Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: Cisco: VOIP

Monitoring H323 Gateways

 

 

Cisco voip RSS feed   Index | Next | Previous | View Threaded


chrishill.work at gmail

Nov 29, 2009, 6:12 AM

Post #1 of 4 (495 views)
Permalink
Monitoring H323 Gateways

Hi All,

I ran into scenario were we had 2 PRIs down but and all the syslogs had was some netclock errors and the interfaces bouncing. Believe this was caused by a provider issue.
But to of the PRIs did not come back, had to bounce the interface to get them back.

The only thing that indicated a problem 6 hours after the bounce was when i debugged the isdn q.921 traffic...here i saw the bad frames.

I would like to know a way can monitor these PRIs. These PRIs are only used for incoming 1800 calls.

Can a syslog server be configured to send out emails based on isdn debug data?

Any suggestions?

Thanks

Chris Hill - CCNA, CCNA Voice, CCVP
chrishill.work [at] gmail



_______________________________________________
cisco-voip mailing list
cisco-voip [at] puck
https://puck.nether.net/mailman/listinfo/cisco-voip


lelio at uoguelph

Nov 29, 2009, 8:50 AM

Post #2 of 4 (447 views)
Permalink
Re: Monitoring H323 Gateways [In reply to]

Syslog and SEC Tool is your best bet. SEC (or Simple Event Corelator)
will buffer an alert for a period of time, say five minutes, and
either ignore it or send you a down/up error. Or if no "interface up"
message is received after five minutes, an interface down message is
sent.

Lelio Fulgenzi, Senior Analyst
Computing & Communications
University of Guelph
519-824-4120 x56354

...sent from my iPod - please pardon my fat fingers ;)

[XKJ2000]

On 2009-11-29, at 9:12 AM, Chris Hill <chrishill.work [at] gmail> wrote:

>
> Hi All,
>
> I ran into scenario were we had 2 PRIs down but and all the syslogs
> had was some netclock errors and the interfaces bouncing. Believe
> this was caused by a provider issue.
> But to of the PRIs did not come back, had to bounce the interface to
> get them back.
>
> The only thing that indicated a problem 6 hours after the bounce was
> when i debugged the isdn q.921 traffic...here i saw the bad frames.
>
> I would like to know a way can monitor these PRIs. These PRIs are
> only used for incoming 1800 calls.
>
> Can a syslog server be configured to send out emails based on isdn
> debug data?
>
> Any suggestions?
>
> Thanks
>
> Chris Hill - CCNA, CCNA Voice, CCVP
> chrishill.work [at] gmail
>
>
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip [at] puck
> https://puck.nether.net/mailman/listinfo/cisco-voip
_______________________________________________
cisco-voip mailing list
cisco-voip [at] puck
https://puck.nether.net/mailman/listinfo/cisco-voip


jim at tgasolutions

Nov 29, 2009, 6:15 PM

Post #3 of 4 (438 views)
Permalink
Re: Monitoring H323 Gateways [In reply to]

Guys,
There are 2 methods I use to configure this for customers:
1. EEM-- embedded event manager..
http://www.cisco.com/en/US/products/ps6815/products_ios_protocol_group_home.html
It can watch syslog and send an email from the router--
and even issue commands to the router as a triggered event...
2. Kiwi syslog..- for those non-Linux types.
It has a scripting engine where you can do some amazing things.
www.kiwisyslog.com

Take a gander and see what ideas you can come up with for your needs.....


Jim



>From the EEM datasheet:


The applications are endless and only limited by your imagination.

Suppose, for example, you would like to automatically configure a switch interface depending on the device that is connected to a port or interface, an IP phone. A script can be devised that is triggered on the interface up condition and determines the details of the connected device. Upon discovery and verification of a newly connected IP phone, the port can be automatically configured according to prescribed parameters.

Another example might be to react to an abnormal condition such as the detection of a high error rate on an interface by forcing transit traffic over a more stable and error-free path. EEM can watch for the increased error rate and trigger a policy into action. The policy could notify network operations personnel and take immediate action to reroute traffic.

A third example might be to collect detailed data upon detection of a specific failure condition in order to gather information that can allow the root cause of the problem to be determined faster leading to a lower mean time to repair and higher availability. EEM could detect a specific Syslog message and trigger a script to collect detailed data using a series of show commands. After automatically collecting the data, it can be saved to flash memory or sent to an external management system or via email to a network operator.

The control is in the network administrator's hands. You control what events to detect and what actions to take. EEM is optional-it is up to the network administrator if and when it should be used and only takes the actions you program it to take.



-----Original Message-----
From: cisco-voip-bounces [at] puck [mailto:cisco-voip-bounces [at] puck] On Behalf Of Chris Hill
Sent: Sunday, November 29, 2009 9:12 AM
To: cisco-voip [at] puck
Subject: [cisco-voip] Monitoring H323 Gateways


Hi All,

I ran into scenario were we had 2 PRIs down but and all the syslogs had was some netclock errors and the interfaces bouncing. Believe this was caused by a provider issue.
But to of the PRIs did not come back, had to bounce the interface to get them back.

The only thing that indicated a problem 6 hours after the bounce was when i debugged the isdn q.921 traffic...here i saw the bad frames.

I would like to know a way can monitor these PRIs. These PRIs are only used for incoming 1800 calls.

Can a syslog server be configured to send out emails based on isdn debug data?

Any suggestions?

Thanks

Chris Hill - CCNA, CCNA Voice, CCVP
chrishill.work [at] gmail



_______________________________________________
cisco-voip mailing list
cisco-voip [at] puck
https://puck.nether.net/mailman/listinfo/cisco-voip
_______________________________________________
cisco-voip mailing list
cisco-voip [at] puck
https://puck.nether.net/mailman/listinfo/cisco-voip


treimers at ashevillenc

Nov 29, 2009, 9:19 PM

Post #4 of 4 (435 views)
Permalink
Re: Monitoring H323 Gateways [In reply to]

heh.

Had I seen this, I'd have posted EEM before you did
;-)

I'd also have to wonder about the possibilities of kron and a "sh isdn status"
looking for "multiple frame established"


-----Original Message-----
From: cisco-voip-bounces [at] puck on behalf of Jim McBurnett
Sent: Sun 11/29/2009 9:15 PM
To: Chris Hill; cisco-voip [at] puck
Subject: Re: [cisco-voip] Monitoring H323 Gateways

Guys,
There are 2 methods I use to configure this for customers:
1. EEM-- embedded event manager..
http://www.cisco.com/en/US/products/ps6815/products_ios_protocol_group_home.html
It can watch syslog and send an email from the router--
and even issue commands to the router as a triggered event...
2. Kiwi syslog..- for those non-Linux types.
It has a scripting engine where you can do some amazing things.
www.kiwisyslog.com

Take a gander and see what ideas you can come up with for your needs.....


Jim



>From the EEM datasheet:


The applications are endless and only limited by your imagination.

Suppose, for example, you would like to automatically configure a switch interface depending on the device that is connected to a port or interface, an IP phone. A script can be devised that is triggered on the interface up condition and determines the details of the connected device. Upon discovery and verification of a newly connected IP phone, the port can be automatically configured according to prescribed parameters.

Another example might be to react to an abnormal condition such as the detection of a high error rate on an interface by forcing transit traffic over a more stable and error-free path. EEM can watch for the increased error rate and trigger a policy into action. The policy could notify network operations personnel and take immediate action to reroute traffic.

A third example might be to collect detailed data upon detection of a specific failure condition in order to gather information that can allow the root cause of the problem to be determined faster leading to a lower mean time to repair and higher availability. EEM could detect a specific Syslog message and trigger a script to collect detailed data using a series of show commands. After automatically collecting the data, it can be saved to flash memory or sent to an external management system or via email to a network operator.

The control is in the network administrator's hands. You control what events to detect and what actions to take. EEM is optional-it is up to the network administrator if and when it should be used and only takes the actions you program it to take.



-----Original Message-----
From: cisco-voip-bounces [at] puck [mailto:cisco-voip-bounces [at] puck] On Behalf Of Chris Hill
Sent: Sunday, November 29, 2009 9:12 AM
To: cisco-voip [at] puck
Subject: [cisco-voip] Monitoring H323 Gateways


Hi All,

I ran into scenario were we had 2 PRIs down but and all the syslogs had was some netclock errors and the interfaces bouncing. Believe this was caused by a provider issue.
But to of the PRIs did not come back, had to bounce the interface to get them back.

The only thing that indicated a problem 6 hours after the bounce was when i debugged the isdn q.921 traffic...here i saw the bad frames.

I would like to know a way can monitor these PRIs. These PRIs are only used for incoming 1800 calls.

Can a syslog server be configured to send out emails based on isdn debug data?

Any suggestions?

Thanks

Chris Hill - CCNA, CCNA Voice, CCVP
chrishill.work [at] gmail



_______________________________________________
cisco-voip mailing list
cisco-voip [at] puck
https://puck.nether.net/mailman/listinfo/cisco-voip
_______________________________________________
cisco-voip mailing list
cisco-voip [at] puck
https://puck.nether.net/mailman/listinfo/cisco-voip

Cisco voip RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.