ME60 子接口和交换机互联ping 测试时通时不通

发布时间:  2016-06-20 浏览次数:  232 下载次数:  0
问题描述

ME60 子接口和交换机互联ping 测试时通时不通

拓扑:ME60-------核心交换机(RJ12000)--------汇聚交换机(RJ6220)
测试地址是10.0.1.1(ME60 E2.51)和汇聚交换机的管理地址10.0.1.2(vlan2130)
1、ping不通的时候做arp 静态绑定,测试可以通
2、子接口接口shutdown  undo shutdown 后不通,不通的时候在ME60 ping测试抓包,ME60没有arp 表,并且没有发送arp 请求报文


interface Eth-Trunk2
mode user-termination
mode lacp-static

interface Eth-Trunk2.51
control-vid 51 dot1q-termination
dot1q termination vid 2130
ip address 10.0.1.1 255.255.255.252

 

处理过程

 

interface Eth-Trunk2.50
control-vid 50 qinq-termination
qinq termination pe-vid 2130 ce-vid 2 to 100
qinq termination pe-vid 2131 ce-vid 2 to 100
qinq termination pe-vid 2132 ce-vid 2 to 100
qinq termination pe-vid 2133 ce-vid 2 to 100
qinq termination pe-vid 2134 ce-vid 2 to 100
qinq termination pe-vid 2135 ce-vid 2 to 100
qinq termination pe-vid 2136 ce-vid 2 to 100
qinq termination pe-vid 2137 ce-vid 2 to 100
qinq termination pe-vid 2138 ce-vid 2 to 100
qinq termination pe-vid 2139 ce-vid 2 to 100
qinq termination pe-vid 2140 ce-vid 2 to 100
qinq termination pe-vid 2141 ce-vid 2 to 100
qinq termination pe-vid 2142 ce-vid 2 to 100
qinq termination pe-vid 2143 ce-vid 2 to 100
qinq termination pe-vid 2144 ce-vid 2 to 100
qinq termination pe-vid 2145 ce-vid 2 to 100
ip address 114.213.4.1 255.255.255.0
arp-proxy inter-sub-vlan-proxy enable
arp broadcast enable
每次一个arp miss就会发送这么多  15 X 98 =  1470的报文

现网上是每秒100个左右的报文:
[ME60-diagnose]display cpu-defend statistics-all  slot  1 cl
CarID Index Packet-Info                          Passed-Packets Dropped-Packets
--------------------------------------------------------------------------------
   14    56 EXCP_ID_IPV4_RESERVED_MC_DEFAULT                 11              0
   82    50 EXCP_ID_IPV4_ARP_MISS                           110              0
   92    83 EXCP_ID_IPV4_UDP_TO_CP                           11              0
  189   270 EXCP_ID_QVCT_MISS_ARP_PACKET                      2              0
  190    15 EXCP_ID_IPV4_ARP_REQUEST                         68              0
  192    15 EXCP_ID_IPV4_ARP_GRATULTOUS                       1              0
  215   563 EXCP_ID_PST_BROADCAST                             4              0
  249    17 EXCP_ID_NEW_DHCP                                  2              0


所以ME60一秒钟会发送100*1470 = 147000个arp,导致下发arp的队列堵死。。

几乎一秒钟内,1/0/2向外发送了12万个报文
<ME60>  reset counters interface  gig 1/0/2
Info: Reset successfully.


<ME60>display interface gig 1/0/2         
GigabitEthernet1/0/2 current state : UP
Line protocol current state : UP
Link quality grade : GOOD
Description:link_RG12K-1/2/15
Route Port,The Maximum Transmit Unit is 1500
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 74a0-63f5-d032
The Vendor PN is SFP-10G-SR
The Vendor Name is OEM
Port BW: 10G, Transceiver max BW: 10G, Transceiver Mode: MultiMode
WaveLength: 850nm, Transmission Distance: 300m
Rx Power: -2.07dBm, Warning range: [-12.00, -1.00]dBm
Tx Power: -1.97dBm, Warning range: [-6.00, -1.00]dBm
Loopback:none, LAN full-duplex mode, Pause Flowcontrol:Receive Enable and Send Enable
Last physical up time   : 2016-02-29 15:35:11
Last physical down time : 2016-02-29 15:34:21
Current system time: 2016-03-01 15:57:47
Statistics last cleared:2016-03-01 15:57:45
    Last 300 seconds input rate: 114659784 bits/sec, 41691 packets/sec
    Last 300 seconds output rate: 242255824 bits/sec, 101034 packets/sec
    Input: 23619917 bytes, 68708 packets
    Output: 49904701 bytes, 166505 packets
    Input:
      Unicast: 68619 packets, Multicast: 53 packets
      Broadcast: 36 packets, JumboOctets: 693 packets
      CRC: 0 packets, Symbol: 0 packets  
      Overrun: 0 packets, InRangeLength: 0 packets
      LongPacket: 0 packets, Jabber: 0 packets, Alignment: 0 packets
      Fragment: 0 packets, Undersized Frame: 0 packets
      RxPause: 0 packets
    Output:
     Unicast: 43888 packets, Multicast: 0 packets
      Broadcast: 122617 packets, JumboOctets: 9839 packets
      Lost: 0 packets, Overflow: 0 packets, Underrun: 0 packets
      System: 0 packets, Overrun: 0 packets
      TxPause: 0 packets
      Unknown Vlan: 0 packets
    Input bandwidth utilization  : 1.21%
Output bandwidth utilization : 2.58%

解决方案

可以在ME60上配置broadcast-copy fast enable,配置该命令之后,软件每次只发一个arp,硬件复制到所有vlan。

但是ME60发送出来的arp报文惊人,对端设备也会处理不过来,建议改为bas口解决。
1、 改为bas后之后,每个用户上线的时候,会在底层生成静态arp表项,不会老化,这个口上也就不会再所有vlan内不断的广播arp;
2、 配置那个命令行没有别的影响。这个问题的根因是这种大量的qinq终结三层口配置本身会产生大量的arp,每秒十几万个arp报文,对于几乎所有厂商的设备都承受不了

END