNECTED
   用"show interface serial"查看PU狀態應是"CONNECT".

我們也可以用"debug dlsw"獲得更多的信息幫助解決網絡中出現的問題.你可以記錄下debug傳輸信息提供給你的代理.

問題:遠端沒有到達本端機器.遠端peer的IP地址是172.18.16.156.

建議:

1. 檢查show dlsw peer輸出,我們看到:
   Peers:	              state	  pkts-rx   pkts-tx   type   drops  ckts   TCP    uptime
     TCP 172.18.16.156   DISCONN            0         0   conf       0     0     0       --

2. 用debug dlsw peers命令決定問題:
   DLSw: action_a() attempting to connect peer 172.18.15.156(2065)
   DLSw: action_a(): Write pipe opened for peer 172.18.15.156(2065)
   DLSw: peer 172.18.15.156(2065), old state DISCONN, new state WAIT_RD
   DLSw: dlsw_tcpd_fini() for peer 172.18.15.156(2065)
   DLSw: tcp fini closing connection for peer 172.18.15.156(2065)
   DLSw: action_d(): for peer 172.18.15.156(2065)
   DLSw: peer 172.18.15.156(2065), old state WAIT_RD, new state DISCONN
   DLSw: Not promiscuous - Rej conn from 172.18.15.166(2065)

診斷:試著打開peer 172.18.15.156,但不成功.DLSw+接收到來自172.18.15.166的打開請求,但是DLSw+拒絕它,因為這個peer沒有定義.由此我們可以判斷定義peer地址不正確.該peer地址為172.18.15.166就連通了.

Peers:	              state	  pkts-rx   pkts-tx   type   drops  ckts   TCP       uptime
  TCP 172.18.16.166   CONNECT           2         2   conf       0     0     0    00:224:27

問題:SDLC設備不能連接到主機.Milan是連接SDLC設備的遠端peer.

建議:

1. 用show dlsw peer命令顯示peer是up的.
   milan#sh dlsw peers
   Peers:	              state	  pkts-rx   pkts-tx   type   drops  ckts   TCP       uptime
     TCP 172.18.16.166   CONNECT           2         2   conf       0     0     0    00:224:27

2. Show dlsw circuits沒有鏈路產生.
   milan#show dlsw circuits
   milan#

3. Show interface 命令顯示SDLC 地址狀態是USBUSY,這表示我們已經成功的連接到下端路由器上.
   Router#show interface serial 3/7
   Serial1 is up, line protocol is up
     Hardware is HD64570
     MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, rely 255/255, load 1/255
     Encapsulation SDLC, loopback not set
       Router link station role: SECONDARY (DTE)
       Router link station metrics:
         group poll not enabled
         poll-wait 40000 seconds
         N1 (max frame size)  12016 bits
         modulo 8
         sdlc vmac: 4000.5555.00--
     sdlc addr C1 state is USBUSY
         cls_state is CLS_STN_CLOSED
         VS 0, VR 0, Remote VR 0, Current retransmit count 0
         Hold queue: 0/200 IFRAMEs 0/0
         TESTs 0/0 XIDs 0/0, DMs 0/1 FRMRs 20/20
         RNRs 620/0 SNRMs 3/0 DISC/RDs 1/0 REJs 0/0 chain: C1/C1
      sdlc addr C2 state is USBUSY
         cls_state is CLS_STN_CLOSED
         VS 0, VR 0, Remote VR 0, Current retransmit count 0
         Hold queue: 0/200 IFRAMEs 0/0
         TESTs 0/0 XIDs 0/0, DMs 0/0 FRMRs 0/0
         RNRs 730/0 SNRMs 7/0 DISC/RDs 0/0 REJs 0/0 chain: C2/C2
    Last input never, output never, output hang never
     Last clearing of "show interface" counters never
     Queueing strategy: fifo
     Output queue 0/40, 0 drops; input queue 0/75, 0 drops
     5 minute input rate 0 bits/sec, 0 packets/sec
     5 minute output rate 0 bits/sec, 0 packets/sec
        0 packets input, 0 bytes, 0 no buffer
        Received 0 broadcasts, 0 runts, 0 giants
        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
        0 packets output, 0 bytes, 0 underruns
        0 output errors, 0 collisions, 19 interface resets
        0 output buffer failures, 0 output buffers swapped out
        6 carrier transitions
        DCD=up  DSR=up  DTR=up  RTS=down  CTS=up

4. 檢查配置到達的目的MAC地址是4001.3745.1088.
   milan#write terminal 
   ... 
   ! 
   interface Serial3/7 
     description sdlc config to MVS 
     mtu 4400 
     no ip address 
     encapsulation sdlc 
     no keepalive 
     clockrate 9600 
     sdlc role primary 
     sdlc vmac 4000.1234.5600 
     sdlc N1 12016 
     sdlc address C1 
     sdlc xid C1 05DCCCC1 
     sdlc partner 4001.3745.1088 C1 
     sdlc address C2 
     sdlc xid C2 05DCCCC2 
     sdlc partner 4001.3745.1088 C2 
     sdlc dlsw C1 C2 
   ! 
   ...

5. 用show dlsw reachability mac-address命令發現MAC地址沒找到:
   Router#show dlsw reachability mac-address 4001.3745.1088
   DLSw MAC address reachability cache list
   Mac Addr        status         Loc.    peer/port            rif
   0000.810f.6500  SEARCHING      LOCAL   

6. 在FEP連接的路由器一端,用show dlsw reachability mac-address命令發現MAC地址沒找到:
   Router#show dlsw reachability mac-address 4001.3745.1088
   DLSw MAC address reachability cache list
   Mac Addr        status         Loc.    peer/port            rif
   0000.810f.6500  SEARCHING      REMOTE   

7. 顯示show source-bridge,沒有令牌環口走SRB:
   bolzano#show source-bridge
   Global RSRB Parameters:
   TCP Queue Length maximum: 100
   Ring Group 100:
   No TCP peername set, TCP transport disabled
   Maximum output TCP queue length, per peer: 100
   Rings:

診斷:加上"source-bridge"命令,連接正常了.

問題:同一個串口上,一個SDLC設備連接正常而其它幾個不行.

建議:

1. 用show dlsw peer命令顯示peer是up的.
   milan#sh dlsw peers
   Peers:	              state	  pkts-rx   pkts-tx   type   drops  ckts   TCP       uptime
     TCP 172.18.16.166   CONNECT           2         2   conf       0     0     0    00:224:27

2. 用show dlsw reachability mac-address命令發現MAC地址:
   Router#show dlsw reachability mac-address 4001.3745.1088
   DLSw MAC address reachability cache list
   Mac Addr        status     Loc.      peer/port            rif
   0000.810f.6500  FOUND      REMOTE    172.18.15.166(2065)

3. 用show dlsw circuits mac-address命令告訴兩個鏈路連接:
   milan#show dlsw circuit mac-address 4001.3745.1088 
   Index  local addr(lsap)     remote addr(dsap)   state 
   250-00 4000.1234.56c1(04)   4001.3745.1088(04)  CONNECTED 
   251-00 4000.1234.56c2(04)   4001.3745.1088(04)  CKT_ESTABLISHED
   

4. 用debug dlsw core命令輸出:
   milan#debug dlsw core state
   DLSw core state debugging is on
   milan#
   DLSw: START-FSM (251-00): event:DLC-Id state:CKT_ESTABLISHED
   DLSw: core: dlsw_action_f()
   DLSw: END-FSM (251-00): state:CKT_ESTABLISHED->CKT_ESTABLISHED
   DLSw: START-FSM (251-00): event:DLC-Id state:CKT_ESTABLISHED
   DLSw: core: dlsw_action_f()
   DLSw: END-FSM (251-00): state:CKT_ESTABLISHED->CKT_ESTABLISHED
   DLSw: START-FSM (251-00): event:WAN-XID state:CKT_ESTABLISHED
   DLSw: core: dlsw_action_g()
   DLSw: END-FSM (251-00): state:CKT_ESTABLISHED->CKT_ESTABLISHED
   DLSw: START-FSM (251-00): event:DLC-Id state:CKT_ESTABLISHED
   DLSw: core: dlsw_action_f()
   DLSw: END-FSM (251-00): state:CKT_ESTABLISHED->CKT_ESTABLISHED
   DLSw: START-FSM (251-00): event:DLC-Id state:CKT_ESTABLISHED
   DLSw: core: dlsw_action_f()
   DLSw: END-FSM (251-00): state:CKT_ESTABLISHED->CKT_ESTABLISHED
   DLSw: START-FSM (251-00): event:DLC-Id state:CKT_ESTABLISHED
   DLSw: core: dlsw_action_f()
   DLSw: END-FSM (251-00): state:CKT_ESTABLISHED->CKT_ESTABLISHED
   DLSw: START-FSM (251-00): event:DLC-Id state:CKT_ESTABLISHED
   DLSw: core: dlsw_action_f()
   DLSw: END-FSM (251-00): state:CKT_ESTABLISHED->CKT_ESTABLISHED
   DLSw: START-FSM (251-00): event:WAN-XID state:CKT_ESTABLISHED
   DLSw: core: dlsw_action_g()
   DLSw: END-FSM (251-00): state:CKT_ESTABLISHED->CKT_ESTABLISHED
   DLSw: START-FSM (251-00): event:DLC-Id state:CKT_ESTABLISHED
   DLSw: core: dlsw_action_f()
   DLSw: END-FSM (251-00): state:CKT_ESTABLISHED->CKT_ESTABLISHED

診斷:DLSw試圖在下端SDLC設備和FEP之間傳輸XID,但FEP並不建立會話.它通常是XID(IDBK/IDNUM)引起的.
在配置中加上"sdlc xid"連接正常.

STUN Troubleshooting

1. 確定stun peer連通
   rick#sh stun peer
   This peer: 10.17.5.2
   
     *Serial2  (group 1 [basic])
   			state	rx_pkts	   tx_pkts    drops
   all    TCP  10.17.5.2   open       5729       5718        0
   若狀態不是open,應是TCP/IP連接問題,請參閱TCP/IP Troubleshooting.

2. 用show interface確定路由器和主機之間serial is up,line protocol is up.
   若是"down/down"請檢查線纜,正確使用DTE和DCE Cable.
   若serial一會兒up,一會兒down,不斷反復.你的主機可能配置成半雙工的而不是全雙工的,使用MSD時路由器沒有設成半雙工的.
   
3. 如果serail is up,但line protocol is down.最大可能是一端是NRZ編碼,另一端是NRZI編碼.用"nrzi-encoding"命令設置NRZI編碼.設定編碼方式與大機相同.
   
4. 一旦line操作正常,最常出現的問題就是SDLC地址不對.SDLC地址要與主機PU地址一致.如果收到下面信息就表示SDLC地址與主機PU地址不匹配.
   Received data from wrong address! Expect for output address C2/Got C4.

Debug sdlc
當工作正常時,debug輸出信息順序:
SDLC Primary :
DISCONNECT-->SDLC PRI WAIT-->NET UP WAIT-->CONNECT
SDLC Secondary :
DISCONNECT-->NET UP WAIT-->SDLC SECWAIT-->CONNECT

CIP Troubleshooting

1. 用"show interface channel 3/0"顯示物理通道端口狀態.若channel3/0 is up,line protocol is up.
   表示物理接口連接正常.否則請檢查物理接口,線纜,bypass等是否連接正確.
   Router#sh int c3/0
   Channel3/0 is up, line protocol is up 
     Hardware is cyBus Channel Interface
     MTU 4096 bytes, BW 36864 Kbit, DLY 270 usec, rely 255/255, load 1/255
     Encapsulation CHANNEL, loopback not set
     PCA adapter card
     Data transfer rate 4.5 Mbytes, number of subchannels 1
     Last input never, output never, output hang never
     Last clearing of "show interface" counters never
     Output queue 0/40, 0 drops; input queue 0/75, 0 drops
     5 minute input rate 0 bits/sec, 0 packets/sec
     5 minute output rate 0 bits/sec, 0 packets/sec
        1677 packets input, 0 bytes, 0 no buffer
        Received 0 broadcasts, 0 runts, 0 giants
        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
        1595 packets output, 0 bytes, 0 underruns
        0 output errors, 0 collisions, 5 interface resets, 0 restarts
        0 output buffer failures, 0 output buffers swapped out

2. 用"show interface channel 3/2"顯示邏輯通道口狀態.
   Router#sh int ch3/2
   Channel3/2 is up, line protocol is up 
     Hardware is cyBus Channel Interface
     MTU 4472 bytes, BW 98304 Kbit, DLY 100 usec, rely 255/255, load 1/255
     Encapsulation CHANNEL, loopback not set
     Virtual interface
     Last input 0:01:36, output 0:01:26, output hang never
     Last clearing of "show interface" counters never
     Output queue 0/40, 0 drops; input queue 0/75, 0 drops
     5 minute input rate 0 bits/sec, 0 packets/sec
     5 minute output rate 0 bits/sec, 0 packets/sec
        19090 packets input, 686391 bytes, 0 no buffer
        Received 0 broadcasts, 0 runts, 0 giants
        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
        20314 packets output, 754513 bytes, 0 underruns
        0 output errors, 0 collisions, 0 interface resets, 0 restarts
        0 output buffer failures, 0 output buffers swapped out

3. 用"show ext ch 3/0 csna oper"顯示CSNA通道連接設備狀態.
   "stat"替代"oper"獲得CSNA通道連接設備的統計值.
   確認CSNA通道連接設備狀態為"setupComplet".
   Router#sh ext c3/0 csna 
        Path Dv  maxpiu       time-delay   length-delay
   CSNA 0100 E1  20470        10           20470
   Router#sh ext c3/0 csna oper
        Path Dv  Status         SlowDown     maxpiu	time-delay   length-delay
   CSNA 0100 E1  setupComplet        off     20470		10	     20470

4. 用"show ext ch 3/2 conn llc"命令確定SAPs值和CIP上打開的連接.
   確認定義在XCA中的正確的SAP值在CIP internal Token Ring LAN adapter中已打開.
   SHANXI2#sh ext c3/2 conn llc
   
     LAN Token  0 Adapter   1 5808.0100.0000
       No SAPs open on this interface
   
     Total : SAPs opened = 0       Connections active = 0    

5. 如果CSNA通道連接設備狀態是"setupComplet",正確的SAP值(i.e.,SAP 08)打開在正確的CIP internal
   MAC adapter上,進入第七步.否則,問題可能是PATH/DEVICE或XCA Major Node.請檢查通道地址定義是否
   正確.若PATH/DEVICE正確,再在主機上"v net,act,id=<xcamajnode>"命令確認XCA Major Node激活.
   Router#sh ext c3/0 csna oper
        Path Dv  Status         SlowDown     maxpiu	time-delay   length-delay
   CSNA 0100 E1  Close        off     20470		10	     20470

6. 用"debug source-bridge"命令確定是否產生探測幀.如果確定以CIP internal MAC地址為目的的探測幀被接收到,請打開"debug channel vlan".
   

7. 用"show ext ch 3/2 lan"命令顯示CIP internal MAC adapters.核實CIP internal MAC adapter被
   CIP microcode確認.
   router#debug channel vlan
   router#show ext ch 3/2 lan
   Lan TokenRing 0 
           source-bridge 1000 1 100 
           Adapno Mac Address     Name Vcnum 
                0 4000.1234.0001       544 0041 ACK ... ... ... ...... INU

8. 如果CIP internal MAC adapters沒有收到CIP的應答,(在"show ext ch 3/2 lan"顯示不是ACK而是CRE或PNDIND),表明CIP microcode沒有承認CIP adapter配置命令.在這種情況下,RP不發送探測幀給CIP.
   
9. 如果CIP internal MAC adapters已經接收到CIP的應答,用"show ext ch 3/2 llc stat 4000.0008.0000",4000.0008.0000是CIP的internal MAC address,檢查是否收到CIP MAC adapter的檢測命令和應答.
   
10. 如果正常,再用"show ext ch 3/2 llc stat 4000.0008.0000 08"命令確認SAP是否接收到XIDs和應答.如果沒有應答,可能是Switched Major Node沒被激活,或IDBLK/IDNUM不正確,或PU被佔用.
    

11. 在下端路由器上"show dlsw"命令查看串口連接的SNA end station狀態.參閱DLSw+ Troubleshooting.

12. 用"show llc2"顯示當前已建立的LLC2鏈接.
    SHANXI2#sh llc
    LLC2 Connections: total of 1 connections
    Channel1/2 DTE: 5808.0100.0000 4000.4700.10c1 04 04 state NORMAL
       V(S)=38, V(R)=38, Last N(R)=38, Local window=7, Remote Window=127
       akmax=3, n2=8, Next timer in 7520
       xid-retry timer      0/0       ack timer       0/1000  
       p timer              0/1000    idle timer   7520/10000 
       rej timer            0/3200    busy timer      0/9600  
       akdelay timer        0/100     txQ count       0/200   
       RIF: 0630.0641.0020