通過使用自動化對日志進行故障排除和分析使無線工程師的生活變得輕松.pdf

《通過使用自動化對日志進行故障排除和分析使無線工程師的生活變得輕松.pdf》由會員分享，可在線閱讀，更多相關《通過使用自動化對日志進行故障排除和分析使無線工程師的生活變得輕松.pdf（117頁珍藏版）》請在三個皮匠報告上搜索。

1、#CiscoLive#CiscoLiveSurendra BG Sr Leader EngineeringBRKEWN-3002Make Wireless Engineers life Make Wireless Engineers life easy by using Automation to easy by using Automation to Troubleshoot&Analyze logsTroubleshoot&Analyze logs 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#Cisco

2、LiveEnter your personal notes hereCisco Webex App Questions?Use Cisco Webex App to chat with the speaker after the sessionFind this session in the Cisco Live Mobile AppClick“Join the Discussion”Install the Webex App or go directly to the Webex spaceEnter messages/questions in the Webex spaceHowWebex

3、 spaces will be moderated by the speaker until June 9,2023.12343https:/ 2023 Cisco and/or its affiliates.All rights reserved.Cisco PublicBRKEWN-30023About SurendraCCIE(#40194)Wireless&Service ProviderOnline18X7Weight Gain Expert15 Years 2023 Cisco and/or its affiliates.All rights reserved.Cisco Publ

4、ic#CiscoLiveOn the Count of Three Lets Breathe in5BRKEWN-3002Agenda 2023 Cisco and/or its affiliates.All rights reserved.Cisco PublicData Collection PrinciplesKeeping your Network HealthyTranslating KPI WLC/AP/ClientKPI AutomationAutomating Log AnalysisBRKEWN-30026 2023 Cisco and/or its affiliates.A

5、ll rights reserved.Cisco Public#CiscoLiveWhere Do We Start?A wireless connection is like a complex multivariable equation.So how do we solve the equation?Isolate and remove the variables7BRKEWN-3002IPDHCPWLCIPISECAPWAPEOIP802.11 CAPWAPRADIUSChan.1802.11 Management802.11 ManagementEAPIPsupp.driverrad

6、io 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveData Collection PrinciplesDNACNetwork WideIssues not triggersLow LevelRoot CauseFix developmentController/APComponent IsolationFault TriggersDebugsBRKEWN-30028 2023 Cisco and/or its affiliates.All rights reserved.Cisco Pub

7、lic#CiscoLiveApplying ToolsDNAC360 ShowWireless SnifferDebug WLCDebug APWiFiHawkWCAEWLAN PollerGeneral ProblemsClient IssuesClient RoamingDevice IssuesRF AnalysisConfiguration AnalysisDebugsBRKEWN-30029 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveRule of ThumbFrom simp

8、le to complex data collectionEasy things first:WCAE against sh tech wirelessDNAC general monitoringController TOF/show logs profile wirelessLeverage client debug bundle(Controller/EEM)BRKEWN-300210 2023 Cisco and/or its affiliates.All rights reserved.Cisco PublicUntil Now.Data Collection PrinciplesK

9、eeping your Network HealthyKPI MonitoringKPI AutomationEEM ScriptsWLAN PollerAutomate Log AnalysisWCAEWiFi HawkDNAC 360Wireless DetectorDebug Bundle&Debug AnalyzerWalkMe11BRKEWN-3002Keeping your Network Healthy 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveKey Performanc

10、e IndicatorsLooking for Symptoms Key Performance IndicatorsCan be used to monitor success of an organizationDefine a set of values against which to measureDefining KPIs for network infrastructure subsystemsKPI as health indicators:is the network device healthy?BRKEWN-300213 2023 Cisco and/or its aff

11、iliates.All rights reserved.Cisco Public#CiscoLiveDoctor am I sick?Looking for trouble before it happensNot good:going to doctor after 5 days with 42C feverPreventive Detection:monitoring health overallGood detection:Memory utilization increasing every dayTask tending to high CPURadio channel tendin

12、g to high utilizationNot optimal detection:UptimeChannel meltdownBRKEWN-300214 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWhat are Good Health Indicators?Where to lookResources are FiniteCPU timeMemoryTimersARP entriesClient entriesQueuesLonger Uptimes/CapwapYou can a

13、lways exhaust resourcesUtilization remains in expected range under intended loadBRKEWN-300215 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWhat are Good Health Indicators?Where to lookNegative EventsRadio Resets(not all!)CrashesDropsHangsNot servicing clientsClient onbo

14、arding timesBRKEWN-300216 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveHow can I obtain this?Getting the dataDNAC will not provide it all360 view checks Memory,CPULacks some“under the hood”detailsGood for client trends,symptoms,early problem detectionTime machineMost lo

15、w level data is per deviceScripts available to checkBRKEWN-3002179800 KPIs 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveBasic 9800 ChecksInstall ModeFaster boot,lower memory footprint,uptimeGladius1#show version|i uptime|Installation mode|Cisco IOS SoftwareCisco IOS Sof

16、tware Amsterdam,C9800 Software(C9800_IOSXE-K9),Version 17.3.5a,RELEASE SOFTWARE(fc2)Gladius1 uptime is 2 weeks,5 days,21 hours,30 minutes Installation mode is INSTALLBRKEWN-300219 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveBasic 9800 ChecksHA statusGladius1#show redun

17、dancy|i uptime|Location|Current Software state|SwitchoversAvailable system uptime=2 weeks,1 day,2 hours,48 minutes Switchovers system experienced=1Active Location=slot 1Current Software state=ACTIVEUptime in current state=7 hours,10 minutesStandby Location=slot 2Current Software state=STANDBY HOTUpt

18、ime in current state=7 hours,4 minutesPer Chassis and stack statusSwitchover countBRKEWN-300220 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveBasic 9800 ChecksCrashesdao2#dir harddisk:coreDirectory of harddisk:/core/2146314 -rw-30787 Sep 1 2022 10:17:37+02:00 dao2_1_RP_0

19、-system-report_20220901-101549-CEST-info.txt2146313 -rw-756281751 Sep 1 2022 10:16:54+02:00 dao2_1_RP_0-system-report_20220901-101549-CEST.tar.gz2146318 -rw-14272604 Nov 11 2021 17:33:50+01:00 dao2_1_RP_0_mcpcc-lc-ms_21279_20211111-173346-CET.core.gz2146316 -rw-145210532 Sep 15 2021 16:08:51+02:00 k

20、ernel.rp_2DA_NA_20210915140802.core.flat.gz2146317 -rw-807 Sep 15 2021 16:08:51+02:00 kernel.rp_2DA_NA_inv_log_20210915140802.txt2146315 -rw-106136 Sep 15 2021 16:08:02+02:00 kernel.rp_2DA_NA_20210915140802.txt2146312 -rw-26436 Jul 22 2020 10:38:23+02:00 DAO2_1_RP_0-system-report_20200722-103819-CES

21、T-info.txt2146311 -rw-50905732 Jul 22 2020 10:38:20+02:00 DAO2_1_RP_0-system-report_20200722-103819-CEST.tar.gz2146310 -rw-4772275 Mar 6 2020 10:13:39+01:00 DAO2_1_RP_0_odm_11246_20200306-101337-GMT.core.gz2146309 -rw-12211483 Mar 6 2020 10:11:50+01:00 DAO2_1_RP_0_wncd_10553_20200306-101146-GMT.core

22、.gzProcess impacted,timeLocation is:hardisk:for 9800-40/80Bootflash:for 9800-L/CLBRKEWN-300221 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveGeneral overviewMonitoring CPU,Memory,Data planeKatar2#show platform resources*State Acronym:H-Healthy,W-Warning,C-Critical Resour

23、ce Usage Max Warning Critical State-RP0(ok,active)H Control Processor 5.00%100%80%90%H DRAM 4425MB(28%)15567MB 88%93%H ESP0(ok,active)H QFP H DRAM 244364KB(13%)1835008KB 85%95%H IRAM 414KB(20%)2048KB 85%95%H CPU Utilization 0.00%100%90%95%H BRKEWN-300222 2023 Cisco and/or its affiliates.All rights r

24、eserved.Cisco Public#CiscoLiveProcess CPU LoadChecking per Process Gladius1#show processes cpu platform sorted|ex 0%0%0%CPU utilization for five seconds:14%,one minute:16%,five minutes:16%Core 0:CPU utilization for five seconds:10%,one minute:7%,five minutes:11%Core 1:CPU utilization for five second

25、s:6%,one minute:28%,five minutes:12%Core 2:CPU utilization for five seconds:48%,one minute:55%,five minutes:68%Core 3:CPU utilization for five seconds:20%,one minute:8%,five minutes:11%Core 4:CPU utilization for five seconds:38%,one minute:13%,five minutes:17%Core 5:CPU utilization for five seconds:

26、14%,one minute:11%,five minutes:13%Core 6:CPU utilization for five seconds:9%,one minute:20%,five minutes:23%Core 7:CPU utilization for five seconds:5%,one minute:8%,five minutes:18%PidPPid5Sec1Min5MinStatusSizeName-190561903799%99%99%R7525896wncd_0219222191396%97%99%R127488smand194601945137%34%33%R

27、6363828wncd_2196041959618%19%18%R4556132wncd_3Important before 17.3.5Capable of monitoring individual core/processIgnore ucode_pkt_PPE0 for 9800-CL/9800-LBRKEWN-300223 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveDataplane LoadPacket forwarding load9800cl-1#show platfor

28、m hardware chassis active qfp datapath utilization|i LoadProcessing:Load(pct)1 1 1 1Gladius1#show platform hardware chassis active qfp datapath utilization|i loadCPP 0:Subdev 05 secs1 min5 min60 min Processing:Load(pct)4343 Check datapath load%It will not be zero/low on busy networksBRKEWN-300224 20

29、23 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveHardware ChecksOnly for appliances(9800-40,80,L)Katar2#show environment Number of Critical alarms:0Number of Major alarms:0Number of Minor alarms:0Slot Sensor Current State Reading Threshold(Minor,Major,Critical,Shutdown)-R0 Te

30、mp:BRDTEMP1 Normal 39 Celsius (54,57,60,61)(Celsius)R0 Temp:BRDTEMP2 Normal 38 Celsius (58,61,64,65)(Celsius)R0 Temp:CPU Die Normal 48 Celsius (94,99,104,105)(Celsius)BRKEWN-300225 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveConnectivity-MobilityChecking status and MTU

31、Gladius1#sh wireless mobility summary Wireless Management VLAN:25 Wireless Management IP Address:192.168.25.25 Mobility Control Message DSCP Value:48 Mobility Keepalive Interval/Count:10/3 Mobility Group Name:eWLC3 Mobility Multicast Ipv4 address:0.0.0.0 Mobility MAC Address:001e.f62a.46ff Mobility

32、Domain Identifier:0 x2e47 Controllers configured in the Mobility Domain:IPPublic IpMAC AddressGroup NameMulticast IPv4Multicast IPv6StatusPMTU-192.168.25.25N/A001e.f62a.46ffeWLC30.0.0.0:N/AN/A 192.168.5.35192.168.5.35 00b0.e1f2.f4803500-20.0.0.0:Up1385 192.168.25.23 192.168.25.23 706d.1535.6b0bDAO20

33、.0.0.0:Control And Data Path Down192.168.25.33 192.168.25.33 f4bd.9e57.ff6b55000.0.0.0:Up1005BRKEWN-300226 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveConnectivity-Telemetry9800cl-1#show telemetry connection allTelemetry connectionsIndex Peer Address Port VRF Source Ad

34、dress State State Description-84 192.168.0.105 25103 0 192.168.40.10 Active Connection up 9800cl-1#show telemetry internal connection 84 detail Telemetry protocol manager stats:Con str :192.168.0.105:25103:0:192.168.40.10Sockfd:103Protocol :tls-nativeState :CNDP_STATE_CONNECTED.Version :TLSv1.2.Msgs

35、 Received :0Creation time:Wed Dec 14 18:19:43:761Confirm connected state,and zero flapsLast connected time:Wed Dec 14 18:19:43:910Last disconnect time:Last error:Connection flaps:0Last flap Reason:Keep Alive Timeouts:0Last Transport Error :No ErrorBRKEWN-300227 2023 Cisco and/or its affiliates.All r

36、ights reserved.Cisco Public#CiscoLiveDevice Level MonitoringFocus will be on“what can be monitored from the device itself”If historical data is needed,trends or problem alerts:DNACSome data points will be in-depth,beyond typical analysisExisting 9800 WLC logs provides wealth of informationBRKEWN-300

37、228APs KPIs(minus RF)2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveAP uptimeCAPWAP vs AP up timeGladius2#sh ap uptimeNumber of APs:8 AP NameEthernet MACRadio MACAP Up TimeAssociation Up Time-Ap10042.68a0.fc4a0062.ecf3.831026 days 0 hour 57 minutes 41 seconds15 days 1 hou

38、r 50 minutesAp27069.5a74.7a507069.5a78.778026 days 0 hour 54 minutes 57 seconds22 minutes 15 seconds Ap30042.68c5.bdf0cc16.7e5f.f00026 days 0 hour 46 minutes 12 seconds22 minutes 13 seconds Ap404eb.409e.1d2804eb.409f.4fa022 minutes 21 seconds19 minutes 39 secondsBRKEWN-300230 2023 Cisco and/or its a

39、ffiliates.All rights reserved.Cisco Public#CiscoLiveAP crash filesSince last controller bootGladius1#show ap crash-file File Location:BOOTFLASHAP NameCrash FileRadio Slot 0Radio Slot 1-Ap4 Ap4-1_0062ecaade80.crash In diskGladius1#dir bootflash:|i crash 54-rw-50476May 9 2022 13:07:34+02:00Ap4-1_0062e

40、caade80.crash 66-rw-120276Jan 26 2022 11:46:55+01:00Ap4-39_d4e88019f140.crash BRKEWN-300231 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveAP disconnectionsWho has failed?9800cl-1#sh wireless stats ap join summary Number of APs:7Base MAC Ethernet MAC AP Name IP Address St

41、atus Last Failure Phase Last Disconnect Reason-687d.b45e.ea00 687d.b45c.1398 ap9136-4 192.168.41.222 Joined Run Heart beat timer expiry 687d.b45e.f240 687d.b45c.1448 ap9136-2 192.168.41.220 Joined NA NA 687d.b45e.f7b0 687d.b45c.14bc ap9136-1 192.168.41.223 Joined NA NA 687d.b45f.1160 687d.b45c.16e0

42、ap9136-3 192.168.41.224 Joined Run Heart beat timer expiry Why?9800cl-1#sh wireless stats ap mac-address 687d.b45e.ea00 join detailed|b AP reAP reported disconnect detailDisconnect reason from AP :NAAP reported reboot detailReboot reason from AP :CrashLast AP disconnect detailsLast Disconnect Phase

43、:RunLast Disconnect Reason :Heart beat timer expiryLast Disconnect Time :01/05/2023 15:02:19Current Join Status :JoinedAP reported disconnect detailDisconnect reason from AP :NAAP reported reboot detailReboot reason from AP :No reboot reasonLast AP disconnect detailsLast Disconnect Phase :RunLast Di

44、sconnect Reason :Heart beat timer expiryLast Disconnect Time :01/05/2023 14:56:43Current Join Status :JoinedBRKEWN-300232 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveAP EthernetSpeed,status,duplex9800-cl#sh ap ethernet statistics AP Name:ap9115-sotanoInterface Name Sta

45、tus Speed Duplex Rx Packets Tx Packets Discarded Packets -GigabitEthernet0 UP 2500 Mbps Full 355444368 2544709 0 AP Name:ap9136-2-deskInterface Name Status Speed Duplex Rx Packets Tx Packets Discarded Packets -GigabitEthernet0 UP 1000 Mbps Full 364259432 15930841 0 GigabitEthernet1 DOWN Auto Half 0

46、0 0 AP Name:ap9166-1-salaInterface Name Status Speed Duplex Rx Packets Tx Packets Discarded Packets -GigabitEthernet0 UP 1000 Mbps Full 11326763 4626355 0 BRKEWN-300233Client KPIs 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveGeneral Client overviewTransient status,type,

47、errors9800-cl#sh wireless stats client detail Total Number of Clients:30Protocol Statistics-Protocol Client Count802.11b :0802.11g :2802.11a :0802.11n-2.4GHz :20802.11n-5 GHz :1802.11ac :5802.11ax-5 GHz :2802.11ax-2.4 GHz :0Current client state statistics:-Authenticating :0Mobility :0IP Learn :0Weba

48、uth Pending :0Run :30BRKEWN-300235 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveGeneral Client overviewDelete Reasonssh wireless stats client detail|e:0Total client delete reasons-Controller deletes-WPA key exchange timeout :157DOT11 received invalid PMKID in the receiv

49、ed RSN IE :3DOT11 invalid FT IE :2IP-LEARN connection timeout :69WPA group key update timeout :15BRKEWN-300236 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveGeneral Client overviewDetected Failures9800-cl#show logging profile wireless start last 2 days trace-on-failure L

50、ogging display requested on 2023/01/05 16:24:02(Central)for Hostname:9800-cl,Model:C9800-CL-K9,Version:17.09.02,SN:9KD5R4GRMEL,MD_SN:9KD5R4GRMELDisplaying logs from the last 2 days,0 hours,0 minutes,0 secondsexecuting cmd on chassis 1.Unified Decoder Library Init.DONEFound 1 UTF StreamsTime UUID Log

51、-2023/01/04 13:03:18.301967498 0 x100000047e4e3 f8f0.054a.0ff0CLIENT_STAGE_TIMEOUT State=IDLE,WLAN profile=io12023/01/04 13:03:20.312882951 0 x100000047e508 8c29.3773.fc2bCLIENT_STAGE_TIMEOUT State=IDLE,WLAN profile=home12023/01/04 16:03:33.580119857 0 x100000048d19f f8f0.054a.0ff0CLIENT_STAGE_TIMEO

52、UT State=IP_LEARNING,WLAN profile=io12023/01/04 16:06:40.424898137 0 x100000048d579 f8f0.054a.0ff0CLIENT_STAGE_TIMEOUT State=IP_LEARNING,WLAN profile=io1BRKEWN-300237 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveGeneral Client overviewDetails for failure9800-cl#sh loggi

53、ng profile wireless start last 2 days filter uuid 0 x100000047e4e3 Logging display requested on 2023/01/05 16:25:17(Central)for Hostname:9800-cl,Model:C9800-CL-K9,Version:17.09.02,SN:9KD5R4GRMEL,MD_SN:9KD5R4GRMELDisplaying logs from the last 2 days,0 hours,0 minutes,0 secondsexecuting cmd on chassis

54、 1.Unified Decoder Library Init.DONEFound 1 UTF Streams2023/01/04 13:03:08.301985828 wncd_x_R0-01:client-keymgmt 15349:(ERR):MAC:f8f0.054a.0ff0 Keymgmt:Failed to eapol key m5 retrasmit failure.Max retries for M5 over2023/01/04 13:03:08.302036569 wncd_x_R0-01:client-orch-sm 15349:(note):MAC:f8f0.054a

55、.0ff0 Client move to idle state,delete reason:CO_CLIENT_DELETE_REASON_GROUP_KEY_UPDATE_TIMEOUT,BSSID MAC:687d.b45f.1a01,WTP MAC:687d.b45f.1a002023/01/04 13:03:08.302042366 wncd_x_R0-01:client-orch-sm 15349:(note):MAC:f8f0.054a.0ff0 Process idle request,delete reason:CO_CLIENT_DELETE_REASON_GROUP_KEY

56、_UPDATE_TIMEOUT2023/01/04 13:03:08.302091139 wncd_x_R0-01:client-orch-state 15349:(note):MAC:f8f0.054a.0ff0 Client state transition:S_CO_RUN-S_CO_IDLE2023/01/04 13:03:18.301935415 wncd_x_R0-01:client-orch-sm 15349:(note):MAC:f8f0.054a.0ff0 Co client reap timer callback.Co client reap timer triggerin

57、g E_CO_CLIENT_CONNECT_TIMEOUT event,client state:S_CO_DELETEDBRKEWN-300238 2023 Cisco and/or its affiliates.All rights reserved.Cisco PublicUntil Now.Data Collection PrinciplesKeeping your Network HealthyKPI MonitoringKPI AutomationEEM ScriptsWLAN PollerAutomate Log AnalysisWCAEWiFi HawkDNAC 360Wire

58、less DetectorDebug Bundle&Debug AnalyzerWalkMe39BRKEWN-3002KPI Automation 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveKPI AutomationKPIs can be scriptedSimple TTL or EEM or Automate using PythonAdvantages-Memory buffer shortageQueue dropsData plane dropsData Plane Cont

59、rol Plane communication dropsMemory LeakMany other unknown issuesBRKEWN-300241Guestshell-EEM Scripts 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWhat is Guest Shell?64-bit Linux environment running on IOS XE and NX-OS platforms Install,update,and operate 3rd party Linu

60、x apps(e.g.Puppet,Chef,Splunk)Bundled with PythonIntended for agent or script hostingNetwork OS Guest ShellLinux ContainerAPILinuxapplicationsBRKEWN-300243 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveEvent ManagerAvailable in switches/routers and now in 9800 WLCs trigg

61、er-based scripts.WorkaroundsAutomate data-collectionCombine outputs or create commands.Documentation:BRKEWN-300244General InformationIOS-XE EEMBest Practices 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveCombination of Guestshell&EEMCombine EEM with Guestshell using EEM

62、trigger-based scripts Create Scripts to automate data-collectionRun script periodically or On-DemandScript to capture continuous PCAP from WLCevent manager applet Continuous_packet_captureevent timer watchdog name timer time 120action 0.5 cli command enableaction 1.0 cli command guestshell run pytho

63、n3/bootflash/guest-share/Continuous_packet_capture.pyBRKEWN-300245 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveHow to Set it up?46BRKEWN-3002Copy Script to 9800Enable GuestshellExecute scriptconf tioxapp-hosting appid guestshellapp-vnic management guest-interface 0endw

64、rGladius1#guestshell run python3/bootflash/guest-share/KPI.pyExported files Gladius1-Mar-07-2022-18-26.txt to destination tftp:/192.168.0.45/luisal/Reference&ScriptSimple 3 StepsWLAN Poller 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWhat is WLAN POLLER?Task automation

65、 against Controller/APsSimplify data collection across large groups of Aps/controllersFully customizablePython bundle:No install requiredNot official product:Just for data collection,not for permanent useBRKEWN-300248 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveFeature

66、sSupport for AireOS/9800 and any AP IOS/COSBulk data/debug collection,including core/crashes,etcCommand execution at regular intervals.AP/WLC DFS statistics and debug collectionAP Flash health checkAP cert check reportUpgrade debug images on selected ApsMigrations supportBRKEWN-300249 2023 Cisco and

67、/or its affiliates.All rights reserved.Cisco Public#CiscoLiveMultiple InstancesSeveral instances possibleThis is just like opening SSH to WLCEach instance can have different scheduleSSHSSHSSHBRKEWN-300250 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveHow to use?Download

68、it here:Pick your Platform&Download the bundle:Example:On Windows,open the CMD window,go to the path as belowRun the command“wlanpoller.exe”BRKEWN-300251 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWLAN POLLER Dry Run Output:BRKEWN-300252 2023 Cisco and/or its affiliat

69、es.All rights reserved.Cisco Public#CiscoLiveWlan Poller Bundle File StructureBRKEWN-300253 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveHow to Configure Wlan Poller Config.ini file?BRKEWN-300254 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiv

70、eHow to Configure Wlan Poller cmdlist_ewlc.txt?Open the file“cmdlist_ewlc.txt”&add the commands as neededBRKEWN-300255 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveOutput Files from Wlan PollerBRKEWN-300256 2023 Cisco and/or its affiliates.All rights reserved.Cisco Publ

71、ic#CiscoLiveOutput Files Pop up on TFTP Server:BRKEWN-300257 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWlan Poller Output LogsBRKEWN-300258 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveHow to schedule Wlan Poller?BRKEWN-300259 2023 Cisco

72、 and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWLAN Poller:AireOS to 9800 WLC Migration60BRKEWN-3002Start Pre-DownloadCollect AP InfoPrime WLC IPReload APMigration DocumentAutomated migrationPerforms AP Pre-DownloadLimits to one ReloadWAN BW optimizationSaves Time.Tool DownloadAP I

73、mage compatibility 2023 Cisco and/or its affiliates.All rights reserved.Cisco PublicUntil Now.Data Collection PrinciplesKeeping your Network HealthyKPI MonitoringKPI AutomationEEM ScriptsWLAN PollerAutomate Log AnalysisWCAEWiFi HawkDNAC 360Wireless DetectorDebug Bundle&Debug AnalyzerWalkMe61BRKEWN-3

74、002Automate Log Analysis 2023 Cisco and/or its affiliates.All rights reserved.Cisco PublicTools to Automate log analysisWCAEWiFi HawkDNAC 360Wireless DetectorDebug Bundle&Debug AnalyzerWalkMeBRKEWN-300263WCAE Wireless Config Analyzer Express 2023 Cisco and/or its affiliates.All rights reserved.Cisco

75、 Public#CiscoLiveWireless Config Analyzer ExpressEvolution from WLCCABring human years of learning and experience to youCase preventionReduce case lifetimeSingle controller analysisSupport for AireOS or 9800/EWCAny model,any versionBRKEWN-300265 2023 Cisco and/or its affiliates.All rights reserved.C

76、isco Public#CiscoLiveWireless Config Analyzer ExpressGot 5000 Aps how do I find which area have problems?How do I know if there are configuration errors?Is my code version good?Is my configuration following Best Practices?Where is the RF problem?200+automated checksBRKEWN-300266 2023 Cisco and/or it

77、s affiliates.All rights reserved.Cisco Public#CiscoLiveWireless Config Analyzer ExpressBRKEWN-300267Wireless Health CheckWireless Health CheckBest Practices ScoreConfiguration HighlightsUpgrade AdvisorTag/Policy usageLog SummarizationAp inventoryAP Config viewRRM HealthRRM HealthRF Health AnalysisRF

78、 Stats SummarizationChannel StatsRRM analysisNDP AP summarizationAP RF viewClient AuditClient Audit8821iPhoneDragerVoceraSpectralinkWhat it does:More Info 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveInput FilesTool supports:“sh run-config”“sh tech wireless”Best way to

79、capture it,AireOS:SSH with config paging disabledUse:transfer upload datatype run-config(max 32MB)Best way to capture it,IOS-XE:SSH and collect all outputDebug bundle,add the command “show tech wireless”AireOS9800/EWCBRKEWN-300268AireOSIOS-XE 2023 Cisco and/or its affiliates.All rights reserved.Cisc

80、o Public#CiscoLiveInterfaceMenuAreaMessageCountsOpen summaryBRKEWN-300269 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWLC MessagesErrorWarningInformationBRKEWN-300270 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveRF Health WLC/AP Groups/Fle

81、x GroupsTotal Radios per LevelGeneral EvaluationIndividual MetricsBRKEWN-300271WiFi-HAWK 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveBirds Eye view on FeaturesExpert system to identify problems over from a wireless captureHard to see issues found in huge filesLow level

82、 protocol analysisInteroperability problemsGenerate a summary of events per client and AP WLANsCreate Expert reportsSpeed up event identification in a wireless captureBRKEWN-300273 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveLoose State MachineClient has state machine

83、to detect error transitionsNo authenticationPSK failuresEAPoL negotiation errorsThis must work even when capture is incomplete,or we have missing framesBRKEWN-300274 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWiFi-HawkHow to use?BRKEWN-300275 2023 Cisco and/or its aff

84、iliates.All rights reserved.Cisco Public#CiscoLiveQuick Index viewList of BSSIDs(APs)and clients active during the captureQuick glance on who is having problemsLast known state for each client(probing,auth,full traffic,etc)Click on each item for full detailsBRKEWN-300276 2023 Cisco and/or its affili

85、ates.All rights reserved.Cisco Public#CiscoLiveEvent FlowColor coded events registered per deviceSummary of repeated items for a more concise viewQuick location in capture of important issues(frame/time)Added information for better understandingTranslation of reason codes,failures,EAP types,etcBRKEW

86、N-300277 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveHistograms-ClientGet quick glance on signal levels,rates and QoS marking received and transmitted by clientSupported on Radiotap and Peekremote(AP sniffer)file formatsBRKEWN-300278 2023 Cisco and/or its affiliates.Al

87、l rights reserved.Cisco Public#CiscoLiveDetecting easy to miss problemsSimplify finding issues across large capturesUnencrypted traffic leak(client/AP)Beacon lossHigh co-channelIncorrect data ratesBRKEWN-300279 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWhere?Desktop

88、Version:Webex Room:Alias:wifi-BRKEWN-300280DNAC Client-Device 360 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveAP 360BRKEWN-300282AP_Name-AP1 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveClient 360BRKEWN-300283 2023 Cisco and/or its affilia

89、tes.All rights reserved.Cisco Public#CiscoLiveSite Analytics 2.3.6.0BRKEWN-300284Site Analytics provides global insights 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveSite Analytics 2.3.6.0BRKEWN-300285Detailed Site health 2023 Cisco and/or its affiliates.All rights rese

90、rved.Cisco Public#CiscoLiveSite Analytics 2.3.6.0BRKEWN-300286Detailed floor health 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveNetwork Services-AAABRKEWN-300287Specially for Wireless deployments.Wireless Detector 2023 Cisco and/or its affiliates.All rights reserved.Ci

91、sco Public#CiscoLiveWireless Troubleshooting-Holy GrailWireless Clients may fail randomly due to RF or roaming scenariosDetecting issues can be difficultProblems are transient,and can go undetectedDebugging over long periods or for large client count is impossibleMonitor VIP Clients?(Coming soon.)BR

92、KEWN-300289 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWireless DetectorCollects Client failure informationClassifies per delete reason Filters by severitySends report Email/Text90BRKEWN-3002Uses 9800 Always-on Logging Simple 4 Steps processCollect,Classify,Filter&Rep

93、ortDownload 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveHow to Set it up?91BRKEWN-3002Mail SetupRegistrationExecute scriptUpdate script9800-l#mkdir eem_lib9800-l#copy ftp:/server/wireless_detectorv1.tcl wireless_detectorv1.tcl9800-l#Conf t9800-1(config)#event manager d

94、irectory user policy bootflash:eem_lib9800-1(config)#event manager policy wireless_detectorv1.tcl Set wd_send_email to 1(Email),0(Text)event manager environment wd_send_email 1event manager environment wd_email_server event manager environment wd_email_from event manager environment wd_email_to By d

95、efault,it is set to execute on demand:9800-l#event manager run wireless_detectorv1.tclUse the event update CLI to install a new version9800-l#event manager update user policy name wireless_detectorv1.tcl repository ftp:/192.168.0.99:2121More Info 2023 Cisco and/or its affiliates.All rights reserved.

96、Cisco Public#CiscoLiveExecuting the Script Email reportBRKEWN-300292 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveExecuting the Script Text ReportSending text results.Client failure detection at 2023_Apr_18_15_03-|Total Clients:|15|Clients deleted by errors:|1|Clients d

97、eleted by warnings:|5|Clients deleted by info/normal:|3|Clients deleted by unknown reason:|5|Period collected:|1 day|Maximum Clients to display:|10|-*BRKEWN-300293 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveExecuting the Script Text ReportError Delete reasons Found:-|

98、Reason code|Count|CO_CLIENT_DELETE_REASON_DOT11_DENIED_RATES|1|-Warning Delete reasons Found:-|Reason code|Count|CO_CLIENT_DELETE_REASON_KEY_XCHNG_TIMEOUT|1|CO_CLIENT_DELETE_REASON_MN_AP_DRIVER_EVENT_CLASS3_RECV|4|-BRKEWN-300294Debug Bundle&Analyzer 2023 Cisco and/or its affiliates.All rights reserv

99、ed.Cisco Public#CiscoLiveWhat we already haveNavigate WLC UI-Troubleshooting(Help on what logs to be collected is available in top right corner)The log advisor provides a huge list of debugs/commands that needs to be executed in the WLC to get all relevant logsThis may be laborious and prone to manu

100、al error to miss some important logs.This tedious job is made simple nowBRKEWN-300296 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveShow tech wireless client MAC of two instances,one before RA trace isenabled and once after RA trace is stopped are capturedContents of the

101、 debug bundleThis collects and captures both RA traces(debug level)and internal RA for theconfigured clientsRA TracesClient detailPacket captures at the WLC control plane is collected for the clientsPacket CaptureTo address the problem explained in the previous slide,we are providing a simplified ve

102、rsion through debug bundleLog collection is triggered(Start/Stop/StoreStart/Stop/Store)in a single command BRKEWN-300297 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveCommands to trigger the debug bundleTo Enable RA traces and client detailsC9800#debug wireless bundle cl

103、ient To disableC9800#no debug wireless bundle client To Enable Packet captureC9800#debug wireless bundle include epc client To disableC9800#no debug wireless bundle include epc client BRKEWN-300298 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveCommands-WorkflowC9800#debu

104、g wireless bundle client 42e4.cb89.e878Wireless Client debug bundle start eventWireless client debug bundle collection start event,Debug log bundle collection will be stopped with default time of 30 minutesTo stop debug log bundle collection,execute no debug wireless bundle.C9800#debug wireless bund

105、le include epc client 42e4.cb89.e878Wireless Client debug bundle start eventWirless client debug bundle collection start event,Debug log bundle collection will be stopped with default time of 30 minutesTo stop debug log bundle collection,execute no debug wireless bundle.Enable the RA traces and tech

106、 supportEnable the EPCNote:Make sure to input the Client MAC in xxxx.xxxx.xxxx formatBRKEWN-300299 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveCommands-WorkflowRUN THE REQUIRED TESTC9800#no debug wireless bundle client 42e4.cb89.e878Wireless Client debug bundle stop ev

107、ent*Sep 20 06:09:03.498:%HA_EM-6-LOG:timer_client_debug_bundle:Wireless client debug bundle countdown timer expired/stopped,Create TAR bundle wireless_bundle_42e4.cb89.e878_060908_UTC_Sep_20_2022.tar.C9800#no debug wireless bundle include epc 42e4.cb89.e878Wireless Client debug bundle stop eventEmbe

108、dded packet capture file collected at bootflash:,File is epc_174046_UTC_Sep_19_2022.pcapCreate TAR bundle wireless_bundle_42e4.cb89.e878_UTC_Sep_20_2022.tar.Run the testStop the debug bundleNote:While stopping the debug bundle,the bundle name is highlighted by the WLCBRKEWN-3002100 2023 Cisco and/or

109、 its affiliates.All rights reserved.Cisco Public#CiscoLiveCommands-WorkflowC9800#show bootflash:|inc 2022.tar1047 1230336 Sep 19 2022 17:20:01.0000000000+00:00 wireless_bundle_42e4.cb89.e878 _171958_UTC_Sep_19_2022.tar1048 316416 Sep 19 2022 17:40:51.0000000000+00:00 wireless_bundle_42e4.cb89.e878_1

110、74050_UTC_Sep_19_2022.tarC9800#C9800#copy bootflash:wireless_bundle_42e4.cb89.e878_060908_UTC_Sep_20_2022.tar tftp:/C9800#Location of the bundleCopy the tar file to TFTP serverNote:Tar file name given here is just for reference.BRKEWN-3002101 2023 Cisco and/or its affiliates.All rights reserved.Cisc

111、o Public#CiscoLiveBundle ContentsClient tech support after RA stoppedRA Traces-InternalRA Traces-debug level Client tech support before RA startedClient tech support before RA startedControl plane PCAPi.Two sets of RA traces for all the clientsii.Two sets of clients tech support iii.WLC control plan

112、e capturesBRKEWN-3002102 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLivePoints to noteBundle can be enabled for maximum of 5 ClientsThe debug data will be collected and stored in bootflash:Bundle is saved as.tar file per Client MACDebug bundle stop event will be triggered

113、 automatically in 30 Minutes if not stopped manuallyBRKEWN-3002103 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWireless Debug Analyzer104BRKEWN-3002 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveTroubleshooting Use case 1(AAA issues)Issues

114、like AAA server down or invalid credentials can be easily root causedBRKEWN-3002105 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveTroubleshooting Use case 2(Roaming)Roaming issues like wrong PMK,policy mismatch can be easily ruled out BRKEWN-3002106WalkMeOn-Device Intell

115、igence 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWalkMe-Guided Conceptual AssistanceAuto enabled with opt out supportBRKEWN-3002108 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWalkMe-Guided Conceptual AssistanceSoftware RecommendationBR

116、KEWN-3002109 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWalkMe-Guided Conceptual AssistanceEnhancements&Warnings110Log AdvisorCritical Bug WarningBRKEWN-3002Debug Analyzer 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWalkMe-Guided Concept

117、ual AssistanceProactive Troubleshooting111Identifying Mobility Down scenario BRKEWN-3002 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWalkMe-Guided Conceptual AssistanceAP Join Troubleshooting112Field Notice NotificationBRKEWN-3002 2023 Cisco and/or its affiliates.All r

118、ights reserved.Cisco PublicKey Takeaway Data Collection PrinciplesKeeping your Network HealthyKPI MonitoringKPI AutomationEEM ScriptsWLAN PollerAutomate Log AnalysisWCAEWiFi HawkDNAC 360Wireless DetectorDebug Bundle&Debug AnalyzerWalkMEBRKEWN-3002113 2023 Cisco and/or its affiliates.All rights reser

119、ved.Cisco Public#CiscoLiveFill out your session surveys!Attendees who fill out a minimum of four session surveys and the overall event survey will get Cisco Live-branded socks(while supplies last)!114BRKEWN-3002These points help you get on the leaderboard and increase your chances of winning daily a

120、nd grand prizesAttendees will also earn 100 points in the Cisco Live Challenge for every survey completed.2023 Cisco and/or its affiliates.All rights reserved.Cisco PublicContinue your educationVisit the Cisco Showcase for related demosBook your one-on-oneMeet the Engineer meetingAttend the interactive education with DevNet,Capture the Flag,and Walk-in LabsVisit the On-Demand Library for more sessions at www.CiscoL you#CiscoLive#CiscoLive