Manuals / Cisco Systems / Computer Equipment / Network Router

Cisco Systems DL-2159-05 manual Diagnostic Command Results, Eapdiag1on, 13-17

Models: DL-2159-05

1 332

Download 332 pages 33.19 Kb

Page 261

Chapter 13 Diagnostics and Troubleshooting

Using Command-Line Diagnostics

Diagnostic Command Results

This section describes the information displayed on the CLI for the diagnostic commands listed in Table 13-1.

:eap_diag1_on

Use the :eap_diag1_on command to display authentication progress for client devices authenticating through the access point. The steps in a successful authentication for a client device named Yakima might look like the following example:

EAP: Sending Identity Request

EAP: Received packet from Yakima

EAP: Received Identity Response

EAP: Forwarding packet to RADIUS server

RADIUS: Received packet for client Yakima

RADIUS: Received Challenge Request

RADIUS: Sending EAPOL packet to client

EAP: Received packet from Yakima

EAP: Forwarding packet to RADIUS server

RADIUS: Received packet for client Yakima

RADIUS: Received session timeout request of 60 seconds

RADIUS: Sending EAPOL packet to client

RADIUS: ACCEPT for Yakima

RADIUS: Found Cisco key

RADIUS: Sending EAPOL multicast key

RADIUS: Sending EAPOL session key parameters

EAP: Key set for client Yakima

The EAP and RADIUS prefixes show which system process is handling the communication.

Follow the steps in the “Entering Diagnostic Commands” section on page 13-16to open the CLI and enter the :eap_diag1_on command.

		Cisco Aironet 1200 Series Access Point Software Configuration Guide

	OL-2159-05			13-17
	OL-2159-05			13-17

Image 261

Cisco Systems DL-2159-05 manual Diagnostic Command Results, Eapdiag1on, 13-17

Contents

Text Part Number OL-2159-05 Corporate HeadquartersCopyright 2001-2003, Cisco Systems, Inc All rights reserved Iii N T E N T SNavigating Using the Map Windows Native Vlan ID WEP Not Set on the Wireless Phone Vii Settings on the Authenticator ConfigurationViii Event Notifications SetupSetting Up Administrator Authorization Snmp Setup Ssid Xii Audience and Scope OrganizationXiii Conventions Tip Means the following are useful tipsXiv Related Publications Obtaining DocumentationCisco.com Ordering Documentation Documentation CD-ROMDocumentation Feedback XviCisco TAC Website Opening a TAC Case Obtaining Technical AssistanceTAC Case Priority Definitions XviiXviii Obtaining Additional Publications and InformationA P T E R OverviewKey Features Quality of Service Support Management OptionsRoaming Client Devices Limitations and Restrictions What is QoS?Related Documents These documents are available on Cisco.comVlan Support What is a VLAN?Incorporating Wireless Devices into VLANs Vlan Example Level of AccessRoot Unit on a Wired LAN Network Configuration ExamplesAccess Points as Root Units on a Wired LAN Repeater Unit that Extends Wireless RangeAccess Point as Repeater Central Unit in an All-Wireless NetworkUsing the Management Interfaces Using the Web-Browser Interface for the First Time Using the Web-Browser InterfaceUsing the Management Pages in the Web-Browser Interface Button/Link DescriptionMap Window with Network Ports Pages Expanded Navigating Using the Map WindowsPreparing to Use a Terminal Emulator Using the Command-Line InterfaceChanging Settings with the CLI Connecting the Serial CableSetting Up the Terminal Emulator Function Description Selecting Pages and SettingsUsing Snmp Using a Telnet SessionApplying Changes to the Configuration Supported MIBs Radio Configuration and Basic Settings Express Setup Basic SettingsExpress Setup page contains the following settings Entering Basic SettingsSystem Name MAC AddressDefault IP Address Configuration Server ProtocolDefault IP Subnet Mask Default GatewayRoot-Unit Access Points Radio Network Optimization Optimize Radio Network For Security Setup LinkRadio Configuration Snmp Admin. CommunityRadio Network Compatibility Ensure Compatibility With Entering Identity Information Settings on the AP Radio IdentificationDefault IP Address Primary Port SettingsDefault IP Subnet Mask Service Set ID SsidEntering Radio Hardware Information Leap PasswordSettings on the AP Radio Hardware AP Radio Hardware page contains the following settingsAllow Broadcast Ssid to Associate? Data Rates Enable World ModeFrag. Threshold Transmit PowerRTS Threshold Max. RTS RetriesDefault Radio Channel Search for Less-Congested Radio ChannelRestrict Searched Channels Receive Antenna and Transmit Antenna Entering Advanced Configuration InformationAP Radio Advanced Page for Internal Radio AP Radio Advanced pages contain the following settings Settings on the AP Radio AdvancedRequested Status Packet ForwardingMaximum Multicast Packets/Second Default Multicast Address FiltersRadio Cell Role Ssid For Use By Infrastructure StationsClassify Workgroup Bridges as Network Infrastructure Use Aironet ExtensionsVlan Setup Link Quality of Service Setup LinkRequire Use of Radio Firmware Ethernet Encapsulation TransformPreferred Access Points Advanced Primary Ssid Setup LinkTemporal Key Integrity Protocol Broadcast WEP Key rotation interval secRadio Preamble Radio ModulationNon-Root Mobility Ethernet ConfigurationEntering Ethernet Hardware Information Settings on the Ethernet IdentificationSettings on the Ethernet Hardware Ethernet Hardware page contains the following settingsSpeed Loss of Backbone Connectivity # of Secs Loss of Backbone Connectivity ActionLoss of Backbone Connectivity Ssid Ethernet Advanced page contains the following settings Settings on the Ethernet AdvancedDefault Unicast and Multicast Address Filters Default Unicast Address Filter Always Unblock Ethernet When STP is DisabledOptimize Ethernet for OL-2159-05 Configuring VLANs Settings on the Vlan Setup Vlan setup page contains the following settingsEntering Vlan Information Maximum Number of Enabled Vlan IDs 802.1Q Encapsulation ModeVlan Summary Status Link Vlan 802.1Q TaggingSingle Vlan ID which allows Unencrypted packets Vlan Security PolicyOptionally allow Encrypted packets on the unencrypted Vlan Vlan NameBroadcast Domain Segmentation Native Vlan ConfigurationParameter TKIP/MICDeployment of Infrastructure and Non infrastructure Devices Primary and Secondary SSIDsVlan ID RADIUS-Based Vlan Access ControlVlan Criteria for Deploying Wireless VLANsWireless Vlan Deployment Example 5shows the wireless Vlan deployment scenario described above Obtaining and Recording Vlan ID and Setup Information Using the Configuration ScreensCreating and Configuring VLANs on the Access Point Creating the Native VlanVlan Setup Vlan ID #1 Setup Creating the Full- and Part-Time VLANs Creating the Guest Vlan Creating the Maintenance VlanCreating and Configuring the SSIDs AP Radio Internal Service Sets Configuring VLANs Wireless Vlan Deployment Example Enabling Vlan 802.1Q Tagging and Identifying the Native Vlan 11 AP Radio Service Sets Creating an Ssid for Infrastructure Devices Guidelines for Wireless Vlan DeploymentOL-2159-05 Configuring Filters and QoS Protocol Filtering Filter SetupEnter a descriptive filter set name in the Set Name field Creating a Protocol FilterFilter Set Enabling a Protocol Filter Address Filters MAC Address FilteringCreating a MAC Address Filter AP Radio Advanced AP Radio Primary Ssid QoS Configuration Settings on the Quality of Service Setup Use Symbol ExtensionsGenerate Qbss Element By Station Applying QoSSend Igmp General Query Traffic Category10 Protocol Filters Setup 12 Vlan ID By VlanBy Filter 13 Filters Priority SettingBy Dscp Value By CoS Value17 Vlan Setup Wireless QoS Deployment Example18 Vlan ID #xx WEP Not Set on the Wireless Phone WEP Set on the Wireless Phone20 AP Radio Internal Service Sets 21 AP Radio Internal Service Sets OL-2159-05 Configuring Proxy Mobile IP Introduction to Mobility in IP Proxy Mobile IPNomadic Approach Mobile ApproachMobile IP Explained Mobile IP Environment Mobile IP Traffic Pattern Proxy Mobile IP ExplainedBefore Deploying Proxy Mobile IP Components of a Proxy Mobile IP Network Issues to Consider While Deploying Proxy Mobile IPAgent Discovery How Proxy Mobile IP WorksHome Agent Subnet Mask Subnet Map ExchangeTunneling RegistrationProxy Mobile IP Security Proxy Mobile IP SetupGeneral Proxy Mobile IP SetupSettings on the Proxy Mobile IP General Authentication ServerEnable Proxy Mobile IP Authoritative AP nSettings on the Authenticator Configuration Local SA Bindings Settings on the Local SA BindingsStatistics Settings on the Proxy Mobile IP StatisticsAuthentication Failures for FA Authentication Failures for HAActive AAP MN IP AddressesConfiguring Proxy Mobile IP Settings on the Subnet Map TableView Subnet Map Table Configuring Proxy Mobile IP on Your Wired LAN 11 a Sample Network 13 AP Radio Internal Service Sets 15 Proxy Mobile IP General 17 Subnet Map Table 18 Authenticator Configuration 20 Network Configuration Screen for an Access Point Client 22 Passed Authentication Screen Configuring Other Settings Entering Time Server Settings Server SetupSettings on the Time Server Setup Entering Boot Server Settings Settings on the Boot Server SetupBoot Server Setup page contains the following settings Use Previous Configuration Server Settings Configuration Server ProtocolBootp Server Timeout sec Dhcp Multiple-Offer Timeout secDhcp Minimum Lease Duration min Dhcp Requested Lease Duration minDhcp Client Identifier Type Option DefinitionWeb Server Setup page contains the following settings Settings on the Web Server SetupDhcp Client Identifier Value Dhcp Class IdentifierDefault Web Root URL Default Help Root URLAllow Non-Console Browsing Http PortSettings on the Name Server Setup Entering Name Server SettingsDefault Domain Domain Name SystemSettings on the FTP Setup Entering FTP SettingsFTP Setup page contains the following settings Domain Name ServersRouting Setup Entering Routing Settings New Network Route SettingsRouting Setup page contains the following settings Association Table Display Setup Installed Network Routes listAssociation Table Filters Configuring Other Settings Association Table Display Setup Settings on the Association Table Filters Stations to ShowFields to Show Packets To/From Station Association Table AdvancedBytes To/From Station Primary SortAssociation Table Advanced Settings on the Association Table AdvancedHandle Station Alerts as Severity Level Rogue AP Alert Timeout minutesMaximum number of bytes stored per Station Alert packet Maximum Number of Forwarding Table EntriesEvent Display Setup Event Notification SetupSettings on the Event Display Setup Default Activity Timeout seconds Per Device ClassHow should Event Elapsed non-wall-clock Time be displayed? How should time generally be displayed?Severity Level at which to display events Severity Level DescriptionEvent Handling Setup 10 The Event Handling Setup Disposition of Events Settings on the Event Handling SetupHandle Station Events as Severity Level Maximum number of bytes stored per Alert packetEvent Notifications Setup Clear Alert StatisticsPurge Trace Buffer Should Notify-Disposition Events generate Snmp Traps? Settings on the Event Notifications SetupSnmp Trap Destination Snmp Trap CommunitySyslog Destination Address Should Syslog Messages use the Cisco Emblem Format?Syslog Facility Number Ieee Snmp Traps Should Generate the Following NotificationsSecurity Setup Encrypting Radio Signals with WEP Security OverviewLevels of Security Network Authentication Types Additional WEP Security FeaturesSequence for EAP Authentication Wired LAN Client Sequence for Open Authentication Combining MAC-Based, EAP, and Open AuthenticationProtecting the Access Point Configuration with User Manager Setting Up WEPTransmit? Key Contents Key Access Point Associated DeviceNot set Using Snmp to Set Up WEP Enabling Additional WEP Security FeaturesEnabling Message Integrity Check MIC Snmp Variable WEP Full WEP OffAP Radio Advanced Page for Internal Radio Enabling Temporal Key Integrity Protocol Tkip Enabling Broadcast WEP Key Rotation Setting Up Open or Shared Key Authentication Enabling EAP on the Access Point Setting Up EAP AuthenticationFirmware Version Draft 802.1x-2001 Access Point EAP Settings for Various Client Configurations Enabling EAP in Cisco Secure ACS Click Add New Access ServerSetting a Session-Based WEP Key Timeout Setting Up a Repeater Access Point As a Leap ClientAP Radio Identification Page for Internal Radio Enabling MAC-Based Authentication on the Access Point Setting Up MAC-Based Authentication11 Authenticator Configuration Security Setup Setting Up MAC-Based Authentication 12 AP Radio Advanced Authenticating Client Devices Using MAC Addresses or EAP Enabling MAC-Based Authentication in Cisco Secure ACS Summary of Settings for Authentication Types Authentication Types Required SettingsLeap EAP-TLS, EAP-MD5 Attribute ID Description Radius Attributes Sent by the Access PointAcct-Session-Id Acct-Delay-TimeAcct-Authentic VSA attribute Nas-location Vlan-id Auth-algo-typeAcct-Terminate-Cause Setting Up Backup Authentication ServersSetting Up Administrator Authorization Creating a List of Authorized Management System Users 14 Security Setup16 User Management Window Click User Information. The User Information page appears Setting up Centralized Administrator AuthenticationClick Add New User. The User Management window appears Click Apply. You are returned to the User Information18 Authenticator Configuration System Flow Notes Authorization Parameters Network Management Using the Association Table Setting the Display OptionsBrowsing to Network Devices Station Using Station PagesStation Identification and Status Information on Station PagesRate, Signal, and Status Information To Station InformationFrom Station Information Performing Pings and Link Tests Hops and Timing InformationPerforming a Ping Click Link Test Performing a Link TestUsing the Network Map Window Deauthenticating and Disassociating Client DevicesClearing and Updating Statistics Using Cisco Discovery Protocol MIB for CDP Settings on the CDP SetupPort Assignments Assigning Network PortsSettings on the Port Assignments Enabling Wireless Network AccountingAccounting Setup Settings on the Accounting SetupAttribute Definition Accounting AttributesRadiusipadr OL-2159-05 10-1 Managing Firmware and ConfigurationsUpdating Firmware Full Update of the Firmware ComponentsUpdating with the Browser from a Local Drive 10-210-3 Selective Update of the Firmware Components10-4 Updating from a File Server10-5 Update All Firmware From File Server10-6 Update Firmware From File Server10-7 Retrieving Firmware and Web Page Files10-8 Distributing Firmware10-9 Distributing a Configuration10-10 Limiting Distributions10-11 Downloading the Current ConfigurationUploading from a Local Drive Uploading a ConfigurationUploading from a File Server 10-1210-13 Resetting the Configuration10-14 Restarting the Access Point11-1 Management System SetupSnmp Setup Settings on the Snmp Setup11-2 Using the Database Query Settings on the Database Query11-3 Console and Telnet Setup Changing Settings with the Database Query11-4 Settings on the Console/Telnet Using Secure Shell11-5 11-6 12-1 Special Configurations12-2 Setting Up a Repeater Access Point12-3 12-4 12-5 Using Hot Standby Mode12-6 12-7 12-8 13-1 Sections in this chapter includeNetwork Diagnostics Using Diagnostic PagesSelections on the Network Diagnostics 13-213-3 Radio Diagnostics TestsVlan Summary Status SSIDs Int, Mod13-4 13-5 Network PortsIdentifying Information and Status Data Received13-6 Data Transmitted Ethernet Port13-7 Configuration Information Receive Statistics13-8 AP Radio Transmit Statistics13-9 AP Radio Port 13-1013-11 13-12 Display OptionsDisplay Settings Event Log13-13 Saving the Log Log HeadingsEvent Log Summary 13-14Using Command-Line Diagnostics Command Information Displayed13-15 13-16 Entering Diagnostic CommandsDiagnostic Command Results Eapdiag1on13-17 Eapdiag2on Vxdiagarpshow13-18 13-19 13-20 Vxdiagcheckstack13-21 Vxdiaghostshow13-22 Vxdiagi13-23 Vxdiagipstatshow13-24 Vxdiagmemshow13-25 Vxdiagmuxshow13-26 Vxdiagrouteshow13-27 VxdiagtcpstatshowTracing Packets Reserving Access Point Memory for a Packet Trace Log FileVxdiagudpstatshow 13-2813-29 Tracing Packets for Specific DevicesViewing Packet Trace Data Tracing Packets for Ethernet and Radio PortsPackets Stored in a Log File 13-30Checking the Top Panel Indicators Packets Displayed on the CLI13-31 13-32 Message Ethernet Status Radio Meaning Type Indicator13-33 Finding an Access Point by Blinking the Top Panel IndicatorsEAP Authentication Requires Matching 802.1x Protocol Drafts Checking Basic SettingsWEP Keys 13-3413-35 Firmware Version Draft13-36 Resetting to the Default Configuration13-37 13-38 Channels, Power Levels, and Antenna Gains Channels Ieee 802.11aRegulatory Domains Ieee 802.11b Maximum Power Levels and Antenna GainsRegulatory Domain Antenna Gain dBi Maximum Power Level mW Maximum Power Level mWRegulatory Domain With 6-dBi Antenna Gain Americas -A 100 Eirp maximum 13.5 Emea -E MW Eirp maximumRegulatory Domain Antenna Gain dBi Maximum Power Level mW OL-2159-05 Protocol Filter Lists ISO Designator ProtocolVines UDP XNS-IDP ISO-TP4 ISO-CNLP CnlpSVP SmtpHttp TftpTsap POP2BGP CmotIRC RIPRadius CVSRFE Event Log Messages Message Formats Default FormatCisco Emblem Format With a timestamp, messages look like this exampleSyslog Severity Emblem Severity LoginfoLogemerg LogalertPossible Cause or Message DescriptionsSeverity Event Description Mnemonic Recommended Action ReasonHost DeviceNewaddr SrchostIfDescr Srchost to port ifDescr Desthost length pktLenReqlen bytes IfDescr error= errornum Packet from srchost to desthostDesthost on port ifDescr For procedure on port ifDescr IfDescr error=erronumSrchost to desthost on port From srchost to desthost on portSrchost on port ifDescr Version Srchost to desthost of unknownDesthost Rebootinf SysrebootAdmin PrtrarpipPort device Status PktLen IfDescr errno=errnoUnenc ENC WEPXidexp EtherconMedia port Frame Frame bytesUsername Username FailedPort devName unit UnitHstndbyen 1XVERAssoclost HstndbyethAcctcon InstkeyAmngrreq NulsesNosbuf NorbufNoaserv OpenVlanID IfIndex Awcmib IfIndex MIBBadsize NomibdkeyTaskfailed TaskstartedSsidIdx Statuses and Reasons Appendix C Event Log Messages Statuses and Reasons OL-2159-05 IN-1 NumericsDhcp CDP MIBCLI DtimIN-3 Ethernet Locate unit by flashing LEDs Radio trafficIN-4 IN-5 PspfSSH VlanIN-6 IN-7 Warm restartIN-8