Cisco TAC - PCM+EPC cheat sheet
#####Getting files from here to there!###### **Tac Highway show tech-support | redirect ftp://anonymous:cheatsheet@support-ftp.cisco.com/[[TAC Case ID]]showtech.txt **HTML 5 file upload https://cway.cisco.com/csc/index.html#CheatSheet **Enable SCP on a router http://www.cisco.com/c/en/us/td/docs/ios/sec_user_services/configuration/guide/15_0s/sec_securing_user_services_15_0S_book/sec_secure_copy.html#wp1057166 ** Use Diagnostic Signatures (1) Enable Call Home: call-home reporting contact-email-addr yourname@company.com (2) If you have connectivity to Internet, we can download the DS directly from call-home using the command "call-home diagnostic-signature download " If not, copy the DS XML file to the routerĂ¢?Ts flash. Then load the DS XML using the command "call-home diagnostic-signature load flash:". Note that this is an hidden command. (3) If there are any install prompts in DS, then we need to run the command "call-home diagnostic-signature install " #####Packet Captures on the network ###### **Packet Capture on ISR 4x From Enable Mode: monitor capture CAP interface GigabitEthernet0/0/1 both monitor capture CAP match ipv4 protocol tcp any any monitor capture CAP start monitor capture CAP stop monitor capture CAP export ftp://10.0.0.1/CAP.pcap no monitor capture CAP **Packet Capture on ISR G1 G2 VG3x0 VG-224 To capture traffic on interface fa 0/0: From config mode- 1) Define your IP traffic export profile (config mode) ip traffic-export profile test mode capture bidirectional 2) Apply it to desired interface: interface fa 0/0 ip traffic-export apply test size 2000000 3) Disable the capture no ip traffic-export profile test From enable mode- - Clear the capture buffer: traffic-export interface fa 0/0 clear - Start your capture: traffic-export interface fa 0/0 start - Do the test you need to and then stop the capture: traffic-export interface fa 0/0 stop - Copy Capture buffer to a file : traffic-export interface fa 0/0 copy tftp: Address or name of remote host []? 161.44.115.194 Capture buffer filename []? [[TAC Case ID]].description.pcap **Packet Capture on ASAs access-list 199 permit esp host 200.200.200.200 host 100.100.100.100 !--This cant be any capture acl199 access-list 199 interface outside trace detail #Download off of ASA while running https://*ip*/capture/acl199/pcap #Disable capture no capture acl199 **Packet Capture on CUCM utils network capture eth0 file packets count 100000 size all Press control+c to end Download the capture from CUCM **Packet Capture on a switch (using a span port) Monitor Session 1 source Monitor session 1 destination ####Voice ###### **Enable DSP Crash Dumps ISR G1G2 conf t voice dsp crash-dump file-limit 3 voice dsp crash-dump destination flash: **B channel busyout *ISR G1G2 interface Serial0/1/1:23 isdn service b_channel 3-5 state 2 **PCM Dumps! The PCM capture procedure varies depending on which version of IOS you are running. For IOS versions 15.2(1)T and NEWER, the steps are as follows. Enter configure terminal mode on the GW. Enter "voice pcm capture buffer 200000" to configure the capture buffer. Enter "voice pcm capture destination flash:" to specify the destination file. Note: If you will be making a large PCM capture or will leave it running for a long period of time it would be best to direct to a TFTP server. To do so, use this command: "voice pcm capture destination tftp://a.b.c.d/" Where a.b.c.d is the IP address of the TFTP server. Once you have the above configured you are ready to capture the PCM stream from the router. To do so follow these steps: Start a test call and leave it connected. Enter "show call active voice brief" and determine what voice port the test call is using. "show voice call sum" will also show what ports are in use. Enter "test voice port 1/0/4 pcm cap fff" where 1/0/4 is the number of the voice port that has the test call connected. Note: If you are capturing a call on a PRI you will need to specify the voice-port number and the b-channel the call is on. For example: If you are using MGCP, you will need to capture this way: "test voice port 0/0/0:23.14 pcm cap fff" Where the voice-port is 0/0/0:23 and the b-channel, as shown in "show call active voice brief", is 14. Alternatively, you can enable pcm captures via the dial-peer. This will automatically create a capture for each call on that dial-peer. Each will be named with a unique name. Under the dial-peer, enter this command: dial-peer voice x [voip / pots] pcm-dump cap ff ! To disable the capture on the dial-peer, use the "no" form of the command: dial-peer voice x [voip / pots] no pcm-dump cap ! You can check the status of the capture using the following command: sh voice pcm capture This output on 15.2(1)T and IOS versions is very similar to the above example. When you are done capturing, do the following: test voice port 1/0/4 pcm-dump disable voice pcm capture buffer 0 no voice pcm capture destination Note: The above procedure on 15.2 IOS will only capture the audio stream. **For IOS versions 15.1(4)M and OLDER, the steps are as follows: Enter configure terminal mode on the GW. Enter "voice hpi capture buffer 3000000" to configure the capture buffer. Enter "voice hpi capture destination flash:[[TAC Case ID]].dat" to specify the destination file. Note: If you will be making a large PCM capture or will leave it running for a long period of time it would be best to direct to a TFTP server. To do so, use this command: "voice hpi capture destination tftp://a.b.c.d/[[TAC Case ID]].dat" Where a.b.c.d is the IP address of the TFTP server. Once you have the above configured you are ready to capture the PCM stream from the router. To do so follow these steps: Start a test call and leave it connected. Enter "show call active voice brief" and determine what voice port the test call is using. "show voice call sum" will also show what ports are in use. Enter "test voice port 1/0/4 pcm-dump caplog 7" where 1/0/4 is the number of the voice port that has the test call connected. Note: If you are capturing a call on a PRI you will need to specify the voice-port number and the b-channel the call is on. For example: "test voice port 0/0/0:23.14 pcm-dump caplog 7" Where the voice-port is 0/0/0:23 and the b-channel, as shown in "show call active voice brief", is 14. Note: some versions of IOS require you to enter a duration command after "caplog 7". "duration 255" is sufficient. You can check the status of the capture using the following command: sh voice hpi capture This will show you the following output: HPI Capture is on and is logging to URL flash:pcm.dat 11196 mesages sent to URL, 0 messages dropped Message Buffer (total:inuse:free) 3048:0000:3048 Buffer Memory: 999744 bytes, Message size: 328 bytes If the number of "messages sent to URL" is increasing at a steady state then the capture is working properly. If it is not, something is not working properly. Go back through the directions, confirm the voice-port number, and try the capture again. When you are done capturing, do the following: test voice port 1/0/4 pcm-dump disable no voice hpi capture destination flash:[[TAC Case ID]].dat no voice hpi capture buffer 3000000



TAC Case ID:


Use this code to post the full script to your own page:



Use this code to post only the variables to your own page: