Cisco Resource Policy Management System 2.0.2 Troubleshooting Guide - Universal Gateway IOS Debugging [Cisco Resource Policy Management System]

There are different reasons for using the Cisco IOS release debugging commands. Which command you use depends on what you want to accomplish, and what the symptoms are what you are debugging.

Note This chapter describes debugging commands for Cisco universal gateways. For debugging other vendors' UGs, consult your owner's manuals or contact the UG vendor.

Table 4-1 Debugging Feature
Debug	Why it is Used	Symptoms
debug radius	For communication issues between the universal gateway and Cisco RPMS.	No successful calls accepted into the UG.
deb aaa authorization	For customer profile issues.	Some calls are being rejected.
debug aaa authentication

Universal Gateway Debugging Rules

When debugging a Cisco UG, keep the following rules in mind.

•There is no differentiation between authorization messages for call authentication and user authentication. This results in a large number of debugs.

•Use conditional debugs.

Overview: Useful Universal Gateway `show' Commands

You can use the following `show' commands:

•Summary of callers:

show caller summary

•The ISDN memory:

show isdn memory

•RADIUS statistics:

show radius statistics

•Incoming call rate on the UG:

show csm call-rate

show caller summary

Summary of calls example:

5300-8-17#sh caller summary

6    Analog calls

0    ISDN calls

0    VPDN calls

6    Total users logged in

44   Total users since last reload

show isdn memory

ISDN summary example:

5300-8-17#sh isdn mem

MEMORY POOL STATISTICS

BlockType            	 in use   limit   max used

mail descriptors     		 0        2400       10

exec timer blocks    		 0         600        0

LIF timers          330           -       330

L2IF timers          24           -        24

PRIM_BTYPE          354           -       356

PKT_BTYPE            		 0           -         5

HEADER_BTYPE         	 0           -         5

SML_INFO_BTYPE       	 0           -         1

LRG_INFO_BTYPE       	 0           -         1

PKG_BTYPE            		 0           -         1

CCBs               	  	 6           -         8

DLCBs                		 8           -         8

NLCBs    		            18           -        18

show radius statistics

RADIUS statistics example:

5300-8-17#sh radius sta

                          		 Auth.      Acct.       Both

Maximum inQ length:         NA         NA          1

Maximum waitQ length:       NA         NA          0

Maximum doneQ length:       NA         NA          1

Total responses seen:       71         51        122

Packets with responses:      71         51        122

Packets without responses:    5          0          5

Average response delay(ms):  37         37         37

Maximum response delay(ms): 156        104        156

Number of Radius timeouts:    5          0          5

Duplicate ID detects:         0          0          0

The show csm call-rate for the Current 60 Seconds

You can use the show csm call-rate command to view the CSM call switching rate per second for the last 60 seconds.

Note The # sign represents calls entering the CSM per second.

The status appears onscreen similar to this:

5300-8-17#sh csm call-rate

    0....5....1....1....2....2....3....3....4....4....5....5....

              0    5    0    5    0    5    0    5    0    5

        CSM call switching rate per second (last 60 seconds)

          # = calls entering the CSM per second

The show csm call-rate for the Last 60 Minutes

You can use the show csm call-rate command to view the CSM call switching rate per second for the last 60 minutes.

Note The * symbol represents the maximum calls.

The # sign represents calls entering the CSM per second.

The status appears onscreen similar to this:

  1           *   *

    0....5....1....1....2....2....3....3....4....4....5....5....

              0    5    0    5    0    5    0    5    0    5

        CSM call switching rate per second (last 60 minutes)

          * = maximum calls/s    # = average calls/s

The show csm call-rate for the Last 72 Hours

You can use the show csm call-rate command to view the CSM call switching rate per second for the last 72 hours.

Note The * symbol represents the maximum calls.

The # sign represents calls entering the CSM per second.

The status appears onscreen similar to this:

  1                                                 * ***

    0....5....1....1....2....2....3....3....4....4....5....5....6....6....7.

              0    5    0    5    0    5    0    5    0    5    0    5    0

            CSM call switching rate per second (last 72 hours)

              * = maximum calls/s    # = average calls/s

Overview: The Universal Gateway—Cisco RPMS Communication Debug

This sections lists the different types of communications you receive when debugging a Cisco universal gateway.

These include:

•Incorrect key

•Cisco RPMS Can't Identify UG

Incorrect Key

deb radius

5300-8-17#

2w3d: ISDN Se0:23: RX <-  SETUP pd = 8  callref = 0x002A

2w3d:      Bearer Capability i = 0x8090A2

2w3d:      Channel ID i = 0xA98381

2w3d:      Calling Party Number i = 0xA1, '8534217', Plan:ISDN,

                Type:National

2w3d:      Called Party Number i = 0xA1, '5551006', Plan:ISDN,

                Type:National

2w3d: AAA/ACCT/DS0: channel=0, ds1=0, t3=0, slot=0, ds0=0

2w3d: AAA/ACCT/DS0: channel=0, ds1=0, t3=0, slot=0, ds0=0

2w3d: ISDN Se0:23: TX ->  CALL_PROC pd = 8  callref = 0x802A

2w3d:         Channel ID i = 0xA98381

2w3d: AAA/AUTHOR/PREAUTH/(0000002B): DNIS-based preauthentication

2w3d: AAA/AUTHOR (0x2B): Pick method list 'default'

2w3d: RADIUS/ENCODE(0000002B): acct_session_id: 44

2w3d: RADIUS(0000002B): sending

2w3d: RADIUS:Send to unknown id 76 1.4.56.1:1812,Access-Request,len 99

2w3d: RADIUS: authenticator 57 B4 E3 03 CB 22 22 6A - B0 AE 76 F2 D0

               18 34 9E

2w3d: RADIUS:  User-Name           [1]   9   "5551006"

2w3d: RADIUS:  User-Password       [2]   18  *

2w3d: RADIUS:  NAS-Port            [5]   6   0

2w3d: RADIUS:  Called-Station-Id   [30]  9   "5551006"

2w3d: RADIUS:  Calling-Station-Id  [31]  9   "8534217"

2w3d: RADIUS:  NAS-Port-Type       [61]  6   Async                 [0]

2w3d: RADIUS:  Service-Type        [6]   6   Outbound              [5]

2w3d: RADIUS:  NAS-IP-Address      [4]   6   1.4.56.117

2w3d: RADIUS:  Acct-Session-Id     [44]  10  "0000002C"

2w3d: RADIUS: Received from id 76 1.4.56.1:1812, Access-Accept, len 60

2w3d: RADIUS:  authenticator 06 01 4A A5 FA EA 4D 1C - DA A7 72 A8 57

                 8F 1D FF

2w3d: RADIUS:  Class               [25]  40

2w3d: RADIUS:   43 52 50 4D 53 2D 43 4C 41 53 53 64 06 00 00 00

                 [CRPMS-CLASSd????]

2w3d: RADIUS:   01 6C 15 31 2E 34 2E 35 36 2E 31 31 37 2B 30 30

                  [?l?1.4.56.117+00]

2w3d: RADIUS:   30 30 30 30 32 43                 [00002C]

2w3d: RADIUS: Response (76) failed decrypt

Note The solution for this is to re-enter the keys on the UG and Cisco RPMS.

Cisco RPMS Cannot Identify the Universal Gateway

Possible causes for this include:

•The UG may not be configured correctly on Cisco RPMS.

•The Name server entry may not match the UG source IP address.

To fix this, ensure the IP address of the UG is correct. For more information on configuring the UG IP address, see the Cisco Resource Policy Management System 2.0.2 Configuration Guide.

deb radius

5300-8-17#

2w0d:AAA/ACCT/DS0:channel=0, ds1=6, t3=0, slot=0, ds0=24576

2w0d:AAA/ACCT/DS0:channel=0, ds1=6, t3=0, slot=0, ds0=24576

2w0d:AAA/AUTHOR/PREAUTH/(0000002B):DNIS-based preauthentication

2w0d:AAA/AUTHOR (0x2B):Pick method list 'default'

2w0d:RADIUS/ENCODE(0000002B):acct_session_id:43

2w0d:RADIUS(0000002B):sending

2w0d:RADIUS:Send to unknown id 86 1.4.56.1:1812, Access-Request, len 99

2w0d:RADIUS: authenticator 05 D7 92 9A 90 06 C3 7E - BA B2 A5 2F 08 AE 9D 31

2w0d:RADIUS: User-Name           [1]   9   "5551005"

2w0d:RADIUS: User-Password       [2]   18  *

2w0d:RADIUS: NAS-Port            [5]   6   192

2w0d:RADIUS: Called-Station-Id   [30]  9   "5551005"

2w0d:RADIUS: Calling-Station-Id  [31]  9   "8534217"

2w0d:RADIUS: NAS-Port-Type       [61]  6   Async                     [0]

2w0d:RADIUS: Service-Type        [6]   6   Outbound                  [5]

2w0d:RADIUS: NAS-IP-Address      [4]   6   1.4.56.117

2w0d:RADIUS: Acct-Session-Id     [44]  10  "0000002B"

2w0d:RADIUS:Tried all servers.

2w0d:RADIUS:No valid server found. Trying any viable server

2w0d:RADIUS:Tried all servers.

2w0d:RADIUS:No response for id 86

2w0d:RADIUS/DECODE:parse response no app start; FAIL

2w0d:RADIUS/DECODE:parse response; FAIL

2w0d:AAA/AUTHOR/PREAUTH/(0000002B):Done - FAILED

2w0d:AAA/ACCT/DS0:channel=0, ds1=6, t3=0, slot=0, ds0=24576

5300-8-17#

Note This output looks the same as a mismatched key issue.

Table Of Contents

Universal Gateway IOS Debugging

Overview: Using IOS Debugging Features

Universal Gateway Debugging Rules

Overview: Useful Universal Gateway `show' Commands

show caller summary

show isdn memory

show radius statistics

The show csm call-rate for the Current 60 Seconds

The show csm call-rate for the Last 60 Minutes

The show csm call-rate for the Last 72 Hours

Overview: The Universal Gateway—Cisco RPMS Communication Debug

Incorrect Key

deb radius

Cisco RPMS Cannot Identify the Universal Gateway

deb radius