Troubleshooting

About the Technical Reviewers

Scott Morris, CCIE No. 4713, has more than 15 years experience in telecommunications, network design, and installation. He is a triple CCIE (Routing and Switching, ISP Dial, and Security) and has specialties in various fields of technology, including security, IP telephony, and cable (RF) internetworking. Scott is a certified Cisco Systems instructor and has taught classes on many advanced topics in his specialty areas and other advanced routing, MPLS, and troubleshooting topics. Currently,...

Figure 310 Analyzing Telnet and the 3Way Handshake

In the preceding example, hosta was configured with the local router IP address as its default gateway. Because of t his, hosta sent an AR rnquest packet to its default gateway to learn the MAC address of t e Ethernet 0 interface on r1. The comma nd arp -a on the host would have shown this, whereas show ip arp is the command on the router. ARP frames are not part of the 3-way handshake or TCP session, but are certainly required for hosta to transmit data. Study TCP in the Sniffe r capture a nd...

Figure 320 FTP Write Request

Feel free to draw a more specific picture with line numbers, ports, and seq uence and acknowledgement numbert. However, the following gives a general picture of how FTP works ARP and TCP 3-way handshake (FTP control port 21) FTP user login (anonymouu) and password (donna shoretraining.com) TCP 3-way handshake (FTP data transfer port 20) FTP data transfer (clear text) Session tear down (data port 20) Session tear down (control port 21) The main difference is that the program I used for the test...

Figure 86 Frame Relay Terminology

Sh frame I ml sh frame map eh frame pvc Frame Relay is used between the customer premises equipment (CPE) and the Frame Relay switch, but the complete path is known up front. Figure 8-6 illustrates the LMI signaling (keepalives) t hat occurs from your router to the local frame switch. The Frame Relay connections from rl to r2 and r3 are through PVCs. Local DLCIs are th e Layer 2 connection identifiers assigned by the service provider. Autosenslng LMI and traffic shaping a m among the m aea sign...

Tuning STP in a Practical Environment

As you ran see, STP is quite crmplex, but necessary to avoid Layer 2 broadcast storms. Think of it as the Layer 2 TTL. The following items and commands are suggestions for tuning STP in e practical environ -1X11 Create a desian hiera rchy inciudmg Layer 3 switches rather than a flat network. Understand dow STP works , particulaHy on your nttwork. Draw pictuues of what you have and what you w ill havd after a OeMum. Use too ls such ad tie Ca mpus M anager CASI STP mapping tool to get a good...

CatOSBased Swit ches

Now if you don't like all the modes and separate histories with the routers, you might actually enjo the CAtOS. The normal mode is like user mode on the route n, and the privileged exec (wnable) mod the conVgo-ation mode. Set, show, and de ar comman0s are issued from the ena ole mode It anno me that you can't enter show commands while in cond guration mode in IOS. Although you don't ne to be as concerned with modes, with CatOS it is very easy to prematurely enter something you don mean to whe n...

Example 426 Loading Drivers and Binding IPX to the NIC at the Console

LOAD NE2000 NAME NE2 0 0 0_1_E8 3 FRAME ETHERNET_8 02.3 INT A PORT 300 BIND IPX NE2 00 0 1 E83 NET 516 Whether from the command line or inetcfg, these commands prove quite helpful in a Cisco Novell support environment after all, incorrect frame types are a common issue between Novell and Cisco devices. Multiple frame types are supported in Novell and Cisco, although not a best practice. On Cisco devices, the preferred method is to configure subinterfaces, but secondary addresses still work too....

CCO Marketplace

CCO Market place is a g lobal e-commerce portal for online ordering and management to give you 24-hour by 7-day online purchasing, 365 days a year. Explore the Networking Products Marketplace at oo o.cisco.com go ma rketplaces, o here you nan place and mana ge ord ers for products and sprvices. Go tp the Cisco Merchan dise store at Land's En d to order shirts, ha ts, bags, jackets, and other apparel. Land's Eud is even making use of Cisco technology oith their click-to-talk customer-service...

Example 530 Duplicate MACs Router and hostb

R1(config-if) mac-address 0080.c7aa.c887 Ethernet0 is up, line protocol is up Hardware is Lance, address is 0080.c7aa.c887 (bia 0000.0c8d. Description r1e0 to hosta hostb and gwise MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec, rely 255 255, Encapsulation ARPA, loopback not set, keepalive set (10 sec) ARP type ARPA, ARP Timeout 04 00 00 03 19 16 IP ARP req filtered src 192.168.5.19 008 0.c7aa.c8 87, 03 19 18 IP ARP req filtered src 192.168.5.19 008 0.c7aa.c8 87, 03 19 19 IP ARP req filtered src...

ISO Functional Areas of Network Management

The ISO has five key functional areas of network management, as follows Fault management is very applicable to troubleshooting. A fault is defined as any abnormal event. The fault may be indicated by component failures that generate lots of errors. Report faults as they occur. Where did it occur Can you isolate the problem and minimize the impact on others Is the fault an abnormal event is there an excessive number of errors Should you repair or replace Must you upgrade hardware, upgrade...

Example 511 Testing Endto End Connectivity from hosta to hostc

0x1 MS TCP Loopback interface 0x2 44 45 53 54 42 00 NOC Extranet Access Adapter 0x1000004 00 10 4b a5 ae 50 FE575 Ethernet Adapter Approximate round trip times in milli-seconds Tracing route to HOSTC 192.168.5.98 over a maximum of 30 hops 1 < 10 ms 10 ms < 10 ms 192.168.5.17 3 2 0 ms 3 0 ms Trace complete. If you are seeing other routes in your routing table, you may be connected to the Internet via your Internet service provider (ISP). Discon nect to alle viate the confusion, for the labs...

Figure 323 Name and Address Resolution

Klart Rur tthoslb N el work Neighborhood Windows Explorer DNS (IiosLs files) WIMS (Imnoitsi files) , DNS is hierarchical in nature therefore, fully qualified domain names (FQDN) must be unique. Upper-level domain names include such domain names as com, edu, net, and gov. Second-level domain names must be registered. For example, ciscopress.com and shoretraining.com are both part of1 tne topcieN e c om domain. Cisco Press ha s auth orith over wh at they do ufder ciscopress.co m, and o have...

Example 1016 Document the chesapeakebay Switch 2900 CatOS

Chesapeakebay> (enable)set logging server 172.16.1.42 172.16.1.42 added to System logging server table. chesapeakebay> (enable)set logging timestamp enable System logging messages timestamp will be enabled. chesapeakebay> (enable)set logging buffer 500000 Usage set logging buffer < buffer_size> (buffer_size 1 500) chesapeakebay> (enable)set logging buffer 500 System logging buffer size set to < 500> chesapeakebay> (enable)set ntp server 172.16.1.1 NTP server 172.16.1.1 added....

Fa0Un2 is missin g the switchport mode trunk statement for kentnarrows Use the show interfaces fa012 switchport command

VI_A N1 address should be 172.em.l . No STP on VLAN1 , so what wi ll taae caae on t he Layer 2 redundancy between kentnarrows and knappsnarrows Turn it back on with the spanning-tree vlan 1 command. Compare your final saved fixed configurations to the tt6 fixed configs file. Add any additional notes to your drawing and tables. Now that you have completed these challenging Trouble Tickets, go back and review all your documentation. I highly recommend you print the supporting files for this...

Figure 68 Catalyst 6509 Series Switches

With its drastic increase in capacity and throughput, the Cat6000 is a very powerful big brother s ister to the an00 series. If you are familiar with the 4000 or 5000, you are well on your way to supporting the 6000s. CatOS and the native IOS modes are both available, although not all features are supported in both. The following list contains some common terminology and functiona lity of the 600 0 The Cata I yst switch processor (SP) courro s system operation, port management, and services...

Example 856 Forcing r1 to Become the DR

Neighbor ID Pri State Dead Time Address Interface 1.1.1.1 1 FULL BDR 00 01 45 192.168.8.1 Serial0.101 r2 (config-router) neighbor 192 . 168.8.1 r4 configure terminal r4(config) router ospf 1 r4(config-router) neighbor 192.168.8.1 r4 (config-router) interface s0 0.101 r4(config-subif) ip ospf priority 0 r4(config-subif) end OSPF adjacency events debugging is on Dec 13 23 37 18.150 OSPF Rcv hello from 1.1.1.1 area 8 from Serial0 0.101 192 . 168.8.1 Dec 13 23 37 18.150 OSPF Neighbor change Event...

Example 726 Monitoring VTP Messages

Sw3512XL(config) service timestamps debug datetime localtime msec sw3512XL(config) service timestamps log datetime localtime msec sw3512XL(config) end sw3512XL clear counters sw3512xl(config) interface fastethernet 0 1 sw3512xl(config-if) port monitor fastethernet 0 11 Syslog logging enabled (0 messages dropped, 0 flushes, 0 overruns) Console logging level debugging, 332 messages logged Monitor logging level debugging, 0 messages logged Trap logging level informational, 67 message lines logged...

Example 938 debug isdn q931 Command Output

ISDN Q931 packets debugging is on r5 ping 192.168.9.21 Sending 5, 100-byte ICMP Echos to 192.168.9.21, timeout is 2 seconds . Success rate is 80 percent (4 5), round-trip min avg max 36 36 36 ms Dec 22 04 53 23.275 ISDN BR0 TX -> SETUP pd 8 callref 0x06 Dec 22 04 53 23.279 Bearer Capability i 0x8890 Dec 22 04 53 23.279 Channel ID i 0x83 Dec 22 04 53 23.283 Keypad Facility i '8358661' Dec 22 04 53 23.491 ISDN BR0 RX < - CALL_PROC pd 8 callref 0x86 Dec 22 04 53 23.491 Channel ID i 0x89 Dec 22...

Example 952 show isdn status Command Output

Global ISDN Switchtype basic-ni ISDN BRIO interface dsl 0, interface ISDN Switchtype basic-ni Layer 1 Status TEI 70, Ces 1, SAPI 0, State MULTIPLE_FRAME_ESTABLISHED TEI 71, Ces 2, SAPI 0, State MULTIPLE_FRAME_ESTABLISHED Spid Status spidl configured, spid1 sent, spid1 valid Endpoint ID Info epsf 0, usid 2, tid 1 TEI 71, ces 2, state 5(init) spid2 configured, spid2 sent, spid2 valid Endpoint ID Info epsf 0, usid 4, tid 1 Layer 3 Status 0 Active Layer 3 Call(s) Activated dsl 0 CCBs 0 The Free...

Example 242 ipconfig all

Ethernet adapter Local Area Connection You will continue to use many of these tools in the Trouble Tickets to come. Depending on the operating system, other administrative and troubleshooting tools are available. Other administrative and troubleshooting tools include system configuration utilities, startup menus for safe modes, help troubleshooters, Device Manager, Perfmon, Event Viewer, and Task Manager. Many third-party tools are worthy of exploring, too. Consider taking a look at TTCP,...

Figure 314 Telnet from an Application Perspective

2 n p > j. tjh 'lin * kJ JiUl i iJpf ' '.*> ' l L, vi 2 n p > j. tjh 'lin * kJ JiUl i iJpf ' '.*> ' l L, vi Next look at TFTP and FTP. As I illustrated in Figure 3-13, TFTP typically operates over UDP port 69, and FTP typically operates over TCP port 21 for control and 20 for data. When I say typically, I really mean t aat this is entirely um Uo t he developer aTd and TFTP are very useful applications in the support environment. For instance, what happens if you lose the configuration...

Exa mple 919 Testing the HDLC Scenario

1.0.0.0 32 is subnetted, 1 subnets D 1.1.1.1 90 41664000 via 192.168.9.18, 00 16 40, SerialO 2.0.0.0 32 is subnetted, 1 subnets D 2.2.2.2 90 41664000 via 192.168.9.18, 00 16 40, Serial0 3.0.0.0 32 is subnetted, 1 subnets D 3.3.3.3 90 41152000 via 192.168.9.18, 00 16 40, Serial0 4.0.0.0 32 is subnetted, 1 subnets D 4.4.4.4 90 41664000 via 192.168.9.18, 00 16 40, Serial0 192.168.9.0 30 is subnetted, 5 subnets D 192.168.9.0 90 41536000 via 192.168.9.18, 00 16 40, Serial0 D 192.168.9.4 90 41536000...

Example 949 Verifying the Normal Interfaces and Routing Table

YES unset administratively down down YES unset administratively down down YES unset administratively down down or YES NVRAM up up Codes C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default U - per-user static route, o - ODR...

Example 213 show version

Translating shver domain server (255.255.255.255) Unknown command or computer name, or unable to find computer address r2> show version Cisco Internetwork Operating System Software IOS (tm) 2500 Software (C2500-IS-L), Version 12.0(5), RELEASE SOFTWARE (fc1) Copyright 1986-1999 by cisco Systems, Inc. Compiled Tue 15-Jun-99 19 57 by phanguye Image text-base 0x0303D744, data-base 0x00001000 ROM System Bootstrap, Version 11.0(10c)XB1, PLATFORM SPECIFIC RELEASE SOFTWARE (fc1) BOOTFLASH 3000...

Example 329 Copying r1 Configuration to a TFTP Server

Address or name of remote host 192.168.1.11 Destination filename running-config hosta-config 1 1093 bytes copied in 5.888 secs (218 bytes sec) Erasing the nvram filesystem will remove all files The next 2 shaded commands are not necessary for However, it is a good time to review when files r1 copy startup-config running-config Destination filename running-config ip host r1 192.168.1.1 192.168.2.1 192.168.4.1 10.1 ip host r2 192.168.4.2 192.168.5.1 192.168.6.1 ip host r3 192.168.2.2 192.168.5.2...

Example 1019 Copying the Configurations to the TFTP Server

Address or name of remote host 172.16.1.42 Destination filename tt2duck-confg 1936 bytes copied in 8.744 secs (242 bytes sec) heron copy running-config tftp Address or name of remote host 172.16.1.42 Destination filename tt2heron-confg 1963 bytes copied in 7.676 secs (280 bytes sec) goose copy running-config tftp Address or name of remote host 172.16.1.42 Destination filename goose-confg tt2goose-confg 2880 bytes copied in 1.664 secs (2880 bytes sec) osprey copy running-config tftp Name of...

Baselining and Docume ntation

Beselining and documentation are crucia I to your l ongeterm success wimh internetwork wroudi eshooting Thi s is not dust th eory for if you don't know what is normal, how do you know where to begin with troubleshooting. What if you get the call saying the network is slow Slow compared to what Did you colleco any dpta when the network was i nstalled and ru nni ng propetly, do you au dit it rrom tim e to bme, or havp you just taken the put-out-the-fire approach to network management You should...

Example 29 show protocols and show ip protocols

Internet Protocol routing is enabled Ethernet0 is up, line protocol is up Internet address is 192.168.3.1 24 Serial0 is up, line protocol is up Internet oddress is 192.168.2.2 24 Serial1 is administratively down, line protocol is down r2> show ip protocols Codes C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF...

Example 31 Terminal Server Configuration 2511

Hostname ts enable password donna ip subnet-zero ip host r1 2001 1.1.1.1 ip host r2 2002 1.1.1.1 ip host r3 2003 1.1.1.1 ip host r4 2004 1.1.1.1 ip host r5 2005 1.1.1.1 interface Loopback0 ip address 1.1.1.1 255.0.0.0 no ip directed-broadcast transport input all no exec line aux 0 line vty 0 4 exec-timeout 30 0 password donna logging synchronous login end Although c ve you Figures 3-1 throug h 3-3, it is rea a bettar pra ctice to draw your ewn network diagram. S ome fjeopl e prefer columns and...

Example 1022 Syslog Output

Jul 31 19 22 08 local Listening for Syslog messages on IP address 172.16.1.42 Jul 31 19 23 23 172.16.1.41 125 Jul 31 07 23 47.352 LINEPROTO-5-UPDOWN Line protocol on Interface Serial0 0, changed state to down Jul 31 19 23 25 172.16.1.41 126 Jul 31 07 23 49.076 LINK-3-UPDOWN Interface Serial0 0, changed state to up Jul 31 19 23 25 172.16.1.41 127 Jul 31 07 23 50.076 LINEPROTO-5-UPDOWN Line protocol on Interface Serial0 0, changed state to up Jul 31 19 23 36 172.16.1.41 128 Jul 31 07 24 00.456...

Example 411 r2 IOS Upgrade from r1 as a TFTP Server

R2(config-if) ip address 192.168.5.34 255.255.255.240 r2(config-if) no shut r2 (config-if) end r2 copy running-config startup-config r2 copy tftp flash This process will accept the copy options and then terminate the current system image to use the ROM based image for the copy. Routing functionality will not be available during that time. If you are logged in via telnet, this connection will terminate. Users with console access can see the results of the copy operation. Address or name of...

Figure 38 Analyzing the RIP Packet at Layers 2 3 and

Sd& cr Lwri, EUimirt (J .iitc lOMjbpf) rinjupi lunli l < i< n(h Eiill-g Tyt -Oi oi Sric rr-i f IHWMI ' ' Sil n R P R Rirjbir prLrnr i 11> 11 Dil HS. Sit- 3 iSS , Bsit IML Loa - Knit icam D1DD5EUQ9CI3* Soil Stan.C'fi Ci*aaUK7 5 El.,nriypr - DBDD IPj Ttriior. 4 biMtor Itogik * iO fc C-F J rrjcwL thio ghpit 0 - ui'fhfl as litLLuv n HCT hil imnFriTr pxvtrn Total jcr.jLh * 1L2 br Ln Eijor. iiis.il lun - 6 Flflgi * fflt r .i'jirn1 cilaol * E trflrs TLHV ta J vv * - Eocccdc-'Laps FTOIJCrtJ 17...

Example 937 show isdn history Command Output

ISDN CALL HISTORY History table has a maximum of 100 entries. History table data is retained for a maximum of 15 Minutes. Remote Seconds Seconds Seconds Charges Sending 5, 100-byte ICMP Echos to 192.168.9.21, timeout is 2 seconds . History table has a maximum of 100 entries. History table data is retained for a maximum of 15 Minutes. Call Calling Called Remote Seconds Seconds Seconds Charges Type Number Number Name Used Left Idle Units Currency This router has always been on the initiating side...

Example 61 Resetting the 1900 to the Factory Defaults Using the Menu

Copyright (c) Cisco Systems, Inc. 1993-1998 Ethernet Address 00-90-92-2A-76-80 1 user(s) now active on Management Console. User Interface Menu M Menus I IP Configuration Enter Selection M Catalyst 1900 - System Configuration System Revision 1 Address Capacity 1024 System UpTime 0day(s) 00hour(s) 00minute(s) 45second(s) ----------------------- Settings ----------------------------------- C Contact name donna l harrington S Switching mode Store-and-Forward U Use of store-and-forward for multicast...

Example 518 IPX Interface Ethernet 0 Statistics

Ethernet0 is up, line protocol is up IPX address is 516.0000.0c8d.6705, SAP up Delay of this IPX network, in ticks is 1 throughput 0 link IPXWAN processing not enabled on this interface. IPX SAP update interval is 60 seconds IPX type 20 propagation packet forwarding is disabled SAP GNS processing enabled, delay 0 ms, output filter list Netbios Input host access list is not set Netbios Input bytes access list is not set Netbios Output host access list is not set Netbios Output bytes access list...

Figure 43 IOS Upgrade Planner

C 11 > i I r I * 111 (mm tu liirm C 11 > i I r I * 111 (mm tu liirm EIALI * g& fl fctCaM * F1ttf.*i GSJ hJ u ifii Use Cipro EDS Planer gfevi ysu mwi Evi-'riUj 1 towi fcf jraur prvfnrrd t- Si*ot. '(va cm r.r-j-- all tnaj> r nlr-c-ri, aD platform. wi Tifcw-are frjftat * a fi& gb cicitL r CtiS rtlg M .Lii.iia, * C ailiri lr f r.iid i, it ivVMHc ft fitfr Vftl fcfl ttak ilj tfi ihit ffi iu hvrli I b 4c J i-fl V JJf itlr-.ivii. 'JL2l ycfu jinit tjetif prdtrrrf li uMt Cut CECMBiKirib thai...

Example 957 Configuring PPP Encapsulation and PAP Authentication

Interface Loopback8 ip address 5.5.5.5 255.255.255.255 ip address 192.168.9.14 255.255.255. encapsulation ppp no ip mroute-cache ip address 192.168.9.18 255.255.255. ip address 192.168.9.22 255.255.255. encapsulation ppp dialer idle-timeout 55 dialer map ip 192.168.9.21 name r6 i dialer map ip 192.168.9.21 name r6 8 isdn spidl 0835866201 8358662 isdn spid2 0835866401 8358664 ppp authentication pap callin PPP pap sent-username paplady password 7 0117090A550A end username r5 password 0 donna...

Example 323 Turning Off Automatic Summarization and Reviewing the Routing Table

R1(config) router rip r1(config-router) no auto-summary r1 copy running-config startup-config r3(config) router rip r3(config-router) no auto-summary r3 (config-router) end r3 copy running-config startup-config r2 show ip route Codes C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS,...

Example 105 Building a Layer 3 and Above Baseline frrm the duck Rrut Interfaces

YES unset administratively down down Ethernet0 is up, line protocol is up Hardware is Lance, address is 0000.0c8d.6705 (bia 0000.0c8d.6705) Description duck to chesapeakebay backbone Internet address is 10.10.10.1 24 MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec, rely 255 255, load 1 255 Encapsulation ARPA, loopback not set, keepalive set (10 sec) Serial0 is up, line protocol is up Hardware is HD64570 Description duck to goose Internet address is 172.16.1.10 29 MTU 1500 bytes, BW 1544 Kbit, DLY...

Trouble Ticket 6 VLAN and Spanning Tree

Just as loops can occur in the upper layers because of mutual redistribution and improper filtering, they can also occur at Layer 2. Back in Chapters 6 and 7 I spent some time on the Spanning Tree Protocol (STP). STP assists with bridge switch loops and it is normally not the best practice to just turn it off. As a matter of fact, Cisco performs a per-VLAN STP. VLANs help you segment your broadcast domains and use a lesser number of routers while doing so. Howevec, the ideal design is stMn...

Example 21 show controllers on DCE End with serial 0 Up and Running

HD unit 0, idb 0xDFE7C, driver structure at 0xE52F8 buffer size 1524 HD unit 0, V.35 DCE cable, clockrate 64000 The shaded line emphasizes the V.35 DCE cable with a clock rate of 64000. The DCE end of a seria line always provides caking (timing synchronizafio no. Normally you rec eive the clockfrom the service provider, but in a lab s cenario a back-to-back 60- pin ser oal cattle is used (in which the DCE end requires the clock rate command). You can order these cables for your lab from such...

Example 1020 Memory Dump to TFTP

Sending 5, 100-byte ICMP Echos to 172.16.1.42, timeout is 2 seconds Success rate is 100 percent (5 5), round-trip min avg max 16 16 20 ms duck write core Remote host 0.0.0.0 172.16.1.42 Base name of core files to write duck-core writing uncompressed tftp 172.16.1.42 duck-core writing uncompressed tftp 172.16.1.42 duck-coreiomem The core dump crea ted two files on the TFTP server for the duck router Cisco is moving away from relying on writing an exception dump to an external TFTP FTP server. Wh...

Project DOTU

What about the undocumented stuff that people tell you about Where can you get more information on that For this, there is a Project DOTU Document the Undocumented at www.boerland.com dotu (see Figure 2-7). Project DOTU is a viable option however, I am not by any means sugge sting that you try all the undocumented commands in a production network. Take a look at the Boerland site and also go to Yahoo or Google sometime to search for cisco undocumented.

Example 433 IPX Trouble Ticket

IEEE 802.2 on Ethernet, Token Ring, and FDDI IEEE 802.2 SNAP on Ethernet, Token Ring, and FDDI Codes S - Static, P - Periodic, E - EIGRP, N - NLSP, Table ordering is based on routing and server info P 107 GWISE 346648E2.0000.0000.0001 P 26B GWISE TREE 346648E2.0000.0000.0001 P 278 GWISE TREE 346648E2.0000.0000.0001 Interface IPX Network Encapsulation Status Sending 5, 100-byte IPX Novell Echoes to 346648E2.0000 Success rate is 100 percent (5 5), round-trip min avg Maximum Time to Live 1 Verbose...

Figure 515 IEEE 8023 Ethernet with SNAP Header

IBtI BiM N IMtJKdWK Ur -lf t. . .i -iU lMl > i iri hPSC_ Lu - I-.-., v k.- -l- '.i l j. i J.'ii .1 L . 11. fW fSYSTPT E H i h. i I H ksK J M *LI iw nv-1 i rrrrrrrrrrr rwra wrrM vrw_ KM -p t . twS1 T-it fl L WtMS LMLcJ C+iJl L> .-.' 1- ilr h n> . ci& i - f. . . cw rpiw .- THI > - IBtI BiM N IMtJKdWK Ur -lf t. . .i -iU lMl > i iri hPSC_ Lu - I-.-., v k.- -l- '.i l j. i J.'ii .1 L . 11. fW fSYSTPT E H i h. i I H ksK J M i i l.'iti iHii fWTrnTTFT, i ni *LI iw nv-1 i rrrrrrrrrrr rwra...

Example 239 route print on hosta

0x1 MS TCP Loopback interface 0x2 44 45 53 54 42 00 NOC Extranet Access Adapter 0x4000004 00 10 4b a5 ae 50 FE575 Ethernet Adapter 192.168.1.0 255.255.255.0 192.168.1.11 255.255.255.255 192.168.1.255 255.255.255.255 224. 0.0.0 224. 0.0.0 Gateway 127 .0.0.1 192.168.1.11 127 .0.0.1 192.168.1.11 192 . 168.1.11 192.168.1.11 Example 2-40 and Example 2-41 display netstat and nbtstat options. Pick an option and try it ou from the command prompt to see the exact display.

Cisco Express Forwarding CEF

Tack is the C hapter 1n Shooting Trouble, the basios of routing and switching were covered. You reviewed how routers ooute (o the destination network address and that they buffer and switch packets from the inbound interface to the outbound interface within the router. Performance is definitely orfecteO by tue switchi ng type, but switchi ng types have certainly improved over the yea rs. Fast switching (ip route-caohe) hat been the def ault and avaiiable since the 10.x code. The router does a...

Example 423 show techsupport in an IPX Environment

version ------ running-config controllers stacks -------- interfaces ---- region -------- process memory process cpu buffers ------ Now tha t this chapter's IPX las scenari o is configured from the route r poihe of view, turn your attention to the following secti on, Protocols a red Pack gts. ot starts with a layered approa clo to the Novell NOS to review IPX concepts, symptoms, problems, and action plans. There gre more whlk-thtough scenarios and practical Trouble Tickets for you to explore,...

F ram e Re lay Add ress i ng

Frame Relay Layer 2 addresses are DLCIs. I mentioned previously that the WAN DLCIs are analgous to the LAN MACs. ARP is the method I discussed for mapping IP to MAC in the LAN chapters and RARP is just the opposite of mapping MAC to IP. Frame uses Inverse ARP. Routers learn remote P a ddresses to map to local DLCIs via Inverse ARP or static map statements as illustrated in Hgxre 8-9. Use the picture and steps covered in the next section to assist you with troubleshooting Frame Relay Inverse ARP...

Example 926 Debug PPP Negotiation

Interface IP-Address OK Method Status Protocol Loopback9 6.6.6.6 YES manual up up Serial0 192.168.9.17 YES manual up down Serial0 is up, line protocol is down Hardware is HD64570 MTU 1500 bytes, BW 64 Kbit, DLY 20000 usee, rely 255 255, load 1 255 Encapsulation PPP, loopbaek not set, keepalive set (10 see) LCP Listen Closed LEXCP, DECCP, OSICP, VINESCP, XNSCP, IPCP, CCP, CDPCP, BRIDGECP LLC2, ATCP, IPXCP, NBFCP, BACP r6 configure terminal r6(config) interface s0 Dee 21 08 20 40.411...

Example 108 Building a Layer 3 and Above Baseline from the heron

Tracing the route to kentnarrows (172.16.1.45) 1 duck (10.10.10.1) 208 msec 124 msec 56 msec 2 goose (172.16.1.9) 12 msec 12 msec 8 msec 3 kentnarrows (172.16.1.45) 12 msec * 8 msec heron trace knappsnarrows Tracing the route to knappsnarrows (172.16.2.45) 1 osprey (172.16.2.18) 0 msec 4 msec 0 msec 2 knappsnarrows (172.16.2.45) 12 msec 4 msec 8 msec heron show ip interface brief IP-Address 10.10.10.2 172.16.2.2 172.16.2.9 172.16.2.17 OK Method Status YES manual up YES manual up YES manual up...

Example 77 CDt Lesting

Capability Codes R - Router, T - Trans Bridge, B - Source Route Bridge S - Switch, H - Host, I - IGMP, r - Repeater 005352782(sw2900)Fas 0 11 r2 Fas 0 12 Capability Platform Port ID T S WS-C2 9 0 0 1 1 sw2900> (enable) show cdp neighbors Capability Codes R - Router, T - Trans Bridge, B - Source Route Bridge S - Switch, H - Host, I - IGMP, r - Repeater Because the Physical and Data Link Layers are up and running, take a closer look at the chapter scenario. Using the same physical layout, you...

Example 104 Building a Layer 3 and Above Baseline from the duck Rout

Sending 5, 100-byte ICMP Echos to 172.16.1.9, timeout is 2 seconds Success rate is 100 percent (5 5), round-trip min avg max 16 16 16 ms duck ping swan Sending 5, 100-byte ICMP Echos to 172.16.3.9, timeout is 2 seconds Success rate is 100 percent (5 5), round-trip min avg max 4 5 8 ms duck ping kentnarrows Sending 5, 100-byte ICMP Echos to 172.16.1.45, timeout is 2 seconds Success rate is 100 percent (5 5), round-trip min avg max 16 18 20 ms duck ping chesapeakebay Sending 5, 100-byte ICMP...

Example 334 Chapter 3 Networks

Codes C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default U - per-user static route, o - ODR Gateway of last resort is not set C 192.168.4.0 24 is directly connected, Ethernet1 R 192.168.5.0 24 120 1 via 192.168.4.2, 00 00...

Example 534 hostc Cable Disconnect

FastEthernet2 0 is up, line protocol is up Hardware is AmdFE, address is 00b0.6481.e300 (bia 00b0.6481.e300) Description r3fa2 0 to hostc Internet address is 192.168.5.97 28 MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec, rely 255 255, load 1 255 Encapsulation ARPA, loopback not set, keepalive set (10 sec) Full-duplex, 10 0Mb s, 100BaseTX FX ARP type ARPA, ARP Timeout 04 00 00 r3 show running-config interface fastethernet2 0 Current configuration interface FastEthernet2 0 ip address 192.168.5.97...

Example 240 netstat Options

Displays protocol statistics and current TCP IP network connections. NETSTAT -a -e -n -s -p proto -r interval -a Displays all connections and listening ports. -e Displays Ethernet statistics. This may be combined with the -s -n Displays addresses and port numbers in numerical form. -p proto Shows connections for the protocol specified by proto proto may be TCP or UDP. If used with the -s option to display per-protocol statistics, proto may be TCP, UDP, or IP. -r Displays the routing table. -s...

Example 78 By Default All Ports Are in VLAN1 1 Broadcast Domain

these are the default or reserved vlans MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2 1 enet 100001 1500 - - - - - 1002 1003 1002 fddi 101002 1500 - - - - - 1 1003 1003 tr 101003 1500 1005 0 - - srb 1 1002 Example 7-8 displays a coupl e of sections. The fi rst section is a qu ick statu s of th e VLANs and the associated ports on the 3512XL. The second section displays the default VLANs, including the maximum transmission unit (MTU) size and other Token Ring and FDDI parameters. The...

Example 58 Missing Network 10220

192.168.5.0 24 is variably subnetted, 7 subnets, 2 masks D 192.168.5.96 28 90 2172416 via 192.168.5.82, 00 05 10, Seriall D 192.168.5.64 28 90 40537600 via 192.168.5.34, 00 15 18, Ethernet1 C 192.168.5.80 28 is directly connected, Serial1 C 192.168.5.32 28 is directly connected, Ethernet1 D 192.168.5.48 28 90 40537600 via 192.168.5.34, 00 15 18, Ethernet1 D 192.168.5.0 24 is a summary, 00 23 00, Null0 C 192.168.5.16 28 is directly connected, Ethernet0 10.0.0.0 8 is variably subnetted, 2...

Example 324 Testing and Analyzing Hostto Host Connectivity from

Ethernet adapter Local Area Connection Pinging 192.168.1.11 with 32 bytes of data Reply from 192.168.1.11 bytes 32 time< 10ms Reply from 192.168.1.11 bytes 32 time< 10ms Reply from 192.168.1.11 bytes 32 time< 10ms Reply from 192.168.1.11 bytes 32 time< 10ms Packets Sent 4, Received 4, Lost Approximate round trip times in milli-seconds Minimum 0ms, Maximum 0ms, Average Pinging 192.168.1.1 with 32 bytes of data Reply from 192.168.1.1 bytes 32 time< 10ms Reply from 192.168.1.1 bytes 32...

Example 416 r2 IPX Configuration

R2(config) ipx routing r2(config) interface ethernet 0 r2(config-if) description r2e0 to r1e1 r2(config-if) ipx network 532 r2(config-if) no ip address r2(config-if) no shut r2(config-if) interface serial 1 r2(config-if) description r2s1 to r3s0 2 r2(config-if) ipx network 548 r2(config-if) no ip address r2(config-if) bandwidth 64 r2(config-if) no shut r2(config-if) interface serial 0 r2(config-if) description r2s0 to r3s0 1 r2(config-if) ipx network 564 r2(config-if) no ip address r2...

Example 936 debug isdn q921 Command

Dee 22 04 06 03.183 ISDN BR0 TX -> RRp sapi 0 tei 108 nr 1 Dee 22 04 06 03.211 ISDN BR0 RX < - RRf sapi 0 tei 108 nr 1 Dee 22 04 06 03.351 ISDN BR0 TX -> RRp sapi 0 tei 109 nr 1 Dee 22 04 06 03.375 ISDN BR0 RX < - RRf sapi 0 tei 109 nr 1 r5 ping 192.168.9.21 Sending 5, 100-byte ICMP Eehos to 192.168.9.21, timeout is 2 seeonds . Sueeess rate is 80 pereent (4 5), round-trip min avg max 36 36 36 ms Dee 22 04 06 15.787 ISDN BR0 TX -> INFOe sapi 0 tei 108 ns 1 nr 1 i 0x08 0104 0504 02 8 8...

Example 914 Encapsulation Mismatches

R6(config-if) encap frame r6(config-i_f ) no shut Dec 21 05 14 11.447 LINK-3-UPDOWN Interface SerialO, changed state to up Dec 21 05 14 22.479 LINEPROTO-5-UPDOWN Line protocol on Interface SerialO, chan Dec 21 05 14 52.479 LINEPROTO-5-UPDOWN Line protocol on Interface SerialO, chan T tate to down r6 (config-if) end Dec 21 05 15 11.515 SYS-5-CONFIG_I Configured from console by console r6 show interfaces s0 Serial0 is up, line protocol is down Hardware is HD64570 MTU 1500 bytes, BW 64 Kbit, DLY...

Example 233 debsg ip packet

IP packet debugging is on r2 ping 192.168.1.1 Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds Success rate is 100 percent (5 5), round-trip min avg max 36 36 40 ms r2 12 54 13 12 54 13 12 54 13 12 54 13 12 54 13 12 54 13 Although Example 2-34 is even more stressful, it provides detailed output. First I issue a show debsg -o verify that no debug comm ands are currently running. Then I issue the debsg ip packe detail command. Note the shaded area showing the Echo Reply ICMP...

Example 849 Configuring Static Maps for the Spoke Routers

Serial0.101 (up) ip 192.168.8.1 dlci 101(0x65,0x1850), dynamic, broadcast,, status defined, active r2 configure terminal r2(config) interface s0.101 r2(config-subif) frame map ip 192.168.8.1 101 broadcast r2(config-subif) frame map ip 192.168.8.4 101 broadcast remove any extraneous dynamic mappings r2 copy running-config startup-config r4 configure terminal r4 (config) interface s0 0.101 r4(config-subif) frame map ip 192.168.8.1 101 broadcast r4 (config-subif) frame map ip 192.168.8.2 101...

Cisco Show Contrnuands

Disco show command s give a sn apshot of whet is eecurting to monitor status , detect neighbors, sp perform ance issues, a nd isolase proele ms. This discussion coeees severa I sh ow commands to prepa you foe tho chapter pra ctica I e xeecise, various Trouble Tic kets rheoughout the book , and eor your overall real-world troubleshooting needs i Feel yree to us, the qu htion maek (o. tor help oe more wetaiil. Be aware toa t shove yield s different results according to whether you are in user...

Figure 519 Ethernet Keepalives

I ji F7TFTTFFFFIT rtHTiDFMM ir . .1TT1- IL U K .31H IT HE. urELi7L-J7d. IIZ4 J LJ 1 I ji F7TFTTFFFFIT rtHTiDFMM IlJfF BiJJO r. .i S J .i 1-j - vu ._ll IWHiklUI H KUF r' i i UMHI Fj UTI ei3ff li-jju *5-500 Lrjlf KjapJy hnLpt lutgoc* Tint IrtTB l J SrijJr hmict ir . .1TT1- IL U K .31H IT LLlL LL-J-JJ .Li L'L' III L.j Uj D'J HLl L'.- -Jd ijL'L- J O. Ml OODOWLO 91 3D 33 3D 3 33 3 3D 33 30 D3 0 33 3D OfOOWJO 33 00 05 1 00 0 00 Of 30 00 f 00 30 nntmg AD o Su go to b 3d 40 bb 03 gg Db fcfifi AG* * AM...

Figure 413 Analyzing the IPX Client Startup

- dm t 4dt i Jt*rt4> Mt*riah td aye MPet o*pl CMn + 14 H 'if Mcryfca Dnfrf leak Dtdbuu- -r.- r-ri hbSc M4 iatBlilSSCft lfcctp L i HOtBlBlfa E i fanOCIDfTO 053073070076 h.o.a.n ociD73D'pP4 ij e e 74 244 fl l 1 -- jcj .-a l sit i r lifl> l lf 14 htfc-JffMFT hET 4 4 FBTTBIPT mr Sit- J1nP. L L L IT HLT 3 I r. r FTFFFF77rF HEI HET urr 0 FFFFFr FTrFr i4 fffftppfffi g -ffj'jtfffffff c fvfvf rrrrHF 4l4 fffffffitff FFFF'FFTfE FF 1 if- ttkffffff f tlmlhi lit fff tftiflt tit ff'FTFFlrFFrF a fffff...

Example 25 show ip interface brief

192 . 168.3.1 192 . 168.2.2 unassigned OK Method Status YES manual up YES manual up YES unset administratively down down Administratively down always indicates that you need to perform the no shut command on the interface in Example 2-5 I am really not using s1, however, so it is not a worry here. In general, t Status co lumn indicates thp La yer 1 status, and the Protocol column indicate s the Layer 2 status. Two other interface common ds are show interfaces ethernetO and show ip interface...

Figure 104 Chapter 10 Discovery Baseline

B f2 Y2l4j Pl fl l '(TfUTft HHT 1*1 ItH FAM UphiJR JK onNg rflflHHr (HfiTfl N ibDminc rh .np nUxny g gw. .irri gwan r 3 svnich i tv-ul-'iJ ndust' iht msnfipmieiu ip adcte Sift nynau. and tl v 5hi 9 gll bs yun mm ' tp daia. 11 you u s ui-'ii iPy Di ji'ollHr iHjlLd > o i > yiH c. .1' romum IIidhu nLku I h nj i vi it Ii> land r 3 svnich i tv-ul-'iJ ndust' iht msnfipmieiu ip adcte Sift nynau. and tl v 5hi 9 gll bs yun mm ' tp daia. 11 you u s ui-'ii iPy Di ji'ollHr iHjlLd > o i > yiH c....

Figure 332 Network Bit Boundaries

No-ihom H gion Vtirtt iil 198 160.& .3& 27 E SWi I RClpu 192.168.5 64137 The practical addressing examples certainly bring out the mathematics involved, but decreasing the impact on networks attached to the routers and ultimately the hosts connected to various switches is the goal. I address that topic a bit more in Part III, Supporting Ethernet, Switches, and VLANs. Now I want to quickly review routing protocols so that you can shoot their troubles throughout the book.

Figure 416 8022 Server

E3 T rJSa cjffeiv l-i ot r-sk Cul wr vhdcm e oooo eo c4 DIWjWL M (.( S T j J-Dti 'it 5 Li. FTT7FFFFFFT olootfj iccc f 0c s 30im74 OLOor-rcjccci III 1U 3J II 43 -. 1 I L . M J hrpl TlrenLpt V. & I5I TvEm-OiL L llMiva Irtpjy n nip* 0 TT*7jOK OOL r& GYj * LD . 'if J . i i'nnj r k cplp > 3 DJb Fei ein D m-sion rr- MEf KJUK- OEOircher < ir < -. cf' jtiT IHM-niyucTF zi - n wir TKLI lit fflfflBS Fu TI - -. 5 4 i adbcsbttt ise-inee_ ii 1 n-n ib - dicm T F'. THKK 511 tr f6CST0 V 3II Kin LUi_...

Next uses Example Qr21 to answer the question about the swantogoose trace Example 1021 swantogoose Trace

Tracing the route to goose (172.16.1.9) 1 duck (172.16.1.17) 4 msec 4 msec 4 msec 2 goose (172.16.1.9) 12 msec * 8 msec Internet Address 172.16.1.18 29, Area 1 Process ID 1, Router ID 172.16.3.9, Network Type POINT_TO_POINT, Cost 64 Transmit Delay is 1 sec, State POINT_TO_POINT, Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5 Hello due in 00 00 03 Neighbor Count is 1, Adjacent neighbor count is 1 Adjacent with neighbor 172.16.1.1 Suppress...

Example 106 Building a Layer 3 and Above Baseline from the duck Rout Protocols

Sending updates every 30 seconds, next due in 12 seconds Invalid after 180 seconds, hold down 180, flushed after 240 Default version control send version 2, receive version 2 Codes C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area type 1, N2 - OSPF NSSA external type 2 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default R 172.16.1.40 29 120 1 via 172.16.1.9,...

Example 529 ARPA Encapsulation

R1(config-if) ipx encap arpa r1 (config-if) end r1 show ipx route Sending 5, 100-byte ICMP Echos to 192.168.5.20, timeout is 2 seconds Success rate is 100 percent (5 5), round-trip min avg max 1 2 4 ms r1 copy running-config startup-config It is always a good pracdce to show your interfaces as in the original Trouble Ticket for troubleshooting. If you were to issue the show ipx interface brief command, for instance, you would quickly see t he encapsulation an d status IPX network 5 16 (wherea s...

Example 638 We Are the Root of the Spanning Tree

Spanning tree 1 is executing the IEEE compatible Spanning Tree protocol Bridge Identifier has priority 100, address 00d0.7968.8480 Configured hello time 2, max age 20, forward delay 15 We are the root of the spanning tree Topology change flag not set, detected flag not set, changes 9 Times hold 1, topology change 35, notification 2 hello 2, max age 20, forward delay 15 Timers hello 1, topology change 0, notification 0 Interface Fa0 1 (port 13) in Spanning tree 1 is FORWARDING Port path cost 19,...

Example 241 nbtstat Options

Displays protocol statistics and current TCP IP connections using NBT (NetBIOS over TCP IP). NBTSTAT -a RemoteName -A IP address -c -n -r -If -RR -s -S interval -a (adapter status) Lists the remote machine's name table given its name -A (Adapter status) Lists the remote machine's name table given its Lists NBT's cache of remote machine names and their IP Lists names resolved by broadcast and via WINS Purges and reloads the remote cache name table Lists sessions table with the destination IP...

Figure 62 Accessing 1900 Through a Web Browser

-* j 3 jtitw* j - - J B ' J ta_ IH11 S'l I r 11 i i'MMfl J J taidd J4WI'> jB-faiflriBiJVUd'ifrll nftiitiMBifti rVpfjlV l* t BeW FrtURF t v flv* jtfTCff LGtfl UfAilj Hav n I RWMI 10 (fad prawn F-ritneF AD EiT.'-mlp rryr,C ' ilyi'-M-r, Inr r i t I t 1 1 I 1 t s t i i i i t t r , r. ' 1 .JULJLJiJL JL Ji. jL JL Je. J*. JL JL Jt. JL JL Ji JLJL JL Jl.JL JL -' ULJ Connecting iv iCitco lki > Resources CorrF r-. . - LioMTitoiSdir oic it p hi-jji iT ff* IktfI m h tormrririMG Name the sw itch sw1900,...

Figure 213 Sniffer Pro Interface

I E E*l 1** FfH IWi 'IP* Hfftfc* Utft tfc & ft ub ft 6b WfciHM Vfrmik I M-Pfet KM on an & at & b m D jr fr & a ii - i Q U 4 JL i S h 1 J ft ffl ft m Eft ffl tfc & ft ub ft 6b WfciHM Vfrmik I M-Pfet KM on an & at & b m D jr fr & a ii - i Q U 4 JL i S h 1 J