{"id":779,"date":"2019-10-09T19:12:44","date_gmt":"2019-10-09T09:12:44","guid":{"rendered":"https:\/\/blog.hegars.com\/?p=779"},"modified":"2019-10-15T16:55:42","modified_gmt":"2019-10-15T06:55:42","slug":"analyzing-a-fault-cisco-iad-2430","status":"publish","type":"post","link":"https:\/\/blog.hegars.com\/?p=779","title":{"rendered":"Analyzing a Faulty Cisco IAD2431-16FXS"},"content":{"rendered":"\n

I have a Cisco IAD2431-16FXS that has an issue with audio from the FXS mouth ports, sending only static, receive is fine<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Testing with a 600ohm Alcatel TE200 with REN of 1 over a 1000m coil<\/p>\n\n\n\n

FXS Loopback Tests<\/h3>\n\n\n\n

Lopping the local disables network and I get amplified static in earpiece (could be due to the anti side band in the phone too )
#test voice port 2\/0 loopback local
#test voice port 2\/0 loopback disable<\/em>

Looping the network side yields clear audio with a tiny tiny delay from the network side which is a SIP phone via a gateway.
#test voice port 2\/0 loopback network
#test voice port 2\/0 loopback disable<\/em><\/p>\n\n\n\n

Codec Testing <\/h3>\n\n\n\n

ulaw
g729r8 (dtmf-relay rtp-nte, sip-notify )<\/p>\n\n\n\n

no difference, only extra compression artifacts which is expected.<\/p>\n\n\n\n

VINET4 Debug<\/h3>\n\n\n\n

#test voice port 2\/0 debug on<\/em><\/p>\n\n\n\n

v4vip_isr:INT-0,1,port#=0,0000,0000,600F,0005
v4vip_active_lo_v1x:dev#=0, ch#=0
v4vip_send_cmd:cmd_len=14, port=0, 0200<\/strong>,540C,D9B5,DC18,22D1,74F6,00F8,03E0,0400,5839,3F00,3800,4000,BE50,
v4vip_send_cmd:cmd_len=3, port=0, 0100,0B01,0040,
v4vip_output:port=0, output_signal=4, relays=04, oper_mode=5280
v4vip_send_cmd:cmd_len=3, port=0, 0100,0801,EC00,
v4vip_output:port=0, output_signal=3, relays=05, oper_mode=5280<\/p>\n\n\n\n

Comparisons<\/h3>\n\n\n\n

SOP (Status Operation) register at 0x0A is set to 0200 verses my other IAD’s with this register set to 0000<\/p>\n\n\n\n

E1 Input testing<\/h3>\n\n\n\n

Dialing in via the ISDN port out via the VoIP Peer works fine. Loopback testing both ends work fine also.<\/p>\n\n\n\n

#show isdn active detail<\/em><\/strong><\/p>\n\n\n\n

--------------------------------------------------------------------------------\n                                ISDN ACTIVE CALLS\n--------------------------------------------------------------------------------\nCall    Calling      Called       Remote  Seconds Seconds Seconds Charges\nType    Number       Number       Name    Used    Left    Idle    Units\/Currency\nD-DSL   DSL          Int-id       B-chan  Callid  Conn    Disc    Call Type \n                                                          Updated\n--------------------------------------------------------------------------------\nIn         4000        0000                   346       0       0               \n   0          0           0            0     000A       1       0       VOICE  \n--------------------------------------------------------------------------------  <\/pre>\n\n\n\n
#show voice port summary<\/em><\/strong><\/p>\n\n\n\n
                                           IN       OUT\nPORT            CH   SIG-TYPE   ADMIN OPER STATUS   STATUS   EC\n=============== == ============ ===== ==== ======== ======== ==\n1\/0:15          01  isdn-voice  up    up   none     none     y \n1\/0:15          02  isdn-voice  up    dorm none     none     y \n1\/0:15          03  isdn-voice  up    dorm none     none     y \n1\/0:15          04  isdn-voice  up    dorm none     none     y \n1\/0:15          05  isdn-voice  up    dorm none     none     y \n1\/0:15          06  isdn-voice  up    dorm none     none     y \n1\/0:15          07  isdn-voice  up    dorm none     none     y \n1\/0:15          08  isdn-voice  up    dorm none     none     y \n2\/0             --  fxs-ls      up    dorm on-hook  idle     y \n2\/1             --  fxs-ls      up    dorm on-hook  idle     y \n2\/2             --  fxs-ls      up    dorm on-hook  idle     y \n2\/3             --  fxs-ls      up    dorm on-hook  idle     y \n2\/4             --  fxs-ls      up    dorm on-hook  idle     y \n2\/5             --  fxs-ls      up    dorm on-hook  idle     y \n2\/6             --  fxs-ls      up    dorm on-hook  idle     y \n2\/7             --  fxs-ls      up    dorm on-hook  idle     y \n2\/8             --  fxs-ls      up    dorm on-hook  idle     y \n2\/9             --  fxs-ls      up    dorm on-hook  idle     y \n2\/10            --  fxs-ls      up    dorm on-hook  idle     y \n2\/11            --  fxs-ls      up    dorm on-hook  idle     y \n2\/12            --  fxs-ls      up    dorm on-hook  idle     y \n2\/13            --  fxs-ls      up    dorm on-hook  idle     y \n2\/14            --  fxs-ls      up    dorm on-hook  idle     y \n2\/15            --  fxs-ls      up    dorm on-hook  idle     y \n \nPWR FAILOVER PORT        PSTN FAILOVER PORT\n=================        ==================\n<\/pre>\n\n\n\n
#show voice dsp active<\/em><\/strong><\/p>\n\n\n\n
----------------------------FLEX VOICE CARD 0 -----------------------\n-------\n                        *DSP ACTIVE VOICE CHANNELS*\nDSP    DSPWARE              VOX DSP                 SIG DSP          PAK   TX\/RX\nTYPE   VERSION    CODEC     NUM CH TS VOICEPORT SLT NUM CH TS RST AI ABRT PACK COUNT\n====== ========== ========  === == == ========= === === == == === == ==== ============\nC5510     26.3.14 g711ulaw  001 01 01 1\/0:15    000 001 01 01   0  0    0     581\/2332\n------------------------END OF FLEX VOICE CARD 0 --------------------\n<\/pre>\n\n\n\n
#show voip rtp connections detail <\/strong><\/em><\/p>\n\n\n\n
VoIP RTP active connections :\nNo. CallId     dstCallId  LocalRTP RmtRTP LocalIP                                RemoteIP                               \n1   55         54         18508    10458  192.168.15.121                         192.168.15.124                         \n callId 55 (dir=2): called=6000 calling=4000 redirect=\n     dest callId 54: called=0000 calling=4000 redirect=\n   1 context 65964984 xmitFunc 62628578\nFound 1 active RTP connections\n<\/pre>\n\n\n\n
Physical<\/h2>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Port <-> SLIC Protection <-> SLIC  <-> VICETIC  <-> TDM Bus <-> DSP  <-> CPU <-> SIP<\/p>\n\n\n\n
Input\/Output<\/h3>\n\n\n\n
Forming the first part of the analog section input from a RJ21 Connector thur to 8 transformers (as this a a 16FXS unit )<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
As tone generation ??<\/p>\n\n\n\n
SLIC Protection <\/h2>\n\n\n\n
ST LCP1521<\/p>\n\n\n\n
\"\"
 ST LCP1521 <\/figcaption><\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"
 ST LCP1521 <\/figcaption><\/figure>\n\n\n\n
SLIC <\/h3>\n\n\n\n
Subscriber line interface card<\/a><\/p>\n\n\n\n
\"\"
 PEB4266V  and supporting LCP1521 PROGRAMMABLE TRANSIENT VOLTAGE
 SUPPRESSOR FOR SLIC PROTECTION in SOC-8 package<\/figcaption><\/figure>\n\n\n\n
PEB4266V <\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Ring generation on this chip? might be why no noise when idle<\/p>\n\n\n\n
Interface Circuit<\/h3>\n\n\n\n
\"\"
 PEB3304 HL and 4 SLIC’s   <\/figcaption><\/figure>\n\n\n\n
PEB3304 HL and 4 SLIC’s  <\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"
4 interface chips and SLICs totaling 16 analogue ports ( 8 unpopulated)<\/figcaption><\/figure>\n\n\n\n
\"\"
Unpolluted Interface and 2 SLIC’s<\/figcaption><\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
so I need to jump onto the pcm bus to see if the correct data is getting through and compare it to #test voice port 2\/0 pcm-dump<\/p>\n\n\n\n
Setup Capture<\/h4>\n\n\n\n
#conf t
(config)#voice hpi capture destination slot0:cap.dat
(config)#voice hpi capture buffer 5000000
(config)#end
#test voice port 2\/0 pcm-dump caplog 7 duration 10
#test voice port 2\/0 pcm-dump disable
#dir slot0:<\/p>\n\n\n\n
Register Names<\/h4>\n\n\n\n
In the command <\/p>\n\n\n\n
#test voice port 2\/0 read all<\/strong><\/em><\/p>\n\n\n\n
The unnamed registers have the meanings below<\/p>\n\n\n\n
SOP = Status Operation
IOP = Interface Operation
COP  =Coefficient Operation
EOP = EDSP Operation<\/p>\n\n\n\n
TDM Bus<\/h2>\n\n\n\n
I’m guessing being cisco it all head off onto a TDM bus as PCM data<\/p>\n\n\n\n
In Cisco routers, there is one PLL on the motherboard, called the network-clock. This PLL acts as the internal clock to the TDM backplane on the router and can lock on to one external source of clocking. <\/p>\n\n\n\n
DSP’s<\/h2>\n\n\n\n
The DSP’s are the same as a PVDM2 C5510’s only soldered onto the main board.<\/p>\n\n\n\n
\"\"
TNETV2510GGW DSP and K4S281632F-TC75 RAM<\/figcaption><\/figure>\n\n\n\n
Cisco Magic Sauce<\/h2>\n\n\n\n
\"\"<\/figure>\n\n\n\n
1x Marvell GT-96123 – chipset???
1x PCM RM5261A – 64-Bit MIPS RISC Microprocessor with 32\/64-Bit System Bus
2x Altera ACEX EP1K100FC484 – Programmable logic devices<\/p>\n\n\n\n
CPLD’s<\/h3>\n\n\n\n
proably the location of the TDM bus and the rest of the glue logic<\/p>\n","protected":false},"excerpt":{"rendered":"
I have a Cisco IAD2431-16FXS that has an issue with audio from the FXS mouth ports, sending only static, receive is fine Testing with a 600ohm Alcatel TE200 with REN of 1 over a 1000m coil FXS Loopback Tests Lopping the local disables network and I get amplified static in earpiece (could be due to […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-container-style":"default","site-container-layout":"default","site-sidebar-layout":"default","disable-article-header":"default","disable-site-header":"default","disable-site-footer":"default","disable-content-area-spacing":"default","footnotes":""},"categories":[5,17,29],"tags":[],"_links":{"self":[{"href":"https:\/\/blog.hegars.com\/index.php?rest_route=\/wp\/v2\/posts\/779"}],"collection":[{"href":"https:\/\/blog.hegars.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.hegars.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.hegars.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.hegars.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=779"}],"version-history":[{"count":44,"href":"https:\/\/blog.hegars.com\/index.php?rest_route=\/wp\/v2\/posts\/779\/revisions"}],"predecessor-version":[{"id":849,"href":"https:\/\/blog.hegars.com\/index.php?rest_route=\/wp\/v2\/posts\/779\/revisions\/849"}],"wp:attachment":[{"href":"https:\/\/blog.hegars.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=779"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.hegars.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=779"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.hegars.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=779"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}