Table Of Contents
show gatekeeper gw-type-prefix
Command Reference
The Multimedia Conference Manager command descriptions are classified as either gatekeeper or proxy commands in the following sections:
All other commands used with the Multimedia Conference Manager feature are documented in the Cisco IOS Release 11.3 command references.
Gatekeeper Commands
This section describes the following gatekeeper commands:
•
show gatekeeper gw-type-prefix
accounting
To enable the accounting security feature on the gatekeeper, use the accounting gatekeeper configuration command. To disable accounting, use the no form of this command.
accounting
no accountingSyntax Description
This command has no arguments or keywords.
Default
Disabled
Command Mode
Gatekeeper configuration
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
Specify a RADIUS/TACACS+ server before using the accounting command.
Related Commands
radius-server host
radius-server keyalias static
To create a static entry in the local alias table, use the alias static gatekeeper configuration command. To remove a static entry, use the no form of this command.
alias static ip-signaling-addr [port] gkid gatekeeper-name [ras ip-ras-addr port] [terminal | mcu | gateway {h320 | h323-proxy | voip}] [e164 e164-address] [h323id h323-id]
no alias static ip-signaling-addr [port] gkid gatekeeper-name [ras ip-ras-addr port] [terminal |
mcu | gateway {h320 | h323-proxy | voip}] [e164 e164-address] [h323id h323-id]Syntax Description
Default
No static aliases exist.
Command Mode
Gatekeeper configuration
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
The local alias table can be used to load static entries by performing as many of the commands as necessary. Aliases for the same IP address can be added in different commands, if required.
Typically, static aliases are needed to access endpoints that do not belong to a zone, (that is, they are not registered with any gatekeeper), or whose gatekeeper is inaccessible for some reason.
Example
The following example creates a static terminal alias in the local zone.
zone local gk.zone1.com zone1.comalias static 191.7.8.5 gkid gk.zone1.com terminal e164 14085551212 h323id bobs_terminalarq reject-unknown-prefix
To enable the gatekeeper to reject Admission Requests (ARQs) for zone prefixes that are not configured, use the arq reject-unknown-prefix gatekeeper command. To re-enable the gatekeeper to accept and process all incoming ARQs, use the no form of this command.
arq reject-unknown-prefix
no arq reject-unknown-prefixSyntax Description
This command has no arguments or keywords.
Default
The gatekeeper accepts and processes all incoming ARQs.
Command Mode
Gatekeeper configuration
Usage Guidelines
This command first appeared in Cisco IOS Releases 11.3(6)Q and 11.3(7)NA.
Use the arq reject-unknown-prefix command to configure the gatekeeper to reject any incoming ARQs for a destination E.164 address that does not match any of the configured zone prefixes.
When an endpoint or gateway initiates an H.323 call, it sends an ARQ to its gatekeeper. The gatekeeper uses the configured list of zone prefixes to determine where to direct the call. If the called address does not match any of the known zone prefixes, the gatekeeper attempts to hairpin the call out through a local gateway. If you do not want your gateway to do this, then use the arq reject-unknown-prefix command. (hairpin is a term used in telephony that means to send a call back in the direction that it came from. For example, if a call cannot be routed over IP to a gateway that is closer to the target phone, the call is typically sent back out the local zone, back the way it came from.)
This command is typically used to either restrict local gateway calls to a known set of prefixes or deliberately fail such calls so that an alternate choice on a gateway's rotary dial-peer is selected.
Example
Consider a gatekeeper configured as follows:
zone local gk408 cisco.comzone remote gk415 cisco.com 172.21.139.91zone prefix gk408 1408.......zone prefix gk415 1415.......In this example configuration, the gatekeeper manages a zone containing gateways to the 408 area code, and it knows about a peer gatekeeper with gateways to the 415 area code. Using the zone prefix command, the gatekeeper is then configured with the appropriate prefixes so that calls to those area codes hop off in the optimal zone.
If the arq request-unknown-prefix command is not configured, the gatekeeper handles calls in the following way:
•
A call to the 408 area code is routed out through a local gateway.
•
A call to the 415 area code is routed to the gk415 zone where it hops off on a local gateway there.
•
A call to the 212 area code is routed to a local gateway in the gk408 zone.
If the arq reject-unknown-prefix command is configured, the gatekeeper handles calls in the following way:
•
A call to the 408 area code is routed out through a local gateway.
•
A call to the 415 area code is routed to the gk415 zone where it hops off on a local gateway there.
•
A call to the 212 area code is rejected, because the destination address does not match any configured prefixes.
gatekeeper
To enter gatekeeper configuration mode, use the gatekeeper global configuration command.
gatekeeper
Syntax Description
This command has no arguments or keywords.
Default
Disabled
Command Mode
Global configuration
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
Press Ctrl-Z or use the exit command to exit gatekeeper configuration mode.
Example
The following example brings the gatekeeper online:
configure terminalgatekeeperno shutdowngw-type-prefix
To configure a technology prefix in the gatekeeper, use the gw-type-prefix command. To remove the technology prefix, use the no form of the command.
gw-type-prefix type-prefix [hopoff gkid] [default-technology] [[gw ipaddr ipaddr
[ port ]] ...]
no gw-type-prefix type-prefix [hopoff gkid] [default-technology] [[gw ipaddr ipaddr
[ port ]] ...]Syntax Description
Default
No technology prefix is defined.
Command Mode
Gatekeeper configuration
Usage Guidelines
This command first appeared in Cisco IOS Releases 11.3(6)Q and 11.3(7)NA.
More than one gateway can register with the same technology prefix. In such cases, a random selection is made of one of them.
You do not have to define a technology prefix to a gatekeeper if there are gateways configured to register with that prefix, and if there are no special flags (hopoff gkid or default-technology) that you want to associate with that prefix.
The total number of different technology prefixes should not exceed 50 per zone.
Example
The following example specifies 4# as the default technology prefix:
gw-type-prefix 4# default-technologyRelated Commands
zone prefix
lrq reject-unknown-prefix
To enable the gatekeeper to reject all Location Requests (LRQs) for zone prefixes that are not configured, use the lrq reject-unknown-prefix gatekeeper command. To re-enable the gatekeeper to accept and process all incoming LRQs, use the no form of this command.
lrq reject-unknown-prefix
no lrq reject-unknown-prefixSyntax Description
This command has no arguments or keywords.
Default
The gatekeeper accepts and processes all incoming LRQs.
Command Mode
Gatekeeper configuration
Usage Guidelines
This command first appeared in Cisco IOS Releases 11.3(6)Q and 11.3(7)NA.
Use the lrq reject-unknown-prefix command to configure the gatekeeper to reject any incoming LRQs for a destination E.164 address that does not match any of the configured zone prefixes.
Whether or not you enable the lrq reject-unknown-prefix command, the following is true when the E.164 address matches a zone prefix:
•
If the matching zone prefix is local (i.e. controlled by this gatekeeper), the LRQ is serviced.
•
If the matching zone prefix is remote (i.e. controlled by some other gatekeeper), the LRQ is rejected.
If you do not enable the lrq reject-unknown-prefix command, and the target address does not match any known local or remote prefix, the default behavior is to attempt to service the call using one of the local zones. If this default behavior is not suitable for your site, configure the lrq reject-unknown-prefix command on your router to force the gatekeeper to reject such requests.
Example
Consider the following gatekeeper configuration:
zone local gk408 cisco.comzone local gk415 cisco.comzone prefix gk408 1408.......zone prefix gk415 1415.......lrq reject-unknown-prefixIn this example configuration, the gatekeeper is configured to manage two zones. One zone contains gateways with interfaces in the 408 area code, and the second zone contains gateways in the 415 area code. Then using the zone prefix command, the gatekeeper is configured with the appropriate prefixes so that calls to those area codes hop off in the optimal zone.
Now say some other zone has been erroneously configured to route calls to the 212 area code to this gatekeeper. When the LRQ for a number in the 212 area code arrives at this gatekeeper, the gatekeeper fails to match the area code, and the LRQ is rejected.
If this was your only site that had any gateways in it, and you wanted your other sites to route all calls requiring gateways to this gatekeeper, then you can undo the lrq reject-unknown-prefix command by simply using the no lrq reject-unknown-prefix. Now when the gatekeeper receives an LRQ for the address 12125551234, it will attempt to find an appropriate gateway in either one of the zones gk408 or gk415 to service the call.
security
To enable authentication and authorization on a gatekeeper, use the security gatekeeper configuration command. To disable security, use the no form of this command.
security {any | h323-id | e164} {password default password | password separator
character}
no security {any | h323-id | e164} {password default password | password separator
character}Syntax Description
Default
Disabled
Command Mode
Gatekeeper configuration
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
Use the security command to enable identification of registered aliases by RADIUS/TACACS+. If the alias does not exist in RADIUS/TACACS+, the endpoint will not be allowed to register.
A RADIUS/TACACS+ server and encryption key must have been configured in Cisco IOS software for security to work.
Only the first alias of the proper type will be identified. If no alias of the proper type is found, the registration will be rejected.
This command does not allow you to define the password mechanism unless the security type (h323-id or e164 or any) has been defined. While the no security password command undefines the password mechanism, it leaves the security type unchanged, so security is still enabled. However, the no security {h323-id | e164 | any} command disables security entirely, including removing any existing password definitions.
Examples
The following example enables identification of registrations using the first H.323 ID found in any registration:
security h323idThe following example enables security, authenticating all users by using their H.323-IDs and a password of qwerty2x:
security h323-idsecurity password qwerty2xThe next example enables security, authenticating all users by using their H.323-IDs and the password entered by the user in the H.323-ID alias he or she registers:
security h323-idsecurity password separator !Now if a user registers with an H.323-ID of joe!024aqx, the gatekeeper authenticates user joe with password 024aqx, and if that is successful, registers the user with the H.323-ID of joe. If the exclamation mark is not found, the user is authenticated with the default password or a null password if no default has been configured.
The following example enables security, authenticating all users by using their E.164 IDs and the password entered by the user in the H.323-ID alias he or she registers:
security e164security password separator !Now if a user registers with an E.164 address of 5551212 and an H.323-ID of !hs8473q6, the gatekeeper authenticates user 5551212 and password hs8473q6. Because the H.323-ID string supplied by the user begins with the separator character, no H.323-ID is registered and the user is only known by the E.164 address.
Related Commands
accounting
radius-server host
radius-server keyshow gatekeeper calls
To show the status of each ongoing call that a gatekeeper is aware of, use the show gatekeeper calls EXEC command.
show gatekeeper calls
Syntax Description
This command has no arguments or keywords.
Command Mode
EXEC
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
Sample Display
The following is sample output from the show gatekeeper calls command:
router#show gatekeeper callsConferenceID Age(secs) BW(kbps)------------ --------- ----0x277B87C0A283D111B63E00609704D8EA 94 768Endpoint(s): CallSignalAddr Port RASSignalAddr Portsrc EP: REMOTEdst EP: 90.0.0.11 1720 90.0.0.11 1700dst PX: 45.0.0.11 1720 70.0.0.31 24999show gatekeeper endpoints
To display the status of all registered endpoints for a gatekeeper, use the show gatekeeper endpoints EXEC command.
show gatekeeper endpoints
Syntax Description
This command has no arguments or keywords.
Command Mode
EXEC
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
Sample Display
The following is sample output from the show gatekeeper endpoints command:
router#show gatekeeper endpointsCallSignalAddr Port RASSignalAddr Port Zone Name Type F--------------- ----- --------------- ----- --------- ---- -172.21.127.8 1720 172.21.127.8 24999 gk-px4.cisco.com MCUH323-ID: joe@cisco.com
show gatekeeper gw-type-prefix
To display the gateway technology prefix table, use the show gatekeeper gw-type-prefix EXEC command.
show gatekeeper gw-type-prefix
Command Mode
EXEC
Usage Guidelines
This command first appeared in Cisco IOS Releases 11.3(6)Q and 11.3(7)NA.
Sample Display
The following is sample output from the show gatekeeper gw-type-prefix command:
router#show gatekeeper gw-type-prefixGATEWAY-TYPE PREFIX TABLE=========================Prefix: 3#* (Hopoff gk408)Prefix: 4#* (Default gateway-technology)Prefix: 7#* (Hopoff gk408)Static Configured Gateways:1.1.1.1:17202.2.2.2:1720show gatekeeper status
To show overall gatekeeper status that includes authorization and authentication status, zone status, and so on, use the show gatekeeper status EXEC command.
show gatekeeper status
Syntax Description
This command has no arguments or keywords.
Command Mode
EXEC
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
Sample Display
The following is sample output from the show gatekeeper status command:
router#show gatekeeper statusGatekeeper State: UPZone Name: gk-px4.cisco.comAccounting: DISABLEDSecurity: DISABLED
show gatekeeper zone prefix
To display the zone prefix table, use the show gatekeeper zone prefix EXEC command.
show gatekeeper zone prefix
Command Mode
EXEC
Usage Guidelines
This command first appeared in Cisco IOS Releases 11.3(6)Q and 11.3(7)NA.
Sample Display
The following is sample output from the show gatekeeper zone prefix command:
router#show gatekeeper zone prefixZONE PREFIX TABLE=================GK-NAME E164-PREFIX------- -----------gk.zone13 212.......gk.zone14 415.......gk.zone14 408.......
Field DescriptionGK-NAME
The gatekeeper name.
E164-PREFIX
The E.164 prefix and a dot that acts as a wildcard for matching each remaining number in the telephone number.
show gatekeeper zone status
To display the status of zones related to a gatekeeper, use the show gatekeeper zone status EXEC command.
show gatekeeper zone status
Syntax Description
This command has no arguments or keywords.
Command Mode
EXEC
Usage Guideline
This command first appeared in Cisco IOS Release 11.3(2)NA.
Sample Display
The following is sample output from the show gatekeeper zone status command:
router#show gatekeeper zone statusGK name Domain Name RAS Address PORT FLAGS MAX-BW CUR-BW(kbps) (kbps)------- ----------- ----------- ---- ----- ------ ------gk-px4.cisco cisco.com 172.21.127.8 1719 LS 0SUBNET ATTRIBUTES :subnet 172.21.127.0/255.255.255.0 : (Enabled)All Other Subnets : (Disabled)Inbound accessibility: use proxies.othergk cisco.com 234.234.234.234 1719 RS 0
shutdown
To disable the gatekeeper, use the shutdown gatekeeper configuration command. To enable the gatekeeper, use the no form of this command.
shutdown
no shutdownSyntax Description
This command has no arguments or keywords.
Default
Disabled (shut down)
Command Mode
Gatekeeper configuration
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
The gatekeeper does not have to be enabled before you can use the other gatekeeper configuration commands. In fact, it is recommended that you complete the gatekeeper configuration before bringing up the gatekeeper because some characteristics may be difficult to alter while the gatekeeper is running, as there may be active registrations or calls.
While the no shutdown command enables the gatekeeper, it does not make it operational. The two exceptions to this are:
•
If no local zones are configured, a no shutdown command places the gatekeeper in INACTIVE mode waiting for a local zone definition.
•
If local zones are defined to use an HSRP virtual address, and the HSRP interface is in STANDBY mode, the gatekeeper goes into HSRP STANDBY mode. Only when the HSRP interface is ACTIVE will the gatekeeper go into the operational UP mode.
zone access
To configure the accessibility of your local zone, use the zone access gatekeeper configuration command. To remove any accessibility configurations, use the no form of this command.
zone access local-zone-name {default | remote-zone remote-zone-name}{direct | proxied}
no zone access local-zone-name remote-zone remote-zone-nameSyntax Description
Default
The local zone allows proxied access for all remote zones.
Command Mode
Gatekeeper configuration
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
By default, a gatekeeper will offer a local proxy's IP address when queried by a remote gatekeeper about a target local endpoint. This is considered proxied access. By using the zone access command, you can configure the local gatekeeper to offer the local endpoint's address instead of the local proxy's address. This is considered direct access.
Note
The zone access command, configured on your local gatekeeper, only affects the use of proxies for incoming calls (that is, it does not affect the use of local proxies for outbound calls). When originating a call, a gatekeeper will use a proxy only if the remote gatekeeper offers a proxy at the remote end. A call between two endpoints in the same zone will always be a direct (non-proxied) call.
You can define the accessibility behavior of a local zone relative to certain remote zones using the remote-zone remote-zone-name keyword and argument combination with the direct or proxied keyword. You can define the default behavior of a local zone relative to all other remote zones using the default keyword with the direct or proxied keywords. To remove an explicitly named remote zone so that it is governed by the default-behavior rule, use the no zone access command.
Example
The following example allows direct access to the local zone eng.xyz.com from remote zones within xyz corporation. All other remote locations will have proxied access to eng.xzy.com.
zone local eng.xyz.com xyz.comzone access eng.xyz.com remote-zone mfg.xyz.com directzone access eng.xyz.com remote-zone mktg.xyz.com directzone access eng.xyz.com remote-zone sales.xyz.com directzone access eng.xyz.com default proxiedThe following example supposes that only local gatekeepers within xyz.com have direct access to each other because your corporation has firewalls or you do not advertise your gatekeepers externally. You have excellent QoS within your corporate network, except for a couple of foreign offices. In this case, use proxies with the foreign offices (in Milan and Tokyo) and nowhere else.
zone local sanjose.xyz.com xyz.comzone access sanjose.xyz.com default directzone access sanjose.xyz.com remote-zone milan.xyz.com proxiedzone access sanjose.xyz.com remote-zone tokyo.xyz.com proxiedRelated Commands
show gatekeeper zone status
zone localzone bw
To set the maximum bandwidth allowed in a gatekeeper zone at any one time, use the zone bw gatekeeper configuration command. To remove the maximum bandwidth setting and make the bandwidth unlimited, use the no form of this command.
zone bw gatekeeper-name max-bandwidth
no zone bw gatekeeper-name max-bandwidthSyntax Description
gatekeeper-name
Name of the gatekeeper controlling the zone.
max-bandwidth
Maximum bidirectional bandwidth in kilobits per second (kbps) allowed in the zone at any one time.
Default
Bandwidth is unlimited.
Command Mode
Gatekeeper configuration
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
Example
The following example sets the maximum bandwidth to 1000 kbps for zone gk1:
zone bw gk1 1000Related Commands
zone local
To specify a zone controlled by a gatekeeper, use the zone local gatekeeper configuration command. To remove a zone controlled by a gatekeeper, use the no form of this command. This command can also be used to change the IP address used by the gatekeeper.
zone local gatekeeper-name domain-name [rasIPaddress]
no zone local gatekeeper-name domain-nameSyntax Description
Default
No local zone is defined.
Note
The gatekeeper cannot operate without at least one local zone definition. Without local zones, the gatekeeper goes to an inactive state when the no shutdown command is issued.
Command Mode
Gatekeeper configuration
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
Multiple local zones can be defined. The gatekeeper manages all configured local zones. Intra-zone and inter-zone behavior remains the same [zones are controlled by the same or different gatekeepers.]
Only one rasIPaddress argument can be defined for all local zones. You cannot configure each zone to use a different RAS IP address. If you define this in the first zone definition, you can omit it for all subsequent zones, which automatically pick up this address. If you set it in a subsequent zone local command, it changes the RAS address of all previously configured local zones as well. Once defined, you can change it by re-issuing any zone local command with a different rasIPaddress argument.
If the rasIPaddress argument is an HSRP virtual address, it automatically puts the gatekeeper into HSRP mode. In this mode, the gatekeeper assumes STANDBY or ACTIVE status according to whether the HSRP interface is on STANDBY or ACTIVE status.
You cannot remove a local zone if there are endpoints or gateways registered in it. To remove the local zone, shut down the gatekeeper first, which forces unregistration.
Multiple zones are controlled by multiple logical gatekeepers on the same Cisco IOS platform.
The maximum number of local zones defined in a gatekeeper should not exceed 100.
Example
The following example creates a zone controlled by a gatekeeper in the domain called cisco.com:
zone local gk1.cisco.com cisco.comRelated Commands
You can use the master indexes or search on-line to find documentation of related commands.
show gatekeeper zone status
zone remotezone prefix
To configure the gatekeeper with knowledge of its own as well as any remote zone's prefixes, use the zone prefix gatekeeper configuration command. To remove knowledge of zone prefixes, use the no form of this command.
zone prefix gatekeeper-name e164-prefix
no zone prefix gatekeeper-name e164-prefixSyntax Description
Default
No knowledge of its own or any other zone's prefix is defined.
Command Mode
Gatekeeper configuration
Usage Guidelines
This command first appeared in Cisco IOS Releases 11.3(6)Q and 11.3(7)NA.
A gatekeeper can handle more than one zone prefix but a zone prefix cannot be shared by more than one gatekeeper. If you have defined a zone prefix as being handled by a gatekeeper and now define it as being handled by a second gatekeeper, the second assignment cancels the first.
If you need to have a gatekeeper handle more than one prefix, but you want to be able to group gateways by prefix, define several local zones. When a zone handles several prefixes, all gateways in that zone constitute a common pool that can be used to hop off to any of those prefixes. You may want to partition your gateways by prefix. For example, you have a gateway that interfaces to the 408 area code, and another that interfaces to the 415 area code, and for cost reasons, you want each gateway to be used only for calls to its area code. In this case, define several local zones on the gatekeeper, each responsible for a prefix, and have the each gateway register to the zone handling its prefix. You can define local zone gk-408 to handle prefix 408....... and local zone gk-415 to handle 415....... and have the gateway interfacing to the 408 area code register with gk-408, and the gateway with the 415 interface register to gk-415.
The number of zone prefixes defined for a directory gatekeeper that is dedicated to forwarding LRQs and not handling local registrations and calls should not exceed 10,000; 4 MB of memory must be dedicated to describing zones and zone prefixes to support this maximum number of zone prefixes. The number of zone prefixes defined for a gatekeeper that handles local registrations and calls should not exceed 2000.
Example
The following example matches the 212 area code and any seven digits as the zone prefix for gk-ny:
zone prefix gk-ny 212.......Related Commands
zone local
zone remotezone remote
To statically specify a remote zone if DNS is unavailable or undesirable, use the zone remote gatekeeper configuration command. To remove the remote zone, use the no form of this command.
zone remote other-gatekeeper-name other-domain-name other-gatekeeper-ip-address
[port-number]
no zone remote other-gatekeeper-name other-domain-name other-gatekeeper-ip-address
[port-number]Syntax Description
Default
No remote zone is defined. DNS will locate the remote zone.
Command Mode
Gatekeeper configuration
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
All gatekeepers do not have to be in DNS. For those that are not, use the zone remote command so that the local gatekeeper knows how to access them. In addition, you may wish to improve call response time slightly for frequently accessed zones. If the zone remote command is configured for a particular zone, you do not need to make a DNS lookup transaction.
The maximum number of zones defined on a gatekeeper varies depending on the mode or the call model or both. For example, a directory gatekeeper may be in the mode of being responsible for forwarding LRQs and not handling any local registrations and calls; The call model might be E.164 addressed calls instead of H.323-ID addressed calls.
For a directory gatekeeper that does not handle local registrations and calls, the maximum remote zones defined should not exceed 10,000; An additional 4 MB of memory is required to store this maximum number of remote zones.
For a gatekeeper that handles local registrations and only E.164 addressed calls, the number of remote zones defined should not exceed 2000.
For a gatekeeper that handles H.323-ID calls, the number of remote zones defined should not exceed 200.
Example
The following example configures the local gatekeeper to reach targets of the form xxx.cisco.com by sending queries to the gatekeeper named sj3.cisco.com at IP address 1.2.3.4:
zone remote sj3.cisco.com cisco.com 1.2.3.4Related Commands
show gatekeeper zone status
zone localzone subnet
To configure a gatekeeper to accept discovery and registration messages sent by endpoints in designated subnets, use the zone subnet gatekeeper configuration command. To disable the gatekeeper from acknowledging discovery and registration messages from subnets or remove subnets entirely, use the no form of this command.
zone subnet local-gatekeeper-name {default | subnet-address {/bits-in-mask | mask-address}}
enable
no zone subnet local-gatekeeper-name {default | subnet-address {/bits-in-mask
| mask-address}} enableSyntax Description
Default
The local gatekeeper accepts discovery and registration requests from all subnets. If the request specifies a gatekeeper name, it must match the local gatekeeper name or the request will not be accepted.
Command Mode
Gatekeeper configuration
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
You can use the zone subnet command more than once to create a list of subnets controlled by a gatekeeper. The subnet masks do not have to match actual subnets in use at your site. For example, to specify a particular endpoint, you can supply its address with a 32-bit netmask.
Example
The following example starts by disabling the gatekeeper, gk1.cisco.com, from accepting discovery and registration messages from all subnets. Next, gk1.cisco.com is configured to accept discovery and registration messages from all H.323 nodes on the subnet 172.21.127.0. In addition, gk1.cisco.com is configured to accept discovery and registration messages from a particular endpoint with the IP address 172.21.128.56.
no zone subnet gk1.cisco.com default enablezone subnet gk1.cisco.com 172.21.127.0/24 enablezone subnet gk1.cisco.com 172.21.128.56/32 enableRelated Commands
show gatekeeper zone status
zone localProxy Commands
This section documents the following proxy commands:
h323 asr
To enable application-specific routing (ASR) and specify the maximum bandwidth for a proxy, use the h323 asr interface configuration command. To disable ASR, use the no h323 asr. Use no h323 asr bandwidth max-bandwidth to remove a bandwidth setting but keep ASR enabled.
h323 asr [bandwidth max-bandwidth]
no h323 asr [bandwidth max-bandwidth]Syntax Description
Default
ASR is disabled.
Command Mode
Interface configuration
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
This command is independent of the h323 interface command.
Note
If you specify no h323 asr bandwidth max-bandwidth, this removes the bandwidth setting and ASR is still enabled. You must enter no h323 asr to disable ASR.
Example
The following example enables ASR and specifies a maximum bandwidth of 10,000 kbps:
h323 asr bandwidth 10000h323 gatekeeper
To specify the gatekeeper associated with a proxy and control how the gatekeeper is discovered, use the h323 gatekeeper interface configuration command. To disassociate the gatekeeper, use the no form of this command.
h323 gatekeeper [id gatekeeper-id] {ipaddr ipaddr [port] | multicast}
no h323 gatekeeper [id gatekeeper-id] {ipaddr ipaddr [port] | multicast}Syntax Description
Default
No gatekeeper is configured for the proxy.
Command Mode
Interface configuration
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
You must enter the h323 interface and h323 h323-id commands before using this command. The h323 gatekeeper command must be specified on your Cisco IOS platform or the proxy will not go online. The proxy will use the interface's address as its RAS signaling address.
Example
The following example sets up a unicast discovery to a gatekeeper whose name is unknown:
h323 gatekeeper ipaddr 191.7.5.2The following example sets up a multicast discovery for a gatekeeper of a particular name:
h323 gatekeeper id gk.zone5.com multicastRelated Commands
h323 h323-id
To register an H.323 proxy alias with a gatekeeper, use the h323 h323-id interface configuration command. To remove an H.323 alias, use the no form of this command.
h323 h323-id h323-id
no h323 h323-id h323-idSyntax Description
h323-id
Specifies the name of the proxy. It is recommended that this be a fully qualified e-mail ID, with the domain name being the same as that of its gatekeeper.
Default
No h323-id proxy alias is registered.
Command Mode
Interface configuration
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
Each entry registers a specified H.323 ID proxy alias to a gatekeeper. Typically, these aliases are either simple text strings or legitimate e-mail IDs.
Note
You must enter the h323 interface command before using this command. The h323 h323-id command must be entered on the same interface as the h323 gatekeeper command. The proxy will not go online without this command.
Example
The following example registers an H.323 proxy alias called proxy1@zone5.com with a gatekeeper:
h323 h323-id proxy1@zone5.comRelated Commands
h323 gatekeeper
h323 interfaceh323 interface
To specify the interface from which the proxy will take its IP address, use the h323 interface interface configuration command. To disable the interface, use the no form of this command.
h323 interface
no h323 interfaceSyntax Description
This command has no arguments or keywords.
Default
Disabled
Command Mode
Interface configuration
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
For non-ASR configurations, any interface on the Cisco IOS platform will work well as the proxy interface. For ASR configurations, the proxy interface should be a loopback interface, so that routing updates and packet switching are appropriately isolated between the ASR and non-ASR interfaces.
h323 qos
To enable QoS on the proxy, use the h323 qos interface configuration command. To disable QoS, use the no form of this command.
h323 qos {ip-precedence value | rsvp {controlled-load | guaranteed-qos}}
no h323 qos {ip-precedence value | rsvp {controlled-load | guaranteed-qos}}Syntax Description
Default
No QoS is configured.
Command Mode
Interface configuration
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
You must execute the h323 interface command before using this command.
Both IP precedence and RSVP QoS can be configured by invoking this command twice with the two different QoS forms.
Related Commands
proxy h323
To enable the proxy feature on your router, use the proxy h323 global configuration command. To disable the proxy feature, use the no form of this command.
proxy h323
no proxy h323Syntax Description
This command has no arguments or keywords.
Default
Disabled
Command Mode
Global configuration
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
Note
If the multimedia interface is not enabled using the proxy h323 command, or if no gatekeeper is available, starting the proxy allows it to attempt to locate these resources. No calls will be accepted until the multimedia interface and the gatekeeper are found.
Example
The following example turns on the proxy feature:
proxy h323show proxy h323 calls
To list each active call on the proxy, use the show h323 calls privileged EXEC command.
show proxy h323 calls
Syntax Description
This command has no arguments or keywords.
Command Mode
Privileged EXEC
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
Sample Display
The following is sample output from the show h323 calls command:
router#show proxy h323 callsCall unique key = 1Conference ID = [277B87C0A283D111B63E00609704D8EA]Calling endpoint call signalling address = 55.0.0.41Calling endpoint aliases:H323_ID: ptel11@zone1.comCall state = Media StreamingTime call was initiated = 731146290 msshow proxy h323 detail-call
To display the details of a particular call on a proxy, use the show h323 detail-call privileged EXEC command. The display can be shown with or without the proxy statistics enabled.
show proxy h323 detail-call call-key
Syntax Description
call-key
Specifies the call you want to display. The call-key is derived from the show proxy h323 calls display.
Command Mode
Privileged EXEC
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
Sample Display 1
The following is sample output from the show proxy h323 detail-call command without the proxy statistics enabled:
router#show proxy h323 detail-call 1ConferenceID = [277B87C0A283D111B63E00609704D8EA]Calling endpoint aliases:H323_ID: ptel11@zone1.comCalled endpoint aliases:H323_ID: ptel21@zone2.comPeer proxy call signalling address = 55.0.0.41Time call was initiated = 731146290 msInbound CRV = 144Outbound CRV = 70Call state = Media StreamingH245 logical channels for call leg pte111@zone1.com<->px1@zone.comChannel number = 2Type = VIDEOState = OPENBandwidth = 374 kbpsTime created = 731146317 msChannel number = 1Type = AUDIOState = OPENBandwidth = 81 kbpsTime created = 731146316 msChannel number = 2Type = VIDEOState = OPENBandwidth = 374 kbpsTime created = 731146318 msChannel number = 1Type = AUDIOState = OPENBandwidth = 81 kbpsTime created = 731146317 msH245 logical channels for call leg pte111@zone1.com<->50.0.0.41:Channel number = 2Type = VIDEOState = OPENBandwidth = 374 kbpsTime created = 731146317 msChannel number = 1Type = AUDIOState = OPENBandwidth = 81 kbpsTime created = 731146316 msChannel number = 2Type = VIDEOState = OPENBandwidth = 374 kbpsTime created = 731146318 msChannel number = 1Type = AUDIOState = OPENBandwidth = 81 kbpsTime created = 731146317 msSample Display 2
The following is sample output from the show proxy h323 detail-call command with the proxy statistics enabled:
router#show proxy h323 detail-call 1ConferenceID = [677EB106BD0D111976200002424F832]Calling endpoint call signalling address = 172.21.127.49Calling endpoint aliases:H323_ID: intel2E164_ID: 2134Called endpoint aliases:H323_ID: mcs@sanjose.cisco.comPeer proxy call signalling address = 171.68.183.199Peer proxy aliases:H323_ID: proxy.sanjose.cisco.comTime call was initiated = 730949651 msInbound CRV = 2505Outbound CRV = 67Call state = H245 open logical channelsH245 logical channels for call leg intel2 <-> cisco7-pxy:Channel number = 259RTP stream from intel2 to cisco7-pxyType = VIDEOState = OPENBandwidth = 225 kbpsTime created = 730949676 msChannel number = 257RTP stream from intel2 to cisco7-pxyType = AUDIOState = OPENBandwidth = 18 kbpsTime created = 730949658 msChannel number = 2RTP stream from cisco7-pxy to intel2Type = VIDEOState = OPENBandwidth = 225 kbpsTime created = 730949664 msRTP Statistics:Packet Received Count = 3390Packet Dropped Count = 0Packet Out of Sequence Count = 0Number of initial packets used for Arrival-Spacing bin setup = 200min_arrival_spacing = 0(ms) max_arrival_spacing = 856(ms)Average Arrival Rate = 86(ms)Arrival-Spacing(ms) Packet-Count0 211626 48752 2678 0104 0130 1156 0182 1208 0234 4260 99286 315312 154338 8364 0390 2416 10442 73468 51494 43==============================Min Jitter = 34(ms) Max Jitter = 408(ms)Average Jitter Rate = 117Jitter Rate(ms) Packet-Count0 041 51482 2117Number of initial packets used for Arrival-Spacing bin setup = 200min_arrival_spacing = 32(ms) max_arrival_spacing = 96(ms)Average Arrival Rate = 60(ms)Arrival-Spacing(ms) Packet-Count32 3534 036 17738 040 5642 044 1046 048 2750 052 54154 056 264258 160 106962 064 7766 068 670 257==============================Min Jitter = 0(ms) Max Jitter = 28(ms)Average Jitter Rate = 5Jitter Rate(ms) Packet-Count0 10693 27206 09 80412 2715 1018 021 5624 17727 35H245 logical channels for call leg cisco7-pxy <->proxy.sanjose.cisco.com:Channel number = 259RTP stream from cisco7-pxy to proxy.sanjose.cisco.comType = VIDEOState = OPENBandwidth = 225 kbpsTime created = 730949676 msRTP Statistics:Packet Received Count = 3398Packet Dropped Count = 1Packet Out of Sequence Count = 0Number of initial packets used for Arrival-Spacing bin setup = 200min_arrival_spacing = 0(ms) max_arrival_spacing = 872(ms)Average Arrival Rate = 85(ms)Arrival-Spacing(ms) Packet-Count0 263628 056 084 0112 0140 1168 0196 0224 0252 0280 2308 425336 154364 5392 0420 0448 0476 114504 41532 20==============================Min Jitter = 55(ms) Max Jitter = 447(ms)Average Jitter Rate = 127Jitter Rate(ms) Packet-Count0 045 190 2636135 0180 2225 425270 159315 0360 0405 175Channel number = 257RTP stream from cisco7-pxy to proxy.sanjose.cisco.comType = AUDIOState = OPENBandwidth = 18 kbpsTime created = 730949658 msRTP Statistics:Packet Received Count = 2537Packet Dropped Count = 3Packet Out of Sequence Count = 0Number of initial packets used for Arrival-Spacing bin setup = 200min_arrival_spacing = 0(ms) max_arrival_spacing = 32716(ms)Average Arrival Rate = 112(ms)Arrival-Spacing(ms) Packet-Count0 219172 253144 31216 7288 3360 4432 4504 2576 1648 3720 2792 1864 2936 11008 11080 11152 11224 11296 01368 28==============================Min Jitter = 32(ms) Max Jitter = 1256(ms)Average Jitter Rate = 121Jitter Rate(ms) Packet-Count0 284126 2201252 4378 6504 4630 3756 2882 21008 21134 29Channel number = 2RTP stream from proxy.sanjose.cisco.com to cisco7-pxyType = VIDEOState = OPENBandwidth = 225 kbpsTime created = 730949664 msChannel number = 1RTP stream from proxy.sanjose.cisco.com to cisco7-pxyType = AUDIOState = OPENBandwidth = 18 kbpsTime created = 730949661 msRelated Commands
show proxy h323 status
To display the overall status of a proxy, use the show proxy h323 status privileged EXEC command.
show proxy h323 status
Syntax Description
This command has no arguments or keywords.
Command Mode
EXEC
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
Sample Display
The following is sample output from the show proxy h323 status command:
router#show proxy h323 statusH.323 Proxy Status==================H.323 Proxy Mode: EnabledProxy interface = Serial1: UPApplication Specific Routing: DisabledRAS Initialization: CompleteProxy aliases configured:H323_ID: px2Proxy aliases assigned by Gatekeeper:H323_ID: px2Gatekeeper multicast discovery: DisabledGatekeeper:Gatekeeper ID: gk.zone2.comIP address: 70.0.0.31Gatekeeper registration succeededT.120 Mode: BYPASSRTP Statistics: OFFNumber of calls in progress: 1Debug Commands
This section describes the following debug commands:
debug h225 asn1
Use the debug h255 asn1 EXEC command to display ASN1 contents of RAS and Q.931 messages. The no form of this command disables debugging output.
[no] debug h255 asn1
Syntax Description
This command has no arguments or keywords.
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
Note
This command slows the system down considerably and connections may time out.
Sample Displays
The following are sample output from the debug h255 asn1 command.
Sample 1: Gatekeeper Trace with ASN1 Turned On, Call Being Established
This report shows two proxy call scenarios. A trace is collected on the gatekeeper with ASN1 turned on. The call is being established.
gk1#debug h225 asn1H.225 ASN1 Messages debugging is ongk1#24800006 03C00030 00300036 00380041 00450037 00430030 00300030 0030003000300030 00310140 0F007000 74006500 6C003200 33004000 7A006F00 6E00650032002E00 63006F00 6D020180 AAAA4006 00700074 0065006C 00320031 0033401E0000015F C8490FB4 B9D111BF AF0060B0 00E94500value RasMessage ::= admissionRequest :{requestSeqNum 7,callType pointToPoint : NULL,endpointIdentifier "0068AE7C00000001",destinationInfo{h323-ID : "ptel23@zone2.com"},srcInfo{e164 : "7777",h323-ID : "ptel213"},bandWidth 7680,callReferenceValue 1,conferenceID '5FC8490FB4B9D111BFAF0060B000E945'H,activeMC FALSE,answerCall FALSE}value RasMessage ::= admissionConfirm :{requestSeqNum 7,bandWidth 7680,callModel direct : NULL,destCallSignalAddress ipAddress :{ip '65000001'H,port 1720},irrFrequency 30}29000006 401E0000 65000001 06B8001D2480001D 03C00030 00300036 00380041 00390036 00300030 00300030 0030003000300030 00320140 0F007000 74006500 6C003200 33004000 7A006F00 6E00650032002E00 63006F00 6D014006 00700074 0065006C 00320031 00334002 8000015FC8490FB4 B9D111BF AF0060B0 00E94540value RasMessage ::= admissionRequest :{requestSeqNum 30,callType pointToPoint : NULL,endpointIdentifier "0068A96000000002",destinationInfo{h323-ID : "ptel23@zone2.com"},srcInfo{h323-ID : "ptel213"},bandWidth 640,callReferenceValue 1,conferenceID '5FC8490FB4B9D111BFAF0060B000E945'H,activeMC FALSE,answerCall TRUE}value ACFnonStandardInfo ::={srcTerminalAlias{e164 : "7777",h323-ID : "ptel213"},dstTerminalAlias{h323-ID : "ptel23@zone2.com"},dstProxyAlias{h323-ID : "px2"},dstProxySignalAddress{ip '66000001'H,port 1720}}C00203AA AA800600 70007400 65006C00 32003100 3301800F 00700074 0065006C00320033 0040007A 006F006E 00650032 002E0063 006F006D 01800200 7000780032660000 0106B8value RasMessage ::= admissionConfirm :{requestSeqNum 30,bandWidth 7680,callModel direct : NULL,destCallSignalAddress ipAddress :{ip '66000001'H,port 1720},irrFrequency 30,nonStandardData{nonStandardIdentifier h221NonStandard :{t35CountryCode 181,t35Extension 0,manufacturerCode 18},data'C00203AAAA8006007000740065006C00320031003301800F007000740065006C003200 ...'H}}2980001D 401E0000 66000001 06B8001D 40B50000 1247C002 03AAAA80 0600700074006500 6C003200 31003301 800F0070 00740065 006C0032 00330040 007A006F006E0065 0032002E 0063006F 006D0180 02007000 78003266 00000106 B824C0001E 03C00030 00300036 00380041 00390036 00300030 00300030 0030003000300030 00320140 0F007000 74006500 6C003200 33004000 7A006F00 6E00650032002E00 63006F00 6D006600 000106B8 020180AA AA400600 70007400 65006C0032003100 33401E00 00435FC8 490FB4B9 D111BFAF 0060B000 E94500value RasMessage ::= admissionRequest :{requestSeqNum 31,callType pointToPoint : NULL,endpointIdentifier "0068A96000000002",destinationInfo{h323-ID : "ptel23@zone2.com"},destCallSignalAddress ipAddress :{ip '66000001'H,port 1720},srcInfo{e164 : "7777",h323-ID : "ptel213"},bandWidth 7680,callReferenceValue 67,conferenceID '5FC8490FB4B9D111BFAF0060B000E945'H,activeMC FALSE,answerCall FALSE}value RasMessage ::= admissionConfirm :{requestSeqNum 31,bandWidth 7680,callModel direct : NULL,destCallSignalAddress ipAddress :{ip '66000001'H,port 1720},irrFrequency 30}Sample 2: Source Proxy Trace with ASN1 Turned On, Call Being Torn Down
This report shows two proxy call scenarios. A trace is collected on the source proxy with ASN1 turned on. The call is being torn down
px1#debug h225 asn1H.225 ASN1 Messages debugging is onpx1#value H323-UserInformation ::={h323-uu-pdu{h323-message-body setup :{protocolIdentifier { 0 0 8 2250 0 1 },sourceAddress{h323-ID : "ptel213"},sourceInfo{terminal{},mc FALSE,undefinedNode FALSE},destinationAddress{h323-ID : "ptel23@zone2.com"},activeMC FALSE,conferenceID '5FC8490FB4B9D111BFAF0060B000E945'H,conferenceGoal create : NULL,callType pointToPoint : NULL,sourceCallSignalAddress ipAddress :{ip '3200000C'H,port 1720}}}}value RasMessage ::= admissionRequest :{requestSeqNum 30,callType pointToPoint : NULL,endpointIdentifier "0068A96000000002",destinationInfo{h323-ID : "ptel23@zone2.com"},srcInfo{h323-ID : "ptel213"},bandWidth 640,callReferenceValue 1,conferenceID '5FC8490FB4B9D111BFAF0060B000E945'H,activeMC FALSE,answerCall TRUE}2480001D 03C00030 00300036 00380041 00390036 00300030 00300030 0030003000300030 00320140 0F007000 74006500 6C003200 33004000 7A006F00 6E00650032002E00 63006F00 6D014006 00700074 0065006C 00320031 00334002 8000015FC8490FB4 B9D111BF AF0060B0 00E945402980001D 401E0000 66000001 06B8001D 40B50000 1247C002 03AAAA80 0600700074006500 6C003200 31003301 800F0070 00740065 006C0032 00330040 007A006F006E0065 0032002E 0063006F 006D0180 02007000 78003266 00000106 B8value RasMessage ::= admissionConfirm :{requestSeqNum 30,bandWidth 7680,callModel direct : NULL,destCallSignalAddress ipAddress :{ip '66000001'H,port 1720},irrFrequency 30,nonStandardData{nonStandardIdentifier h221NonStandard :{t35CountryCode 181,t35Extension 0,manufacturerCode 18},data'C00203AAAA8006007000740065006C00320031003301800F007000740065006C003200 ...'H}}C00203AA AA800600 70007400 65006C00 32003100 3301800F 00700074 0065006C00320033 0040007A 006F006E 00650032 002E0063 006F006D 01800200 7000780032660000 0106B8value ACFnonStandardInfo ::={srcTerminalAlias{e164 : "7777",h323-ID : "ptel213"},dstTerminalAlias{h323-ID : "ptel23@zone2.com"},dstProxyAlias{h323-ID : "px2"},dstProxySignalAddress{ip '66000001'H,port 1720}}value RasMessage ::= admissionRequest :{requestSeqNum 31,callType pointToPoint : NULL,endpointIdentifier "0068A96000000002",destinationInfo{h323-ID : "ptel23@zone2.com"},destCallSignalAddress ipAddress :{ip '66000001'H,port 1720},srcInfo{e164 : "7777",h323-ID : "ptel213"},bandWidth 7680,callReferenceValue 67,conferenceID '5FC8490FB4B9D111BFAF0060B000E945'H,activeMC FALSE,answerCall FALSE}24C0001E 03C00030 00300036 00380041 00390036 00300030 00300030 0030003000300030 00320140 0F007000 74006500 6C003200 33004000 7A006F00 6E00650032002E00 63006F00 6D006600 000106B8 020180AA AA400600 70007400 65006C0032003100 33401E00 00435FC8 490FB4B9 D111BFAF 0060B000 E945002900001E 401E0000 66000001 06B8001Dvalue RasMessage ::= admissionConfirm :{requestSeqNum 31,bandWidth 7680,callModel direct : NULL,destCallSignalAddress ipAddress :{ip '66000001'H,port 1720},irrFrequency 30}value H323-UserInformation ::={h323-uu-pdu{h323-message-body callProceeding :{protocolIdentifier { 0 0 8 2250 0 1 },destinationInfo{gateway{protocol{h323 :{}}},mc FALSE,undefinedNode FALSE}}}}01000600 08914A00 01088001 2800value H323-UserInformation ::={h323-uu-pdu{h323-message-body setup :{protocolIdentifier { 0 0 8 2250 0 1 },sourceAddress{h323-ID : "ptel213"},sourceInfo{vendor{vendor{t35CountryCode 181,t35Extension 0,manufacturerCode 18}},gateway{protocol{h323 :{}}},mc FALSE,undefinedNode FALSE},destinationAddress{h323-ID : "ptel23@zone2.com"},destCallSignalAddress ipAddress :{ip '66000001'H,port 1720},activeMC FALSE,conferenceID '5FC8490FB4B9D111BFAF0060B000E945'H,conferenceGoal create : NULL,callType pointToPoint : NULL,sourceCallSignalAddress ipAddress :{ip '65000001'H,port 1720},remoteExtensionAddress h323-ID : "ptel23@zone2.com"}}}00B80600 08914A00 01014006 00700074 0065006C 00320031 00332800 B500001240012800 01400F00 70007400 65006C00 32003300 40007A00 6F006E00 650032002E006300 6F006D00 66000001 06B8005F C8490FB4 B9D111BF AF0060B0 00E945000E070065 00000106 B822400F 00700074 0065006C 00320033 0040007A 006F006E00650032 002E0063 006F006Dvalue H323-UserInformation ::={h323-uu-pdu{h323-message-body callProceeding :{protocolIdentifier { 0 0 8 2250 0 1 },destinationInfo{gateway{protocol{h323 :{}}},mc FALSE,undefinedNode FALSE}}}}value H323-UserInformation ::={h323-uu-pdu{h323-message-body alerting :{protocolIdentifier { 0 0 8 2250 0 1 },destinationInfo{mc FALSE,undefinedNode FALSE}}}}value H323-UserInformation ::={h323-uu-pdu{h323-message-body alerting :{protocolIdentifier { 0 0 8 2250 0 1 },destinationInfo{mc FALSE,undefinedNode FALSE}}}}03000600 08914A00 010000value H323-UserInformation ::={h323-uu-pdu{h323-message-body connect :{protocolIdentifier { 0 0 8 2250 0 1 },h245Address ipAddress :{ip '66000001'H,port 11011},destinationInfo{gateway{protocol{h323 :{}}},mc FALSE,undefinedNode FALSE},conferenceID '5FC8490FB4B9D111BFAF0060B000E945'H}}}value H323-UserInformation ::={h323-uu-pdu{h323-message-body connect :{protocolIdentifier { 0 0 8 2250 0 1 },h245Address ipAddress :{ip '65000001'H,port 11007},destinationInfo{gateway{protocol{h323 :{}}},mc FALSE,undefinedNode FALSE},conferenceID '5FC8490FB4B9D111BFAF0060B000E945'H}}}02400600 08914A00 01006500 00012AFF 08800128 005FC849 0FB4B9D1 11BFAF0060B000E9 45Sample 3: Destination Router Trace, Both RAS and H.225 Traces Are Enabled
This report shows two proxy call scenarios. A trace is collected on a destination router where both destination proxy and destination gatekeeper co-exist. Both RAS and H.225 traces are enabled for one complete call.
px2#RASLib::RASRecvData: successfully rcvd message of length 80 from 40.0.0.33:1585RASLib::RASRecvData: LRQ rcvd from [40.0.0.33:1585] on sock [6880372]RASlib::ras_sendto: msg length 111 sent to 40.0.0.33RASLib::RASSendLCF: LCF sent to 40.0.0.33H225Lib::h225TAccept: TCP connection accepted from 101.0.0.1:11002 onsocket [2]H225Lib::h225TAccept: Q.931 Call State is initialized to be [Null].Hex representation of the received TPKT030000A60802008005040488988CA56C0591373737377E008D0500B8060008914A0001014006007000740065006C0032003100332800B50000124001280001400F007000740065006C003200330040007A006F006E00650032002E0063006F006D006600000106B8003DC8490FB4B9D111BFAF0060B000E945000E07006500000106B822400F007000740065006C003200330040007A006F006E00650032002E0063006F006DH225Lib::h225RecvData: Q.931 SETUP received from socket [2]H225Lib::h225RecvData: State changed to [Call Present].RASlib::ras_sendto: msg length 119 sent to 102.0.0.1RASLib::RASSendARQ: ARQ sent to 102.0.0.1RASLib::RASRecvData: successfully rcvd message of length 119 from 102.0.0.1:24999RASLib::RASRecvData: ARQ rcvd from [102.0.0.1:24999] on sock [0x68FC74]RASlib::ras_sendto: msg length 16 sent to 70.0.0.31RASLib::RASSendACF: ACF sent to 70.0.0.31RASLib::RASRecvData: successfully rcvd message of length 16 from 102.0.0.1:1719RASLib::RASRecvData: ACF rcvd from [102.0.0.1:1719] on sock [0x67E6A4]RASlib::ras_sendto: msg length 119 sent to 102.0.0.1RASLib::RASSendARQ: ARQ sent to 102.0.0.1RASLib::RASRecvData: successfully rcvd message of length 119 from 102.0.0.1:24999RASLib::RASRecvData: ARQ rcvd from [102.0.0.1:24999] on sock [0x68FC74]RASlib::ras_sendto: msg length 16 sent to 70.0.0.31RASLib::RASSendACF: ACF sent to 70.0.0.31RASLib::RASRecvData: successfully rcvd message of length 16 from 102.0.0.1:1719RASLib::RASRecvData: ACF rcvd from [102.0.0.1:1719] on sock [0x67E6A4]Hex representation of the CALL PROCEEDING TPKT to send.0300001B08028080027E000F050100060008914A00010880012800H225Lib::h225CallProcRequest: Q.931 CALL PROCEEDING sent from socket[2]. Call state remains unchanged (Q.931 FSM simplified for H.225.0)H225Lib::h225TConn: connect in progress on socket [4]H225Lib::h225TConn: Q.931 Call State is initialized to be [Null].Hex representation of the SETUP TPKT to send.030000A50802008005040388C0A56C0591373737377E008D0500B8060008914A0001014006007000740065006C0032003100332800B50000124001280001400F007000740065006C003200330040007A006F006E00650032002E0063006F006D005A00000D06B8003DC8490FB4B9D111BFAF0060B000E945000E07006600000106B822400F007000740065006C003200330040007A006F006E00650032002E0063006F006DH225Lib::h225SetupRequest: Q.931 SETUP sent from socket [4]H225Lib::h225SetupRequest: Q.931 Call State changed to [Call Initiated].RASLib::RASRecvData: successfully rcvd message of length 123 from 90.0.0.13:1700RASLib::RASRecvData: ARQ rcvd from [90.0.0.13:1700] on sock [0x68FC74]RASlib::ras_sendto: msg length 16 sent to 90.0.0.13RASLib::RASSendACF: ACF sent to 90.0.0.13Hex representation of the received TPKT0300001808028080027E000C050100060008914A00010200H225Lib::h225RecvData: Q.931 CALL PROCEEDING received from socket [4]Hex representation of the received TPKT0300001808028080017E000C050300060008914A00010200H225Lib::h225RecvData: Q.931 ALERTING received from socket [4]H225Lib::h225RecvData: Q.931 Call State changed to [Call Delivered].Hex representation of the ALERTING TPKT to send.0300001808028080017E000C050300060008914A00010000H225Lib::h225AlertRequest: Q.931 ALERTING sent from socket [2]. Callstate changed to [Call Received].Hex representation of the received TPKT0300003508028080070404889886A57E0023050240060008914A0001005A00000D06A402003DC8490FB4B9D111BFAF0060B000E945H225Lib::h225RecvData: Q.931 CONNECT received from socket [4]H225Lib::h225RecvData: Q.931 Call State changed to [Active].Hex representation of the CONNECT TPKT to send.030000370802808007040388C0A57E0026050240060008914A000100660000012AFC08800128003DC8490FB4B9D111BFAF0060B000E945H225Lib::h225SetupResponse: Q.931 CONNECT sent from socket [2]H225Lib::h225SetupResponse: Q.931 Call State changed to [Active].RASlib::ras_sendto: msg length 108 sent to 102.0.0.1RASLib::RASSendIRR: IRR sent to 102.0.0.1RASLib::RASRecvData: successfully rcvd message of length 108 from 102.0.0.1:24999RASLib::RASRecvData: IRR rcvd from [102.0.0.1:24999] on sock [0x68FC74]RASLib::RASRecvData: successfully rcvd message of length 101 from 90.0.0.13:1700RASLib::RASRecvData: IRR rcvd from [90.0.0.13:1700] on sock [0x68FC74]Hex representation of the received TPKT0300001A080280805A080280107E000A050500060008914A0001H225Lib::h225RecvData: Q.931 RELEASE COMPLETE received from socket [2]H225Lib::h225RecvData: Q.931 Call State changed to [Null].RASlib::ras_sendto: msg length 55 sent to 102.0.0.1RASLib::RASSendDRQ: DRQ sent to 102.0.0.1H225Lib::h225RecvData: no connection on socket [2]RASLib::RASRecvData: successfully rcvd message of length 55 from 102.0.0.1:24999RASLib::RASRecvData: DRQ rcvd from [102.0.0.1:24999] on sock [0x68FC74]RASlib::ras_sendto: msg length 3 sent to 70.0.0.31RASLib::RASSendDCF: DCF sent to 70.0.0.31Hex representation of the RELEASE COMPLETE TPKT to send.0300001A080280805A080280107E000A050500060008914A0001H225Lib::h225TerminateRequest: Q.931 RELEASE COMPLETE sent from socket [2]. Call state changed to [Null].H225Lib::h225TClose: TCP connection from socket [2] closedRASlib::ras_sendto: msg length 55 sent to 102.0.0.1RASLib::RASSendDRQ: DRQ sent to 102.0.0.1RASLib::RASRecvData: successfully rcvd message of length 3 from 102.0.0.1:1719RASLib::RASRecvData: DCF rcvd from [102.0.0.1:1719] on sock [0x67E6A4]RASLib::RASRecvData: successfully rcvd message of length 55 from 102.0.0.1:24999RASLib::RASRecvData: DRQ rcvd from [102.0.0.1:24999] on sock [0x68FC74]RASlib::ras_sendto: msg length 3 sent to 70.0.0.31RASLib::RASSendDCF: DCF sent to 70.0.0.31RASLib::RASRecvData: successfully rcvd message of length 3 from 102.0.0.1:1719RASLib::RASRecvData: DCF rcvd from [102.0.0.1:1719] on sock [0x67E6A4]Hex representation of the RELEASE COMPLETE TPKT to send.0300001A080280805A080280107E000A050500060008914A0001H225Lib::h225TerminateRequest: Q.931 RELEASE COMPLETE sent from socket [4]. Call state changed to [Null].H225Lib::h225TClose: TCP connection from socket [4] closedRASLib::RASRecvData: successfully rcvd message of length 55 from 90.0.0.13:1700RASLib::RASRecvData: DRQ rcvd from [90.0.0.13:1700] on sock [0x68FC74]RASlib::ras_sendto: msg length 3 sent to 90.0.0.13RASLib::RASSendDCF: DCF sent to 90.0.0.13debug h225 events
Use the debug h225 events EXEC command to display Q.931 events. The no form of this command disables debugging output.
[no] debug h225 events
Syntax Description
This command has no arguments or keywords.
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
Sample Displays
The following are sample output from the debug h225 events command.
Sample 1: Source Proxy Trace with H.225 Turned On, Call Being Established
This report shows two proxy call scenarios. A trace is collected on the source proxy with H.225 turned on. The call is being established.
px1#debug h225 eventsH.225 Event Messages debugging is onpx1# H225Lib::h225TAccept: TCP connection accepted from 50.0.0.12:1701 onsocket [2]H225Lib::h225TAccept: Q.931 Call State is initialized to be [Null].Hex representation of the received TPKT0300007408020001050404889886A56C0580373737377E005B0500B0060008914A0001014006007000740065006C003200310033020001400F007000740065006C003200330040007A006F006E00650032002E0063006F006D004EC8490FB4B9D111BFAF0060B000E945000C07003200000C06B8H225Lib::h225RecvData: Q.931 SETUP received from socket [2]H225Lib::h225RecvData: State changed to [Call Present].Hex representation of the CALL PROCEEDING TPKT to send.0300001B08028001027E000F050100060008914A00010880012800H225Lib::h225CallProcRequest: Q.931 CALL PROCEEDING sent from socket[2]. Call state remains unchanged (Q.931 FSM simplified for H.225.0)H225Lib::h225TConn: connect in progress on socket [4]H225Lib::h225TConn: Q.931 Call State is initialized to be [Null].Hex representation of the SETUP TPKT to send.030000A60802008405040488988CA56C0591373737377E008D0500B8060008914A0001014006007000740065006C0032003100332800B50000124001280001400F007000740065006C003200330040007A006F006E00650032002E0063006F006D006600000106B8004EC8490FB4B9D111BFAF0060B000E945000E07006500000106B822400F007000740065006C003200330040007A006F006E00650032002E0063006F006DH225Lib::h225SetupRequest: Q.931 SETUP sent from socket [4]H225Lib::h225SetupRequest: Q.931 Call State changed to [Call Initiated].Hex representation of the received TPKT0300001B08028084027E000F050100060008914A00010880012800H225Lib::h225RecvData: Q.931 CALL PROCEEDING received from socket [4]Hex representation of the received TPKT0300001808028084017E000C050300060008914A00010000H225Lib::h225RecvData: Q.931 ALERTING received from socket [4]H225Lib::h225RecvData: Q.931 Call State changed to [Call Delivered].Hex representation of the ALERTING TPKT to send.0300001808028001017E000C050300060008914A00010000H225Lib::h225AlertRequest: Q.931 ALERTING sent from socket [2]. Callstate changed to [Call Received].Hex representation of the received TPKT030000370802808407040388C0A57E0026050240060008914A000100660000012AFF08800128004EC8490FB4B9D111BFAF0060B000E945H225Lib::h225RecvData: Q.931 CONNECT received from socket [4]H225Lib::h225RecvData: Q.931 Call State changed to [Active].Hex representation of the CONNECT TPKT to send.0300003808028001070404889886A57E0026050240060008914A000100650000012AFC08800128004EC8490FB4B9D111BFAF0060B000E945H225Lib::h225SetupResponse: Q.931 CONNECT sent from socket [2]H225Lib::h225SetupResponse: Q.931 Call State changed to [Active].Sample 2: Source Proxy Trace with H.225 Turned On, Call Being Torn Down
This report shows two proxy call scenarios. A trace is collected on the source proxy with H.225 turned on. The call is being torn down.
px1#debug h225 eventsH.225 Event Messages debugging is onpx1#Hex representation of the received TPKT0300001A080200015A080200907E000A050500060008914A0001H225Lib::h225RecvData: Q.931 RELEASE COMPLETE received from socket [2]H225Lib::h225RecvData: Q.931 Call State changed to [Null].H225Lib::h225RecvData: no connection on socket [2]Hex representation of the RELEASE COMPLETE TPKT to send.0300001A080280015A080280107E000A050500060008914A0001H225Lib::h225TerminateRequest: Q.931 RELEASE COMPLETE sent from socket [2]. Call state changed to [Null].H225Lib::h225TClose: TCP connection from socket [2] closedHex representation of the RELEASE COMPLETE TPKT to send.0300001A080280845A080280107E000A050500060008914A0001H225Lib::h225TerminateRequest: Q.931 RELEASE COMPLETE sent from socket [4]. Call state changed to [Null].H225Lib::h225TClose: TCP connection from socket [4] closeddebug h245 asn1
Use the debug h245 asn1 EXEC command to display ASN1 contents of H.245 messages. The no form of this command disables debugging output.
[no] debug h245 asn1
Syntax Description
This command has no arguments or keywords.
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
Note
This command slows the system down considerably and connections may time out.
debug h245 events
Use the debug h245 events EXEC command to display H.245 events. The no form of this command disables debugging output.
[no] debug h245 events
Syntax Description
This command has no arguments or keywords.
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
debug proxy h323 statistics
Use the debug proxy h323 statistics command to enable proxy RTP statistics. The no form of this command disables the proxy RTP statistics.
[no] debug proxy h323 statistics
Syntax Description
This command has no arguments or keywords.
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
Enter the show proxy h323 detail-call command to see the statistics.
Related Commands
show proxy h323 detail-call
debug ras
Use the debug ras EXEC command to display RAS events. The no form of this command disables debugging output.
[no] debug ras
Syntax Description
This command has no arguments or keywords.
Usage Guidelines
This command first appeared in Cisco IOS Release 11.3(2)NA.
Sample Displays
The following are sample output from the debug ras command.
Sample 1: Proxy Details Trace with RAS Trace Enabled
In the following reports, the proxy registers with the gatekeeper and the trace is collected on the proxy with RAS trace enabled. A report is taken from a proxy and a gatekeeper.
px1#debug rasH.323 RAS Messages debugging is onpx1#RASlib::ras_sendto: msg length 34 sent to 40.0.0.33RASLib::RASSendGRQ: GRQ sent to 40.0.0.33RASLib::RASRecvData: successfully rcvd message of length 45 from 40.0.0.33:1719RASLib::RASRecvData: GCF rcvd from [40.0.0.33:1719] on sock[0x67E570]RASlib::ras_sendto: msg length 76 sent to 40.0.0.33RASLib::RASSendRRQ: RRQ sent to 40.0.0.33RASLib::RASRecvData: successfully rcvd message of length 81 from 40.0.0.33:1719RASLib::RASRecvData: RCF rcvd from [40.0.0.33:1719] on sock [0x67E570]gk1#debug rasH.323 RAS Messages debugging is ongk1#RASLib::RASRecvData: successfully rcvd message of length 34 from 101. 0.0.1:24999RASLib::RASRecvData: GRQ rcvd from [101.0.0.1:24999] on sock[5C8D28]RASlib::ras_sendto: msg length 45 sent to 40.0.0.31RASLib::RASSendGCF: GCF sent to 40.0.0.31RASLib::RASRecvData: successfully rcvd message of length 76 from 101.0.0.1:24999RASLib::RASRecvData: RRQ rcvd from [101.0.0.1:24999] on sock [0x5C8D28]RASlib::ras_sendto: msg length 81 sent to 40.0.0.31RASLib::RASSendRCF: RCF sent to 40.0.0.31Sample 2: Gatekeeper Trace with RAS Turned On, Call Being Established
This report shows a proxy call scenario. A trace is collected on a gatekeeper with RAS turned on. The call is being established.
gk1#debug rasH.323 RAS Messages debugging is ongk1# RASLib::RASRecvData: successfully rcvd message of length 116 from 50.0.0.12:1700RASLib::RASRecvData: ARQ rcvd from [50.0.0.12:1700] on sock [0x5C8D28]RASLib::RAS_WK_TInit: ipsock [0x68BD30] setup successfulRASlib::ras_sendto: msg length 80 sent to 102.0.0.1RASLib::RASSendLRQ: LRQ sent to 102.0.0.1RASLib::RASRecvData: successfully rcvd message of length 111 from 102.0.0.1:1719RASLib::RASRecvData: LCF rcvd from [102.0.0.1:1719] on sock [0x68BD30]RASLib::parse_lcf_nonstd: LCF Nonstd decode succeeded, remlen = 0RASlib::ras_sendto: msg length 16 sent to 50.0.0.12RASLib::RASSendACF: ACF sent to 50.0.0.12RASLib::RASRecvData: successfully rcvd message of length 112 from 101.0.0.1:24999RASLib::RASRecvData: ARQ rcvd from [101.0.0.1:24999] on sock [0x5C8D28]RASlib::ras_sendto: msg length 93 sent to 40.0.0.31RASLib::RASSendACF: ACF sent to 40.0.0.31RASLib::RASRecvData: successfully rcvd message of length 123 from 101.0.0.1:24999RASLib::RASRecvData: ARQ rcvd from [101.0.0.1:24999] on sock [0x5C8D28]RASlib::ras_sendto: msg length 16 sent to 40.0.0.31RASLib::RASSendACF: ACF sent to 40.0.0.31Sample 3: Gatekeeper Trace with RAS Turned On, Call Being Torn Down
This report shows two proxy call scenarios. A trace is collected on the gatekeeper with RAS turned on. The call is being torn down.
gk1#debug rasH.323 RAS Messages debugging is ongk1#RASlib::ras_sendto: msg length 3 sent to 40.0.0.31RASLib::RASSendDCF: DCF sent to 40.0.0.31RASLib::RASRecvData: successfully rcvd message of length 55 from 101.0.0.1:24999RASLib::RASRecvData: DRQ rcvd from [101.0.0.1:24999] on sock [0x5C8D28]RASlib::ras_sendto: msg length 3 sent to 40.0.0.31RASLib::RASSendDCF: DCF sent to 40.0.0.31RASLib::RASRecvData: successfully rcvd message of length 55 from 50.0.0.12:1700RASLib::RASRecvData: DRQ rcvd from [50.0.0.12:1700] on sock [0x5C8D28]RASlib::ras_sendto: msg length 3 sent to 50.0.0.12RASLib::RASSendDCF: DCF sent to 50.0.0.12Sample 4: Source Proxy Trace with RAS Turned On, Call Being Established
This report shows two proxy call scenarios. A trace is collected on the source proxy with RAS turned on. The call is being established.
px1#debug rasH.323 RAS Messages debugging is onpx1# RASlib::ras_sendto: msg length 112 sent to 40.0.0.33RASLib::RASSendARQ: ARQ sent to 40.0.0.33RASLib::RASRecvData: successfully rcvd message of length 93 from 40.0.0.33:1719RASLib::RASRecvData: ACF rcvd from [40.0.0.33:1719] on sock [0x67E570]RASLib::parse_acf_nonstd: ACF Nonstd decode succeeded, remlen = 0RASlib::ras_sendto: msg length 123 sent to 40.0.0.33RASLib::RASSendARQ: ARQ sent to 40.0.0.33RASLib::RASRecvData: successfully rcvd message of length 16 from 40.0.0.33:1719RASLib::RASRecvData: ACF rcvd from [40.0.0.33:1719] on sock [0x67E570]Sample 5: Source Proxy Trace with RAS Turned On, Call Being Torn Down
This report shows two proxy call scenarios. A trace is collected on the source proxy with RAS turned on. The call is being torn down.
px1#debug rasH.323 RAS Messages debugging is onpx1# RASLib::RASSendDRQ: DRQ sent to 40.0.0.33RASlib::ras_sendto: msg length 55 sent to 40.0.0.33RASLib::RASSendDRQ: DRQ sent to 40.0.0.33RASLib::RASRecvData: successfully rcvd message of length 3 from 40.0.0.33:1719RASLib::RASRecvData: DCF rcvd from [40.0.0.33:1719] on sock [0x67E570]RASLib::RASRecvData: successfully rcvd message of length 3 from 40.0.0.33:1719RASLib::RASRecvData: DCF rcvd from [40.0.0.33:1719] on sock [0x67E570]
