Cisco Resource Policy Management System 2.0.1 Troubleshooting Guide
Chapter 4: Universal Gateway IOS Debugging
Downloads: This chapterpdf (PDF - 149.0KB) The complete bookPDF (PDF - 1.22MB) | Feedback

Universal Gateway IOS Debugging

Table Of Contents

Universal Gateway IOS Debugging

Overview: Using IOS Debugging Features

Universal Gateway Debugging Rules

Overview: Useful Universal Gateway `show' Commands

show caller summary

show isdn memory

show radius statistics

The show csm call-rate for the Current 60 Seconds

The show csm call-rate for the Last 60 Minutes

The show csm call-rate for the Last 72 Hours

Overview: The Universal Gateway—Cisco RPMS Communication Debug

Incorrect Key

deb radius

Cisco RPMS Cannot Identify the Universal Gateway

deb radius


Universal Gateway IOS Debugging


Topics in this chapter include:

Overview: Using IOS Debugging Features

Universal Gateway Debugging Rules

Overview: Useful Universal Gateway `show' Commands

show caller summary

show isdn memory

show radius statistics

The show csm call-rate for the Current 60 Seconds

The show csm call-rate for the Last 60 Minutes

The show csm call-rate for the Last 72 Hours

Overview: The Universal Gateway—Cisco RPMS Communication Debug

Incorrect Key

Cisco RPMS Cannot Identify the Universal Gateway

Overview: Using IOS Debugging Features

There are different reasons for using the Cisco IOS release debugging commands. Which command you use depends on what you want to accomplish, and what the symptoms are what you are debugging.


Note This chapter describes debugging commands for Cisco universal gateways. For debugging other vendors' UGs, consult your owner's manuals or contact the UG vendor.


Table 4-1

Debug
Why it is Used
Symptoms
debug radius

For communication issues between the universal gateway and Cisco RPMS.

No successful calls accepted into the UG.

deb aaa authorization

For customer profile issues.

Some calls are being rejected.

debug aaa authentication
   

Debugging Features

Universal Gateway Debugging Rules

When debugging a Cisco UG, keep the following rules in mind.

There is no differentiation between authorization messages for call authentication and user authentication. This results in a large number of debugs.

Use conditional debugs.

Overview: Useful Universal Gateway `show' Commands

You can use the following `show' commands:

Summary of callers:

show caller summary 

The ISDN memory:

show isdn memory

RADIUS statistics:

show radius statistics

Incoming call rate on the UG:

show csm call-rate

show caller summary

Summary of calls example:

5300-8-17#sh caller summary 
6    Analog calls
0    ISDN calls
0    VPDN calls
6    Total users logged in
44   Total users since last reload

show isdn memory

ISDN summary example:

5300-8-17#sh isdn mem

MEMORY POOL STATISTICS

BlockType            	 in use   limit   max used
mail descriptors     		 0        2400       10
exec timer blocks    		 0         600        0
LIF timers          330           -       330
L2IF timers          24           -        24
PRIM_BTYPE          354           -       356
PKT_BTYPE            		 0           -         5
HEADER_BTYPE         	 0           -         5
SML_INFO_BTYPE       	 0           -         1
LRG_INFO_BTYPE       	 0           -         1
PKG_BTYPE            		 0           -         1
CCBs               	  	 6           -         8
DLCBs                		 8           -         8
NLCBs    		            18           -        18

show radius statistics

RADIUS statistics example:

5300-8-17#sh radius sta
                          		 Auth.      Acct.       Both
Maximum inQ length:         NA         NA          1
Maximum waitQ length:       NA         NA          0
Maximum doneQ length:       NA         NA          1
Total responses seen:       71         51        122
Packets with responses:      71         51        122
Packets without responses:    5          0          5
Average response delay(ms):  37         37         37
Maximum response delay(ms): 156        104        156
Number of Radius timeouts:    5          0          5
Duplicate ID detects:         0          0          0

The show csm call-rate for the Current 60 Seconds

You can use the show csm call-rate command to view the CSM call switching rate per second for the last 60 seconds.


Note The # sign represents calls entering the CSM per second.


The status appears onscreen similar to this:

5300-8-17#sh csm call-rate 
                                                               
                                                               
                                                               
 20                                                            
 19                                                            
 18                                                            
 17                                                            
 16                                                            
 15                                                            
 14                                                            
 13                                                            
 12                                                            
 11                                                            
 10                                                            
  9                                                            
  8                                                            
  7                                                            
  6                                                            
  5                                                            
  4                                                            
  3                                                            
  2                                                            
  1                                                            
    0....5....1....1....2....2....3....3....4....4....5....5....
              0    5    0    5    0    5    0    5    0    5    

        CSM call switching rate per second (last 60 seconds)
          # = calls entering the CSM per second

The show csm call-rate for the Last 60 Minutes

You can use the show csm call-rate command to view the CSM call switching rate per second for the last 60 minutes.


Note The * symbol represents the maximum calls.

The # sign represents calls entering the CSM per second.


The status appears onscreen similar to this:

20                                                            
 19                                                            
 18                                                            
 17                                                            
 16                                                            
 15                                                            
 14                                                            
 13                                                            
 12                                                            
 11                                                            
 10                                                            
  9                                                            
  8                                                            
  7                                                            
  6                                                            
  5                                                            
  4                                                            
  3                                                            
  2                                                            
  1           *   *                                            
    0....5....1....1....2....2....3....3....4....4....5....5....
              0    5    0    5    0    5    0    5    0    5    

        CSM call switching rate per second (last 60 minutes)
          * = maximum calls/s    # = average calls/s

The show csm call-rate for the Last 72 Hours

You can use the show csm call-rate command to view the CSM call switching rate per second for the last 72 hours.


Note The * symbol represents the maximum calls.

The # sign represents calls entering the CSM per second.


The status appears onscreen similar to this:

 20                                                                        
 19                                                                        
 18                                                                        
 17                                                                        
 16                                                                        
 15                                                                        
 14                                                                        
 13                                                                        
 12                                                                        
 11                                                                        
 10                                                                        
  9                                                                        
  8                                                                        
  7                                                                        
  6                                                                        
  5                                                                        
  4                                                                        
  3                                                                        
  2                                                                        
  1                                                 * ***                  
    
0....5....1....1....2....2....3....3....4....4....5....5....6....6....
7.
              0    5    0    5    0    5    0    5    0    5    0    5    
0 

            CSM call switching rate per second (last 72 hours)
              * = maximum calls/s    # = average calls/s

Overview: The Universal Gateway—Cisco RPMS Communication Debug

This sections lists the different types of communications you receive when debugging a Cisco universal gateway.

These include:

Incorrect key

Cisco RPMS Can't Identify UG

Incorrect Key

deb radius

5300-8-17#
2w3d: ISDN Se0:23: RX <-  SETUP pd = 8  callref = 0x002A
2w3d:      Bearer Capability i = 0x8090A2
2w3d:      Channel ID i = 0xA98381
2w3d:      Calling Party Number i = 0xA1, '8534217', Plan:ISDN,          
                Type:National
2w3d:      Called Party Number i = 0xA1, '5551006', Plan:ISDN,   
                Type:National
2w3d: AAA/ACCT/DS0: channel=0, ds1=0, t3=0, slot=0, ds0=0
2w3d: AAA/ACCT/DS0: channel=0, ds1=0, t3=0, slot=0, ds0=0
2w3d: ISDN Se0:23: TX ->  CALL_PROC pd = 8  callref = 0x802A
2w3d:         Channel ID i = 0xA98381
2w3d: AAA/AUTHOR/PREAUTH/(0000002B): DNIS-based preauthentication
2w3d: AAA/AUTHOR (0x2B): Pick method list 'default'
2w3d: RADIUS/ENCODE(0000002B): acct_session_id: 44
2w3d: RADIUS(0000002B): sending
2w3d: RADIUS:Send to unknown id 76 1.4.56.1:1812,Access-Request,len 99
2w3d: RADIUS: authenticator 57 B4 E3 03 CB 22 22 6A - B0 AE 76 F2 D0  
               18 34 9E
2w3d: RADIUS:  User-Name           [1]   9   "5551006"
2w3d: RADIUS:  User-Password       [2]   18  *
2w3d: RADIUS:  NAS-Port            [5]   6   0                         
2w3d: RADIUS:  Called-Station-Id   [30]  9   "5551006"
2w3d: RADIUS:  Calling-Station-Id  [31]  9   "8534217"
2w3d: RADIUS:  NAS-Port-Type       [61]  6   Async                 [0]
2w3d: RADIUS:  Service-Type        [6]   6   Outbound              [5]
2w3d: RADIUS:  NAS-IP-Address      [4]   6   1.4.56.117                
2w3d: RADIUS:  Acct-Session-Id     [44]  10  "0000002C"
2w3d: RADIUS: Received from id 76 1.4.56.1:1812, Access-Accept, len 60
2w3d: RADIUS:  authenticator 06 01 4A A5 FA EA 4D 1C - DA A7 72 A8 57 
                 8F 1D FF
2w3d: RADIUS:  Class               [25]  40  
2w3d: RADIUS:   43 52 50 4D 53 2D 43 4C 41 53 53 64 06 00 00 00  
                 [CRPMS-CLASSd????]
2w3d: RADIUS:   01 6C 15 31 2E 34 2E 35 36 2E 31 31 37 2B 30 30                                                
                  [?l?1.4.56.117+00]
2w3d: RADIUS:   30 30 30 30 32 43                 [00002C]
2w3d: RADIUS: Response (76) failed decrypt

Note The solution for this is to re-enter the keys on the UG and Cisco RPMS.


Cisco RPMS Cannot Identify the Universal Gateway

Possible causes for this include:

The UG may not be configured correctly on Cisco RPMS.

The Name server entry may not match the UG source IP address.

To fix this, ensure the IP address of the UG is correct. For more information on configuring the UG IP address, see the Cisco Resource Policy Management System Configuration Guide.

deb radius

5300-8-17#
2w0d:AAA/ACCT/DS0:channel=0, ds1=6, t3=0, slot=0, ds0=24576
2w0d:AAA/ACCT/DS0:channel=0, ds1=6, t3=0, slot=0, ds0=24576
2w0d:AAA/AUTHOR/PREAUTH/(0000002B):DNIS-based preauthentication
2w0d:AAA/AUTHOR (0x2B):Pick method list 'default'
2w0d:RADIUS/ENCODE(0000002B):acct_session_id:43
2w0d:RADIUS(0000002B):sending
2w0d:RADIUS:Send to unknown id 86 1.4.56.1:1812, Access-Request, len 
99
2w0d:RADIUS: authenticator 05 D7 92 9A 90 06 C3 7E - BA B2 A5 2F 08 AE 
9D 31
2w0d:RADIUS: User-Name           [1]   9   "5551005"
2w0d:RADIUS: User-Password       [2]   18  *
2w0d:RADIUS: NAS-Port            [5]   6   192                       
2w0d:RADIUS: Called-Station-Id   [30]  9   "5551005"
2w0d:RADIUS: Calling-Station-Id  [31]  9   "8534217"
2w0d:RADIUS: NAS-Port-Type       [61]  6   Async                     
[0]
2w0d:RADIUS: Service-Type        [6]   6   Outbound                  
[5]
2w0d:RADIUS: NAS-IP-Address      [4]   6   1.4.56.117                
2w0d:RADIUS: Acct-Session-Id     [44]  10  "0000002B"
2w0d:RADIUS:Tried all servers.
2w0d:RADIUS:No valid server found. Trying any viable server
2w0d:RADIUS:Tried all servers.
2w0d:RADIUS:No response for id 86
2w0d:RADIUS/DECODE:parse response no app start; FAIL
2w0d:RADIUS/DECODE:parse response; FAIL
2w0d:AAA/AUTHOR/PREAUTH/(0000002B):Done - FAILED 
2w0d:AAA/ACCT/DS0:channel=0, ds1=6, t3=0, slot=0, ds0=24576
5300-8-17#

Note This output looks the same as a mismatched key issue.