ME60和NE40对接不通问题

发布时间:  2014-08-03 浏览次数:  363 下载次数:  0
问题描述
ME60和NE40对接,起主接口和子接口直连,主接口直连ping不通。

ME60  配置
interface GigabitEthernet1/0/0
description To_NE40-A-G7/0/0-access
undo shutdown
ip address 10.1.1.90 255.255.255.252
bas                                     
#
  access-type layer3-subscriber default-domain authentication ne40a
#
#
interface GigabitEthernet1/0/0.1
vlan-type dot1q 412
description To_NE40-A-G7/0/0-route
ip address 10.1.1.142 255.255.255.252
ospf cost 15

layer3-subscriber 10.1.1.112 10.1.1.115 domain-name default0
layer3-subscriber 10.1.1.116 10.1.1.119 domain-name default0
layer3-subscriber 10.19.0.0 10.19.255.255 domain-name default0
layer3-subscriber 10.21.64.0 10.21.127.255 domain-name default0
layer3-subscriber 10.45.64.0 10.45.127.255 domain-name default0
layer3-subscriber 10.200.0.0 10.200.255.255 domain-name default0

[ME60]display arp  all
IP ADDRESS      MAC ADDRESS     EXPIRE(M) TYPE        INTERFACE   VPN-INSTANCE
                                          VLAN/CEVLAN PVC                     
------------------------------------------------------------------------------
10.1.1.90       286e-d421-cded            I -         GE1/0/0
10.1.1.89       0018-82db-52fc  19        D-1         GE1/0/0   主接口arp
10.1.1.114      286e-d421-cdf5            I -         GE1/0/8
10.1.1.118      286e-d421-cdf6            I -         GE1/0/9
10.1.1.122      286e-d421-cdf5            I -         GE1/0/8.1
10.1.1.126      286e-d421-cdf6            I -         GE1/0/9.1
10.1.1.142      286e-d421-cded            I -         GE1/0/0.1
10.1.1.141      0018-82db-52fc  19        D-1         GE1/0/0.1   子接口ARP
                                          
192.168.1.1     286e-d415-3bfe            I -         GE0/0/0
----------------------------------------------------------------

NE40  配置

interface GigabitEthernet7/0/0
description to_me60_test_ge1/0/0
undo negotiation auto                   
undo shutdown
ip address 10.1.1.89 255.255.255.252
#
interface GigabitEthernet7/0/0.1
vlan-type dot1q vid 412
description to_me60_test_ge1/0/0_route
undo shutdown
ip address 10.1.1.141 255.255.255.252
ospf cost 15
#


[ME60]ping  10.1.1.89
  PING 10.1.1.89: 56  data bytes, press CTRL_C to break
    Request time out
    Request time out
    Request time out
    Request time out
    Request time out

  --- 10.1.1.89 ping statistics ---
    5 packet(s) transmitted
    0 packet(s) received
    100.00% packet loss

[ME60]ping  10.1.1.141
  PING 10.1.1.141: 56  data bytes, press CTRL_C to break
    Reply from 10.1.1.141: bytes=56 Sequence=1 ttl=255 time=15 ms
    Reply from 10.1.1.141: bytes=56 Sequence=2 ttl=255 time=3 ms
    Reply from 10.1.1.141: bytes=56 Sequence=3 ttl=255 time=4 ms
    Reply from 10.1.1.141: bytes=56 Sequence=4 ttl=255 time=1 ms
    Reply from 10.1.1.141: bytes=56 Sequence=5 ttl=255 time=1 ms

  --- 10.1.1.141 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
round-trip min/avg/max = 1/4/15 ms

告警信息
处理过程
新增配置:ayer3-subscriber 10.1.1.88 10.1.1.89 domain-name default0  问题解决
根因
过程:
1) 查看直连ping不通,首先查看mac和arp
2) 查看其余配置,查看接口配置,发现ME60接口配置了bas功能,默认情况下接口配置bas功能后是不会学习arp和mac地址的,需要和认证结合起来。

interface GigabitEthernet1/0/0
description To_NE40-A-G7/0/0-access
undo shutdown
ip address 10.1.1.90 255.255.255.252
bas                                     
#
  access-type layer3-subscriber default-domain authentication ne40a

3) 查看ME60的配置,发现只配置了子接口的三层用户指定所在IP地址段以及相关联的认证域的域名。为配置主接口的三层用户指定所在IP地址段以及相关联的认证域的域名,需要增加主接口。

 layer3-subscriber 10.1.1.112 10.1.1.115 domain-name default0
layer3-subscriber 10.1.1.116 10.1.1.119 domain-name default0
layer3-subscriber 10.19.0.0 10.19.255.255 domain-name default0
layer3-subscriber 10.21.64.0 10.21.127.255 domain-name default0
layer3-subscriber 10.45.64.0 10.45.127.255 domain-name default0
layer3-subscriber 10.200.0.0 10.200.255.255 domain-name default0
建议与总结
如果ME60接口配置了bas功能,默认情况下接口配置bas功能后是不会学习arp和mac地址的,需要和认证结合起来。

END