数通产品AP6010无线上网业务出现下线故障

发布时间:  2015-06-10 浏览次数:  443 下载次数:  0
问题描述

如图所示,该校园网组网中接入交换机为华为S2750交换机,汇聚为友商交换机设备,核心为华为S12708交换机堆叠组网,S12708上行为认证服务器,其中AP接在接入交换机S2750下,分别作二层和三层认证。在网络运行中,二层和三层AP分别出现下线现象。

告警信息

Jun  1 2015 13:11:01 Zhong5-S2750-3F MSTP/4/PROLBDETECTGED:OID 1.3.6.1.4.1.2011.5.25.42.4.2.25 The MSTP Process's Port has been set to discarding state because of detecting loopback. (ProcessID=0, InstanceID=0, PortID1=8, PortID2=0, PortID3=0, PortID4=0, PortIDFlag=0, IfIndex=13, PortState=5, PortName=Ethernet0/0/9)

 

Jun  4 2015 18:52:35 Zhong5-S2750-3F %%01MSTP/6/RECEIVE_MSTITC(l)[96608]:MSTP received BPDU with TC, MSTP process 0 instance 0, port name is GigabitEthernet0/0/4.

Jun  4 2015 19:35:31 Zhong5-S2750-3F %%01MSTP/4/LOOPBACK_DETECTED(l)[96756]:The port Ethernet0/0/9 was blocked because it received the BPDU packets sent by itself.

 

三层AP掉线,S2750告警信息

===========================================================
  ===============display interface brief===============
===========================================================
PHY: Physical
*down: administratively down
(l): loopback
(s): spoofing
(E): E-Trunk down
(b): BFD down
(e): ETHOAM down
(dl): DLDP down
InUti/OutUti: input utility/output utility
Interface                   PHY   Protocol  InUti OutUti   inErrors  outErrors
Ethernet0/0/1               up    up        1.86%  4.65%         13          0
Ethernet0/0/2               down  down         0%     0%          0          0
Ethernet0/0/3               up    up        0.05%  0.17%         21          0
Ethernet0/0/4               down  down         0%     0%          0          0
Ethernet0/0/5               up    up        0.11%  0.17%          0          0
Ethernet0/0/6               down  down         0%     0%          0          0
Ethernet0/0/7               down  down         0%     0%        183          0
Ethernet0/0/8               up    up        0.29%  0.50%          0          0
Ethernet0/0/9               up    up        1.07% 10.09%          0          0
Ethernet0/0/10              up    up        0.12%  0.62%          0          0
Ethernet0/0/11              down  down         0%     0%          1          0
Ethernet0/0/12              down  down         0%     0%         48          0
Ethernet0/0/13              down  down         0%     0%        162          0
Ethernet0/0/14              up    up        3.76%  0.38%          0          0
Ethernet0/0/15              up    up        0.01%  0.21%          0          0
Ethernet0/0/16              up    up        0.17%  0.27%          0          0
Ethernet0/0/17              up    up        1.25%  3.87%          0          0
Ethernet0/0/18              up    up        0.06%  0.74%         25          0
Ethernet0/0/19              up    up        2.75% 22.07%          0          0
Ethernet0/0/20              up    up        0.71%  0.12%          0          0
Ethernet0/0/21              up    up        4.14%  3.31%          2          0
Ethernet0/0/22              down  down         0%     0%         31          0
Ethernet0/0/23              up    up        0.13%  1.15%          1          0
Ethernet0/0/24              up    up           0%  0.03%        327          0
GigabitEthernet0/0/1        down  down         0%     0%          0          0
GigabitEthernet0/0/2        down  down         0%     0%          0          0
GigabitEthernet0/0/3        up    up       97.87% 26.24%          2          0
GigabitEthernet0/0/4        up    up        0.98%  4.99%          0          0
NULL0                       up    up(s)        0%     0%          0          0
Vlanif1001                  up    up           --     --          0          0

GigabitEthernet0/0/3 current state : UP
Line protocol current state : UP
Description:
Switch Port, Link-type : trunk(configured),
PVID :    1, TPID : 8100(Hex), The Maximum Frame Length is 9216
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 9c37-f482-fa96
Current system time: 2015-06-07 13:46:18
Port Mode: COMBO AUTO
Current Work Mode: COPPER
Speed : 100,    Loopback: NONE
Duplex: FULL,   Negotiation: ENABLE
Mdi   : AUTO,   Flow-control: DISABLE
Last 300 seconds input rate 98126960 bits/sec, 11104 packets/sec
Last 300 seconds output rate 26845672 bits/sec, 9224 packets/sec
Input peak rate 99999976 bits/sec, Record time: 2015-05-25 18:08:41
Output peak rate 99999992 bits/sec, Record time: 2015-04-25 12:47:24

 

Input:  24179855568 packets, 21837614283827 bytes
  Unicast:                24050318602,  Multicast:                    39673694
  Broadcast:                 89863270,  Jumbo:                               0
  Discard:                          0,  Pause:                               0
  Frames:                           0

 

  Total Error:                      2
  CRC:                              1,  Giants:                              0
  Jabbers:                          0,  Fragments:                           0
  Runts:                            0,  DropEvents:                          1
  Alignments:                       0,  Symbols:                             0
  Ignoreds:                         0

 

Output:  19603886586 packets, 11541482339656 bytes
  Unicast:                19556858387,  Multicast:                    27087387
  Broadcast:                 19940812,  Jumbo:                               0
  Discard:                    1292174,  Pause:                               0

 

  Total Error:                      0
  Collisions:                       0,  ExcessiveCollisions:                 0
  Late Collisions:                  0,  Deferreds:                           0
  Buffers Purged:                   0 

 

    Input bandwidth utilization threshold : 90.00%
    Output bandwidth utilization threshold: 90.00%
    Input bandwidth utilization  : 98.13%
    Output bandwidth utilization : 26.85%

处理过程

1、 首先接到故障信息之后,首先判断掉线的几台AP为二层接入方式,采集日志信息,并分析,发现以上日志信息,其中存在MSTP端口状态转换现象,在第二段日志信息中存在自环现象。

而华为设备默认开启MSTP,但是在组网中并未发现存在环路风险组网,根据现场维护人员介绍,此校园网用户学生中会有私接交换机路由器现象存在,怀疑为S2750交换机下接用户中有私接交换设备导致环路。

 

2、对于三层AP掉线问题,由于与二层AP掉线并非同一时间发生,首先做长ping各个网络节点,判断故障节点,发现在长ping友商汇聚交换机时即出现丢包现象,查看端口带宽使用率,发现端口带宽使用率已打98%,再查看端口带宽,发现带宽自协商为100M。

根因

1、二层AP掉线为学生在接入交换机下私接交换机或者路由器导致网络环路、自环自而导致端口MSTP状态动荡,导致AP下线。

2、三层AP掉线为端口带宽利用率过高导致丢包。

解决方案

1、 二层AP下线问题的解决为关闭S2750互联接口MSTP功能。

2、 三层AP下线问题建议客户将友商100M交换机整改为1000M交换机。

建议与总结

1、建议校园网还是严格管理限制学生私接交换机路由器等设备,以免造成不必要的网络故障。

2、建议客户在网络改造中考虑全网性能参数,适时更新换代老旧设备,而我们自己在实施中也应协助客户识别相关风险。

END