Frame-Relay problems (United Kingdom B.T)

d.bigerstaff · ‎08-30-2007

Hi there,

I am having difficulty getting my Frame Relay working. I have a CISCO TAC open on this case. They have asked me to check with my ISP if anything if wrong on their end. They have just checked and believe everything to be ok.

The encapsulation is IETF, VCI 76, VPI 1 and dlci 16. "Show ip int brief" show serial0/1/0 and serial0/1/0.2 as status up and protocol up.

Please could you take a look at the following show commands and see if anything is obviously missing or wrong. Also if there is any other debugs or show commands that would help please let me know.

Ctree-C2851-CME#show interfaces

Serial0/1/0 is up, line protocol is up

Hardware is GT96K Serial

MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation FRAME-RELAY IETF, loopback not set

Keepalive set (10 sec)

CRC checking enabled

LMI enq sent 69522, LMI stat recvd 69523, LMI upd recvd 0, DTE LMI up

LMI enq recvd 0, LMI stat sent 0, LMI upd sent 0

LMI DLCI 0 LMI type is ANSI Annex D frame relay DTE segmentation inactive

FR SVC disabled, LAPF state down

Broadcast queue 0/64, broadcasts sent/dropped 11562/0, interface broadcasts 0

Last input 00:00:03, output 00:00:03, output hang never

Last clearing of "show interface" counters 1w1d

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: fifo

Output queue: 0/40 (size/max)

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

768019 packets input, 66676599 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

768285 packets output, 69578133 bytes, 0 underruns

0 output errors, 0 collisions, 3 interface resets

0 output buffer failures, 0 output buffers swapped out

0 carrier transitions

DCD=up DSR=up DTR=up RTS=up CTS=up

Serial0/1/0.2 is up, line protocol is up

Hardware is GT96K Serial

Internet address is 195.26.48.65/27

MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation FRAME-RELAY IETF

CRC checking enabled

Last clearing of "show interface" counters never

Ctree-C2851-CME#show frame-relay lmi

LMI Statistics for interface Serial0/1/0 (Frame Relay DTE) LMI TYPE = ANSI

Invalid Unnumbered info 0 Invalid Prot Disc 0

Invalid dummy Call Ref 0 Invalid Msg Type 0

Invalid Status Message 0 Invalid Lock Shift 0

Invalid Information ID 0 Invalid Report IE Len 0

Invalid Report Request 0 Invalid Keep IE Len 0

Num Status Enq. Sent 69522 Num Status msgs Rcvd 69523

Num Update Status Rcvd 0 Num Status Timeouts 0

Last Full Status Req 00:00:09 Last Full Status Rcvd 00:00:09

Ctree-C2851-CME#show frame-relay pvc

PVC Statistics for interface Serial0/1/0 (Frame Relay DTE)

Active Inactive Deleted Static

Local 1 0 0 0

Switched 0 0 0 0

Unused 0 0 0 0

DLCI = 16, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial0/1/0.2

input pkts 698496 output pkts 698761 in bytes 65645337

out bytes 68605161 dropped pkts 0 in pkts dropped 0

out pkts dropped 0 out bytes dropped 0

in FECN pkts 0 in BECN pkts 0 out FECN pkts 0

out BECN pkts 0 in DE pkts 0 out DE pkts 0

out bcast pkts 11563 out bcast bytes 4320411

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

pvc create time 1w1d, last time pvc status changed 5d15h

Ctree-C2851-CME#show frame-relay map

Serial0/1/0.2 (up): point-to-point dlci, dlci 16(0x10,0x400), broadcast

status defined, active

Many thanks for looking this over. It's much appreciated.

d.bigerstaff · ‎08-30-2007

Just in case this matters, this system currently is accessing the internet via ADSL. To test the Frame-relay i am using the command "ip route 4.2.2.2 255.255.255.255 serial0/1/0.2" and I try to ping 4.2.2.2.

Ctree-C2851-CME#debug ip packet

Ctree-C2851-CME#ping 4.2.2.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 4.2.2.2, timeout is 2 seconds:

Aug 30 12:38:57.003: IP: tableid=0, s=195.26.48.65 (local), d=4.2.2.2 (Serial0/1/0.2), routed via RIB

Aug 30 12:38:57.003: IP: s=195.26.48.65 (local), d=4.2.2.2 (Serial0/1/0.2), len 100, sending.

Success rate is 0 percent (0/5)

Many thanks again.

Edison Ortiz · ‎08-30-2007

Layer2 looks good. Now onto Layer3, can you ping any device on this subnet '195.26.48.65/27' ?

It seems the packet is not making it back from the internet, you don't have an ACL on the interface, do you ?

Can we see the full config ?

d.bigerstaff · ‎08-30-2007

I've not got an access list on the interface.

The full config is possible but i'll have to grab that tomorrow when i'm in work and clear out the irrelevent CCME stuff.

As for the 195.26.48.65/27 subnet, that's the block of IPs we were assigned from our ISP and as far as i'm aware any other IPs on that subnet would only be behind our frame-relay interface. I tried getting a "next hop" router IP address from BT but they said we "wouldnt need it" that's why i'm using the serial interface in my "ip route".

Thanks for your suggestions.

Edison Ortiz · ‎08-30-2007

If that's the block of IPs assigned by the ISP, it should be placed in the LAN interface, so it can be common subnet to other devices in your network.

It sounds like the serial IP wasn't given by the ISP.

You need to know the IP of your next hop router and you should be able to ping it. This information should be provided by the ISP. The next hop router must be in the same subnet as the your serial IP.

d.bigerstaff · ‎08-31-2007

Good morning,

Here is my "show run" with the CCME stuff edited out.

But we think there's a problem with the IPs given? I'll get back onto the ISP and see what they come up with. We've not had any formal documentation on this, along with it being my first Frame-Relay setup outside of labs which is making it really frustrating for me.

I really appreciate your help, thank you.

d.bigerstaff · ‎08-31-2007

I'm not sure what the ISP has done, but they've said nothing has changed on their end. Which if true doesnt fill me with confidence on the stability of that line.

Ping to 195.26.48.65 now works.

And this is what i get for debug ip packet:

Ctree-C2851-CME#ping 4.2.2.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 4.2.2.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 84/86/88 ms

Aug 31 12:24:52.772: IP: tableid=0, s=195.26.48.65 (local), d=4.2.2.2 (Serial0/1/0.2), routed via RIB

Aug 31 12:24:52.772: IP: s=195.26.48.65 (local), d=4.2.2.2 (Serial0/1/0.2), len 100, sending

Aug 31 12:24:52.860: IP: tableid=0, s=4.2.2.2 (Serial0/1/0.2), d=195.26.48.65 (Serial0/1/0.2), routed via RIB

Aug 31 12:24:52.860: IP: s=4.2.2.2 (Serial0/1/0.2), d=195.26.48.65 (Serial0/1/0.2), len 100, rcvd 3

Aug 31 12:24:52.860: IP: tableid=0, s=195.26.48.65 (local), d=4.2.2.2 (Serial0/1/0.2), routed via RIB

Aug 31 12:24:52.860: IP: s=195.26.48.65 (local), d=4.2.2.2 (Serial0/1/0.2), len 100, sending

Aug 31 12:24:52.948: IP: tableid=0, s=4.2.2.2 (Serial0/1/0.2), d=195.26.48.65 (Serial0/1/0.2), routed via RIB

Aug 31 12:24:52.948: IP: s=4.2.2.2 (Serial0/1/0.2), d=195.26.48.65 (Serial0/1/0.2), len 100, rcvd 3

Aug 31 12:24:53.008: IP: tableid=0, s=195.26.48.65 (local), d=4.2.2.2 (Serial0/1/0.2), routed via RIB

Aug 31 12:24:53.008: IP: s=195.26.48.65 (local), d=4.2.2.2 (Serial0/1/0.2), len 100, sending

Aug 31 12:24:53.096: IP: tableid=0, s=4.2.2.2 (Serial0/1/0.2), d=195.26.48.65 (Serial0/1/0.2), routed via RIB

Aug 31 12:24:53.096: IP: s=4.2.2.2 (Serial0/1/0.2), d=195.26.48.65 (Serial0/1/0.2), len 100, rcvd 3

Aug 31 12:24:53.096: IP: tableid=0, s=195.26.48.65 (local), d=4.2.2.2 (Serial0/1/0.2), routed via RIB

Aug 31 12:24:53.096: IP: s=195.26.48.65 (local), d=4.2.2.2 (Serial0/1/0.2), len 100, sending

Aug 31 12:24:53.180: IP: tableid=0, s=4.2.2.2 (Serial0/1/0.2), d=195.26.48.65 (Serial0/1/0.2), routed via RIB

Aug 31 12:24:53.180: IP: s=4.2.2.2 (Serial0/1/0.2), d=195.26.48.65 (Serial0/1/0.2), len 100, rcvd 3

Aug 31 12:24:53.184: IP: tableid=0, s=195.26.48.65 (local), d=4.2.2.2 (Serial0/1/0.2), routed via RIB

Aug 31 12:24:53.184: IP: s=195.26.48.65 (local), d=4.2.2.2 (Serial0/1/0.2), len 100, sending

Aug 31 12:24:53.268: IP: tableid=0, s=4.2.2.2 (Serial0/1/0.2), d=195.26.48.65 (Serial0/1/0.2), routed via RIB

Aug 31 12:24:53.268: IP: s=4.2.2.2 (Serial0/1/0.2), d=195.26.48.65 (Serial0/1/0.2), len 100, rcvd 3

Ctree-C2851-CME#

So it "appears" to be working but i'm still not 100% sure of the IP addresses. If it is the case where we only get the 195.26.48.64/27 range then will the following work...

interface serial0/1/0.2

ip unnumbered gi0/1.200

Give gi0/1.200 ip address of 195.26.48.65 then any public IP address that we want to use will be connected into that subinterfaces VLAN on our switch?

If this is the case and would work, what could we do about accessing the internet out of that frame-relay with NAT? As we have another sub interface (gi0/1.108) which requires NAT internet access. The way I had planned it was with sub interface s0/1/0.2 has the first usable IP and we apply NAT to that interface via route-map. Does s0/1/0.2 specifically have to have an IP address to be usable with nat?

Thanks again.

David

Edison Ortiz · ‎08-31-2007

Were you given a block of IP addresses (based on your subnet 30 hosts) or just one IP address ?

If the latter, you need to place this IP address on the serial interface and that interface will hold the 'ip nat outside' statement.

g0/1.108 would have an 'ip nat inside' statement and you also need to create a dynamic nat global config in the router to match the NAT source network.