[ad name=”ad-articlebodysq”]In my previous post I outlined all the commands that you would need to configure a Nortel Ethernet Routing Switch 5520 to support deploying Nortel’s i2002/i2004 Internet Telephones using LLDP-MED in conjunction with ADAC (Automatic Detection and Automatic Configuration). If you followed the steps your probably well on your way to getting things work. Unfortunately things can sometimes go wrong even with the best documentation and understanding of the product.
In this post I’m going to outline some of the basic commands you can use to troubleshoot any issues you might have between the ERS5520 and the i2002/i2004 phones.
Q. How can I check the log file?
A. show logging
ERS-5520# show logging Type Time Idx Src Message ---- ----------------------- ---- --- ------- S 00:00:00:00 1 NVR SNTP: Could not sync to NTP servers. S 2007-04-05 17:18:08 GMT 2 NVR SNTP: Could not sync to NTP servers. S 2007-04-05 17:22:07 GMT 3 NVR Audit data initialized - incorrect magic number: 0xffffffff I 2007-04-19 01:21:03 GMT 4 Web server starts service on port 80. I 2007-04-19 01:21:19 GMT 5 IGMP: Unknown Multicast Filter disabled I 2007-04-19 01:21:19 GMT 6 PoE Port Detection Status: Port 1 Status: Delivering Power I 2007-04-19 01:21:22 GMT 7 PoE Port Detection Status: Port 35 Status: Delivering Power I 2007-04-19 01:21:49 GMT 8 Port 0/47 reenabled by VLACP I 2007-04-19 01:21:49 GMT 9 Port 0/48 reenabled by VLACP I 2007-04-19 01:23:05 GMT 10 SNTP: First synchronization successful. I 2007-04-19 01:23:18 GMT 11 Warm Start Trap I 2007-04-19 01:23:19 GMT 12 Link Up Trap Port: 1 I 2007-04-19 01:23:20 GMT 13 Trap: pethPsePortOnOffNotification I 2007-04-19 01:23:20 GMT 14 Trap: bsAdacPortConfigNotification for Port: 47, Config: Applied
Q. How can I check the state of a port?
A. show interfaces
ERS-5520# show interfaces 47,48 Status Auto Flow Port Trunk Admin Oper Link LinkTrap Negotiation Speed Duplex Control ---- ----- ------- ---- ---- -------- ----------- -------- ------ ------- 47 1 Enable Up Up Enabled Enabled 1000Mbps Full Asymm 48 1 Enable Up Up Enabled Enabled 1000Mbps Full Asymm
Q. How can I check the VLACP state of a port?
A. show vlacp interface
ERS-5520# show vlacp interface 47,48 =============================================================================== VLACP Information =============================================================================== PORT ADMIN OPER HAVE FAST SLOW TIMEOUT TIMEOUT ETH MAC ENABLED ENABLED PARTNER TIME TIME TYPE SCALE TYPE ADDRESS ------------------------------------------------------------------------------- 0/47 true true yes 500 30000 short 3 8103 01:80:c2:00:11:00 0/48 true true yes 500 30000 short 3 8103 01:80:c2:00:11:00
Q. How can I check what FDB entries have been learned on a specific port?
A. show mac-address-table port
ERS-5520# show mac-address-table port 47 Mac Address Table Aging Time: 300 Number of addresses: 9 MAC Address Source MAC Address Source ----------------- -------- ----------------- -------- 00-00-5E-00-01-01 Trunk: 1 00-15-40-45-68-00 Trunk: 1 00-17-D1-57-30-00 Trunk: 1 00-17-D1-57-30-10 Trunk: 1 00-17-D1-57-32-03 Trunk: 1 00-18-B0-CC-F0-00 Trunk: 1 00-18-B0-CC-F0-10 Trunk: 1 00-18-B0-CC-F2-01 Trunk: 1 00-1B-25-4C-74-00 Trunk: 1
Q. How can I check the FDB table for a specific MAC address?
A. show mac-address-table address
ERS-5520# show mac-address-table address 00:18:b0:cc:f0:10 Mac Address Table Aging Time: 300 Number of addresses: 1 MAC Address Source MAC Address Source ----------------- -------- ----------------- -------- 00-18-B0-CC-F0-10 Trunk: 1
Q. How can I check to see if ADAC has been configured/enabled?
A. show adac
ERS-5520# show adac ADAC Global Configuration --------------------------------------- ADAC: Enabled Operating Mode: Tagged Frames Traps Control Status: Enabled Voice-VLAN ID: 12 Call Server Port: None Uplink Port: 48
Q. How can I check to see if ADAC has been applied to a specific port?
A. show adac interface
ERS-5520# show adac interface 20 Port Auto-Detection Auto-Configuration ---- -------------- ------------------ 20 Enabled Applied
Q. How can I check to see the LLDP information with a specific port?
A. show lldp port neighbor detail
ERS-5520# show lldp port 20 neighbor detail ------------------------------------------------------------------------------- lldp neighbor ------------------------------------------------------------------------------- Port: 20 Index: 5 Time: 8 days, 13:47:49 ChassisId: Network address ipV4 192.168.100.101 PortId: MAC address 00:17:65:ff:e0:fc SysCap: TB / TB (Supported/Enabled) PortDesc: Nortel IP Phone SysDescr: Nortel IP Telephone 2002, Firmware:0604DAS PVID: 0 PPVID Supported: not supported(0) VLAN Name List: none PPVID Enabled: none Dot3-MAC/PHY Auto-neg: supported/enabled OperMAUtype: 100BaseTXFD PSE MDI power: not supported/disabled Port class: PD PSE power pair: signal/not controllable Power class: 2 LinkAggr: not aggregatable/not aggregated AggrPortID: 0 MaxFrameSize: 1522 PMD auto-neg: 10Base(T, TFD), 100Base(TX, TXFD) MED-Capabilities: CNLDI / CNDI (Supported/Current) MED-Device type: Endpoint Class 3 MED-Application Type: Voice VLAN ID: 12 L2 Priority: 6 DSCP Value: 46 Tagged Vlan, Policy defined Med-Power Type: PD Device Power Source: Unknown Power Priority: High Power Value: 5.4 Watt HWRev: FWRev: 0604DAS SWRev: SerialNumber: ManufName: Nortel-01 ModelName: IP Phone 2002 AssetID: ------------------------------------------------------------------------------- Port: 20 Index: 6 Time: 8 days, 13:48:20 ChassisId: Network address ipV4 10.119.241.50 PortId: MAC address 00:17:65:ff:e0:fc SysCap: TB / TB (Supported/Enabled) PortDesc: Nortel IP Phone SysDescr: Nortel IP Telephone 2002, Firmware:0604DAS PVID: 0 PPVID Supported: not supported(0) VLAN Name List: 12 PPVID Enabled: none Dot3-MAC/PHY Auto-neg: supported/enabled OperMAUtype: 100BaseTXFD PSE MDI power: not supported/disabled Port class: PD PSE power pair: signal/not controllable Power class: 2 LinkAggr: not aggregatable/not aggregated AggrPortID: 0 MaxFrameSize: 1522 PMD auto-neg: 10Base(T, TFD), 100Base(TX, TXFD) MED-Capabilities: CNLDI / CNDI (Supported/Current) MED-Device type: Endpoint Class 3 MED-Application Type: Voice VLAN ID: 12 L2 Priority: 6 DSCP Value: 46 Tagged Vlan, Policy defined Med-Power Type: PD Device Power Source: Unknown Power Priority: High Power Value: 5.4 Watt HWRev: FWRev: 0604DAS SWRev: SerialNumber: ManufName: Nortel-01 ModelName: IP Phone 2002 AssetID: ------------------------------------------------------------------------------- Sys capability: O-Other; R-Repeater; B-Bridge; W-WLAN accesspoint; r-Router; T-Telephone; D-DOCSIS cable device; S-Station only. Med Capabilities-C: N-Network Policy; L-Location Identification; I-Inventory; S-Extended Power via MDI - PSE; D-Extended Power via MDI - PD.
Those are some of the commands that you might have to execute if you needed to perform troubleshooting between an ERS5520 and a i2002/i2004 phone.
Your DHCP server logs will be your friend during your troubleshooting. If you don’t see the phone making a DHCP request (or a request in the proper VLAN) then you should check that ADAC was applied to the switch port. ADAC is the component that will automatically add the switch port (the switch port the phone is connected to) into the Voice VLAN. If ADAC is not applied (or enabled) on the port then you’ll be able to see that the switch port in question is only a member of the Data VLAN. You need to remember that ADAC works on MAC address ranges. You need to check that the MAC address of your phone is in the ADAC MAC address table.
5520-48T-PWR# show adac mac-range-table Lowest MAC Address Highest MAC Address ------------------------ ------------------------- 00-0A-E4-01-10-20 00-0A-E4-01-23-A7 00-0A-E4-01-70-EC 00-0A-E4-01-84-73 00-0A-E4-01-A1-C8 00-0A-E4-01-AD-7F 00-0A-E4-01-DA-4E 00-0A-E4-01-ED-D5 00-0A-E4-02-1E-D4 00-0A-E4-02-32-5B 00-0A-E4-02-5D-22 00-0A-E4-02-70-A9 00-0A-E4-02-D8-AE 00-0A-E4-02-FF-BD 00-0A-E4-03-87-E4 00-0A-E4-03-89-0F 00-0A-E4-03-90-E0 00-0A-E4-03-B7-EF 00-0A-E4-04-1A-56 00-0A-E4-04-41-65 00-0A-E4-04-80-E8 00-0A-E4-04-A7-F7 00-0A-E4-04-D2-FC 00-0A-E4-05-48-2B 00-0A-E4-05-B7-DF 00-0A-E4-06-05-FE 00-0A-E4-06-55-EC 00-0A-E4-07-19-3B 00-0A-E4-08-0A-02 00-0A-E4-08-7F-31 00-0A-E4-08-B2-89 00-0A-E4-09-75-D8 00-0A-E4-09-BB-9D 00-0A-E4-09-CF-24 00-0A-E4-09-FC-2B 00-0A-E4-0A-71-5A 00-0A-E4-0A-9D-DA 00-0A-E4-0B-61-29 00-0A-E4-0B-BB-FC 00-0A-E4-0B-BC-0F 00-0A-E4-0B-D9-BE 00-0A-E4-0C-9D-0D Total Ranges: 21
If the MAC address of your i2002/i2004 phone does not match any of the MAC address ranges in the switch you’ll need to add a range to include those MAC addresses. If the MAC address of your i2002 phone was 00:18:b0:11:22:33 you could use the following commands;
5520-48T-PWR> enable 5520-48T-PWR# config terminal 5520-48T-PWR (config)# adac mac-range-table low-end 00:18:b0:00:00:00 high-end 00:18:b0:ff:ff:ff
You might think you could configure a port mirror and run a quick packet capture to understand what’s going on… unfortunately you cannot configure any port with port mirroring that has ADAC enabled.
Thats all for now.
The last step is the DHCP server so stay tuned.
Hi ,
I have configured the port-mirroring in the ETHERNET ROUTING SWITCH 4548GT WITH 48 1. You can see in the configuration :
#port-mirroring mode XrxOrXtx monitor-port 1 mirror-port-X 12
###############################################
#show port-mirroring
Monitoring Mode: XrxOrXtx ( Port X )
Monitor Unit/Port: 1
Unit/Port X: 12
when i tray to snif the packets, Ihe traffic in one direction.
can you help me .
best regards
Hi Hammiche,
I believe you have the proper syntax. Your sniffer is connected to port 1 correct?
What version of software is the switch running?
If I can find the time I’ll test it on a 4548GT-PWR that I have in our testlab.
Cheers!
Hi Michael,
Thank you for your response.
Ihe version of software is:
FW: 4500_5203_diag.bin
SW: 4500_520009s.img
Requires that the sniffer is connected to the 1 or 12?
Best regards
Sofiane hammiche
Hi Sofiane,
Looking at the command you provided above you are mirroring traffic from port 12 to port 1 so you’ll need to place your sniffer on port 1.
I would be really surprised if this didn’t work.
Cheers!
Michael,
When I set
#port-mirroring mode XrxOrXtx monitor-port 12 mirror-port-X 38
My device with sniffer on port 12 would drop from the network
until I disable port mirroring.
I’m using Nortel ERS-5520 switch
Any thoughts on this?
Why would my device with sniffer drop from the network?
Hi Wesley,
On a legacy Ethernet Switch 450/470 you could expect that the monitor port would continue to function as a usable switch port. Somewhere along the line, I’m not sure if it’s always been this way with the 5500 series switches or was introduced in some software release, the port will no longer function as a usable switch port while it’s configured as a monitor port. You’ll need 2 NICs in your sniffer (desktop/laptop/dolch) so you can connect one to the monitor port and another to a regular switch port if you want to have access to the network from the sniffer.
Cheers!
Hi, and thanks for response.It looks like this is the default behavior on Nortel ERS-5500 series switch. I’ve updated my switches to latest software and it is still the same issues.
Won’t be playing with this any more I guess this the way is designed to work on those switches.
However I got anothe question. I’m building remote office with VoIP over MPLS 2MB reserved bandwith for QoS applications. I’m going to use Nortel ERS-5520 as an edge switch in the remote office to configure phones and data. My question is what is your recomended router/switch to use to connect edge switch to MPLS network at the remote site. There will be about 50-60 voice and data connections at the other end. Any recomendations greatly appreciated.
Thanks
Wesley
I have two stacks of nortel 5510 switches. Four switches in each stack. I have created a MLT of four ports on each stack using ports 1/48,2/48,3/48,4/48 on each stack. I have turned off Spanning tree. Am I missing anything, will this work corrrectly using 4 ports on 4 switches?
what command show current loging such as “terminal monitor” in cisco world.
Unfortunately there is no such command in the ERS platform.
Cheers!