1-6 Semester 8 Internetwork Troubleshooting v1.0 - Lab 10.3.2 Copyright 2001, Cisco Systems, Inc. Lab 10.3.2: IPXTroubleshooting1 Frame Relay Atlas 550 ABC2 1/1 2/1 S0/0 ABC2.0.2.1 S0/0 ABC2.0.2.0 SanJose1 Singapore Fa0/0 ABC3.0.3.0 Fa0/0 ABC1.0.1.0 Novell Fa0/0 ABC1.0.1.1 PVC DLCI 17DLCI 16 Objective Utilize a systematic approach to troubleshooting an IPX network. Scenario As the Enterprise Network Administrator, you are responsible for maintaining connectivity between remote offices at your company. SanJose1 router is lo- cated at the corporate office and the Singapore router is located at one of the many branch offices. Within the IPX core you are using EIGRP and you’re run- ning IPX RIP on the LANs. Over the past weekend the Singapore router was upgraded to Cisco a 2600 router as part of an ongoing maintenance procedure. Lab Tasks Build the network according to the diagram above and load the appropriate ‘broken’ configuration files to each router. Save the configurations and reload each router. Clock rates have been applied to all serial interfaces. For the pur- pose of this lab, you will be using a router to simulate a Novell IPX Server. Assume the Novell configurations are correct. Confirm connectivity by performing the ping ipx command between the routers. The format for an ipx ping is ping ipx Network.Node. All pings should be successful. Use show ipx interface command to find the ipx address for an interface. SanJose1#show ipx interface s0/0.1 Serial0.1 is up, line protocol is up IPX address is ABC2.0000.0002.0001 [up] 2-6 Semester 8 Internetwork Troubleshooting v1.0 - Lab 10.3.2 Copyright 2001, Cisco Systems, Inc. Delay of this IPX network, in ticks is 6 throughput 0 link delay 0 IPXWAN processing not enabled on this interface. IPX SAP update interval is 60 seconds IPX type 20 propagation packet forwarding is disabled Incoming access list is not set Outgoing access list is not set IPX helper access list is not set SAP GGS output filter list is not set SAP GNS processing enabled, delay 0 ms, output filter list is not set SAP Input filter list is not set SAP Output filter list is not set SAP Router filter list is not set Input filter list is not set Output filter list is not set Router filter list is not set Netbios Input host access list is not set Netbios Input bytes access list is not set Netbios Output host access list is not set Netbios Output bytes access list is not set Updates each 60 seconds aging multiples RIP: 3 SAP: 3 SAP interpacket delay is 55 ms, maximum size is 480 bytes RIP interpacket delay is 55 ms, maximum size is 432 bytes RIP response delay is not set Watchdog processing is currently disabled SPX spoofing is disabled, idle time 60 IPX accounting is disabled IPX fast switching is configured (enabled) RIP packets received 0, RIP packets sent 0, 0 Throttled RIP specific requests received 0, RIP specific replies sent 0 RIP general requests received 0, 0 ignored, RIP general replies sent 0 SAP packets received 0, SAP packets sent 0, 0 Throttled SAP GNS packets received 0, SAP GNS replies sent 0 SAP GGS packets received 0, 0 ignored, SAP GGS replies sent 0 SanJose1#ping ipx abc1.0.1.1 Type escape sequence to abort. Sending 5, 100-byte IPX Novell Echoes to ABC1.0000.0001.0001, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 44/45/48 ms Scenario San Jose’s local IT call center manager has just informed you that his staff has been flooded with calls over the past twenty minutes. Due to the volume of complaints, this issue has been escalated to you. Wanting to find a starting point, you ask him to define the problem. He responds with, ‘users are com- plaining that they are unable to login to the HR database….which is located in the Singapore office.’ Step 1 Define your problem. Multiple users on network ABC3 are unable to see a Novell server on network ABC1. No complaints from the Singapore remote office. An upgrade of the re- mote router was performed over the weekend. Step 2 Gather the Facts. 3-6 Semester 8 Internetwork Troubleshooting v1.0 - Lab 10.3.2 Copyright 2001, Cisco Systems, Inc. Based on the current information you have, it is safe to assume that the week- end upgrade didn’t go as smooth as they thought. You then login to the local router at San Jose to gather more information about the problem. Issue the following commands to narrow down your possibilities. The first thing to check is your connections. SanJose1#show ipx interface brief Interface IPX Network Encapsulation Status IPX State FastEthernet0/0 ABC3 NOVELL-ETHER up [up] Serial0/0 unassigned not config'd up n/a Serial0/0.1 ABC2 FRAME-RELAY up [up] FastEthernet0/1 unassigned not config'd administratively down n/a Serial0/1 unassigned not config'd administratively down n/a Serial0/2 unassigned not config'd administratively down n/a Then check the routing table to see if you have the appropriate routes. Every- thing looks fine. Note – in a very large network you can enter a network number to limit the display. SanJose1#show ipx route Codes: C - Connected primary network, c - Connected secondary network S - Static, F - Floating static, L - Local (internal), W - IPXWAN R - RIP, E - EIGRP, N - NLSP, X - External, A - Aggregate s - seconds, u - uses, U - Per-user static 3 Total IPX routes. Up to 1 parallel paths and 16 hops allowed. No default route known. C ABC2 (FRAME-RELAY), Se0/0.1 C ABC3 (NOVELL-ETHER), Fa0/0 E ABC1 [20514560/1] via ABC2.0000.0002.0000, age 00:00:31, 11u, Se0/0.1 Perform an ipx ping to confirm your routing table results. SanJose1#ping ipx abc1.0.1.1 Type escape sequence to abort. Sending 5, 100-byte IPX Novell Echoes to ABC1.0000.0001.0001, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 44/44/48 ms The show ipx server command displays a list of all ipx servers discovered through SAP advertisements. Notice here that only the local servers are dis- played. SanJose1#show ipx servers Codes: S - Static, P - Periodic, E - EIGRP, N - NLSP, H - Holddown, + = detail U - Per-user static 2 Total IPX Servers Table ordering is based on routing and server info Type Name Net Address Port Route Hops Itf S 4 SANJOSE1_FILE1 ABC3.0000.0000.0001:0022 conn 1 Fa0/0 S 7 SANJOSE1_PRINT1 ABC3.0000.0000.0002:0021 conn 1 Fa0/0 4-6 Semester 8 Internetwork Troubleshooting v1.0 - Lab 10.3.2 Copyright 2001, Cisco Systems, Inc. The show ipx interface command provides a great deal of useful informa- tion. Using this display you can verify and troubleshoot interface configuration problems. SanJose1#show ipx interface s0/0.1 Serial0/0.1 is up, line protocol is up IPX address is ABC2.0000.0002.0001 [up] Delay of this IPX network, in ticks is 6 throughput 0 link delay 0 IPXWAN processing not enabled on this interface. IPX SAP update interval is 60 seconds IPX type 20 propagation packet forwarding is disabled Incoming access list is not set Outgoing access list is not set IPX helper access list is not set SAP GGS output filter list is not set SAP GNS processing enabled, delay 0 ms, output filter list is not set SAP Input filter list is not set SAP Output filter list is 1000 SAP Router filter list is not set Input filter list is not set Output filter list is not set Router filter list is not set Netbios Input host access list is not set Netbios Input bytes access list is not set Netbios Output host access list is not set Netbios Output bytes access list is not set Updates each 60 seconds aging multiples RIP: 3 SAP: 3 SAP interpacket delay is 55 ms, maximum size is 480 bytes RIP interpacket delay is 55 ms, maximum size is 432 bytes RIP response delay is not set Watchdog processing is currently disabled SPX spoofing is disabled, idle time 60 IPX accounting is disabled IPX fast switching is configured (enabled) RIP packets received 9, RIP packets sent 8, 0 Throttled RIP specific requests received 0, RIP specific replies sent 0 RIP general requests received 1, 0 ignored, RIP general replies sent 1 SAP packets received 1, SAP packets sent 3, 0 Throttled SAP GNS packets received 0, SAP GNS replies sent 0 SAP GGS packets received 1, 0 ignored, SAP GGS replies sent 1 Step 3 Based on your observations of the SanJose1 router, you are certain there is a communications problem to the Novell server in Singapore. You request de- tailed observations from the IT staff member in Singapore. Use the following commands below to help gather facts about the current situa- tion in Singapore. Singapore#show ipx route Codes: C - Connected primary network, c - Connected secondary network S - Static, F - Floating static, L - Local (internal), W - IPXWAN R - RIP, E - EIGRP, N - NLSP, X - External, A - Aggregate s - seconds, u - uses, U - Per-user static 3 Total IPX routes. Up to 1 parallel paths and 16 hops allowed. No default route known. C ABC1 (NOVELL-ETHER), Fa0/0 C ABC2 (FRAME-RELAY), Se0/0.1 E ABC3 [2172416/1] via ABC2.0000.0002.0001, age 00:02:33, 5u, Se0/0.1 5-6 Semester 8 Internetwork Troubleshooting v1.0 - Lab 10.3.2 Copyright 2001, Cisco Systems, Inc. Singapore#show ipx servers Codes: S - Static, P - Periodic, E - EIGRP, N - NLSP, H - Holddown, + = detail U - Per-user static 3 Total IPX Servers Table ordering is based on routing and server info Type Name Net Address Port Route Hops Itf E 4 SANJOSE1_FILE1 ABC3.0000.0003.0001:0022 2172416/01 2 Se0/0.1 S 4 SINGAPORE_FILE1 ABC1.0000.0001.0001:0021 conn 1 Fa0/0 S 7 SINGAPORE_PRINT1 ABC1.0000.0001.0002:0069 conn 1 Fa0/0 Singapore#show ipx interface serial 0/0.1 Serial0/0.1 is up, line protocol is up IPX address is ABC2.0000.0002.0000 [up] Delay of this IPX network, in ticks is 6 throughput 0 link delay 0 IPXWAN processing not enabled on this interface. IPX SAP update interval is 60 seconds IPX type 20 propagation packet forwarding is disabled Incoming access list is not set Outgoing access list is not set IPX helper access list is not set SAP GGS output filter list is not set SAP GNS processing enabled, delay 0 ms, output filter list is not set SAP Input filter list is not set SAP Output filter list is 1000 SAP Router filter list is not set Input filter list is not set Output filter list is not set Router filter list is not set Netbios Input host access list is not set Netbios Input bytes access list is not set Netbios Output host access list is not set Netbios Output bytes access list is not set Updates each 60 seconds aging multiples RIP: 3 SAP: 3 SAP interpacket delay is 55 ms, maximum size is 480 bytes RIP interpacket delay is 55 ms, maximum size is 432 bytes RIP response delay is not set Watchdog processing is currently disabled SPX spoofing is disabled, idle time 60 IPX accounting is disabled IPX fast switching is configured (enabled) RIP packets received 170, RIP packets sent 180, 0 Throttled RIP specific requests received 0, RIP specific replies sent 0 RIP general requests received 1, 0 ignored, RIP general replies sent 1 SAP packets received 3, SAP packets sent 6, 0 Throttled SAP GNS packets received 0, SAP GNS replies sent 0 SAP GGS packets received 0, 0 ignored, SAP GGS replies sent 0 Step 4 Consider the possibilities. Use the information you have and your knowledge of Cisco products to isolate the problem. SAP advertisements are not being sent across the WAN link. The SAP Output filter list 1000 is applied to the Singapore serial interface. It may be improperly configured. Step 5 Create an action plan. 6-6 Semester 8 Internetwork Troubleshooting v1.0 - Lab 10.3.2 Copyright 2001, Cisco Systems, Inc. Confirm the configuration of access list 1000 on the Singapore router that was applied to outgoing SAP advertisements. Change as necessary. Keep in mind that removing or disabling access list removes the security that the list was meant to provide. Step 6 Implement the action plan. Confirm the configuration of access list 1000 on the Singapore router. Singapore#show access-lists IPX sap access list 1000 deny ABC1 permit FFFFFFFF The first line in this access list denies any advertisements in Singapore’s local network from reaching San Jose. This is definitely incorrect. Company policy states that print servers should be used locally, thereby requiring an access list. Corrections are needed for access-list 1000: Singapore#(config)no access-list 1000 Singapore#(config)access-list 1000 deny ABC1.0000.0001.0002 Singapore#(config)access-list 1000 permit FFFFFFFF Step 7 Observe the results of the action plan. Login to the SanJose1 router. Check if SAP is being advertised across the frame relay connection. Be sure to wait at least 60 seconds since the default update time for SAP updates is 60 seconds. Issue the show ipx servers command: SanJose1#show ipx servers Codes: S - Static, P - Periodic, E - EIGRP, N - NLSP, H - Holddown, + = detail U - Per-user static 2 Total IPX Servers Table ordering is based on routing and server info Type Name Net Address Port Route Hops Itf S 4 SANJOSE1_FILE1 ABC3.0000.0003.0001:0022 conn 1 Fa0/0 S 7 SANJOSE1_PRINT1 ABC3.0000.0003.0002:0021 conn 1 Fa0/0 E 4 SINGAPORE_FILE1 ABC1.0000.0001.0001:0021 2172416/01 2 Se0/0.1 Step 8 Document your work. . SANJOSE1_FILE1 ABC3.0000.0003.00 01: 0022 217 2 416 / 01 2 Se0/0 .1 S 4 SINGAPORE_FILE1 ABC1.0000.00 01. 00 01: 00 21 conn 1 Fa0/0 S 7 SINGAPORE_PRINT1 ABC1.0000.00 01. 0002:0069. ABC3.0000.0003.00 01: 0022 conn 1 Fa0/0 S 7 SANJOSE1_PRINT1 ABC3.0000.0003.0002:00 21 conn 1 Fa0/0 E 4 SINGAPORE_FILE1 ABC1.0000.00 01. 00 01: 00 21 217 2 416 / 01 2 Se0/0 .1 Step 8 Document