Summary of the content on the page No. 1
CHAPTER 7
MPLS VPN Solution Troubleshooting Guide
This chapter describes how to recognize and troubleshoot problems you might encounter when
deploying MPLS VPN Solution services.
General Topics
1. Question: I executed an Add VPN Service to CE followed by a Deploy Service Requests, then I
selected Generate Audit Reports. However, the All VPN Service Requests Report indicates that the
service request is not in either a Deployed or Functional state. Where do I look?
Answer: If the service reques
Summary of the content on the page No. 2
Chapter 7 MPLS VPN Solution Troubleshooting Guide Table 7-1 Summary of MPLS VPN Service Request Types (continued) Service Request Type Description Failed Deploy After provisioning occurred, the service request failed to download the configlets to the router. A service request moves to Failed Deploy if an error was detected during the deployment process by the Cisco IP Manager (CIPM). If CIPM is not being used to download configlets, and the product is simply exporting configlets to a di
Summary of the content on the page No. 3
Chapter 7 MPLS VPN Solution Troubleshooting Guide Provisioning Problems Provisioning Problems The MPLS VPN Solution provisioning system has the following functions: 1. Collect the PE router configuration files (PE-upload) 2. Collect the CE router configuration files (CE-upload) 3. Provisioning 4. Write the changed configuration information to the PE (PE-DownLoad) 5. Write the changed configuration information to the CE (CE-DownLoad) Functions 1, 2, 4, and 5 are executed by a server called t
Summary of the content on the page No. 4
Chapter 7 MPLS VPN Solution Troubleshooting Guide Provisioning Problems Figure 7-1 MPLS VPN Solution Task Logs Browser b. Choose the task that was run for this deployment. The task name is the name you assigned. The tasks are listed in reverse chronological order (with the latest one first). c. Click the Log link (in the rightmost column). Summary information appears in the left pane. Cisco VPN Solutions Center: MPLS Solution User Guide 7-4 78-10548-02
Summary of the content on the page No. 5
Chapter 7 MPLS VPN Solution Troubleshooting Guide Provisioning Problems Figure 7-2 Task Log Summary Information and Action Report d. To see the Action Report, click the link under the Actions heading. The Action Report appears. 3. Question: My service request is stuck in the Requested state. Where should I go to look for errors? Answer: In the Task Log Summary Table, look at the PE-UpLoad and CE-UpLoad information for that service request. One or both of them should say “Fail.” This makes
Summary of the content on the page No. 6
Chapter 7 MPLS VPN Solution Troubleshooting Guide Provisioning Problems Caught exception when pinging VPIMManager: SYSTEM_EXCEPTION:10085—Communication failure—no server at host: your_host_name [Completion status: COMPLETED_NO] This message means that the CVPIM Server is not running. Invoke wdgui and take the appropriate actions: a. If disabled, issue the following command: wdclient start CVPIMServer. b. If disabled-dependent, see which of the dependent server(s) are disabled. c. If the l
Summary of the content on the page No. 7
Chapter 7 MPLS VPN Solution Troubleshooting Guide Provisioning Problems i. If the problem persists, stop the Watchdog. j. Wait for two minutes, then restart the Watchdog with the startwd command. Do not forget to delete the active task before restarting Watchdog. Wait until the servers stabilize before you reschedule the task. 8. Question: My service request is in the Invalid state. How do I correct the problem? Answer: When a service request is in moved to Invalid, it is because the requ
Summary of the content on the page No. 8
Chapter 7 MPLS VPN Solution Troubleshooting Guide Provisioning Problems Figure 7-3 All VPN Service Request Report d. Select the Invalid service request. e. From the Provisioning drop-down menu, choose Deploy VPN Service. f. If you have multiple Invalid requests, then either repeat this procedure for all service requests or choose Provisioning > Deploy Service Requests. g. Be sure to click the Deploy selected service requests radio button. 10. Question: My service request is in the Failed D
Summary of the content on the page No. 9
Chapter 7 MPLS VPN Solution Troubleshooting Guide Provisioning Problems a. Check to see whether it is disabled or starting. Initially, the CNGS Server is running. b. Redeploy the service without doing an audit (this skips automatic audit saving time and complexity). c. Find the state remaining in Invalid with 1) the error being “CORBA generated exception” and 2) CNGS Server is disabled or starting. d. Go to the tmpdir (as given in netsys.tmpdir.unix in the csm.properties file) and see if
Summary of the content on the page No. 10
Chapter 7 MPLS VPN Solution Troubleshooting Guide Auditing Problems Auditing Problems Both the Audit new service requests and Audit existing service requests audit types provide two tests: a deployed test and—if specified by checking Use VPN routing information during audits in the task window—a routing test.These tests are performed in that order. However, if the deployed test fails, the routing test is not performed. The deployed test tests whether the router configuration files reflec
Summary of the content on the page No. 11
Chapter 7 MPLS VPN Solution Troubleshooting Guide Auditing Problems f. If you feel that the command is incorrect and should be changed, contact Cisco Support for help. g. If the command is correct, press the corresponding router configuration button. The router configuration on which the auditing was performed is shown. h. Check the configuration command line in the configlet (the line that is apparently missing or incorrect as discovered by the audit) and see if the command line is prese
Summary of the content on the page No. 12
Chapter 7 MPLS VPN Solution Troubleshooting Guide Auditing Problems Figure 7-4 Audit Options Window Also be sure to schedule data collection by choosing Monitoring > Collect VPN Routing Information. 5. Question: I checked the “Use VPN routing info during audits” option, but I receive the message, “No VPN routing information found.” Answer: You must collect VPN routing info to use it. Schedule data collection by choosing Monitoring > Collect VPN Routing Information. 6. Question: My servic
Summary of the content on the page No. 13
Chapter 7 MPLS VPN Solution Troubleshooting Guide Auditing Problems Until you add at least two sites to the VPN, the VPN is not complete. The first site cannot participate in a VPN because the VPN does not yet exist. Thus, the service request moves to Broken. The service request moves to Functional when the second site is connected to the VPN, assuming core network connectivity exists and is functional. 9. Question: What are the run_ngs.log and conn_solver.log files? Answer: These files
Summary of the content on the page No. 14
Chapter 7 MPLS VPN Solution Troubleshooting Guide Auditing Problems 13. Question: The audit seems to have been performed (from audit reports), but the All VPN Service Requests Report shows the service request is still in the prior state. Answer: This is possible if the saving the state change and audit trail information to the Repository failed. In such a case, observe that an extra row is present in the report: Repository Error. This details the reasons for the failure to write to the R
