S9300利用流量统计功能定位转发丢包或不通故障

发布时间:  2014-09-12 浏览次数:  273 下载次数:  10
问题描述
故障现象:
BAS--(eth-trunk0)---S9306(g1/0/1)====DSLAM---拨号用户
S9306与dslam的管理IP均作为BAS的静态用户,S9306和DSLAM均无法ping通BAS,S9306和DSLAM互ping正常。
告警信息

处理过程

处理过程:
1、DSLAM下挂pc拨号成功,说明pc到BAS的链路是通畅的;同时查看9306的上下行端口,errors均为0;
2、查看9306的配置,透传了业务vlan和管理vlan,没有配置acl,配置没有问题;
3、S9306 mac、arp表项学习均正常;在BAS上查看,静态用户也已经上线。
4、S9306支持出入方向的流量统计,且ETH-Trunk接口也支持,为问题定位提供了有利的工具,具体统计方法如下:

首先,定义好BAS到dslam及dslam到bas的icmp数据流:
[S9306-acl-adv-3031]rule per icmp s 10.191.124.218 0  des 10.191.124.220 0
[S9306-acl-adv-3030]rule per icmp source 10.191.124.220 0 des 10.191.124.218 0
然后做流量统计的动作,绑定C/B对,定义好流量统计的策略:
[S9306-behavior-tj]statistic enable
[S9306-1-trafficpolicy-BastoDSLAM]c BastoDSLAM b tj
[S9306-1-trafficpolicy-DSLAMtoBas]c DSLAMtoBas b tj
然后将策略应用在相应接口的出入方向,一定要正确,在S9300接BAS的接口入方向、接DSLAM的出方向下发BastoDSLAM策略;在S9300接BAS的接口出方向、接DSLAM的入方向下发DSLAMtoBas策略:
[S9306-1-Eth-Trunk0]traffic-policy BastoDSLAM in
[S9306-1-Eth-Trunk0]traffic-policy DSLAMtoBas out 
然后在bas上主动ping dslam 5个报文,在9306上查看流量统计查看,发现两个接口四个方向值都为5,说明9306转发正常:
 <RH-S9306-1> dis traffic po st int Eth-Trunk 0  out                            
                                                                               
 Interface: Eth-Trunk0                                                         
 Traffic policy outbound: 5to2                                                 
 Rule number: 1                                                                
 Current status: OK!                                                           
 Board : 4                                                                     
Item                              Packets                       Bytes          
---------------------------------------------------------------------          
Matched                                 0                           0          
  +--Passed                             0                           0          
  +--Dropped                            0                           0          
    +--Filter                           0                           0          
    +--URPF                             -                           -          
    +--CAR                              0                           0          
 Board : 5                                                                     
Item                              Packets                       Bytes          
---------------------------------------------------------------------          
Matched                             5                     540          
  +--Passed                        5                     540           
  +--Dropped                            0                           0          
    +--Filter                           0                           0          
    +--URPF                             -                           -          
    +--CAR                              0                           0 
后经过BAS侧检查,确认BAS异常。

根因
原因分析:
1、链路故障;
2、配置问题;
3、9306转发问题;
4、其他设备问题;
建议与总结
S9300端口下可对inbound/outbond方向同时进行流量统计,非常方便问题定位。

END