Syslog dial-up information

[michael.whittle]

Is there any way of seeing what number a user dialled from the logs on a Cisco AS5300? I know you can see the caller id of the user but if for example different hunt groups are terminating calls on the NAS I would like to know which number was dialled. I don't think this is available by default.

I know the Lucent TNT's provide this information and it looks like the 3COM kit doesn't but I'm hoping that there is a configuration setting that I could enable to provide this information.

Any ideas?

[Kevin Dorrell]

I don't know about the AS5300, but on a 7500 I get this information, when it's available, in syslog messages at level-6 (informational) as %ISDN-6-CONNECT and %ISDN-6-DISCONNECT. Make sure your router is configured to send level-6 massages to the syslog, and that the syslog server can accept them.

I get the same information in an SNMP trap 1.3.6.1.4.1.9.9.26.2.6.2 on call setup and clearing.

Kevin Dorrell

Luxembourg

[michael.whittle]

Excellent, thanks.

I'll give that a go.

[michael.whittle]

Hi Kevin,

That actually didn't work. It just shows the callerid of the user connecting but not the dnis number that the user dialed.

Cheers,

Mike

[Kevin Dorrell]

Mike,

I'm sorry this didn't work for you. Maybe it is something to do with the IOS version.

I am using a 7507 router with an ISDN primary configured with isdn switchtype primary-net5. It runs IOS 12.1(21).

Each time an incoming call gets connected, I get a batch of syslog messages like this (with the numbers changed for security reasons).

%LINK-3-UPDOWN: Interface SerialN/0:0, changed state to up

%DIALER-6-BIND: Interface SeN/0:0 bound to profile DiNN

%LINEPROTO-5-UPDOWN: Line protocol on Interface SerialN/0:0, changed state to up

%ISDN-6-CONNECT: Interface SerialN/0:0 is now connected to 001234567890

Then when it gets disconnected, I get:

%DIALER-6-UNBIND: Interface SeN/0:0 unbound from profile DiNN

%ISDN-6-DISCONNECT: Interface SerialN/0:0 disconnected from 001234567890 , call lasted 396 seconds

%LINK-3-UPDOWN: Interface SerialN/0:0, changed state to down

%LINEPROTO-5-UPDOWN: Line protocol on Interface SerialN/0:0, changed state to down

I wonder whether your ISDN line is reporting CLI at all. Where are you? I believe that in some US states CLI is forbidden. You could try "debug isdn q931", and see if you can see the incoming CLI on the debug. That at least will tell you whether the calling number is being delivered to the router or not.

Kevin Dorrell

Luxembourg

[michael.whittle]

Hi Kevin,

I'm not sure if I explained myself correctly. I can see the CallerID like in your example above. What I'm interested in is what number (DNIS) was dialled to connect to the NAS. If I have a whole bunch of hunt groups terminating calls on the NAS I want to know what hunt group number was dialled.

I'm familiar with the log output above. I know the Lucent TNT's provide both the CallerID and DNIS number when a call terminates on the box. I don't think 3COM provides this information but I'm interested if Cisco would be able to provide this information by changing a configuration setting.

Cheers,

Mike

[Kevin Dorrell]

Mike,

I'm really sorry, I didn't read the question properly.

So I've been running your original question in background today, but the best I've come up with so far has been this command, which I guess you know about already:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fvvfax_r/vrf_g.htm#wp1105916

Other than that, I am monitoring a Q931 debug to see if I can get the sort of information you need from it. I'll let you know if I manage to work anything out.

P.S. I can see the incoming called number on the Q931 debug, so there must be some way of getting that information out in a syslog or SNMP trap.

Sorry again for jumping in too fast, and not reading the question.

Kevin Dorrell

Luxembourg