Table Of Contents
debug v120 event
debug v120 packet
debug vg-anylan
debug vines arp
debug vines echo
debug vines ipc
debug vines netrpc
debug vines packet
debug vines routing
debug vines service
debug vines state
debug vines table
debug vlan packet
debug vpdn
debug vtemplate
debug x25
debug x28
debug xns packet
debug xns routing
debug v120 event
Use the debug v120 event EXEC command to display information on V.120 activity. The no form of this command disables debugging output.
[no] debug v120 event
Usage Guidelines
V.120 is an ITU specification that allows for reliable transport of synchronous, asynchronous, or bit transparent data over ISDN bearer channels.
For complete information on the V.120 process, use the debug v120 packet command along with the debug v120 event command. V.120 events are activity events rather than error conditions.
Sample Display
Figure 2-266 shows sample debug v120 event output of V.120 starting up and stopping. Also included is the interface that V.120 is running on (BR 0) and where the V.120 configuration parameters are obtained from (default).
Figure 2-266 Sample Debug V.120 Event Output
0:01:47: BR0:1-v120 started - Setting default V.120 parameters
0:02:00: BR0:1:removing v120
Related Command
debug v120 packet
debug v120 packet
Use the debug v120 packet EXEC command to display general information on all incoming and outgoing V.120 packets. The no form of this command disables debugging output.
[no] debug v120 packet
Usage Guidelines
The debug v120 packet command shows every packet on the V.120 session. You can use this information to determine whether incompatibilities exist between Cisco's V.120 implementation and other vendors' V.120 implementations.
V.120 is an ITU specification that allows for reliable transport of synchronous, asynchronous, or bit transparent data over ISDN bearer channels.
For complete information on the V.120 process, use the debug v120 events command along with the debug v120 packet command.
Sample Display
Figure 2-267 shows sample debug v120 packet output for a typical session startup.
Figure 2-267 Sample Debug V.120 Packet Output
Router# debug v120 packet
0:03:27: BR0:1: I SABME:lli 256 C/R 0 P/F=1
0:03:27: BR0:1: O UA:lli 256 C/R 1 P/F=1
0:03:27: BR0:1: O IFRAME:lli 256 C/R 0 N(R)=0 N(S)=0 P/F=0 len 43
0x83 0xD 0xA 0xD 0xA 0x55 0x73 0x65
0x72 0x20 0x41 0x63 0x63 0x65 0x73 0x73
0:03:27: BR0:1: I RR:lli 256 C/R 1 N(R)=1 P/F=0
0:03:28: BR0:1: I IFRAME:lli 256 C/R 0 N(R)=1 N(S)=0 P/F=0 len 2
0:03:28: BR0:1: O RR:lli 256 C/R 1 N(R)=1 P/F=0
0:03:29: BR0:1: I IFRAME:lli 256 C/R 0 N(R)=1 N(S)=1 P/F=0 len 2
0:03:29: BR0:1: O RR:lli 256 C/R 1 N(R)=2 P/F=0
%LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0: B-Channel 1, changed state to up
0:03:31: BR0:1: I IFRAME:lli 256 C/R 0 N(R)=1 N(S)=2 P/F=0 len 2
0:03:32: BR0:1: I IFRAME:lli 256 C/R 0 N(R)=1 N(S)=3 P/F=0 len 3
0:03:32: BR0:1: O RR:lli 256 C/R 1 N(R)=3 P/F=0
0:03:32: BR0:1: I IFRAME:lli 256 C/R 0 N(R)=1 N(S)=4 P/F=0 len 2
0:03:32: BR0:1: O RR:lli 256 C/R 1 N(R)=5 P/F=0
0:03:32: BR0:1: I IFRAME:lli 256 C/R 0 N(R)=1 N(S)=5 P/F=0 len 2
0:03:32: BR0:1: O IFRAME:lli 256 C/R 0 N(R)=6 N(S)=1 P/F=0 len 9
0x83 0xD 0xA 0x68 0x65 0x66 0x65 0x72 0x3E
describes the fields shown in the display.
Table 2-138 Debug V.120 Packet Field Descriptions
Field
|
Descriptions
|
BR0:1
|
Interface number associated with this debugging information.
|
I/O
|
Packet going into or out of the interface.
|
SABME, UA, IFRAME, RR
|
V.120 packet type. In this case:
• SABME—set asynchronous balanced mode, extended
• US—unnumbered acknowledgment
• IFRAME—information frame
• RR—receive ready
|
lli 256
|
Logical link identifier number.
|
C/R 0
|
Command or response.
|
P/F=1
|
Poll final.
|
N(R)=0
|
Number received.
|
N(S)=0
|
Number sent.
|
len 43
|
Number of data bytes in the packet.
|
0x83
|
Up to 16 bytes of data.
|
Related Command
debug v120 event
debug vg-anylan
To monitor error information and 100VG connection activity, use the debug vg-anylan EXEC command. The no form of this command disables debugging output.
[no] debug vg-anylan
Usage Guidelines
This command could create large amounts of command output.
Sample Display
shows sample output from the debug vg-anylan command.
Figure 2-268 Sample Debug VG-AnyLAN Output
%HP100VG-5-LOSTCARR: HP100VG(2/0), lost carrier
lists the possible messages that could be generated by this command.
Table 2-139 Debug VG-AnyLAN Message Descriptions
Message
|
Description
|
Action
|
%HP100VG-5-LOSTCARR: HP100VG(2/0), lost carrier
|
Lost carrier debug message. The VG controller detects that the link to the hub is down due to cable, hub, or VG controller problem.
|
Check, repair, or replace the cable or hub. If you determine that the cable and hub are functioning normally, repair or replace the 100VG-AnyLAN port adapter.
|
%HP100VG-5-CABLEERR: HP100VG(2/0), cable error, training failed
|
Bad cable error messages. Cable did not pass training.1
|
Check, repair, or replace the cable or hub. If you determine that the cable and hub are functioning normally, repair or replace the 100VG-AnyLAN port adapter.
|
%HP100VG-5-NOCABLE: HP100VG(2/0), no tone detected, check cable, hub
|
No cable attached error message. The VG MAC cannot hear tones from the hub.1
|
Check, repair, or replace the cable or hub. If you determine that the cable and hub are functioning normally, repair or replace the 100VG-AnyLAN port adapter.
|
HP100VG-1-FAIL: HP100VG(2/0), Training Fail - unable to login to the hub
|
Training to the VG network failed. Login to the hub rejected by the hub.1
|
Take action based on the following error messages:
• %HP100VG-1-DUPMAC: HP100VG(2/0), A duplicate MAC address has been detected
• HP100VG-1-LANCNF: HP100VG(2/0), Configuration is not compatible with the network
• %HP100VG-1-ACCESS: HP100VG(2/0), Access to network is not allowed
|
%HP100VG-1-DUPMAC: HP100VG(2/0), A duplicate MAC address has been detected
|
Duplicate MAC address on the same VG network. Two VG devices on the same LAN segment have the same MAC address.
|
Check the router configuration to make sure that no duplicate MAC address is configured.
|
%HP100VG-1-LANCNF: HP100VG(2/0), Configuration is not compatible with the network
|
Configuration of the router is not compatible to the network.
|
Check that the configuration of the hub for Frame Format, Promiscuous, and Repeater bit indicates the proper configuration.
|
%HP100VG-1-ACCESS: HP100VG(2/0), Access to network is not allowed
|
Access to the VG network is denied by the hub.
|
Check the configuration of the hub.
|
%HP100VG-3-NOTHP100VG: Device reported 0x5101A
|
Could not find the 100VG PCI device on a 100VG-AnyLAN port adapter.
|
Make sure the 100VG-AnyLAN port adapter is properly seated in the slot. Otherwise repair or replace the 100VG-AnyLAN port adapter.
|
%HP100VG-1-DISCOVER: Only found 0 interfaces on bay 2, shutting down bay
|
No 100VG interface detected on a 100VG-AnyLAN port adapter in a slot.
|
Make sure the 100VG-AnyLAN port adapter is properly seated in the slot. Otherwise repair or replace the 100VG-AnyLAN port adapter.
|
debug vines arp
Use the debug vines arp EXEC command to display debugging information on all Virtual Integrated Network Service (VINES) Address Resolution Protocol (ARP) packets that the router sends or receives. The no form of this command disables debugging output.
[no] debug vines arp
Sample Display
shows sample debug vines arp output.
Figure 2-269 Sample Debug VINES ARP Output
VNSARP: received ARP type 0 from 0260.8c43.a7e4
VNSARP: sending ARP type 1 to 0260.8c43.a7e4
VNSARP: received ARP type 2 from 0260.8c43.a7e4
VNSARP: sending ARP type 3 to 0260.8c43.a7e4 assigning address 3001153C:8004
VSARP: received ARP type 0 from 0260.8342.1501
VSARP: sending ARP type 1 to 0260.8342.1501
VSARP: received ARP type 2 from 0260.8342.1501
VSARP: sending ARP type 3 to 0260.8342.1501 assigning address 3001153C:8005,
In , the first four lines show a non-sequenced ARP transaction and the second four lines show a sequenced ARP transaction. Within the first group of four lines, the first line shows that the router received an ARP request (type 0) from indicated station address 0260.8c43.a7e4. The second line shows that the router is sending back the ARP service response (type 1), indicating that it is willing to assign VINES Internet addresses. The third line shows that the router received a VINES Internet address assignment request (type 2) from address 0260.8c43.a7e4. The fourth line shows that the router is responding (type 3) to the address assignment request from the client and assigning it the address 3001153C:8004.
Within the second group of four lines, the sequenced ARP packet also includes the router' current sequence number and the metric value between the router and the client.
describes significant fields shown in .
Table 2-140 Debug VINES ARP Field Descriptions
Field
|
Description
|
VNSARP:
|
Banyan VINES nonsequenced ARP message.
|
VSARP:
|
Banyan VINES sequenced ARP message.
|
received ARP type 0
|
ARP request of type 0 was received. Possible type values follow:
• 0—Query request. The ARP client broadcasts a type 0 message to request an ARP service to respond.
• 1—Service response. The ARP service responds with a type 1 message to an ARP client's query request.
• 2—Assignment request. The ARP client responds to a service response with a type 2 message to request a VINES Internet address.
• 3—Assignment response. The ARP service responds to an assignment request with a type 3 message that includes the assigned VINES Internet address.
|
from 0260.8c43.a7e4
|
Indicates the source address of the packet.
|
debug vines echo
Use the debug vines echo EXEC command to display information on all MAC-level echo packets that the router sends or receives. Banyan VINES interface testing programs make use of these echo packets. The no form of this command disables debugging output.
[no] debug vines echo
Note
These echo packets do not include network layer addresses.
Sample Display
shows sample debug vines echo output.
Figure 2-270 Sample Debug VINES Echo Output
VINESECHO: 100 byte packet from 0260.8c43.a7e4
describes the fields shown in .
Table 2-141 Debug VINES Echo Field Descriptions
Field
|
Description
|
VINESECHO
|
Indication that this is a debug vines echo message.
|
100 byte packet
|
Packet size in bytes.
|
from 0260.8c43.a7e4
|
Source address of the echo packet.
|
debug vines ipc
Use the debug vines ipc EXEC command to display information on all transactions that occur at the VINES IPC layer, which is one of the two VINES transport layers. The no form of this command disables debugging output.
[no] debug vines ipc
Usage Guidelines
You can use the debug vines ipc command to discover why an IPC layer process on the router is not communicating with another IPC layer process on another router or Banyan VINES server.
Sample Display
shows sample debug vines ipc output for three pairs of transactions. For more information about these fields or their values, refer to Banyan VINES documentation.
Figure 2-271 Sample Debug VINES IPC Output
VIPC: sending IPC Data to Townsaver port 7 from port 7
r_cid 0, l_cid 1, seq 1, ack 0, length 12
VIPC: received IPC Data from Townsaver port 7 to port 7
r_cid 51, l_cid 1, seq 1, ack 1, length 32
VIPC: sending IPC Ack to Townsaver port 0 from port 0
r_cid 51, l_cid 1, seq 1, ack 1, length 0
describes the fields shown in .
Table 2-142 Debug VINES IPC Field Descriptions
Field
|
Description
|
VIPC:
|
Indicates that this is output from the debug vines ipc command.
|
sending
|
Indicates that the router is either sending an IPC packet to another router or has received an IPC packet from another router.
|
IPC Data to
|
Indicates the type of IPC frame:
• Acknowledgment
• Data
• Datagram
• Disconnect
• Error
• Probe
|
Townsaver port 7
|
Indicates the machine name as assigned using the VINES host command, or IP address of the other router. Also indicates the port on that machine through which the packet has been transmitted.
|
from port 7
|
Indicates the port on the router through which the packet has been transmitted.
|
r_cid 0, l_cid 1, seq 1, ack 0, length 12
|
Indicates the values for various fields in the IPC layer header of this packet. Refer to Banyan VINES documentation for more information.
|
debug vines netrpc
Use the debug vines netrpc EXEC command to display information on all transactions that occur at the VINES NetRPC layer, which is the VINES Session/Presentation layer. The no form of this command disables debugging output.
[no] debug vines netrpc
Usage Guidelines
You can use the debug vines netrpc command to discover why a NetRPC layer process on the router is not communicating with another NetRPC layer process on another router or Banyan server.
Sample Display
shows sample debug vines netrpc output. For more information about these fields or their values, refer to Banyan VINES documentation.
Figure 2-272 Sample Debug VINES NetRPC Output
Router# debug vines netrpc
VRPC: sending RPC call to Townsaver
VRPC: received RPC return from Townsaver
describes the fields shown in the first line of output in .
Table 2-143 Debug VINES NetRPC Field Descriptions
Field
|
Description
|
VRPC:
|
Indicates that this is output from the debug vines netrpc command.
|
sending RPC
|
Indicates that the router is either sending a NetRPC packet to another router or has received a NetRPC packet from another router.
|
call
|
Indicates the transaction type:
• abort
• call
• reject
• return
• return address
• search
• search all
|
Townsaver
|
Indicates the machine name as assigned using the VINES host command or IP address of the other router.
|
debug vines packet
Use the debug vines packet EXEC command to display general VINES debugging information. This information includes packets received, generated, and forwarded, as well as failed access checks and other operations. The no form of this command disables debugging output.
[no] debug vines packet
Sample Display
shows sample debug vines packet output.
Figure 2-273 Sample Debug VINES Packet Output
Router# debug vines packet
VINES: s=30028CF9:1 (Ether2), d=FFFFFFFF:FFFF, rcvd w/ hops 0
VINES: s=3000CBD4:1 (Ether1), d=3002ABEA:1 (Ether2), g=3002ABEA:1, sent
VINES: s=3000CBD4:1 (Ether1), d=3000B959:1, rcvd by gw
VINES: s=3000B959:1 (local), d=3000CBD4:1 (Ether1), g=3000CBD4:1, sent
describes the fields shown in the first line of output.
Table 2-144 Debug VINES Packet Field Descriptions
Field
|
Description
|
VINES:
|
Indicates that this is a Banyan VINES packet.
|
s = 30028CF9:1
|
Indicates source address of the packet.
|
(Ether2)
|
Indicates the interface through which the packet was received.
|
d = FFFFFFFF:FFFF
|
Indicates that the destination is a broadcast address.
|
rcvd w/ hops 0
|
Indicates that the packet was received because it was a local broadcast packet. The remaining hop count in the packet was zero (0).
|
Explanations for other lines in follow.
In the following line, the destination is the address 3002ABEA:1 associated with interface Ether2. Source address 3000CBD4:1 sent a packet to this destination through the gateway at address 3000ABEA:1.
VINES: s=3000CBD4:1 (Ether1), d=3002ABEA:1 (Ethernet2), g=3002ABEA:1, sent
In the following line, the router being debugged is the destination address (3000B959:1):
VINES: s=3000CBD4:1 (Ether1), d=3000B959:1, rcvd by gw
In the following line, (local) indicates that the router being debugged generated the packet:
VINES: s=3000B959:1 (local), d=3000CBD4:1 (Ether1), g=3000CBD4:1, sent
debug vines routing
Use the debug vines routing EXEC command to display information on all VINES RTP update messages sent or received and all routing table activities that occur in the router. The no form of this command disables debugging output.
[no] debug vines routing [verbose]
Syntax Description
verbose
|
(Optional) Provides detailed information about the contents of each update.
|
Sample Displays
shows sample debug vines routing output.
Figure 2-274 Sample Debug VINES Routing Output
shows sample debug vines routing verbose output.
Figure 2-275 Sample Debug VINES Routing Verbose Output
Router# debug vines routing verbose
VRTP: sending update to Broadcast on Ethernet0
network 30011E7E, metric 0020 (0.4000 seconds)
network 30015800, metric 0010 (0.2000 seconds)
network 3003148A, metric 0020 (0.4000 seconds)
VSRTP: generating change update, sequence number 0002C795
network Router9 metric 0010, seq 00000000, flags 09
network RouterZZ metric 0230, seq 00052194, flags 02
VSRTP: sent update to Broadcast on Hssi0
VSRTP: received update from LabRouter on Hssi0
update: type 00, flags 07, id 000E, ofst 0000, seq 15DFC, met 0010
network LabRouter from the server
network Router9 metric 0020, seq 00000000, flags 09
VSRTP: LabRouter-Hs0-HDLC up -> up, change update, onemore
describes two VINES routing updates; the first includes two entries and the second includes three entries. Explanations for selected lines of follow.
The following line shows that the router sent a periodic routing update to the broadcast address FFFFFFFF:FFFF through the Ethernet0 interface:
VRTP: sending update to Broadcast on Ethernet0
The following line indicates that the router knows how to reach network 30011E7E, which is a metric of 0020 away from the router. The value that follows the metric (0.4000 seconds) interprets the metric in seconds.
network 30011E7E, metric 0020 (0.4000 seconds)
The following lines show that the router sent a change routing update to the Broadcast addresses on the Hssi0 interface using the Sequenced Routing Update Protocol (SRTP) routing protocol:
VSRTP: generating change update, sequence number 0002C795
VSRTP: Sending update to Broadcast on Hssi0
The lines in between the previous two indicate that the router knows how to reach network Router9, which is a metric of 0010 (0.2000 seconds) away from the router. The sequence number for Router9 is zero, and according to the 0x08 bit in the flags field, is invalid. The 0x01 bit of the flags field indicates that Router9 is attached via a LAN interface.
network Router9 metric 0010, seq 00000000, flags 09
The next lines indicate that the router can reach network RouterZZ, which is a metric of 0230 (7.0000 seconds) away from the router. The sequence number for RouterZZ is 0052194. The 0x02 bit of the flags field indicates that RouterZZ is attached via a WAN interface.
network RouterZZ metric 0230, seq 00052194, flags 02
The following line indicates that the router received a routing update from the router LabRouter through the Hssi0 interface:
VSRTP: received update from LabRouter on Hssi0
The following line displays all SRTP values contained in the header of the SRTP packet. This is a type 00 packet, which is a routing update, and the flags field is set to 07, indicating that this is a change update (0x04) and contains both the beginning (0x01) and end (0x02) of the update. This overall update is update number 000E from the router, and this fragment of the update contains the routes beginning at offset 0000 of the update. The sending router's sequence number is currently 00015DFC, and its configured metric for this interface is 0010.
update: type 00, flags 07, id 000E, ofst 0000, seq 00015DFC, met 0010
The following line implies that the server sending this update is directly accessible to the router (even though VINES servers do not explicitly list themselves in routing updates). Because this is an implicit entry in the table, the other information for this entry is taken from the previous line.
network LabRouter from the server
As the first actual entry in the routing update from LabRouter, the following line indicates that Router9 can be reached by sending to this server. This network is a metric of 0020 away from the sending server.
network Router9 metric 0020, seq 00000000, flags 09
debug vines service
Use the debug vines service EXEC command to display information on all transactions that occur at the VINES Service (or applications) layer. The no form of this command disables debugging output.
[no] debug vines service
Usage Guidelines
You can use the debug vines service command to discover why a VINES Service layer process on the router is not communicating with another Service layer process on another router or Banyan server.
Note
Because the debug vines service command provides the highest level overview of VINES traffic through the router, it is best to begin debugging using this command, and then proceed to use lower-level VINES debug commands as necessary.
Sample Display
shows sample debug vines service output.
Figure 2-276 Sample Debug VINES Service Output
As suggests, debug vines service lines of output appear as activity pairs—either a sent/response pair as shown, or as a received/sent pair.
describes the fields shown in the second line of output in . For more information about these fields or their values, refer to Banyan VINES documentation.
Table 2-145 Debug VINES Service Field Descriptions—Part 1
Field
|
Description
|
VSRV:
|
Indicates that this is output from the debug vines service command.
|
Get Time Info
|
Indicates one of three packet types:
• Get Time Info
• Time Set
• Time Sync
|
response from
|
Indicates whether the packet was sent to another router, a response from another router, or received from another router.
|
Townsaver
|
Indicates the machine name as assigned using the VINES host command, or IP address of the other router.
|
time: 01:47:54 PDT Apr 29 1993
|
Indicates the current time in hours:minutes:seconds and current date.
|
describes the fields shown in the third line of output in . This line is an extension of the first two lines of output. For more information about these fields or their values, refer to Banyan VINES documentation.
Table 2-146 Debug VINES Service Field Descriptions—Part 2
Field
|
Description
|
VSRV:
|
Output from the debug vines service command.
|
epoch
|
Line of output that describes a VINES epoch.
|
SS@Aloe@Servers-10
|
Epoch name.
|
age: 0:15:15
|
Epoch—elapsed time since the time was last set in the network.
|
debug vines state
Use the debug vines state EXEC command to display information on the VINES SRTP state machine transactions. The no form of this command disables debugging output.
[no] debug vines state
Usage Guidelines
This command provides a subset of the information provided by the debug vines routing command, showing only the transactions made by the SRTP state machine. Refer to the debug vines routing command for descriptions of output from the debug vines state command.
debug vines table
Use the debug vines table EXEC command to display information on all modifications to the VINES routing table. The no form of this command disables debugging output.
[no] debug vines table
Usage Guidelines
This command provides a subset of the information produced by the debug vines routing command, as well as some more detailed information on table additions and deletions.
Sample Display
shows sample debug vines table output.
Figure 2-277 Sample Debug VINES Table Output
Router# debug vines table
VINESRTP: create neighbor 3001153C:8004, interface Ethernet0
describes significant fields shown in .
Table 2-147 Debug VINES Table Field Descriptions
Field
|
Description
|
VINESRTP:
|
Indicates that this is a debug vines routing or debug vines table message.
|
create neighbor 3001153C:8004
|
Indicates that the client at address 3001153C:8004 has been added to the Banyan VINES neighbor table.
|
interface Ethernet 0
|
Indicates that this neighbor can be reached through the router interface named Ethernet0.
|
debug vlan packet
Use the debug vlan packet EXEC command to display general information on virtual LAN (VLAN) packets that the router received but is not configured to support. The no form of this command disables debugging output.
[no] debug vlan packet
Usage Guidelines
The debug vlan packet command displays only packets with a VLAN identifier that the router is not configured to support. This command allows you to identify other VLAN traffic on the network. Virtual LAN packets that the router is configured to route or switch are counted and indicated when you use the show vlans command.
Sample Display
Figure 2-278 shows sample debug vlan packet output. In this example, a VLAN packet with a VLAN ID of 1000 was received on FDDI 0 interface and this interface was not configured to route or switch this VLAN packet.
Figure 2-278 Sample Debug VLAN Packet Output
Router# debug vlan packet
vLAN: IEEE 802.10 packet bearing vLAN ID 1000 received on interface
Fddi0 which is not configured to route/switch ID 1000.
debug vpdn
To display debug traces for the Virtual Private Dialup Network (VPDN) feature, which provides PPP tunnels using the Layer 2 Forwarding (L2F) protocol, use the debug vpdn EXEC command. The no form of this command disables debugging output.
[no] debug vpdn {errors | events | packets | l2f-errors | l2f-events | l2f-packets}
Syntax Description
errors
|
Displays errors that prevent a tunnel from being established or errors that cause an established tunnel to be closed.
|
events
|
Displays messages about events that are part of normal tunnel establishment or shutdown.
|
packets
|
Displays each protocol packet exchanged. This option may result in a large number of debug messages and should generally only be used on a debug chassis with a single active session.
|
l2f-errors
|
Displays L2F protocol errors that prevent L2F establishment or prevent its normal operation.
|
l2f-events
|
Displays messages about events that are part of normal tunnels establishment or shutdown for L2F.
|
l2f-packets
|
Displays messages about L2F protocol headers and status.
|
Debug VPDN Events on a Network Access Server—Normal Operations
The network access server has the following VPDN configuration:
vpdn outgoing cisco.com stella ip 172.21.9.26
username stella password stella
shows sample output of the debug vpdn events command on a network access server when the L2F tunnel is brought up and CHAP authentication of the tunnel succeeds.
Figure 2-279 Debug VPDN Events on the Network Access Server—Tunnel Coming Up
Router# debug vpdn events
%LINK-3-UPDOWN: Interface Async6, changed state to up
*Mar 2 00:26:05.537: looking for tunnel -- cisco.com --
*Mar 2 00:26:05.545: Async6 VPN Forwarding...
*Mar 2 00:26:05.545: Async6 VPN Bind interface direction=1
*Mar 2 00:26:05.553: Async6 VPN vpn_forward_user bum6@cisco.com is forwarded
%LINEPROTO-5-UPDOWN: Line protocol on Interface Async6, changed state to up
*Mar 2 00:26:06.289: L2F: Chap authentication succeeded for stella.
shows sample output of the debug vpdn events command on a network access server when the L2F tunnel is brought down normally.
Figure 2-280 Debug VPDN Events on the Network Access Server—Tunnel Coming Down Normally
Router# debug vpdn events
%LINEPROTO-5-UPDOWN: Line protocol on Interface Async6, changed state to down
%LINK-5-CHANGED: Interface Async6, changed state to reset
*Mar 2 00:27:18.865: Async6 VPN cleanup
*Mar 2 00:27:18.869: Async6 VPN reset
*Mar 2 00:27:18.873: Async6 VPN Unbind interface
%LINK-3-UPDOWN: Interface Async6, changed state to down
describes the fields in and . The output describes normal operations when a tunnel is brought up or down on a network access server.
Table 2-148 Debug VPDN Events Field Descriptions for the Network Access Server
Field
|
Description
|
Asynchronous interface coming up
|
|
%LINK-3-UPDOWN: Interface Async6, changed state to up
|
Asynchronous interface 6 came up.
|
looking for tunnel -- cisco.com --
Async6 VPN Forwarding...
|
Domain name is identified.
|
Async6 VPN Bind interface direction=1
|
Tunnel is bound to the interface. These are the direction values:
1—From the network access server to the home gateway
2—From the home gateway to the network access server
|
Async6 VPN vpn_forward_user bum6@cisco.com is forwarded
|
Tunnel for the specified user and domain name (bum6@cisco.com) is forwarded.
|
%LINEPROTO-5-UPDOWN: Line protocol on Interface Async6, changed state to up
|
Line protocol is up.
|
L2F: Chap authentication succeeded for stella.
|
Tunnel was authenticated with the tunnel password stella.
|
Virtual access interface coming down
|
|
%LINEPROTO-5-UPDOWN: Line protocol on interface Async6, changed state to down
|
Normal operation when the virtual access interface is taken down.
|
Async6 VPN cleanup
Async6 VPN reset
Async6 VPN Unbind interface
|
Normal cleanup operations performed when the line or virtual access interface goes down.
|
Debug VPDN Events on the Home Gateway—Normal Operations
The home gateway has the following VPDN configuration, which uses stella as the tunnel name and the tunnel authentication name. The tunnel authentication name might be entered in a users file on an AAA server and used to define authentication requirements for the tunnel.
vpdn incoming stella stella virtual-template 1
shows sample output of the debug vpdn events command on the home gateway when the tunnel is brought up successfully.
Figure 2-281 Debug VPDN Events on the Home Gateway—Tunnel Coming Up
Router# debug vpdn events
L2F: Chap authentication succeeded for stella.
Virtual-Access3 VPN Virtual interface created for bum6@cisco.com
Virtual-Access3 VPN Set to Async interface
Virtual-Access3 VPN Clone from Vtemplate 1 block=1 filterPPP=0
%LINK-3-UPDOWN: Interface Virtual-Access3, changed state to up
Virtual-Access3 VPN Bind interface direction=2
Virtual-Access3 VPN PPP LCP accepted sent & rcv CONFACK
%LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
shows sample output of the debug vpdn events command on a home gateway when the tunnel is brought down normally.
Figure 2-282 Debug VPDN Events on the Home Gateway—Tunnel Coming Down Normally
Router# debug vpdn events
%LINK-3-UPDOWN: Interface Virtual-Access3, changed state to down
Virtual-Access3 VPN cleanup
Virtual-Access3 VPN reset
Virtual-Access3 VPN Unbind interface
Virtual-Access3 VPN reset
%LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
describes the fields in and . The output describes normal operations when a tunnel is brought up or down on a network access server.
Table 2-149 Debug VPDN Events Field Descriptions for Home Gateway
Field
|
Description
|
Tunnel Coming Up
|
|
L2F: Chap authentication succeeded for stella.
|
PPP CHAP authentication status for the tunnel named stella.
|
Virtual-Access3 VPN Virtual interface created for bum6@cisco.com
|
Virtual access interface was set up on the home gateway for the user bum6@cisco.com.
|
Virtual-Access3 VPN Set to Async interface
|
Virtual access interface 3 was set to asynchronous for character-by-character transmission.
|
Virtual-Access3 VPN Clone from Vtemplate 1 block=1 filterPPP=0
|
Virtual template 1 was applied to virtual access interface 3.
|
%LINK-3-UPDOWN: Interface Virtual-Access3, changed state to up
|
Link status is set to up.
|
Virtual-Access3 VPN Bind interface direction=2
|
Tunnel is bound to the interface. These are the direction values:
1—From the network access server to the home gateway
2—From the home gateway to the network access server
|
Virtual-Access3 VPN PPP LCP accepted sent & rcv CONFACK
|
PPP LCP configuration settings (negotiated between the remote client and the network access server) were copied to the home gateway and acknowledged.
|
%LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
|
Line protocol is up; the line can be used.
|
Tunnel Coming Down
|
|
%LINK-3-UPDOWN: Interface Virtual-Access3, changed state to down
|
Virtual access interface is coming down.
|
Virtual-Access3 VPN cleanup
Virtual-Access3 VPN reset
Virtual-Access3 VPN Unbind interface
Virtual-Access3 VPN reset
|
Router is performing normal cleanup operations when a virtual access interface used for an L2F tunnel comes down.
|
%LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to down
|
Line protocol is down for virtual access interface 3; the line cannot be used.
|
Debug VPDN L2F-Events on the Network Access Server—Normal Operations
shows sample output of the debug vpdn l2f-events command on the network access server when the L2F tunnel is brought up successfully.
Figure 2-283 Debug VPDN L2F-Events on the Network Access Server—Tunnel Coming Up
Router# debug vpdn l2f-events
%LINK-3-UPDOWN: Interface Async6, changed state to up
*Mar 2 00:41:17.365: L2F Open UDP socket to 172.21.9.26
*Mar 2 00:41:17.385: L2F_CONF received
*Mar 2 00:41:17.389: L2F Removing resend packet (type 1)
*Mar 2 00:41:17.477: L2F_OPEN received
*Mar 2 00:41:17.489: L2F Removing resend packet (type 2)
*Mar 2 00:41:17.493: L2F building nas2gw_mid0
%LINEPROTO-5-UPDOWN: Line protocol on Interface Async6, changed state to up
*Mar 2 00:41:18.613: L2F_OPEN received
*Mar 2 00:41:18.625: L2F Got a MID management packet
*Mar 2 00:41:18.625: L2F Removing resend packet (type 2)
*Mar 2 00:41:18.629: L2F MID synced NAS/HG Clid=7/15 Mid=1 on Async6
shows sample output of the debug vpdn l2f-events command on a network access server when the tunnel is brought down normally.
Figure 2-284 Debug VPDN L2F-Events on the Network Access Server—Tunnel Coming Down
Router# debug vpdn l2f-events
%LINEPROTO-5-UPDOWN: Line protocol on Interface Async6, changed state to down
%LINK-5-CHANGED: Interface Async6, changed state to reset
*Mar 2 00:42:29.213: L2F_CLOSE received
*Mar 2 00:42:29.217: L2F Destroying mid
*Mar 2 00:42:29.217: L2F Removing resend packet (type 3)
*Mar 2 00:42:29.221: L2F Tunnel is going down!
*Mar 2 00:42:29.221: L2F Initiating tunnel shutdown.
*Mar 2 00:42:29.225: L2F_CLOSE received
*Mar 2 00:42:29.229: L2F_CLOSE received
*Mar 2 00:42:29.229: L2F Got closing for tunnel
*Mar 2 00:42:29.233: L2F Removing resend packet
*Mar 2 00:42:29.233: L2F Closed tunnel structure
%LINK-3-UPDOWN: Interface Async6, changed state to down
*Mar 2 00:42:31.793: L2F Closed tunnel structure
*Mar 2 00:42:31.793: L2F Deleted inactive tunnel
describes the fields in and .
Table 2-150 Debug VPDN L2F-Events Fields—Network Access Server
Field
|
Descriptions
|
Tunnel Coming Up
|
|
%LINK-3-UPDOWN: Interface Async6, changed state to up
|
Asynchronous interface came up normally.
|
L2F Open UDP socket to 172.21.9.26
|
L2F opened a UDP socket to the home gateway IP address.
|
L2F_CONF received
|
The L2F_CONF signal was received. When sent from the home gateway to the network access server, an L2F_CONF indicates the home gateway's recognition of the tunnel creation request.
|
L2F Removing resend packet (type ...)
|
Removing the resend packet for the L2F management packet.
There are two resend packets that have different meanings in different states of the tunnel.
|
L2F_OPEN received
|
The L2F_OPEN management message was received, indicating that home gateway accepted the network access server configuration of an L2F tunnel.
|
L2F building nas2gw_mid0
|
L2F is building a tunnel between the network access server and the home gateway, using MID 0.
|
%LINEPROTO-5-UPDOWN: Line protocol on Interface Async6, changed state to up
|
The line protocol came up. Indicates whether the software processes that handle the line protocol regard the interface as usable.
|
L2F_OPEN received
|
The L2F_OPEN management message was received, indicating that home gateway accepted the network access server configuration of an L2F tunnel.
|
L2F Got a MID management packet
|
Multiplex ID (MID) management packets are used to communicate between the network access server and the home gateway.
|
L2F MID synced NAS/HG Clid=7/15 Mid=1 on Async6
|
L2F synchronized the Client IDs on the network access server and the home gateway, respectively. A multiplex ID is assigned to identify this connection in the tunnel.
|
Tunnel Coming Down
|
|
%LINEPROTO-5-UPDOWN: Line protocol on Interface Async6, changed state to down
|
The line protocol came down. Indicates whether the software processes that handle the line protocol regard the interface as usable.
|
%LINK-5-CHANGED: Interface Async6, changed state to reset
|
Interface was marked as reset.
|
L2F_CLOSE received
|
The network access server received a request to close the tunnel.
|
L2F Destroying mid
|
The connection identified by the MID is begin taken down.
|
L2F Tunnel is going down!
|
Advisory message about impending tunnel shutdown.
|
L2F Initiating tunnel shutdown.
|
Tunnel shutdown has started.
|
L2F_CLOSE received
|
The network access server received a request to close the tunnel.
|
L2F Got closing for tunnel
|
The network access server began tunnel closing operations.
|
%LINK-3-UPDOWN: Interface Async6, changed state to down
|
The asynchronous interface was taken down.
|
L2F Closed tunnel structure
|
The network access server closed the tunnel.
|
L2F Deleted inactive tunnel
|
The now-inactivated tunnel was deleted.
|
Debug VPDN L2F-Events on the Home Gateway—Normal Operations
shows sample output of the debug vpdn l2f-events command on a home gateway when the L2F tunnel is created.
Figure 2-285 Debug VPDN L2F-Events on the Home Gateway—Tunnel is Created
Router# debug vpdn l2f-events
L2F Creating new tunnel for stella
L2F Got a tunnel named stella, responding
L2F Open UDP socket to 172.21.9.25
L2F Removing resend packet (type 1)
L2F Got a MID management packet
%LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access1, changed state to up
shows sample output of the debug vpdn l2f-events command on a home gateway when the L2F tunnel is brought down normally.
Figure 2-286 Debug VPDN L2F-Events on a Home Gateway—Tunnel Coming Down Normally
Router# debug vpdn l2f-events
L2F Removing resend packet (type 3)
L2F Tunnel is going down!
L2F Initiating tunnel shutdown.
%LINK-3-UPDOWN: Interface Virtual-Access1, changed state to down
L2F Got closing for tunnel
L2F Removing resend packet
L2F Removing resend packet
L2F Closed tunnel structure
L2F Closed tunnel structure
L2F Deleted inactive tunnel
%LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access1, changed state to down
describes the fields in and .
Table 2-151 Debug VPDN L2F-Events Field Descriptions—Home Gateway
Field
|
Description
|
Tunnel Coming Up
|
|
L2F_CONF received
|
L2F configuration is received from the network access server. When sent from a network access server to a home gateway, the L2F_CONF is the initial packet in the conversation.
|
L2F Creating new tunnel for stella
|
The tunnel named stella is being created.
|
L2F Got a tunnel named stella, responding
|
Home gateway is responding.
|
L2F Open UDP socket to 172.21.9.25
|
Opening a socket to the network access server IP address.
|
L2F_OPEN received
|
The L2F_OPEN management message was received, indicating the network access server is opening an L2F tunnel.
|
L2F Removing resend packet (type ...)
|
Removing the resend packet for the L2F management packet.
There are two resend packets that have different meanings in different states of the tunnel.
|
L2F Got a MID management packet
|
L2F MID management packets are used to communicate between the network access server and the home gateway.
|
%LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up
|
The home gateway is bringing up virtual access interface 1 for the L2F tunnel.
|
%LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access1, changed state to up
|
The line protocol is up. The line can be used.
|
Tunnel Coming Down
|
|
L2F_CLOSE received
|
The network access server or home gateway received a request to close the tunnel.
|
L2F Destroying mid
|
The connection identified by the MID is begin taken down.
|
L2F Removing resend packet (type ...)
|
Removing the resend packet for the L2F management packet.
There are two resend packets that have different meanings in different states of the tunnel.
|
L2F Tunnel is going down!
L2F Initiating tunnel shutdown.
|
Router is performing normal operations when a tunnel is coming down.
|
%LINK-3-UPDOWN: Interface Virtual-Access1, changed state to down
|
The virtual access interface is coming down.
|
L2F_CLOSE received
L2F Got closing for tunnel
L2F Removing resend packet
L2F Removing resend packet
L2F Closed tunnel structure
L2F Closed tunnel structure
L2F Deleted inactive tunnel
|
Router is performing normal cleanup operations when the tunnel is being brought down.
|
%LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access1, changed state to down
|
Line protocol is down; virtual access interface 1 cannot be used.
|
Debug VPDN on the Network Access Server—Error Conditions
shows sample output of the debug vpdn errors command on a network access server when the tunnel is not set up.
Figure 2-287 Debug VPDN Errors on the Network Access Server—Error Conditions
Router# debug vpdn errors
%LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, changed state to down
%LINK-5-CHANGED: Interface Async1, changed state to reset
%LINK-3-UPDOWN: Interface Async1, changed state to down
%LINK-3-UPDOWN: Interface Async1, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, changed state to up
VPDN tunnel management packet failed to authenticate
VPDN tunnel management packet failed to authenticate
describes the fields in .
Table 2-152 Debug VPDN Errors Fields Descriptions for the Network Access Server
Field
|
Description
|
%LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, changed state to down
|
The line protocol on the asynchronous interface went down.
|
%LINK-5-CHANGED: Interface Async1, changed state to reset
|
Asynchronous interface 1 was reset.
|
%LINK-3-UPDOWN: Interface Async1, changed state to down
%LINK-3-UPDOWN: Interface Async1, changed state to up
|
The link from asynchronous interface 1 link went down and then came back up.
|
%LINEPROTO-5-UPDOWN: Line protocol on Interface Async1, changed state to up
|
The line protocol on the asynchronous interface came back up.
|
VPDN tunnel management packet failed to authenticate
|
Tunnel authentication failed. This the most common VPDN error.
Note: Check the password for the network access server and the home gateway name.
If you store the password on an AAA server, you can use the debug aaa authentication command.
|
shows sample output of the debug vpdn l2f-errors command.
Figure 2-288 Debug VPDN L2F-Errors on the Network Access Server—Error Conditions
Router# debug vpdn l2f-errors
%LINK-3-UPDOWN: Interface Async1, changed state to up
L2F Out of sequence packet 0 (expecting 0)
L2F Tunnel authentication succeeded for home.com
L2F Received a close request for a non-existent mid
L2F Out of sequence packet 0 (expecting 0)
L2F packet has bogus1 key 1020868 D248BA0F
L2F packet has bogus1 key 1020868 D248BA0F
describes the fields in .
Table 2-153 Debug VPDN L2F-Errors Field Descriptions
Field
|
Description
|
%LINK-3-UPDOWN: Interface Async1, changed state to up
|
The line protocol on the asynchronous interface came up.
|
L2F Out of sequence packet 0 (expecting 0)
|
Packet was expected to be the first in a sequence starting at 0, but an invalid sequence number was received.
|
L2F Tunnel authentication succeeded for home.com
|
Tunnel was established from the network access server to the home gateway, home.com.
|
L2F Received a close request for a non-existent mid
|
Multiplex ID was not used previously; cannot close the tunnel.
|
L2F Out of sequence packet 0 (expecting 0)
|
Packet was expected to be the first in a sequence starting at 0, but an invalid sequence number was received.
|
L2F packet has bogus1 key 1020868 D248BA0F
|
Value based on the authentication response given to the peer during tunnel creation. This packet, in which the key does not match the expected value, must be discarded.
|
L2F packet has bogus1 key 1020868 D248BA0F
|
Another packet was received with an invalid key value. The packet must be discarded.
|
Debugging VPDN Packets for Complete Information
shows sample output of the debug vpdn l2f-packets command on a network access server. This example displays a trace for a ping command.
Figure 2-289 Debug VPDN L2F-Packets on a Network Access Server
Router# debug vpdn l2f-packets
L2F SENDING (17): D0 1 1 10 0 0 0 4 0 11 0 0 81 94 E1 A0 4
L2F header flags: 53249 version 53249 protocol 1 sequence 16 mid 0 cid 4
length 17 offset 0 key 1701976070
L2F RECEIVED (17): D0 1 1 10 0 0 0 4 0 11 0 0 65 72 18 6 5
L2F SENDING (17): D0 1 1 11 0 0 0 4 0 11 0 0 81 94 E1 A0 4
L2F header flags: 53249 version 53249 protocol 1 sequence 17 mid 0 cid 4
length 17 offset 0 key 1701976070
L2F RECEIVED (17): D0 1 1 11 0 0 0 4 0 11 0 0 65 72 18 6 5
L2F header flags: 57345 version 57345 protocol 2 sequence 0 mid 1 cid 4
length 32 offset 0 key 1701976070
L2F-IN Otput to Async1 (16): FF 3 C0 21 9 F 0 C 0 1D 41 AD FF 11 46 87
L2F-OUT (16): FF 3 C0 21 A F 0 C 0 1A C9 BD FF 11 46 87
L2F header flags: 49153 version 49