Avaya 5000 Series Troubleshooting Manual
  1. Manuals
  2. Brands
  3. Avaya Manuals
  4. Switch
  5. 5000 Series
  6. Troubleshooting manual

Avaya 5000 Series Troubleshooting Manual

Ethernet routing switch
Hide thumbs Also See for 5000 Series:
Table of Contents

Advertisement

Quick Links

Download this manual
Troubleshooting Avaya Ethernet Routing
Switch 5000 Series
Release 6.6
NN47200-700
Issue 04.01
December 2013

Advertisement

Table of Contents
loading

Related Manuals for Avaya 5000 Series

Summary of Contents for Avaya 5000 Series

  • Page 1 Troubleshooting Avaya Ethernet Routing Switch 5000 Series Release 6.6 NN47200-700 Issue 04.01 December 2013...
  • Page 2 WEBSITE, HTTP://SUPPORT.AVAYA.COM/LICENSEINFO written consent of Avaya can be a criminal, as well as a civil offense SUCH SUCCESSOR SITE AS DESIGNATED BY AVAYA, ARE under the applicable law. APPLICABLE TO ANYONE WHO DOWNLOADS, USES AND/OR INSTALLS AVAYA SOFTWARE, PURCHASED FROM AVAYA INC.,...
  • Page 3 Documentation, Hosted Service(s) and Product(s) should be construed as granting, by implication, estoppel, or otherwise, any license or right in and to the Marks without the express written permission of Avaya or the applicable third party. Avaya is a registered trademark of Avaya Inc.
  • Page 4 Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 5: Table Of Contents

    Route Tracing............................19 Stack Loopback Testing..........................19 Time Domain Reflectometer........................19 System Logs............................. 20 Auto Unit Replacement..........................20 Avaya Knowledge and Solution Engine....................20 Chapter 5: General diagnostic tools................. ACLI command modes..........................21 Chapter 6: Initial troubleshooting..................Gather information............................ 23 Chapter 7: Emergency recovery trees................
  • Page 6 Ensuring power cord is installed....................... 45 Observing error report on console....................46 Reloading agent code........................46 Returning unit for repair........................46 Check cables............................. 47 Task flow: Check cables........................47 Reviewing the Getting Started document..................47 Check fiber port............................48 Check port..............................48 Task flow: Check port........................
  • Page 7 Configure switch..........................88 Configured MAC is not authenticating...................... 92 Work flow: Configured MAC is not authenticating................93 Configure the switch......................... 93 NEAP RADIUS MAC not authenticating....................98 Work flow: NEAP RADIUS MAC not authenticating................. 98 Configure switch..........................99 RADIUS server configuration error....................102 NEAP MHSA MAC is not authenticating....................
  • Page 8 Work flow: OSPF route is not installed in routing table..............175 Confirm Equal Cost Multi-Path maximum paths................176 Advertise external route........................178 RIP packets are exchanged between devices but no routes are learned..........179 Work flow: RIP packets are exchanged between devices but no routes are learned...... 179 Set interface.............................

  • Page 9: Chapter 1: Introduction

    Certain protocols and tools are tailored for troubleshooting specific Ethernet Routing Switch 5000 Series network topologies. Other tools are more general in their application and can be used to diagnose and monitor ingress and egress traffic. Troubleshooting...

  • Page 10: Related Resources

    Avaya Mentor videos provide technical content on how to install, configure, and troubleshoot Avaya products. About this task Videos are available on the Avaya Support website, listed under the video document type, and on the Avaya-run channel on YouTube. • To find videos on the Avaya Support website, go to http://support.avaya.com, select the product name, and check the videos checkbox to see a list of available videos.

  • Page 11: Support

    Support Support Visit the Avaya Support website at http://support.avaya.com for the most up-to-date documentation, product notices, and knowledge articles. You can also search for release notes, downloads, and resolutions to issues. Use the online service request system to create a service request. Chat with live agents to get answers to questions, or request an agent to connect you to a support team if an issue requires additional expertise.
  • Page 12 Introduction Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 13: Chapter 2: New In This Release

    Chapter 2: New in this release There is no new content in Troubleshooting the Avaya Ethernet Routing Switch 5000 Series, NN47200-700 for Release 6.6. Troubleshooting December 2013...
  • Page 14 New in this release Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 15: Chapter 3: Troubleshooting Planning

    • plan effective troubleshooting Become familiar with the technical documentation suite: Know where to get information when you need it; use the Documentation Reference for Avaya Ethernet Routing Switch 5000 Series, NN47200–103 to familiarize yourself with the documentation set. Ensure correct system installation and maintenance: Make sure your system is properly installed and maintained so that it operates as expected.
  • Page 16 • Use a baseline analysis as an important indicator of overall network health. You can expedite network problem isolation when you compare a baseline view of network traffic with network traffic data captured during troubleshooting. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 17: Chapter 4: Troubleshooting Tools

    Chapter 4: Troubleshooting tools These are the available troubleshooting tools and their applications. Port Mirroring ERS 5600 Series switches have a port mirroring feature that helps you to monitor and analyze network traffic. The port mirroring feature supports both ingress (incoming traffic) and egress (outgoing traffic) port mirroring.

  • Page 18: Port Mirroring Commands

    Port Mirroring commands Refer to the Configuring System Monitoring on Avaya Ethernet Routing Switch 5000 Series, NN47200-505 for port mirroring command information. You can use the port mirroring commands to assist in diagnostics and information gathering.

  • Page 19: Route Tracing

    The Avaya Ethernet Routing Switch 5600 Series device is equipped with a Time Domain Reflectometer (TDR). The TDR provides a diagnostic capability to test connected cables for defects, such as short pin and pin open. You can obtain TDR test results from Avaya command line interface (ACLI) or Enterprise Device Manager (EDM).

  • Page 20: System Logs

    However, the configuration of the previous unit is not be replicated in the new unit. AUR can be enabled or disabled from ACLI and EDM. By default, AUR is enabled. For more information about port statistics and commands, see Getting Started with Avaya Ethernet Routing Switch 5000 Series, NN47200–303.

  • Page 21: Chapter 5: General Diagnostic Tools

    Chapter 5: General diagnostic tools The Ethernet Routing Switch 5600 Series device has diagnostic features available with Enterprise Device Manager (EDM) and Avaya command line interface (ACLI). You can use these diagnostic tools to help you troubleshoot operational and configuration issues.
  • Page 22 The command set of a higher-privilege mode is a super set of a lower-privilege mode. That is, all lower-privilege mode commands are accessible when using a higher-privilege mode. You can move between command modes on a limited basis. This concept is explained in the Common Procedures section of this document. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 23: Chapter 6: Initial Troubleshooting

    As part of your initial troubleshooting, Avaya recommends that you check the Knowledge and Solution Engine on the Avaya website for known issues and solutions related to the problem you are experiencing. Gather information Before contacting Avaya Technical Support, you must gather information that can help the Technical Support personnel.
  • Page 24 - show running-config - show port-statistics <port> • Use the MIB Web page. See Configuring System Monitoring on Avaya Ethernet Routing Switch 5000 Series, NN47200-505 for detailed information. • Use the trap Web page. See Configuring System Monitoring on Avaya Ethernet Routing Switch 5000 Series, NN47200-505 for detailed information.

  • Page 25: Chapter 7: Emergency Recovery Trees

    Chapter 7: Emergency recovery trees Emergency Recovery Trees (ERT) provide a quick reference for troubleshooting without procedural detail. Use the ERTs to guide you through some common failures to arrive at a solution. Emergency recovery trees The following work flow contains some typical authentication problems. These situations are not dependant upon each other.

  • Page 26: Corruption Of Flash Recovery Tree

    If two ERS 5600 Series switches run IST between them and that IST link goes down, a total loss of communication occurs. Because all critical network traffic runs on the IST link, if an IST failure occurs then network protocols, for example RIP,VRRP,OSPF,VLACP, start flapping. This protocol flapping causes a network outage. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 27: Ist Failure Recovery Tree

    IST failure IST failure recovery tree Figure 3: IST failure part 1 Troubleshooting December 2013...

  • Page 28: Layer 3 Protocols

    Emergency recovery trees Figure 4: IST failure part 2 Layer 3 protocols To configure licensed Layer-3 protocols like OSPF, VRRP and IST/SMLT on ERS 5600 series devices, you must load a license file on the switch. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 29: Layer 3 Protocols Recovery Tree

    Incorrect PVID Layer 3 protocols recovery tree Figure 5: Layer 3 protocols Incorrect PVID Clients cannot communicate to critical servers if ports are using an incorrect VLAN. For example, if the server is connected to VLAN 3 and the Port VLAN ID (PVID) of the port is 2, a loss of communication occurs.

  • Page 30: Incorrect Pvid Recovery Tree

    VLAN on the ERS 8600 Series switch cannot communicate with devices in the same VLAN on the ERS 5600 Series switch, then the uplink ports are not tagged to the VLAN on the ERS 5600 Series switch. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 31: Vlan Not Tagged To Uplink Ports Recovery Tree

    VLAN not tagged to uplink ports VLAN not tagged to uplink ports recovery tree Figure 7: VLAN not tagged to uplink ports Troubleshooting December 2013...

  • Page 32: Snmp

    SNMP failure can be the result of an incorrect configuration of the management station or its setup. If you can reach a device but no traps are received, verify the trap configurations (the trap destination address and the traps configured to be sent). Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 33: Snmp Recovery Tree

    SNMP SNMP recovery tree Figure 8: SNMP part 1 Troubleshooting December 2013...

  • Page 34: Stack

    Figure 9: SNMP part 2 Stack A Stack failure can the result of a communication error between the individual units due to configuration or cabling. Failures can also occur if there are multiple bases configured. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 35: Stack Recovery Tree

    Stack Stack recovery tree Figure 10: Stack part 1 Troubleshooting December 2013...
  • Page 36 Emergency recovery trees Figure 11: Stack part 2 Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 37 Stack Figure 12: Stack part 3 Troubleshooting December 2013...

  • Page 38: Dynamic Host Configuration Protocol (Dhcp)

    Dynamic Host Configuration Protocol (DHCP) DHCP errors are often on the client-side of the communication. The DHCP relay configuration can be at fault when the DHCP server is not on the same subnet as the client. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 39: Dhcp Recovery Tree

    Dynamic Host Configuration Protocol (DHCP) DHCP recovery tree Figure 13: DHCP Troubleshooting December 2013...

  • Page 40: Aaur: Both Units Display Yes For Ready For Replacement

    In a stack of two units, when you enter the show stack auto-unit-replacement command and both units display as Ready for Replacement, only the nonbase unit should be ready for replacement. The following figure shows the recovery tree to correct the issue. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 41: Both Units Display Yes For Ready For Replacement Recovery Tree

    AAUR: Both units display yes for Ready for Replacement Both units display yes for Ready for Replacement recovery tree Figure 14: Both units display yes for Ready for Replacement Troubleshooting December 2013...
  • Page 42 Emergency recovery trees Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 43: Chapter 8: Troubleshooting Hardware

    Chapter 8: Troubleshooting hardware This section includes hardware troubleshooting specific to the ERS 5600 series. Work flow: Troubleshooting hardware The following work flow can help you to determine solutions for some common hardware problems. Troubleshooting December 2013...

  • Page 44: Check Power

    Troubleshooting hardware Figure 15: Troubleshooting hardware Check power Confirm power is being delivered to the device. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 45: Task Flow: Check Power

    Figure 16: Check power Ensuring power cord is installed About this task Confirm the power cord is properly installed for the device. Refer to Installing the Avaya Ethernet Routing Switch 5000 Series, NN47200-300 for details regarding proper cord installation. Troubleshooting December 2013...

  • Page 46: Observing Error Report On Console

    Procedure 1. Use the show sys-info command to view the software version. 2. For software installation information, see Getting Started with Avaya Ethernet Routing Switch 5000 Series, NN47200–303. Returning unit for repair About this task Return unit to Avaya for repair Contact Avaya for return instructions and RMA information.

  • Page 47: Check Cables

    Check cables Check cables Confirm the stacking cables are correctly connected. Task flow: Check cables The following task flow assists you to confirm the stacking cables on the ERS 5600 series device are installed correctly. Figure 17: Check cables Reviewing the Getting Started document About this task Review the Getting Started document to reapply the stacking cabling as required.

  • Page 48: Check Fiber Port

    Troubleshooting hardware See the stacking procedures in Getting Started with Avaya Ethernet Routing Switch 5000 Series, NN47200–303. Check fiber port Confirm the fiber port is working and the cable connecting the port are the proper type. Check port Confirm the port and ethernet cable connecting the port are in proper configuration.
  • Page 49 Check port Figure 18: Check port Viewing port information About this task Review the port information to ensure it is enabled. Troubleshooting December 2013...

  • Page 50: Task Flow: Check Fiber Port

    4. Note the operational and link status of the port. Task flow: Check fiber port The following task flow assists you to confirm the fiber port cable is functioning and is of the proper type. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 51 Check port Figure 19: Check fiber port Viewing fiber port information About this task Review the port information to ensure it is enabled. Troubleshooting December 2013...
  • Page 52 Procedure 1. Inspect the fiber cables to ensure they are the correct type. 2. Review Installing Transceivers and Optical Components on Avaya Ethernet Routing Switch 5000 Series, NN47200–302 for details or RN's for list of approved SFP/XFPs Troubleshooting December 2013...

  • Page 53: Check Fiber Port

    Check fiber port 3. Note the port status. Check fiber port Confirm the fiber port is working and the cable connecting the port are the proper type. Task flow: Check fiber port The following task flow assists you to confirm the fiber port cable is functioning and is of the proper type.

  • Page 54: Viewing Fiber Port Information

    Troubleshooting hardware Figure 20: Check fiber port Viewing fiber port information About this task Review the port information to ensure it is enabled. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 55: Enabling The Port

    Check fiber port Procedure 1. Use the show interfaces <port> command to display the port information 2. Note the port status. Enabling the port About this task Ensure that the port on the ERS 5600 Series switch is enabled. Procedure 1.

  • Page 56: Returning Unit For Repair

    Troubleshooting hardware 2. Review Installing Transceivers and Optical Components on Avaya Ethernet Routing Switch 5000 Series, NN47200–302 for details or RN's for list of approved SFP/XFPs 3. Note the port status. Returning unit for repair About this task Return unit to Avaya for repair Contact Avaya for return instructions and RMA information.

  • Page 57: Removing Failed Unit

    Replace unit Figure 21: Replace unit Removing failed unit About this task Remove the failed unit from the stack. Procedure 1. Maintain power to the stack. Do not power down stack. 2. Remove the failed device. Troubleshooting December 2013...

  • Page 58: Verifying Software Version Is Correct On New Device

    Placing new unit About this task Place the new unit in the stack where the failed unit was connected. Place the device in the stack in accordance with procedures outlined in Installing the Avaya Ethernet Routing Switch 5000 Series, NN47200-300. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 59: Connecting Stacking Cables

    About this task Reconnect the stacking cables to correctly stack the device. Procedure 1. Review the stacking section in Getting Started with Avaya Ethernet Routing Switch 5000 Series, NN47200–303 for cabling details. 2. Connect the cables in accordance with physical stack requirements.
  • Page 60 Troubleshooting hardware Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 61: Chapter 9: Troubleshooting Authentication

    Chapter 9: Troubleshooting authentication Authentication issues can interfere with device operation and function. The following work flow contains some common authentication problems. Work flow: Troubleshooting authentication The following work flow contains some typical authentication problems. These situations are not dependant upon each other. Figure 22: Troubleshooting authentication EAP client authentication This section provides troubleshooting guidelines for the EAP and NEAP features on the ERS...

  • Page 62: Work Flow: Eap Client Is Not Authenticating

    Work flow: EAP client is not authenticating The following work flow assists you to determine the cause and solution of an EAP client that does not authenticate as expected. Figure 23: EAP client is not authenticating Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 63: Restore Radius Connection

    EAP client authentication Restore RADIUS connection Ensure that the RADIUS server has connectivity to the device. Task flow: Restore RADIUS connection The following task flow assists you to restore the connection to the RADIUS server. Figure 24: Restore RADIUS connection Troubleshooting December 2013...
  • Page 64 The RADIUS Server settings are to be correct for the network. Follow vendor documentation to set the RADIUS server settings. Resetting the shared secret About this task Reset the Shared Secret if it has become corrupted. Procedure 1. Use the RADIUS-server key command. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 65: Enable Eap On The Pc

    EAP client authentication 2. Refer to the vendor documentation for server configuration. Pinging the RADIUS server About this task Ping the RADIUS server to ensure connection exists. Procedure 1. Use the ping <server IP> command to ensure connection. 2. Observe no packet loss to confirm connection. Enable EAP on the PC The PC must have an EAP-enabled device that is correctly configured.

  • Page 66: Apply The Method

    3. Ensure card is configured to support EAP. Apply the method The correct EAP method must be applied. Task flow: Apply the method The following task flow assists you to apply the correct EAP method. Figure 26: Apply the method Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 67: Enable Eap Globally

    EAP client authentication Configuring the RADIUS server About this task The RADIUS server is to be configured to authenticate using MD5. Procedure 1. Obtain Network information for Radius Server from Planning and Engineering. 2. Save the information for reference. Enable EAP globally Enable EAP globally on the ERS 5600 series device.
  • Page 68 1. Use the eapol enable command to enable EAP globally on the ERS 5600 series device. 2. Observe no errors after command execution. Viewing EAPOL settings About this task View the EAPOL settings to ensure EAP is enabled. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 69: Eap User Role (Ubp) Is Not Being Applied

    EAP user role (UBP) is not being applied Procedure 1. Use the show eapol port <port#> command to display the information. 2. Observe the output. Setting EAPOL port administrative status to auto About this task Configure the port to be included in the port list. Procedure 1.

  • Page 70: Restore Radius Connection

    Figure 28: EAP user role not being applied Restore RADIUS Connection Ensure that the RADIUS server has connectivity to the device. Task flow: Restore RADIUS connection The following task flow assists you to restore RADIUS connection to the device. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 71 EAP user role (UBP) is not being applied Figure 29: Restore RADIUS connection Obtaining correct RADIUS server settings for the switch About this task Obtain the Radius server settings. Procedure 1. Obtain network information for RADIUS server from Planning and Engineering. 2.
  • Page 72 2. Refer to the vendor documentation for server configuration. Pinging the RADIUS server About this task Ping the Radius Server to ensure connection exists. Procedure 1. Use the ping <server IP> command to ensure connection. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 73: Configure Radius Vsa For The User

    EAP user role (UBP) is not being applied 2. Observe no packet loss to confirm connection. Configure RADIUS VSA for the user This section provides information about configuring the RADIUS VSA for the user. Task flow: Configure RADIUS VSA for user The following task flow assists you to configure the RADIUS VSA for a user.

  • Page 74: Switch Configuration

    Troubleshooting authentication Switch configuration Configure the switch for UBP globally. Task flow: Configure the switch The following task flows assist you to enable UBP globally on the device. Figure 31: Configure the switch part 1 Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 75 EAP user role (UBP) is not being applied Figure 32: Configure the switch part 2 Troubleshooting December 2013...
  • Page 76 Figure 33: Configure the switch part 3 Displaying EAPOL port configuration About this task Obtain details of the EAPOL port configuration. Procedure 1. Use the show eapol port <port> command to display the port information. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 77 EAP user role (UBP) is not being applied 2. Verify whether the EAPOL global setting is enabled. 3. Verify whether the EAPOL UBP global setting is enabled. 4. Verify whether the EAPOL port status is AUTO. Enabling EAPOL globally About this task Enable EAPOL globally for the switch.
  • Page 78 1. Use one of the following commands to enable QoS UBP on the device: • qos agent ubp high-security-local • qos agent ubp low-security-local 2. Verify whether errors are displayed. No error or warning messages should be displayed. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 79 EAP user role (UBP) is not being applied Displaying QoS UBP About this task Obtain details of QoS agent settings. Procedure 1. Use the show qos ubp command to display UBP sets. 2. Verify that the UBP set name matches the UROL string configured on the Radius Server, for example, if UBP Set is named student then the UROL string sent by the RADIUS server is to be UROL student.
  • Page 80 1. If error EAPOL messages are logged verify port status and user/password on the RADIUS server/user PC. 2. If QoS error messages are logged verify UBP sets for conflicts inside the set or with the QoS policies already installed on that port. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 81 EAP user role (UBP) is not being applied Capturing traffic About this task Capture traffic between user PC, DUT, and between DUT and RADIUS server. Procedure 1. Use a PC and a hub or port mirroring feature to capture traffic between user PC and DUT.

  • Page 82: Eap Multihost Repeated Reauthentication Issue

    Figure 34: EAP Multihost repeated reauthentication issue Match EAP-MAC-MAX to EAP users Lower the eap-mac-max to the exact number of EAP users so the number of authenticated users reaches the allowed maximum to halt soliciting EAP users with multicast requests. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 83 EAP multihost repeated reauthentication issue Task flow: Match EAP-MAC-MAX to EAP users The following task flow assists you to match the EAP-MAC-MAX to the number of EAP users. Figure 35: Match EAP-MAC-MAX to EAP users Identifying the number of users at allowed maximum About this task Obtain the exact number of eap-users to determine when the number of authenticated users reaches the allowed maximum.

  • Page 84: Set Eapol Request Packet

    The following task flow assists you to set the EAPOL request packet for unicast. Figure 36: Set EAPOL request packet Setting EAPOL request packet globally About this task Globally change the EAPOL request packet from multicast to unicast. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 85: Eap Radius Vlan Is Not Being Applied

    EAP RADIUS VLAN is not being applied Procedure 1. Use the eapol multihost eap-packet-mode unicast command to set the EAPOL request packet to unicast. 2. Observe no errors after execution. Setting EAPOL request packet per port About this task Change the EAPOL request packet from multicast to unicast for a specific port. Procedure 1.

  • Page 86: Configure Vlan At Radius

    Configure VLAN at RADIUS Correct discrepancy at the RADIUS server for the VLAN information. Task flow: Configure VLAN at RADIUS The following task flow assists you to ensure the VLAN is configured at the RADIUS server. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 87 EAP RADIUS VLAN is not being applied Figure 38: Configure VLAN at RADIUS Getting correct RADIUS server settings About this task This section provides troubleshooting guidelines to obtain the RADIUS server settings. Procedure 1. Refer to the Planning and Engineering documentation to locate server information.

  • Page 88: Configure Switch

    • Tunnel-Type – Virtual LANs (VLAN) Configure switch The VLAN must be configured correctly on the ERS 5600 series device. Task flow: Configure switch The following task flows assist you to configure the VLAN on the device. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 89 EAP RADIUS VLAN is not being applied Figure 39: Configure switch task part 1 Troubleshooting December 2013...
  • Page 90 Showing EAPOL Multihost About this task Identify the EAPOL multihost information. Procedure 1. Use the show eapol multihost command to display the multihost information. 2. Note the state of Allow Use of RADIUS Assigned VLANs. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 91 EAP RADIUS VLAN is not being applied Enabling allow RADIUS VLANs About this task Change the allow RADIUS assigned VLAN to enable. Procedure 1. Use eapol multihost use-RADIUS-assigned-vlan command to allow the use of VLAN IDs assigned by RADIUS. 2. Observe no errors after execution. Showing EAPOL multihost interface About this task Display the EAPOL Interface.

  • Page 92: Configured Mac Is Not Authenticating

    (STG). Procedure 1. Use the spanning-tree stp <1-8> vlans command to make the change. 2. Review output to identify that the change was made. Configured MAC is not authenticating Correct a MAC to allow authentication. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 93: Work Flow: Configured Mac Is Not Authenticating

    Configured MAC is not authenticating Work flow: Configured MAC is not authenticating The following work flow assists you to determine the cause and solution of a configured MAC that does not authenticate as expected. Figure 41: Configured MAC is not authenticating Configure the switch Configure the switch to ensure the correct settings are set to ensure the MAC is authenticating.
  • Page 94 Troubleshooting authentication Figure 42: Configure the switch part 1 Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 95 Configured MAC is not authenticating Figure 43: Configure the switch part 2 Showing EAPOL port About this task Display the EAPOL port information. Procedure 1. Use the command show eapol port <port#> to display the port information. 2. EAP is to be enabled globally, and port at EAP is set to auto. Troubleshooting December 2013...
  • Page 96 1. Enter the eapol multihost allow-non-eap-enable command. 2. Verify that the command did not generate errors. Showing EAPOL multihost interface About this task Display the EAPOL multihost interface information after you have executed the eapol multihost allow-non-eap-enable command. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 97 Configured MAC is not authenticating Procedure Enter show eapol multihost interface <port#> to display the EAPOL multihost interface information. Result Non-EAPOL clients are enabled. Multihost status is enabled. Enabling multihost and allowing non-EAPOL clients About this task Use the following procedure to correct the Non-EAP client attribute. Procedure 1.

  • Page 98: Neap Radius Mac Not Authenticating

    Work flow: NEAP RADIUS MAC not authenticating Use the following work flow to assist you in troubleshooting a cause and solution for a RADIUS MAC that does not authenticate. Figure 44: NEAP RADIUS MAC not authenticating Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 99: Configure Switch

    NEAP RADIUS MAC not authenticating Configure switch This section provides switch configuration information to resolve RADIUS MAC issues Task flow: Configure switch The following task flow assists you to configure the ERS 5600 series device to correct the RADIUS MAC issue. Figure 45: Configure switch part 1 Troubleshooting December 2013...
  • Page 100 About this task Display the EAPOL port information for review. Procedure 1. Enter the show eapol port <port#> command to display the information. 2. Review the information to determine that: • Global EAP is enabled. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 101 NEAP RADIUS MAC not authenticating • The port is set to eap-auto. Enabling EAP globally and setting the port to EAP automatic About this task Ensure EAP globally is enabled and the port status is configured to EAP automatic. Procedure 1.

  • Page 102: Radius Server Configuration Error

    The correct MAC address and password for the switch must be configured on the RADIUS server. Task flow: RADIUS server configuration error The following task flow assists you to configure the RADIUS server with the correct MAC and password. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 103: Neap Mhsa Mac Is Not Authenticating

    NEAP MHSA MAC is not authenticating Figure 47: RADIUS server configuration error Configuring MAC and password on RADIUS server About this task The RADIUS server requires the correct MAC and password for the switch. If they are not correct, the switch cannot authenticate. To configure the correct MAC and password for the switch on the RADIUS server, refer to the vendor documentation for the RADIUS server NEAP MHSA MAC is not authenticating...

  • Page 104: Configure Switch

    Figure 48: NEAP MHSA MAC is not authenticating Configure switch Configure the switch to enable MHSA. Task flow: Configure switch The following task flow assists you to enable MHSA on the ERS 5600 series device. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 105 NEAP MHSA MAC is not authenticating Figure 49: Configure switch part 1 Troubleshooting December 2013...
  • Page 106 About this task Display the EAPOL port information for review. Procedure 1. Enter the show eapol port <port#> command to display the information. 2. Review the information to verify the following: • EAP is enabled globally. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 107 NEAP MHSA MAC is not authenticating • The port is set for EAP automatically (eap-auto). Enabling EAP globally and setting the port to automatic EAP About this task Make the required changes to ensure the settings are correct. Procedure 1. Use the eapol enable command to enable EAP globally. 2.

  • Page 108: Neap Phone Is Not Working

    Rectify a NEAP phone that is not working. Task flow: NEAP phone is not working The following task flow assists you to establish a connection between a NEAP phone and the ERS 5600 series device. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 109: Configure Phone

    NEAP phone is not working Figure 51: NEAP phone is not working Configure phone Change phone configuration to ensure it is configured correctly. Task flow: Configure phone The following task flow assists you to configure the phone to work with the ERS 5600 series device.

  • Page 110: Configure The Switch

    Ensuring phone signatures are Avaya About this task Configure the phone with Avaya signatures. Use vendor documentation for the phone to ensure phone signatures are Avaya. Configure the switch The switch has to be configured to support the phone correctly.
  • Page 111 NEAP phone is not working Task flow: Configure the switch The following task flow assists you to configure the ERS 5600 series device to support the phone. Figure 53: Configure the switch part 1 Troubleshooting December 2013...
  • Page 112 Display the EAPOL port information for review. Procedure 1. Enter the show eapol port <port#> command to display the information. 2. Review the information to verify that • the EAP is enabled globally • eap-auto is set on the port Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 113 NEAP phone is not working Enabling EAPOL globally and the port EAPOL automatic status About this task Make the required changes to ensure the settings are correct. Procedure 1. Use the eapol enable command to enable EAP globally. 2. Use the eapol status auto command to change the port EAPOL status to auto.
  • Page 114 About this task Display the VLAN information for review. Procedure 1. Enter the show vlan command to display the information. 2. Verify the following: • Ensure that the port belongs to the desired VoIP VLAN. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 115: Neap User Policies From Radius Not Applied

    NEAP user policies from RADIUS not applied Adding a port to the VLAN About this task Change the VLAN setting to use the correct port. Procedure Use the vlan members add <1-4094> <port> command to move the port to desired VLAN. NEAP user policies from RADIUS not applied If NEAP user policies from the RADIUS server are not applied, use the work flows and procedures in this section to help you correct the faults.

  • Page 116: Configure The Switch

    Figure 55: NEAP user policies from RADIUS not applied Configure the switch Review switch configuration to ensure policies are correct. Task flow: Configure switch The following task flow assists you to configure the ERS 5600 series device with the correct policies. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 117 NEAP user policies from RADIUS not applied Figure 56: Configure switch part 1 Troubleshooting December 2013...
  • Page 118 Troubleshooting authentication Figure 57: Configure switch part 2 Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 119 NEAP user policies from RADIUS not applied Figure 58: Configure switch part 3 Troubleshooting December 2013...
  • Page 120 Troubleshooting authentication Figure 59: Configure switch part 4 Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 121 NEAP user policies from RADIUS not applied Figure 60: Configure switch part 5 Displaying EAPOL port About this task Obtain details of the EAPOL port configuration. Troubleshooting December 2013...
  • Page 122 2. Verify that no error or warning messages display. Enabling EAPOL on a port About this task Enable EAPOL on a user port. Procedure 1. Use the eapol port <port> command to enable EAPOL on a port. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 123 NEAP user policies from RADIUS not applied 2. Verify that no error or warning messages display. Displaying EAPOL multihost information About this task Obtain the details for EAPOL multihost global settings. Procedure 1. Use the show eapol multihost command to display EAPOL multihost settings.
  • Page 124 Obtain the details for EAPOL multihost interface settings. Procedure 1. Use the show eapol multihost interface <port> command to display EAPOL multihost settings. 2. Verify the following: • Multihost on interface is enabled. • Allow Non-EAP clients on interface is enabled. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 125 NEAP user policies from RADIUS not applied • The maximum number of Non-EAP MAC addresses is configured correctly. Enabling multihost on an interface About this task Enable multihost processing on a specific interface. Procedure 1. Use the eapol multihost port <port> enable command to enable multihost processing on a specific interface.
  • Page 126 Change UBP level to high or low security to enable QoS UBP globally. Procedure 1. Use one of the following commands to enable a QoS UBP security level on the device: • qos agent ubp high-security-local Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 127 NEAP user policies from RADIUS not applied • qos agent ubp low-security-local 2. Verify that no error or warning messages display. Displaying QoS user based policy information About this task Obtain details of QoS agent UBP settings. Procedure 1. Use the show qos ubp command to display QoS UBP settings. 2.
  • Page 128 About this task If errors display in log messages, verify the EAPOL and/or QoS configuration. Procedure 1. If EAPOL error messages are logged, verify port status and user/password on the RADIUS server and Non-EAP user MAC/created password. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 129 NEAP user policies from RADIUS not applied 2. If QoS error messages are logged, review UBP sets for conflicts inside the set or conflicts with the QoS policies already installed on the port. Capturing traffic About this task Capture traffic between a user PC and a switch, and between a user PC and a RADIUS server.

  • Page 130: Radius Server Configuration

    Figure 61: RADIUS server configuration Setting RADIUS attributes About this task Ensure that the RADIUS attributes match the EAP user based policies. Procedure Refer to the RADIUS server vendor documentation to ensure the attributes are set correctly. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 131: Eap-Neap Unexpected Port Shutdown

    EAP-NEAP unexpected port shutdown EAP-NEAP unexpected port shutdown Identify the reason for the port shutdown and make configuration changes to avoid future problems. Work flow: EAP-NEAP unexpected port shutdown The following work flow assists you to determine the solution for EAP-NEAP ports experiencing a shutdown.
  • Page 132 1. Use the show logging command to display the log messages. 2. Review the command output for errors. Note: You can consult Logs Reference — Avaya Ethernet Routing Switch 2000, 3000, 4000, and 5000 Series and Virtual Services Platform 7000 Series, NN47216– 600.

  • Page 133: Displaying Eap-Neap Clients On A Port

    EAP-NEAP unexpected port shutdown This is a consolidated log message reference document and provides additional information about log messages for your product. Displaying EAP-NEAP clients on a port About this task Display EAP-NEAP clients on the port. Procedure 1. Use the show mac-address-table command to display the clients on the port.
  • Page 134 Troubleshooting authentication 3. Use the shut/no shut commands in the Interface mode. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 135: Chapter 10: Troubleshooting Layer 2 And Layer 3

    Chapter 10: Troubleshooting layer 2 and layer 3 Layer 2 and layer 3 issues can interfere with device operation and function. This chapter includes some possible ARP, OSPF, RIP, and VRRP problems. Work flow: Troubleshooting Layer 2 and Layer 3 The following work flow contains some typical Layer 2 and Layer 3 problems.

  • Page 136: Arp Not Forwarding Traffic Correctly

    Layer 3 traffic is forwarding correctly or not. Work flow: Troubleshooting ARP The following work flow can help you to determine why ARP is not forwarding traffic as expected and the procedures in this section provide some suggested solutions. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 137: Confirming That Global L3 Routing Is Enabled

    ARP not forwarding traffic correctly Figure 65: Troubleshooting ARP Confirming that global L3 routing is enabled This section helps you confirm that L3 global routing is enabled. Task flow: Confirming global L3 routing About this task The following task flow and the procedures in this section can help you to determine the status of Layer 3 routing and enable L3 routing globally.
  • Page 138 Display IP Routing Information for the switch to determine whether it is enabled. Procedure 1. Enter the ACLI Privileged EXEC command mode. 2. At the prompt, type the show ip routing command. 3. Review the command output to determine whether or not IP Routing is enabled. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 139: Obtain Arp Information

    ARP not forwarding traffic correctly Enabling IP Routing globally About this task If you determine that IP Routing is disabled, use this procedure to enable IP Routing globally on the switch. Procedure 1. Enter the ACLI Global Configuration mode. 2. At the command prompt, type the ip routing enable command to enable IP Routing.
  • Page 140 3. Review the command output. From software Release 5.1 onward, the number of ARP entries is also displayed. Displaying ARP table information in EDM About this task Use the following procedure to obtain ARP table information in EDM. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 141: Correct Arp Entries

    ARP not forwarding traffic correctly Procedure 1. In EDM, navigate to IP Routing > IP > ARP. 2. Review the information on the ARP page. Completing an SNMP walk to objects About this task Use the SNMP walk to assist in the diagnosis of the ARP situation. Procedure 1.
  • Page 142 Troubleshooting layer 2 and layer 3 Figure 68: Correct ARP entries Confirming that ARP entries are correct About this task Use this procedure to compare ARP entries to ensure they are correct. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 143 ARP not forwarding traffic correctly Procedure 1. Review the ACLI, EDM, and SNMP ARP information. 2. Compare ARP table entries for discrepancies. Clearing the ARP cache About this task Use the following procedure to completely clear the ARP cache of both static and dynamic entries.
  • Page 144 About this task SNMP objects for IP Net to Media can be set if required. Procedure 1. Use the SNMP set command on the ipNetToMediaIfIndex object. 2. Use the SNMP set command on the ipNetToMediaPhysAddress object. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 145: Configure Arp Timeout

    ARP not forwarding traffic correctly 3. Use the SNMP set command on the ipNetToMediaNetAddress object. 4. Use the SNMP set command on the ipNetToMediaType object. Confirming NVRAM file size About this task Use the information and procedure in this task to ensure that the NVRAM file size conforms to the correct parameters.
  • Page 146 1. Open ACLI in the Global Configuration mode. 2. At the prompt, enter the ip arp timeout <value> command. Configuring ARP timeout using EDM About this task You can use EDM to set the ARP timeout. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 147: Configuring The Proxy Arp

    ARP not forwarding traffic correctly Procedure 1. Navigate to the Globals tab. 2. Change the timeout value. 3. Click the Apply button. Configuring ARP timeout using SNMP About this task You can use Simple Network Management Protocol (SNMP) to set the ARP timeout. Procedure 1.
  • Page 148 4. Open ACLI IP VLAN configuration mode. 5. To enable proxy ARP, at the prompt enter the ip arp proxy [enable] command. To disable proxy ARP, at the prompt enter the no ip arp proxy [enable] command. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 149 ARP not forwarding traffic correctly To return proxy ARP to the default state, at the prompt enter the default ip arp proxy [enable] command. Displaying Proxy ARP using EDM About this task You can use EDM to set proxy ARP. Procedure 1.

  • Page 150: Failure To Establish Ospf Adjacency

    1. Enter the command show running-config. 2. Review the command output under the following subsections: • L3 Protocols • Proxy ARP Failure to establish OSPF adjacency You may need to correct the OSPF parameters to ensure that adjacencies are established. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 151: Work Flow: Failure To Establish An Ospf Adjacency

    Failure to establish OSPF adjacency Work flow: Failure to establish an OSPF adjacency You can use the following work flow to help you determine the solution for adjacencies that do not form. Figure 71: Failure to Establish an OSPF adjacency part 1 Troubleshooting December 2013...

  • Page 152: Confirm Ip Connectivity

    Confirm IP connectivity To confirm IP connectivity you need to isolate the IP connectivity for the devices. Task flow: Confirm IP connectivity You can use the following task flow to help confirm IP connectivity on the network. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 153 Failure to establish OSPF adjacency Figure 73: Confirm IP connectivity Pinging the neighbor IP Interface About this task You use this procedure to help identify IP connectivity to a neighbor. Procedure 1. At the ACLI command prompt, enter the ping <neighbor interface IP> command to ping the interface.

  • Page 154: Enable Ospf On Interface

    Enable OSPF on interface To establish an adjacency you must enable OSPF on an interface level. Task flow: Enable the OSPF on interface You can use the following task flow to help enable OSPF on an interface. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 155 Failure to establish OSPF adjacency Figure 74: Enable OSPF on interface Showing IP Interface About this task Use this procedure to display IP interface information. Troubleshooting December 2013...
  • Page 156 2. Review the command output to determine whether OSPF is globally enabled. Enabling OSPF globally for the device About this task Use this procedure to enable OSPF globally for the device. Procedure 1. At the ACLI command prompt, enter theip ospf interface vlan <vid> command. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 157: Confirm Adjacencies

    Failure to establish OSPF adjacency 2. Review the command output to verify that the change was made. Showing IP routing About this task Use this procedure to display the IP routing information to verify whether IP Routing is enabled. Procedure 1.
  • Page 158 1. At the ACLI command prompt, enter the show ip ospf neighbor command. 2. Review the command output to verify the IP OSPF neighbor information. Showing IP OSPF interface statistics About this task Use this procedure to display the IP OSPF interface statistics. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 159: Configure Router Ids

    Failure to establish OSPF adjacency Procedure 1. At the ACLI command prompt, enter the show ip ospf ifstats command. 2. Review the command output. Configuring the neighbor devices About this task Neighbor devices must be properly configured. Procedure Use the vendor documentation to ensure that neighbor devices are correctly configured.
  • Page 160 By default, router ID is derived from the last 4 bytes of the base unit MAC address. You can change this value if required. Procedure 1. At the ACLI command prompt, enter the show ip ospf command. 2. Review the command output to verify the Router ID. Example — Router ID: 0.0.0.1 . Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 161: Correct Mismatches

    Failure to establish OSPF adjacency Configuring a unique router ID Before you begin • Open the ACLI OSPF Router Configuration mode. From the command prompt, enter enable, enter configure terminal, enter router ospf). About this task Use this procedure to change the Router ID, if required, to ensure that it is unique. Procedure At the ACLI OSPF Router Configuration command prompt, enter the router-ID <A.B.C.D>...
  • Page 162 2. Review the command output to verify the authentication type. Example — Authentication Type: None Showing IP OSPF interface authentication methods About this task Use this procedure to display the authentication methods for all interfaces. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 163 Failure to establish OSPF adjacency Procedure 1. At the ACLI command prompt, enter the show ip ospf int-auth command to display the IP OSPF interface authentication method. 2. Review the command output to verify the authentication methods. Showing IP OSPF authentication for the interface VLAN About this task Use this procedure to display the assigned MD5 IDs and keys.

  • Page 164: Configure Hello And Dead Interval Values For Ospf Endpoints

    Configure hello and dead interval values for OSPF endpoints You must configure interfaces to use the same hello time and dead intervals on both OSPF endpoints. The default values are: • hello interval 10 seconds • dead interval 40 seconds Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 165 Failure to establish OSPF adjacency Task flow: Configure hello and dead interval values You can use the following task flow to help ensure that you use the same hello time and dead interval values. Figure 78: Configure hello/dead interval Showing IP OSPF interface timers About this task Use the command in the following procedure to display OSPF timers for each interface.
  • Page 166 2. At the VLAN Interface Configuration prompt, enter ip ospf dead-interval <number> to configure the dead interval. Example Set the dead interval to 40: ip ospf dead-interval 40 3. Follow the vendor documentation to configure the neighbor router with the parameters from the preceding steps. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 167: Configure Mtu Sizes

    Configuring neighbor routers to use the same hello and dead intervals About this task You must configure neighbor routers to use the same hello and dead interval values as those configured on Avaya routers. Procedure 1. Refer to the vendor documentation to properly configure the neighbor routers.
  • Page 168 Procedure 1. At the ACLI command prompt, enter the show ip ospf interface vlan <vid> command. 2. Review the command output to verify that the MTU is set to Ignore as follows: MTU Ignore: Yes Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 169: Configure Area Ids

    Failure to establish OSPF adjacency Configuring MTU To ignore Before you begin • Access the ACLI VLAN Interface Configuration mode. At the command prompt, type enter, type configure terminal, type int vlan <vid>). About this task You must configure the receiving interface to accept incoming LSUs regardless of the packet MTU size.
  • Page 170 Use the following procedure to display the configuration for each interface OSPF. Procedure 1. At the ACLI command prompt, enter the show ip ospf interface vlan <vid> command. 2. Review the command output to verify the Area ID. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 171: Configure An Interface To Broadcast

    Failure to establish OSPF adjacency Showing an IP OSPF interface statistics mismatch About this task You can display the statistics for mismatched OSPF parameters. Procedure 1. At the ACLI command prompt, enter the show ip ospf ifstats mismatch command. 2. Review the command output for mismatched OSPF parameters. Configuring Area IDs About this task Use the following procedure to configure the Area IDs to match.
  • Page 172 Configuring interface type as broadcast About this task If an interface is configured to be passive, it does not send Hello to its connected neighbors, or process Hello from connected neighbors. The default OSPF interface type is broadcast. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 173: Configure Router Priority

    Failure to establish OSPF adjacency Procedure 1. At the ACLI command prompt, enter the show ip ospf interface vlan 2 command to verify that OSPF is not enabled on the interface. 2. Access the ACLI VLAN Interface Configuration mode as follows: a.
  • Page 174 • Access the ACLI VLAN Interface Configuration mode. At the ACLI command prompt, type enter, type configure terminal, type int vlan <vid>). About this task Use the following procedure to configure the router with a priority greater than zero. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 175: Ospf Route Is Not Installed In Routing Table

    OSPF route is not installed in routing table Procedure At the command prompt, enter the ip ospf priority 1 command to change the priority. OSPF route is not installed in routing table You must ensure that the OSPF route appears correctly in the routing table. Work flow: OSPF route is not installed in routing table You can use the following work flow to determine the solution for an OSPF route that is not installed in the routing table.

  • Page 176: Confirm Equal Cost Multi-Path Maximum Paths

    Showing IP Route and redistribution policy About this task Use this procedure to display the routing table information and view the redistribution policy. You can set ECMP to allow multiple routes on the ERS 5520 and ERS 5530. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 177 OSPF route is not installed in routing table Procedure 1. To display the routing information, at the ACLI command prompt, enter the show ip route command. 2. To view the redistribution policy, at the ACLI command prompt, enter the show ip ospf redistribute command.

  • Page 178: Advertise External Route

    Figure 84: Advertise external route Showing IP OSPF redistribute About this task Use this procedure to display the routing table information. You can set ECMP to allow multiple routes on both ERS 5520 and ERS /5530. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 179: Rip Packets Are Exchanged Between Devices But No Routes Are Learned

    RIP packets are exchanged between devices but no routes are learned Procedure 1. At the ACLI command prompt, enter the show ip ospf redistribute command. 2. Review the command output for policy information. Configuring the redistribution policy Before you begin •...

  • Page 180: Set Interface

    Figure 85: RIP Packets exchanged between device under test (DUT) but no routes are learned Set interface Set the interface to verify that RIP interfaces are configured to • supply RIP updates • listen to RIP updates Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 181 RIP packets are exchanged between devices but no routes are learned Task flow: Set interface You can use the following task flow to help ensure that interfaces are configured to supply and listen to RIP updates. Figure 86: Set interface Showing RIP IP interface About this task Use the following procedure to display the RIP interface information.

  • Page 182: Configure Send And Receive

    You must verify that the RIP version configured on both sending and receiving interfaces matches. Task flow: Configure send and receive You can use the following task flow to help ensure that the RIP versions match on the sending and receiving interfaces. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 183 RIP packets are exchanged between devices but no routes are learned Figure 87: Configure send and receive Showing RIP IP interface About this task Use the following procedure to display the RIP interface information Procedure 1. At the ACLI command prompt, enter the show ip rip interface command. 2.

  • Page 184: Configure Ecmp

    If the ECMP value is not properly configured you must set it to the correct value. Task flow: Configure ECMP You can use the following task flow to help you set the value of ECMP. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 185 RIP packets are exchanged between devices but no routes are learned Figure 88: Configure ECMP Showing ECMP details About this task Use this procedure to ensure that ECMP is set to the proper value and that the ports with ECMP paths are not STP blocked.

  • Page 186: Rip Routes Are Learned Then Deleted And Relearned

    Task flow: RIP routes are learned and deleted and relearned You can use the following task flow to help you change the timeout interval to stop the RIP routes from cycling. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 187: Configuring Rip Timeout Interval

    RIP routes are learned then deleted and relearned Figure 89: RIP routes are learned-deleted learned again Configuring RIP timeout interval About this task You must configure the timeout interval on the device where the RIP route is cycling so that it is the same or larger than the update interval on the peer device.
  • Page 188 You can use this procedure to display the IP RIP information to observe the timeout intervals. Procedure 1. At the ACLI command prompt, enter the show ip rip command to display the RIP information. 2. Review the command output to determine the timeout intervals. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 189 RIP routes are learned then deleted and relearned Showing IP RIP interface timeout intervals About this task Use the following procedure to display the IP RIP interface information to observe the timeout intervals. Procedure 1. At the ACLI command prompt, enter the show ip rip interfacecommand. 2.

  • Page 190: Rip Routes Learned With Increasing Cost

    16) even though the actual route is gone. Work flow: RIP routes learned with increasing cost You can use the following work flow to help determine the solution for RIP routes that continue to be learned with an increasing cost. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 191: Configure Triggered Updates On The Interface

    RIP routes learned with increasing cost Figure 91: RIP routes learned with increasing cost Configure triggered updates on the interface Configure triggered updates to force the device to send RIP updates to the rest of the network immediately after a RIP interface goes down. Task flow: Configure triggered updates on the interface You can use the following task flow to help configure the interface trigger to send RIP updates after a device goes down.
  • Page 192 Procedure 1. At the ACLI command prompt, enter the show ip rip interface command to display the RIP interface information. 2. Review the command output to determine the status of the trigger update. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 193: Smlt Routing Issue

    SMLT routing issue Configuring the IP RIP interface trigger update Before you begin • Access the ACLI VLAN Interface configuration mode About this task You can use the following command to enable the trigger update for the IP RIP interface. Procedure At the VLAN Interface configuration mode ACLI command prompt, enter the ip rip triggered enable command to change the update settings.

  • Page 194: Configure License

    Configure license In order to use SMLT you must ensure that the SMLT license is present. Task flow: Configure license You can use the following task flow to help you configure the license for SMLT. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 195 Downloading a valid license About this task To use a licensed feature you must download the valid license to the switch. Refer to document Getting Started with Avaya Ethernet Routing Switch 5000 Series, NN47200–303 for license download instructions. Troubleshooting December 2013...

  • Page 196: Configure Ist

    Configure IST Set IST to ensure routing is correctly configured. Task flow: Configure IST You can use the following task flows to help configure an Inter Switch Trunk (IST) to ensure that routing is configured correctly. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 197 SMLT routing issue Figure 95: Configure IST part 1 Troubleshooting December 2013...
  • Page 198 Displaying VLAN details About this task To ensure that the same VLAN is configured on both ends of the IST you can display VLAN information. Note: The IST owner VLAN must contain only the IST ports. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 199 SMLT routing issue Procedure 1. At the ACLI command prompt, enter the show vlan command to display the VLAN ports membership for the VLANs. 2. Review the command output to ensure that the settings are correct. Displaying VLAN interface details About this task You can display VLAN interface information to ensure that the port members in the IST owner VLAN are tagged.
  • Page 200 At the ACLI command prompt, enter the show vlan ip to display VLAN IP information. Testing the IP connection between aggregation switches About this task You can test the connectivity between two switches. Procedure 1. At the ACLI command prompt, enter ping <switch2> from the first switch. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 201 SMLT routing issue 2. Observe the command output to determine whether or not connectivity is established. 3. At the ACLI command prompt, enter ping <switch1> from the second switch. 4. Observe the command output to determine whether or not connectivity is established.

  • Page 202: Configure Smlt

    You can use the following task flow to help configure SMLT. Figure 97: Configure SMLT Displaying SMLT details About this task You can view the SMLT configuration to determine whether links from the edge device to both aggregation devices are up. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 203: Virtual Router Is Stuck In The Initialize State When It Should Be Master Or Backup

    Virtual Router is stuck in the initialize state when it should be master or backup Procedure 1. At the ACLI command prompt, enter the show smlt command to display the SMLT configuration and operational mode. 2. Review the command output to determine whether links from the edge device to both aggregation devices are open and functioning.

  • Page 204: Vr Is Stuck In Initialize State Work Flow

    If a Virtual Router (VR) is stuck in the initialize state, you must set the VR as either master or backup under VRRP. Task flow: Configure device for master or backup You can use the following task flows to help configure the VR device as master or backup. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 205 Virtual Router is stuck in the initialize state when it should be master or backup Figure 99: Configure device for master or backup part 1 Troubleshooting December 2013...
  • Page 206 Showing IP Routing details About this task Verify that IP Routing is enabled. Procedure 1. At the ACLI command prompt, enter the command show ip routing. 2. Review the command output to determine whether IP Routing is enabled. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 207 Virtual Router is stuck in the initialize state when it should be master or backup Enabling IP Routing About this task You must enable IP Routing globally on the switch. Procedure 1. At the ACLI Global Configuration command prompt, enter ip routing to enable IP Routing globally on switch.
  • Page 208 You can use the following procedure to verify that a VR is enabled. Procedure 1. At the ACLI command prompt, enter the command ip vrrp. 2. Review the command output to verify at least one active link. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 209: Vr Is Stuck In The Master State And More Than One Master Vr Is Present In The System

    VR is stuck in the master state and more than one master VR is present in the system VR is stuck in the master state and more than one master VR is present in the system If you detect a VR that is stuck in the master state when it should be a backup you must correct the situation.
  • Page 210 • the Virtual Router is not in a hold-down state • the corresponding VLAN is up • the critical IP feature is enabled • the critical IP address is set to one of the local L3 VLAN IP addresses Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 211: Vr Is Stuck In The Backup State When It Should Be The Master And No Master Is Present

    VR is stuck in the backup state when it should be the master and no master is present Showing logging About this task You can display log messages for your switch. Procedure 1. At the ACLI command prompt, enter the show logging command to display device log messages.

  • Page 212: Configure Device For Master Or Backup

    Configure device for master or backup Set the device to be the master or backup. Task flow: Configure device for master or backup You can use the following task flow to help configure a VR as a master or backup. Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 213 VR is stuck in the backup state when it should be the master and no master is present Figure 104: Configure device for master or backup Showing the verbose version of the IP VRRP interface details About this task You can use the following procedure to verify critical information for the VRRP interface. Procedure 1.

  • Page 214: Preempt Mode Is Not Working

    The device will always work with the default preempt behavior. The default preempt setting is ‘True’, which means that an existing Master will always be preempted by a new, higher priority or higher IP address router. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 215: Work Flow: Preempt Mode Is Not Working

    Preempt mode is not working Work flow: Preempt mode is not working The following work flow assists you to determine the solution for preempt mode that does not function. Figure 105: Preempt mode is not working Configure preempt action The preempt action setting is a trigger designed to manually terminate the active hold down state of a VR.
  • Page 216 • the VR is not in the hold-down state • the corresponding VLAN is up • the critical IP feature is enabled • the critical IP address is set to one of the local L3 VLAN IP addresses Troubleshooting December 2013 Comments? infodev@avaya.com...
  • Page 217 Preempt mode is not working Setting the preempt action About this task You can configure the preempt action to manual operation. Procedure 1. At the ACLI command prompt, enter the ip vrrp <1-255> action preempt command to configure the preempt. 2.
  • Page 218 Troubleshooting layer 2 and layer 3 Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 219: Chapter 11: Common Procedures, Command Mode Basics

    Chapter 11: Common procedures, command mode basics About this task You can move from User EXEC mode to Privileged EXEC mode by using the enable command at the command prompt. If you are currently in Privileged EXEC mode, you can move into Global Configuration mode using the configure terminal command.

  • Page 220: Privileged Exec Mode

    3. The completely exit the ACLI, type logout. Interface Configuration mode About this task The Interface Configuration mode command prompt appears as: ERS5000(config-if)#. Procedure 1. Entrance to this command mode depends on the type of interface you want to configure. Troubleshooting December 2013 Comments? infodev@avaya.com...

  • Page 221: Router Configuration Mode

    Router Configuration mode For example, use the interface fastethernet <port number> command to enter the Interface Configuration mode and configure a port. 2. To return to Global Configuration mode, type exit. 3. To return to Privileged Exec mode, type exit. 4.
  • Page 222 Common procedures, command mode basics Troubleshooting December 2013 Comments? infodev@avaya.com...

This manual is also suitable for:

5600 series

Table of Contents