No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Traffic Statistics on an NE5000E Interface Fail to Be Collected and Displayed on the NMS

Publication Date:  2013-09-03 Views:  82 Downloads:  0
Issue Description
NE5000E version: V300R007C00SPC500
Patch: V300R007C00SPC023
Networking: N/A
Fault symptom: The traffic policy is configured on the NE5000E interface to collect traffic statistics. The customer gives feedback that traffic from the Internet Data Center (IDC) to the NE5000E cannot be queried using SNMP on the NMS from January 24.

Alarm information:
497    Critical   13-01-24  00:12:12    The hardware resource(ID=42,User=ACLv4
                                        ) storage media of LPUclc2/9(Entity)
                                        exceeded the prealarm threshold, Resume
498    Critical   13-01-24  00:12:12    The hardware resource(ID=1,User=ACLv4)
                                         storage media of LPUclc2/9(Entity)
                                        exceeded the prealarm threshold, Resume
Handling Process
1. After confirmation with third-party NMS personnel, statistics about outbound traffic are collected, but statistics about inbound traffic fail to be collected. This indicates that the SNMP interface index and SNMP policy are correct.
2. Verify that the IP address segment is correctly configured in the ACL of the inbound traffic classifier on the NE5000E.
3. Run the display traffic policy statistics command on the NE5000E to view statistics about inbound traffic corresponding to the IDC-filter-in classifier. The statistics fail to be displayed.
[SNXA-PB-CMNET-RT02-CNE5000E]display traffic policy statistics inter gi2/9/1/0 inbound verbose classifier-based class  IDC-filter-in
Interface: GigabitEthernet2/9/1/0
Traffic policy inbound: IDC-filter-in   
    Current status: Refresh failed! Waiting for refreshing again!
    IPv4&L2: Rule Index: 2870(Free), 2993(Needed)
       IPv6: Rule Index: 3583(Free), 0(Needed)

4. Run the display traffic policy statistics command on the NE5000E to view statistics about outbound traffic corresponding to the IDC-filter-out classifier. The statistics are normal, indicating that software fault is filtered out.
 [SNXA-PB-CMNET-RT02-CNE5000E]dis traffic policy statistics inter gi2/9/1/0 outbound verbose classifier-based class IDC-filter-out
Interface: GigabitEthernet2/9/1/0
Traffic policy outbound: IDC-filter-out
Statistics last cleared: Never
Rule number: 15 IPv4, 0 IPv6
Current status: OK!
 
Classifier: IDC-filter-out
  Behavior: IDC-filter
Item                             Packets                      Bytes
-------------------------------------------------------------------
Matched                  568,177,722,343                          0
  +--Passed              568,177,722,343                          0

5. Check configurations of inbound and outbound traffic policies on the NE5000E. Many inbound traffic classifiers exist.
interface GigabitEthernet2/9/1/0
 description To-[SNXA-PC-IDC-RT02-MX960]GE9/1/1
 ip address 218.200.2.197 255.255.255.252
 isis enable 100
 isis circuit-level level-2
 traffic-policy IDC-filter-in inbound
 traffic-policy IDC-filter-out outbound

traffic policy IDC-filter-in
 undo share-mode
 statistics enable
  classifier Con-Telcom-Address2-Destination behavior Con-Telcom-Address2-Destination
 classifier Con-Telcom-Address-Destination behavior Con-Telcom-Address-Destination
 classifier Con-Unicom-Address2-Destination behavior Con-Unicom-Address2-Destination
 classifier Con-Unicom-Address-Destination behavior Con-Unicom-Address-Destination
 classifier Con-Edu-Address-Destination behavior Con-Edu-Address-Destination
 classifier IDC-filter-in behavior IDC-filter

traffic policy IDC-filter-out
undo share-mode
statistics enable
classifier IDC-filter-out behavior IDC-filter

6. ACLs may fail to take effect because of many traffic policies. Delete some traffic classifiers after negotiation with the customer and query the statistics. The statistics are properly collected. Contact third-party NMS personnel and confirm that statistics can be successfully queried on the NMS.
[SNXA-PB-CMNET-RT02-CNE5000E]dis traffic policy statistics inter gi2/9/1/0 inbound verbose classifier-based class IDC-filter-in
Interface: GigabitEthernet2/9/1/0
Traffic policy inbound: IDC-filter-in
Statistics last cleared: Never
Rule number: 5215 IPv4, 0 IPv6
Current status: OK!
Classifier: IDC-filter-in
  Behavior: IDC-filter
Item                             Packets                      Bytes
-------------------------------------------------------------------
Matched                          929,473              1,346,434,043
  +--Passed                      929,473              1,346,434,043
  +--Dropped                           0                          0

7. The number of ACLs configured on the NE5000E by the customer exceeds the upper limit on the card. The following command output shows that 2870 ACLs are in free state and 2993 ACLs are required.
[SNXA-PB-CMNET-RT02-CNE5000E]display traffic policy statistics inter gi2/9/1/0 inbound verbose classifier-based class  IDC-filter-in
Interface: GigabitEthernet2/9/1/0
Traffic policy inbound: IDC-filter-in   
    Current status: Refresh failed! Waiting for refreshing again!
    IPv4&L2: Rule Index: 2870(Free), 2993(Needed)
       IPv6: Rule Index: 3583(Free), 0(Needed)
View historical alarms. Alarms about exceeding the ACL specification are generated. The customer has deleted device alarms when troubleshooting other faults. Therefore, ACL-related alarms are not in the real-time alarm records.
The following command output shows that the card supports 11,328 ACLs and has 629 ACLs left.
[SNXA-PB-CMNET-RT02-CNE5000E-hidecmd]display  nps-qos clc2/9 priority ipv4 common
Total And Class Table Number: 0
Total Rule Index: 11328 Free Rule Index: 629
Root Cause
The possible causes are as follows:
1. The SNMP interface index is changed on the NMS. As a result, the NMS fail to collect statistics from the devices.
2. The traffic policy on the NE5000E is modified.
3. The device cannot collect IDC traffic.
4. The device software is faulty.
5. The device hardware is faulty.
Solution
N/A
Suggestions
For traffic policy statistics, if the specifications exceed the limit, querying statistics on traffic classifiers of the traffic policy is affected. If the redirection action is used, only ACL rules are affected.


END