Troubleshooting Network and NAM Issues
This chapter addresses some common issues you might encounter while using Cisco Prime Network Analysis Module as well as how to use NAM to troubleshoot NAM network connection issues.
This chapter contains the following topics:
•Resolving Typical NAM Issues
•Troubleshooting Login Issues
•Understanding Typical Error Messages
•Troubleshooting WAAS Data Issues
•Using the CLI to Troubleshoot Issues
Resolving Typical NAM Issues
Q. I am sending traffic to the NAM but nothing comes up on the default monitoring page. What could be wrong?
A. There are two typical issues that are seen when first setting up traffic to the NAM:
–Wait for at least five minutes after traffic is sent to the NAM. Prime NAM collects and displays information at intervals and traffic may not display in charts immediately.
–Ensure the client time is synchronized with the NAM time. Typically this means setting your NTP server to synchronize your NAM time. For details, see Synchronizing Your System Time, page 6-6.
Q. What information should I collect and what else should I do when the NAM is not responding?
A. Determine the answers to the following questions and gather the following information:
•Does session from the switch/router CLI work?
•Does ping over EOBC (127 subnet) work?
•Does ping to the management IP address work?
•Collect output of show tech-support command from both the NAM and the switch or router.
•Collect core files.
•Check if NAM hardware is seated correctly in chassis
Perform the following tasks to troubleshoot your issue:
•Reset into maintenance image or helper
•Clear the configuration
•Reinstall the application image (using the --reformat option)
Q. What can I do to increase my Prime vNAM performance level?
A. Prime NAM virtual appliance (vNAM) supports different traffic monitoring speeds based on your deployments. For more details about licensing options and hypervisor dependencies, see the Prime vNAM Data Sheet on Cisco.com.
Q. How can I view NAM log files and send them to TAC for review?
A. From the GUI, go to Adminstration -> Diagnostics -> Tech Support. After the support screen dump is complete, click Download log files. Save the files to your local disk as a gzip archive. You can analyze the files locally or, if requested on to Technical support team for review.
Troubleshooting Login Issues
Log into the NAM by using the username and password that the NAM administrator provided you, and click the Login button. If you are having problems logging in:
•Make sure you are using a browser that is currently supported for use with NAM:
English Firefox 3.6+ or Microsoft Internet Explorer 8+ (Microsoft Internet Explorer 7 is not supported)
•Make sure you are using a platform that is currently supported for use with NAM:
Microsoft Windows XP or Microsoft Windows 7. The Macintosh platform is not supported on this release.
•Clear the browser cache and restart the browser (not necessary if installing NAM for the first time).
•Make sure cookies are enabled in your browser.
•If you see the following message: "Initializing database. Please wait until initialization process finishes," you must wait until the process finishes.
•Make sure your username and password does not use any special characters.
•If your platform requires licensing, make sure you accepted the license agreement and that the license has not expired.
•If the Prime vNAM permanent license is installed and you log in for the first time and accept the EULA, you may be logged out so the permanent license can take effect. We recommend you wait several minutes before you attempt another logon.
To view the full documentation set (including the User Guide and Release Notes) for the Cisco Prime NAM software, go to the NAM software Technical Documentation area on Cisco.com:
Understanding Typical Error Messages
Q. I'm waiting for the graphical data to populate on a dashboard. What does this red error "Request Error -- Please Try Again" mean?
A. This means an internal error has occurred, or the login session may have timed out.
Q. I'm waiting for the graphical data to populate on a dashboard. What does this red error "Query resulted in no data" mean?
A. The NAM does not have any data for the specified time frame and specified filter. Go to the Interactive Report (the pane on the left side of the window) and click the Filter button to check the filter settings and data sources to make sure the NAM is getting data. You can also check the Overview page to ensure the traffic is reaching the NAM. If no traffic appears, check your data sources and SPAN session configuration.
Q. What does the message "Client or NAM time is incorrect" mean?
A. The browser or client time and the NAM time must be synchronized to avoid this error. See Synchronizing Your System Time, page 6-6.
Frequently Asked Questions about Prime NAM Behavior
Q. How does NAM calculate network latency?
A. To calculate network latency, NAM looks at each packet and associates it to a transaction. For example, NAM looks at SYN and SYN-ACK and timestamps these packets to perform these calculations.
Q. How can Prime NAM be restricted to one tenant's traffic when using SPAN or ERSPAN on a Nexus 1000V?
A. Prime NAM can be deployed per tenant so they each NAM has their own portal. NAM processes VxLAN, LISP, FabricPath, and OTV for multiple tenants.
Q. Why is the browser behaving strangely? It is displaying data for no apparent reason or is not displaying expected data.
A. Clear the browser cache, close the browser, and open a new session and try again. Also, make sure you are using a supported browser (see the Cisco Prime Network Analysis Module Release Notes).
Q. Why is the NAM performance lower than expected?
A. Disk capture will reduce the NAM performance considerably. It is due to the disk input/output speed. You will see a warning in the top right corner of the window.
Q. Why won't the system change the storage option for my capture session from disk to memory and then back to disk?
A. If you set up a capture session to disk and later modify the same packet session to save into memory, Prime NAM is unable to change the storage selection back to disk because it is in the in use state. You cannot delete the capture session to release the disk for capture. The workaround is to reboot the NAM. This has been fixed in the latest patch (patch 5) on the Cisco software download web page.
Q. What MIBs do the Prime NAM support?
A. Table A-1 lists the MIB objects supported by Prime NAM.
Table A-1 Supported MIBs
MIB-II: All groups except Exterior Gateway Protocol (EGP) and transmission.
RMON2: trapDestTable only
CDP-MIB: Cisco Discovery Protocol1
Troubleshooting WAAS Data Issues
Q. Why does Prime NAM display the status of WAAS devices as pending?
A. Prime NAM is unable to monitor WAAS traffic until you set up WAAS monitored servers. To change the pending status, you must set up WAAS monitored servers. See your product documentation for more details.
Q. Why is no WAAS data seen in the Monitor windows?
A. Perform the following steps:
•Use the NAM GUI to verify that the Monitored Servers list is configured with the correct server IP addresses.
•Use the NAM GUI to verify that WAAS data sources have data collection enabled for applicable segments.
•Use the WAAS CLI show statistics flow filters to verify that the servers have active traffic flows that are optimized and monitored.
•Use the WAAS CLI show statistics flow mon tcpstat to verify that WAAS Flow Agent exports flow data to the correct NAM IP address.
Q. The WAAS is not sending data to the NAM, and the reports are not showing any values.
A. The WAAS will not send data unless filtering is enabled on the NAM. Enable filtering at Setup > Data Sources > WAAS > Monitored Servers, and check the "Filter Response Time for all Data Sources by Monitored Servers" check box.
Using the CLI to Troubleshoot Issues
•Locating Packet Drops
•Handling an Unresponsive NAM
•Handling an Unresponsive NAM
Locating Packet Drops
Q. How can I find out using the CLI if packets are being dropped?
A. The following CLI command shows packet drops at different layers of the NAM system at 5 minute intervals and up to the last 24 hours:
root@NAM1x-18.cisco.com# show pkt-drop-counters Hour-0
Start time of the hour: 2010-11-05 13:00 PDT
Time hardware pkts dropped FM pkts dropped ART pkts dropped
Handling an Unresponsive NAM
Q. Why is my NAM Blade not responding?
A. Do the following:
•Check the NAM IP configuration (using the CLI command show ip)
•Check VLAN configuration of management port on Sup:
analysis module <slot> management-port access-vlan <#>
•Does the session from the switch/router work?
•Does a ping to NAM mgmt IP address work?
•What is the module status on Sup/router?
Using the CLI to Troubleshoot Performance Agent (PA)
Q. Why is the NAM not receiving data from PA?
A. First troubleshoot Flexible NetFlow (FNF). Check whether FNF sent data to the NAM with show flow exporter statistics. If FNF did not send data, check Performance Agent with show mace metrics summary. Check whether flows are exported. If flows are not exported by PA, debug PA to identify the error with debug mace cp.