Cisco Router 800 Series Software Configuration Guide

							 
8-65
Cisco 800 Series Software Configuration Guide
78-5372-06
Chapter 8      Advanced Router Configuration
Configuring CBAC Audit Trails and Alerts
Using CBAC inspection rules, you can configure alerts and audit trail information 
on a per-application protocol basis. For example, if you want to generate audit 
trail information for HTTP traffic, you can specify that in the CBAC rule covering 
HTTP inspection.
For instructions on configuring CBAC audit trails and alerts, refer to the 
Cisco IOS Security Configuration Guide.  
						

							 
Chapter 8      Advanced Router Configuration
Configuring CBAC Audit Trails and Alerts
8-66
Cisco 800 Series Software Configuration Guide
78-5372-06 
						

							CHAPTER
 
9-1
Cisco 800 Series Software Configuration Guide
78-5372-06
9
Troubleshooting
Use the information in this chapter to help isolate problems you might encounter 
with Cisco 800 series and Cisco SOHO series routers or to rule out the router as 
the source of the problem. This chapter contains the following sections:
Before Contacting Cisco or Your Reseller, page 9-2
ADSL Troubleshooting, page 9-2
G.SHDSL Troubleshooting, page 9-3
ATM Troubleshooting Commands, page 9-6
Troubleshooting Telephone Interfaces, page 9-15
Troubleshooting Serial Line Problems, page 9-16
Software Upgrade Methods, page 9-55
Recovering a Lost Password, page 9-55
Managing the Cisco Router Web Setup Tool, page 9-60
Before troubleshooting a software problem, you must connect a terminal or PC to 
the router via the light-blue console port. (For information on making this 
connection, see the documentation listing in the “Related Documents” section on 
page xxxi.) With a connected terminal or PC, you can read status messages from 
the router and enter commands to troubleshoot a problem.
You can also remotely access the interface (Ethernet, ADSL, or telephone) by 
using Telnet. The Telnet option assumes that the interface is up and running. 
						

							 
Chapter 9      Troubleshooting
Before Contacting Cisco or Your Reseller
9-2
Cisco 800 Series Software Configuration Guide
78-5372-06
Before Contacting Cisco or Your Reseller
If you cannot locate the source of a problem, contact your local reseller for advice. 
Before you call, you should have the following information ready:
Chassis type and serial number
Maintenance agreement or warranty information
Type of software and version number 
Date you received the hardware
Brief description of the problem
Brief description of the steps you have taken to isolate the problem
ADSL Troubleshooting
This section describes some asymmetric digital service line (ADSL) 
troubleshooting checks that you can perform if the router is not working properly. 
If you experience trouble with the ADSL connection, make sure to verify the 
following:
That the ADSL line is connected and is using pins 3 and 4. For more 
information on the ADSL connection, refer to the hardware guide for your 
router.
That the ADSL CD LED is on. If it is not on, the router may not be connected 
to the digital subscriber line access multiplexer (DSLAM). For more 
information on the ADSL LEDs, refer to the hardware installation guide 
specific to your router.
That you are using the correct Asynchronous Transfer Mode (ATM) variable 
path indentifier/variable circuit identifier (VPI/VCI).
That the DSLAM supports discrete multi-tone (DMT) Issue 2.
ADSL Cable Requirements
The ADSL cable that you connect to the Cisco router must be 
10BASE-T Category 5, unshielded twisted-pair (UTP) cable. Using regular 
telephone cable can introduce line errors. 
						

							 
9-3
Cisco 800 Series Software Configuration Guide
78-5372-06
Chapter 9      Troubleshooting
G.SHDSL Troubleshooting
G.SHDSL Troubleshooting
Symmetrical high-data-rate digital subscriber line (G.SHDSL) is available on 
Cisco 828 and Cisco SOHO 78 routers. This section describes some G.SHDSL 
troubleshooting checks that you can perform if the router is not working properly. 
If you experience trouble with the G.SHDSL connection, verify the following:
That the G.SHDSL line is connected and is using pins 3 and 4. For more 
information on the G.SHDSL connection, refer to the Cisco 828 Router and 
SOHO 78 Router Hardware Installation Guide.
That the G.SHDSL CD LED is on. If it is not on, the router may not be 
connected to the DSLAM. For more information on the G.SHDSL LEDs, 
refer to the Cisco 828 Router and SOHO 78 Router Hardware Installation 
Guide.
That you are using the correct ATM VPI/VCI.
That the DSLAM supports G.SHDSL.
show dsl interface Command
Use the show dsl interface command to display the status of a G.SHDSL physical 
port on the router.
The following is an example of output for the show dsl interface command:
_Router# show dsl interface atm0
Globespan G.SHDSL/SDSL Chipset Information
 Equipment Type:         Customer Premise
 Operating Mode:         G.SHDSL Annex A
 Clock Rate Mode:        Fixed rate Mode
 Reset Count:            1
 Requested rate:         72 Kbps
 Actual rate:            72 Kbps
 Modem Status:           Data (0x1)
 Noise Margin:           37 dB
 Loop Attenuation:       0.4294963186 dB
 Transmit Power:         11.7 dBm
 Receiver Gain:          4.2040 dB (2271, 4210, 90)
 Last Activation Status: No Failure (0x0)
 CRC Errors:             2
 Chipset Version:        1 
						

							 
Chapter 9      Troubleshooting
G.SHDSL Troubleshooting
9-4
Cisco 800 Series Software Configuration Guide
78-5372-06  Firmware Version:       R1.0
 Country Code:           0xB500
 Provider Code:          0x4E505347
 Vendor Data:            0x0 0x0 0x0 0x0 
                         0x0 0x0 0x0 0x0 
Performance statistics since reload:
Number of LOS failures:             0
Number of LOSQ failures:            0
Number of coding violations:        0
Number of errored seconds:          0
Number of severely errored seconds: 0
Number of unavailable seconds:      0
Performance statistics for:               Current 15 mins   Current 24 
Hours
Time elapsed since beginning of interval:    6Min             0Hr  
6Min
Number of LOS seconds:                       0                0
Number of LOSQ seconds:                      0                0
Number of code violations:                   0                0
Number of errored seconds:                   0                0
Number of severely errored seconds:          0                0
Number of unavailable seconds:               0                0
Ta b l e 9 - 1 describes possible command output for the show dsl interface 
command. Each line in the command output example corresponds to a row in this 
table.
Table 9-1 show dsl interface Command Output Description
Output Description
Equipment Type
Customer premises equipment (CPE), if 
connected to a DSLAM.
Central offices (COs); if the routers are 
connected back to back, then one of the routers 
can act as a CO.
Operating Mode G.SHDSL annex configuration
Clock Rate Mode Upstream and downstream bit rate configuration. 
Either AUTO for fixed.
Reset Count Number of times the G.SHDSL chip has been reset 
since power-up. 
						

							 
9-5
Cisco 800 Series Software Configuration Guide
78-5372-06
Chapter 9      Troubleshooting
G.SHDSL Troubleshooting
Requested rate User-specified bit rate requirement.
Actual rate The actual bit rate that the transceiver is using.
Modem Status
Handshake, when local transceiver tries to reach 
the far-end transceiver.
Training; indicates that the startup training is in 
progress.
Data, if successfully trained.
Received SNR The received signal-to-noise ratio (SNR).
Loop Attenuation The difference in decibels (dB) between the power 
received at the near-end and the power transmitted 
from the far-end.
Transmit  Power Local symmetric digital subscriber line transmission 
unit (STU) transmit power.
Receiver Gain Total receiver gain.
Last Activation Status Defines the last failure state of the G.SHDSL chip.
CRC Errors Cyclic redundancy check (CRC) errors.
Chipset Version Vendor’s chipset information.
Firmware Version Vendor’s firmware release version.
Country Code The country identification for the far end.
Provider Code Identification of the vendor.
Vendor data Vendor-specific information.
Number of LOS failures Loss of synchronization counter increased when it 
contains one or more error in the framing bits. If the 
counter continues to increase during or after 
training, the line might be noisy or the cable is not 
connected.
Number of LOSQ failures Loss of signal quality counter is increased when 
SNR is below the threshold.
Table 9-1 show dsl interface Command Output Description (continued)
Output Description 
						

							 
Chapter 9      Troubleshooting
ATM Troubleshooting Commands
9-6
Cisco 800 Series Software Configuration Guide
78-5372-06
ATM Troubleshooting Commands
This section describes some ATM troubleshooting commands.
ping atm interface Command
You can use the ping atm interface command to determine if a particular PVC is 
in use. The PVC does not need to be configured on the router in order for you to 
use this command.
For example, to test whether PVC 1/200 is in use, use the following command:
Router# ping atm interface atm 0 1 200 seg-loopback 
Type escape sequence to abort.
Sending 5, 53-byte segment OAM echoes, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 
148/148/148 ms
This command sends five OAM F5 loopback packets to the DSLAM (segment 
OAM packets). If the PVC is configured at the DSLAM, the ping is successful. Number of code violations Code violation is defined as a count of the CRC 
anomalies occurring during the accumulation 
period.
Number of errored seconds An errored second is a count of 1-second intervals 
during which one or more CRC anomalies/loss of 
sync words are declared.
Number of severely errored seconds A severely errored second is a count of 1-second 
intervals during which 50 or more CRC anomalies 
are declared.
Number of unavailable seconds An unavailable second is a count of 1-second 
intervals for which the DSL line is unavailable.
Table 9-1 show dsl interface Command Output Description (continued)
Output Description 
						

							 
9-7
Cisco 800 Series Software Configuration Guide
78-5372-06
Chapter 9      Troubleshooting
ATM Troubleshooting Commands
To test whether the PVC is being used at the aggregator, enter the following 
command:
Router# ping atm interface atm 0 1 200 end-loopback 
Type escape sequence to abort.
Sending 5, 53-byte end-to-end OAM echoes, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 
400/401/404 ms
This command sends end-to-end OAM F5 packets, which are echoed back by the 
aggregator.
show interface Command
Use the show interface command to display the status of all physical ports 
(Ethernet and ATM) and logical interfaces on the router. Significant messages in 
the command output are shown in bold. Significant messages are described in 
Ta b l e 9 - 2.
820-uut2#sh int atm0
ATM0 is up, line protocol is up 
  Hardware is PQUICC_SAR (with Alcatel ADSL Module)
  Internet address is 14.0.0.16/8
  MTU 1500 bytes, sub MTU 1500, BW 640 Kbit, DLY 80 usec, 
     reliability 40/255, txload 1/255, rxload 1/255
  Encapsulation ATM, loopback not set
  Keepalive not supported 
  Encapsulation(s):AAL5, PVC mode
  10 maximum active VCs, 1 current VCCs
  VC idle disconnect time:300 seconds
  Last input 01:16:31, output 01:16:31, output hang never
  Last clearing of show interface counters never
  Input queue:0/75/0 (size/max/drops); Total output drops:0
  Queueing strategy:Per VC Queueing
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     512 packets input, 59780 bytes, 0 no buffer
     Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 1024 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     426 packets output, 46282 bytes, 0 underruns
     0 output errors, 0 collisions, 2 interface resets
     0 output buffer failures, 0 output buffers swapped out
820-uut2#sh int eth0
Ethernet0 is up, line protocol is up  
						

							 
Chapter 9      Troubleshooting
ATM Troubleshooting Commands
9-8
Cisco 800 Series Software Configuration Guide
78-5372-06 Hardware is PQUICC Ethernet, address is 0000.Oc13.a4db 
(bia0010.9181.1281)
Internet address is 170.1.4.101/24
MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec, 
reliability 255/255., txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
820-uut2#sh int dialer 1
Dialer 1 is up, line protocol is up 
Hardware is Dialer interface
Internet address is 1.1.1.1/24
MTU 1500 bytes, BW 100000 Kbit, DLY 100000 usec, reliability
255/255. txload 1/255, rxload 1/255
Encapsulation PPP, loopback not set
Keepalive set (10 sec)
DTR is pulsed for 5 seconds on reset
LCP Closed
Ta b l e 9 - 2 describes possible command output for the show interface command. 
Each line in the command output example corresponds to a row in this table.
Table 9-2 show interface Command Output Description
Output Description
ATM0 is up, line protocol is up 
Other possible messages:
ATM0 is down, line protocol is down
ATM0 is down, line protocol is down
The ATM line is up and operating correctly.
The ATM interface has been disabled with the 
shutdown command.
The ATM line is down, possibly because the 
ADSL cable is disconnected or because the 
wrong type of cable is connected to the ATM 
port.
ATM0.1 is up, line protocol is up 
Other possible messages:
ATM0.1 is administratively down, line protocol 
is down
ATM0.1 is down, line protocol is down
The first ATM subinterface is up and operating 
correctly.
The ATM subinterface has been disabled with 
the shutdown command.
The ATM subinterface is down, possibly 
because the ATM line has been disconnected 
(by the service provider).