首先檢查DLSw+定義的兩個對等peers是否連通Router#show dlsw peersPeers: state pkts-rx pkts-tx type drops ckts TCP uptime TCP 17.18.15.1 CONNECT 16080 8400 conf 0 0 0 00.03.27 TCP 1.1.12.1 DISCONN 0 0 conf 0 0 0 00.00.00 Peers --- 對應"dlsw remote-peer"定義的對等peers IP地址.state --- 表示與對等peers的連接狀態.其中:CONNECT表示對等peers已建立. CAP_EXG表示與遠程peer交換性能信息. WAIT_RD是建立peer連接的最后一步,等待遠程peer應答信息. DISCONN表示與對等peers沒有建立連接,請參閱TCP/IP Troubleshooting檢查TCP連接故障. WAN_BUSY表示TCP傳輸隊列已滿,不能傳輸數據. 若對等peers已建立連接,請查看性能交換信息. Router#show dlsw capabilities DLSw:Capabilities for peer 172.18.15.166 vendor id (OUI) : '00C' (cisco) version number : 1 release number : 0 init pacing window : 20 unsupported saps : none num of tcp sessions :1 loop prevent support : no icanreach mac-exclusive : no icanreach netbios-excl. : no reachable mac addresses : none reachable netbios names : none cisco version number : 1 peer group number : 0 border peer capable : no peer cost : 3 biu-segment configured : no local-ack configured: yes priority configured: no version string : Cisco Internetwork Operating System Software IOS (tm) GS Software (GS7-K-M), Experimental Version11.1(10956) [sbales 139] Copyright (c) 1986-1996 by cisco Systems, Inc. Compiled Thu 30-May-96 09:12 by sbales8
交換過性能信息后,就要尋找目的MAC地址了,顯示出所有的路由器能夠到達的MAC地址(本地和遠端)Router#show dlsw reachabilityDLSw MAC address reachability cache listMac Addr status Loc. peer/port rif0000.810f.6500 FOUND LOCAL TBridge-001 --no rif--0006.e918.7b70 FOUND LOCAL TBridge-001 --no rif--1000.5ae3.03f7 FOUND LOCAL TBridge-001 --no rif--7500.9221.0000 FOUND REMOTE 16.201.30.250(2065) max-lf(4472)7500.9221.0000 SEARCHING LOCALDLSw NetBIOS Name reachability cache listNetBIOS Name status Loc. peer/port rifSXUSER2 FOUND LOCAL TBridge-001 --no rif-- 若本地MAC地址和目的MAC地址狀態均是FOUND,請參看第五步. SEARCHING表示在尋找本地MAC地址或目的MAC地址.此時用show interface serial命令查看該口連接的PU狀態. NOT_FOUND表示沒有收到對PU輪詢的應答. VERIFY表示確認緩存內信息.
在SERACHING本地MAC地址或目的MAC地址.Router#show interface serial 0Serial1 is up, line protocol is up Hardware is HD64570 MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation SDLC, loopback not set Router link station role: SECONDARY (DTE) Router link station metrics: group poll not enabled poll-wait 40000 seconds N1 (max frame size) 12016 bits modulo 8 sdlc vmac: 4000.5555.00-- sdlc addr C1 state is DISCONNECT cls_state is CLS_STN_CLOSED VS 0, VR 0, Remote VR 0, Current retransmit count 0 Hold queue: 0/200 IFRAMEs 0/0 TESTs 0/0 XIDs 0/0, DMs 0/0 FRMRs 0/0 RNRs 0/0 SNRMs 0/0 DISC/RDs 0/0 REJs 0/0 chain: C1/C1 Last input never, output never, output hang never Last clearing of "show interface" counters never Queueing strategy: fifo Output queue 0/40, 0 drops; input queue 0/75, 0 drops 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 19 interface resets 0 output buffer failures, 0 output buffers swapped out 6 carrier transitions DCD=up DSR=up DTR=up RTS=up CTS=up說明:Encapsulation SDLC---串口打包方式為SDLC.Router link station role: SECONDARY (DTE)---目前端口作secondary,由"sdlc role"命令設置.sdlc vmac: 4000.5555.00-- ---由"sdlc vmac"設置的MAC地址.注重它的最后兩位是留給PU地址的. 在本例中,端口MAC地址是4000.5555.00C1.sdlc addr C1 state is DISCONNECT ---該端口連接PU C1當前狀態.有以下幾種狀態: DISCONNECT -與PU未連接,次站沒有發TEST或XID幀請求建立連接.請檢查下面連接的PU是否啟動 SNA進程,若是用DCE線纜連接PU請檢查線纜是否正確,若是MODEM連接到遠端PU上,請 檢查MODEM狀態燈. DISCSENT-路由器發送斷開請求(DISC)給次站,正在等待次站應答. SNRMSENT-路由器發送連接請求(SNRM)給次站,正在等待次站應答.這個狀態出現在作主站的路由器 上.若是在作主站路由器上出現SNRMSENT狀態,檢查下端PU是否開機,路由器端口與PU上 SDLC口連接的MODEM是否已通(MODEM的DTR,CD,RXD,TXD燈應常亮).一句話,出現SNRMSENT 狀態是路由器端口與它下端PU之間問題. CONNECT-PU連接正常.路由器和它連接的次站正常連接. THEMBUSY-PU發送RNR幀.次站告訴路由器暫時不能接收任何信息. USBUSY-路由器發送RNR幀.路由器告訴次站暫時不能接收任何信息.路由器已接收到次站對SNRM幀的 應答幀UA,試圖建立SDLC或LLC2會話. BOTHBUSY-雙方均發送RNR幀.告訴對方暫時不能接收任何信息. ERROR-違反SDLC協議.路由器正在等待次站應答. SNRMSEEN-路由器作次站,接收到SNRM幀. 當雙方MAC地址都找到后,開始建立鏈路了.Router#show dlsw curcuitIndex local addr(lsap) remote addr(dsap) state1818740 1000.5ae3.430d(04) 4000.5555.00c1(04) CONNECTED用"show interface serial"查看PU狀態應是"CONNECT". 我們也可以用"debug dlsw"獲得更多的信息幫助解決網絡中出現的問題.你可以記錄下debug傳輸信息提供給你的代理.
問題:遠端沒有到達本端機器.遠端peer的IP地址是172.18.16.156.
建議: 檢查show dlsw peer輸出,我們看到:Peers: state pkts-rx pkts-tx type drops ckts TCP uptime TCP 172.18.16.156 DISCONN 0 0 conf 0 0 0 -- 用debug dlsw peers命令決定問題: DLSw:action_a() attempting to connect peer 172.18.15.156(2065) DLSw:action_a(): Write pipe opened for peer172.18.15.156(2065) DLSw:peer 172.18.15.156(2065), old state DISCONN, new stateWAIT_RD DLSw:dlsw_tcpd_fini() for peer 172.18.15.156(2065) DLSw:tcp fini closing connection for peer 172.18.15.156(2065) DLSw:action_d(): for peer 172.18.15.156(2065) DLSw:peer 172.18.15.156(2065), old state WAIT_RD, new stateDISCONN DLSw:Not promiscuous - Rej conn from 172.18.15.166(2065) 診斷:試著打開peer172.18.15.156,但不成功.DLSw+接收到來自172.18.15.166的打開請求,但是DLSw+拒絕它,因為這個peer沒有定義.由此我們可以判定定義peer地址不正確.該peer地址為172.18.15.166就連通了.
Peers: state pkts-rx pkts-tx type drops ckts TCP uptime TCP 172.18.16.166 CONNECT 2 2 conf 0 0 0 00:224:27 問題:SDLC設備不能連接到主機.Milan是連接SDLC設備的遠端peer.
建議:
用show dlsw peer命令顯示peer是up的.milan#sh dlsw peersPeers: state pkts-rx pkts-tx type drops ckts TCP uptime TCP 172.18.16.166 CONNECT 2 2 conf 0 0 0 00:224:27 Show dlsw circuits沒有鏈路產生.milan#show dlsw circuitsmilan# Show interface 命令顯示SDLC 地址狀態是USBUSY,這表示我們已經成功的連接到下端路由器上.Router#show interface serial 3/7Serial1 is up, line protocol is up Hardware is HD64570 MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation SDLC, loopback not set Router link station role: SECONDARY (DTE) Router link station metrics: group poll not enabled poll-wait 40000 seconds N1 (max frame size) 12016 bits modulo 8 sdlc vmac: 4000.5555.00-- sdlc addr C1 state is USBUSY cls_state is CLS_STN_CLOSED VS 0, VR 0, Remote VR 0, Current retransmit count 0 Hold queue: 0/200 IFRAMEs 0/0 TESTs 0/0 XIDs 0/0, DMs 0/1 FRMRs 20/20 RNRs 620/0 SNRMs 3/0 DISC/RDs 1/0 REJs 0/0 chain: C1/C1 sdlc addr C2 state is USBUSY cls_state is CLS_STN_CLOSED VS 0, VR 0, Remote VR 0, Current retransmit count 0 Hold queue: 0/200 IFRAMEs 0/0 TESTs 0/0 XIDs 0/0, DMs 0/0 FRMRs 0/0 RNRs 730/0 SNRMs 7/0 DISC/RDs 0/0 REJs 0/0 chain: C2/C2 Last input never, output never, output hang never Last clearing of "show interface" counters never Queueing strategy: fifo Output queue 0/40, 0 drops; input queue 0/75, 0 drops 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 19 interface resets 0 output buffer failures, 0 output buffers swapped out 6 carrier transitions DCD=up DSR=up DTR=up RTS=down CTS=up 檢查配置到達的目的MAC地址是4001.3745.1088.milan#write terminal ... ! interface Serial3/7 description sdlc config to MVS mtu 4400 no ip address encapsulation sdlc no keepalive clockrate 9600 sdlc role primary sdlc vmac 4000.1234.5600 sdlc N1 12016 sdlc address C1 sdlc xid C1 05DCCCC1 sdlc partner 4001.3745.1088 C1 sdlc address C2 sdlc xid C2 05DCCCC2 sdlc partner 4001.3745.1088 C2 sdlc dlsw C1 C2 ! ... 用show dlsw reachability mac-address命令發現MAC地址沒找到:Router#show dlsw reachability mac-address 4001.3745.1088DLSw MAC address reachability cache listMac Addr status Loc. peer/port rif0000.810f.6500 SEARCHING LOCAL 在FEP連接的路由器一端,用show dlsw reachability mac-address命令發現MAC地址沒找到:Router#show dlsw reachability mac-address 4001.3745.1088DLSw MAC address reachability cache listMac Addr status Loc. peer/port rif0000.810f.6500 SEARCHING REMOTE 顯示show source-bridge,沒有令牌環口走SRB: bolzano#showsource-bridge Global RSRB Parameters: TCP Queue Length maximum: 100 Ring Group 100: No TCP peername set, TCP transport disabled Maximum output TCP queue length, per peer: 100 Rings: 診斷:加上"source-bridge"命令,連接正常了.
確定stun peer連通rick#sh stun peerThis peer: 10.17.5.2 *Serial2 (group 1 [basic]) state rx_pkts tx_pkts dropsall TCP 10.17.5.2 open 5729 5718 0若狀態不是open,應是TCP/IP連接問題,請參閱TCP/IP Troubleshooting. 用show interface確定路由器和主機之間serial isup,line protocol is up. 若是"down/down"請檢查線纜,正確使用DTE和DCECable. 若serial一會兒up,一會兒down,不斷反復.你的主機可能配置成半雙工的而不是全雙工的,使用MSD時路由器沒有設成半雙工的.
假如serail is up,但line protocol is down.最大可能是一端是NRZ編碼,另一端是NRZI編碼.用"nrzi-encoding"命令設置NRZI編碼.設定編碼方式與大機相同.
一旦line操作正常,最常出現的問題就是SDLC地址不對.SDLC地址要與主機PU地址一致.假如收到下面信息就表示SDLC地址與主機PU地址不匹配. Received data from wrong address! Expect for outputaddress C2/Got C4. Debug sdlc 當工作正常時,debug輸出信息順序: SDLC Primary : DISCONNECT-->SDLC PRI WAIT-->NET UP WAIT-->CONNECT SDLC Secondary : DISCONNECT-->NET UP WAIT-->SDLC SECWAIT-->CONNECT
CIPTroubleshooting
用"show interface channel 3/0"顯示物理通道端口狀態.若channel3/0 is up,line protocol is up.表示物理接口連接正常.否則請檢查物理接口,線纜,bypass等是否連接正確.Router#sh int c3/0Channel3/0 is up, line protocol is up Hardware is cyBus Channel Interface MTU 4096 bytes, BW 36864 Kbit, DLY 270 usec, rely 255/255, load 1/255 Encapsulation CHANNEL, loopback not set PCA adapter card Data transfer rate 4.5 Mbytes, number of subchannels 1 Last input never, output never, output hang never Last clearing of "show interface" counters never Output queue 0/40, 0 drops; input queue 0/75, 0 drops 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 1677 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 1595 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 5 interface resets, 0 restarts 0 output buffer failures, 0 output buffers swapped out 用"show interface channel 3/2"顯示邏輯通道口狀態.Router#sh int ch3/2Channel3/2 is up, line protocol is up Hardware is cyBus Channel Interface MTU 4472 bytes, BW 98304 Kbit, DLY 100 usec, rely 255/255, load 1/255 Encapsulation CHANNEL, loopback not set Virtual interface Last input 0:01:36, output 0:01:26, output hang never Last clearing of "show interface" counters never Output queue 0/40, 0 drops; input queue 0/75, 0 drops 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 19090 packets input, 686391 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 20314 packets output, 754513 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets, 0 restarts 0 output buffer failures, 0 output buffers swapped out 用"show ext ch 3/0 csna oper"顯示CSNA通道連接設備狀態."stat"替代"oper"獲得CSNA通道連接設備的統計值.確認CSNA通道連接設備狀態為"setupComplet".Router#sh ext c3/0 csna Path Dv maxpiu time-delay length-delayCSNA 0100 E1 20470 10 20470Router#sh ext c3/0 csna oper Path Dv Status SlowDown maxpiu time-delay length-delayCSNA 0100 E1 setupComplet off 20470 10 20470 用"show ext ch 3/2 conn llc"命令確定SAPs值和CIP上打開的連接.確認定義在XCA中的正確的SAP值在CIP internal Token Ring LAN adapter中已打開.SHANXI2#sh ext c3/2 conn llc LAN Token 0 Adapter 1 5808.0100.0000 No SAPs open on this interface Total : SAPs opened = 0 Connections active = 0 假如CSNA通道連接設備狀態是"setupComplet",正確的SAP值(i.e.,SAP 08)打開在正確的CIP internalMAC adapter上,進入第七步.否則,問題可能是PATH/DEVICE或XCA Major Node.請檢查通道地址定義是否正確.若PATH/DEVICE正確,再在主機上"v net,act,id="命令確認XCA Major Node激活.Router#sh ext c3/0 csna oper Path Dv Status SlowDown maxpiu time-delay length-delayCSNA 0100 E1 Close off 20470 10 20470 用"debug source-bridge"命令確定是否產生探測幀.假如確定以CIPinternal MAC地址為目的的探測幀被接收到, 請打開"debugchannel vlan".
用"show ext ch 3/2 lan"命令顯示CIP internal MAC adapters.核實CIP internal MAC adapter被CIP microcode確認.router#debug channel vlanrouter#show ext ch 3/2 lanLan TokenRing 0 source-bridge 1000 1 100 Adapno Mac Address Name Vcnum 0 4000.1234.0001 544 0041 ACK ... ... ... ...... INU 假如CIP internal MAC adapters沒有收到CIP的應答,(在"showext ch 3/2 lan"顯示不是ACK而是CRE或PNDIND),表明CIPmicrocode沒有承認CIP adapter配置命令.在這種情況下,RP不發送探測幀給CIP.
假如CIP internal MAC adapters已經接收到CIP的應答,用"showext ch 3/2 llc stat 4000.0008.0000",4000.0008.0000是CIP的internalMAC address,檢查是否收到CIP MAC adapter的檢測命令和應答.