USG6670智能选路因保护阀值设置过高,导致网络拥塞

发布时间:  2016-07-04 浏览次数:  236 下载次数:  1
问题描述

有用户访问外网时速度慢,拼外网时有丢包

告警信息

处理过程

1.       通过在S12708USG6670S12708ME60上做流统,拼测正常,排除ME60S12708之间的问题。测试结果如下:

[YT-S12708]ping -c 100 192.168.100.250

  PING 192.168.100.250: 56  data bytes, press CTRL_C to break

    Reply from 192.168.100.250: bytes=56 Sequence=1 ttl=255 time=1 ms

    Reply from 192.168.100.250: bytes=56 Sequence=2 ttl=255 time=1 ms

    Reply from 192.168.100.250: bytes=56 Sequence=3 ttl=255 time=1 ms

    Reply from 192.168.100.250: bytes=56 Sequence=4 ttl=255 time=1 ms

    Reply from 192.168.100.250: bytes=56 Sequence=5 ttl=255 time=1 ms

    Reply from 192.168.100.250: bytes=56 Sequence=6 ttl=255 time=10 ms

  --- 192.168.100.250 ping statistics ---

    11 packet(s) transmitted

    11 packet(s) received

    0.00% packet loss

    round-trip min/avg/max = 1/2/10 ms

 

[YT-S12708]disp traffic policy statistics interface Eth-Trunk 7 inbound

 Interface: Eth-Trunk7

 Traffic policy inbound: liutong

 Rule number: 2

 Current status: OK!

 Statistics interval: 300

---------------------------------------------------------------------

 Board : 1/4

---------------------------------------------------------------------

 Matched          |      Packets:                            15

                  |      Bytes:                           1,590

                  |      Rate(pps):                           0

                  |      Rate(bps):                           0

---------------------------------------------------------------------

   Passed         |      Packets:                            15

                  |      Bytes:                           1,590

                  |      Rate(pps):                           0

                  |      Rate(bps):                           0

---------------------------------------------------------------------

   Dropped        |      Packets:                             0

                  |      Bytes:                               0

                  |      Rate(pps):                           0

                  |      Rate(bps):                           0

---------------------------------------------------------------------

     Filter       |      Packets:                             0

                  |      Bytes:                               0

---------------------------------------------------------------------

     Car          |      Packets:                             0

                  |      Bytes:                               0

---------------------------------------------------------------------

 Board : 2/4

---------------------------------------------------------------------

 Matched          |      Packets:                             0

                  |      Bytes:                               0

                  |      Rate(pps):                           0

                  |      Rate(bps):                           0

---------------------------------------------------------------------

   Passed         |      Packets:                             0

                  |      Bytes:                               0

                  |      Rate(pps):                           0

                  |      Rate(bps):                           0

---------------------------------------------------------------------

   Dropped        |      Packets:                             0

                  |      Bytes:                               0

                  |      Rate(pps):                           0

                  |      Rate(bps):                           0

---------------------------------------------------------------------

     Filter       |      Packets:                             0

                  |      Bytes:                               0

---------------------------------------------------------------------

     Car          |      Packets:                             0

                  |      Bytes:                               0

---------------------------------------------------------------------

[YT-S12708]disp traffic policy statistics interface Eth-Trunk 7 outbound

 Interface: Eth-Trunk7

 Traffic policy outbound: liutong

 Rule number: 2

 Current status: OK!

 Statistics interval: 300

---------------------------------------------------------------------

 Board : 1/4

---------------------------------------------------------------------

 Matched          |      Packets:                             0

                  |      Bytes:                               0

                  |      Rate(pps):                           0

                  |      Rate(bps):                           0

---------------------------------------------------------------------

   Passed         |      Packets:                             0

                  |      Bytes:                               0

                  |      Rate(pps):                           0

                  |      Rate(bps):                           0

---------------------------------------------------------------------

   Dropped        |      Packets:                             0

                  |      Bytes:                               0

                  |      Rate(pps):                           0

                  |      Rate(bps):                           0

---------------------------------------------------------------------

     Filter       |      Packets:                             0

                  |      Bytes:                               0

---------------------------------------------------------------------

     Car          |      Packets:                             0

                  |      Bytes:                               0

---------------------------------------------------------------------

 Board : 2/4

---------------------------------------------------------------------

 Matched          |      Packets:                            16

                  |      Bytes:                           1,696

                  |      Rate(pps):                           0

                  |      Rate(bps):                           0

---------------------------------------------------------------------

   Passed         |      Packets:                            16

                  |      Bytes:                           1,696

                  |      Rate(pps):                           0

                  |      Rate(bps):                           0

---------------------------------------------------------------------

   Dropped        |      Packets:                             0

                  |      Bytes:                               0

                  |      Rate(pps):                           0

                  |      Rate(bps):                           0

---------------------------------------------------------------------

     Filter       |      Packets:                             0

                  |      Bytes:                               0

---------------------------------------------------------------------

     Car          |      Packets:                             0

                  |      Bytes:                               0

 

2.       ME60baidu.com解析地址,有丢包:

<YT-ME60-X8-1>ping -c 100 111.13.101.208

  PING 111.13.101.208: 56  data bytes, press CTRL_C to break

    Reply from 111.13.101.208: bytes=56 Sequence=1 ttl=49 time=45 ms

    Reply from 111.13.101.208: bytes=56 Sequence=2 ttl=49 time=41 ms

    Reply from 111.13.101.208: bytes=56 Sequence=3 ttl=49 time=42 ms

    Request time out

    Reply from 111.13.101.208: bytes=56 Sequence=5 ttl=49 time=50 ms

    Reply from 111.13.101.208: bytes=56 Sequence=6 ttl=49 time=45 ms

    Reply from 111.13.101.208: bytes=56 Sequence=7 ttl=49 time=46 ms

    Reply from 111.13.101.208: bytes=56 Sequence=8 ttl=49 time=39 ms

    Request time out

    Request time out

    Request time out

    Reply from 111.13.101.208: bytes=56 Sequence=12 ttl=49 time=41 ms

    Reply from 111.13.101.208: bytes=56 Sequence=13 ttl=49 time=42 ms

3、在USG6670上拼下一跳地址,有七条上行链路,发现其中两条链路有丢包,怀疑链路有问题,继续往下排查。

HRP_A<YT-ChuKou-USG6670-1>ping -c 100 218.76.15.209 

13:47:46  2016/06/14

  PING 218.76.15.209: 56  data bytes, press CTRL_C to break

    Reply from 218.76.15.209: bytes=56 Sequence=1 ttl=254 time=1 ms

    Reply from 218.76.15.209: bytes=56 Sequence=2 ttl=254 time=1 ms

    Reply from 218.76.15.209: bytes=56 Sequence=3 ttl=254 time=1 ms

    Request time out

    Request time out

    Request time out

    Request time out

    Reply from 218.76.15.209: bytes=56 Sequence=9 ttl=254 time=1 ms

    Reply from 218.76.15.209: bytes=56 Sequence=10 ttl=254 time=30 ms

    Request time out

    Request time out

    Reply from 218.76.15.209: bytes=56 Sequence=13 ttl=254 time=1 ms

    Reply from 218.76.15.209: bytes=56 Sequence=14 ttl=254 time=1 ms

    Reply from 218.76.15.209: bytes=56 Sequence=15 ttl=254 time=1 ms

  --- 218.76.15.209 ping statistics ---

    12 packet(s) transmitted

    12 packet(s) received

    2.56%% packet loss

round-trip min/avg/max = 1/1/1 ms

HRP_A<YT-ChuKou-USG6670-1>ping -c 100 218.77.55.145         

13:50:14  2016/06/14

  PING 218.77.55.145: 56  data bytes, press CTRL_C to break

    Reply from 218.77.55.145: bytes=56 Sequence=1 ttl=254 time=1 ms

    Reply from 218.77.55.145: bytes=56 Sequence=2 ttl=254 time=1 ms

Request time out

    Request time out

    Reply from 218.77.55.145: bytes=56 Sequence=5 ttl=254 time=1 ms

    Request time out

    Request time out

    Reply from 218.77.55.145: bytes=56 Sequence=9 ttl=254 time=10 ms

    Reply from 218.77.55.145: bytes=56 Sequence=10 ttl=254 time=1 ms

 

  --- 218.77.55.145 ping statistics ---

    12 packet(s) transmitted

    12 packet(s) received

    0.00% packet loss

    round-trip min/avg/max = 1/1/10 ms

4、通过WEB页面查看USG6670智能选路,有两条线路负载过重,一条有流量的线路没有设置保护阈值。

  

5、查看全局选路策略中的过载保护阈值,发现过载保护阈值为(99%


根因

由于有的链路不设置保护阈值和过载保护阈值设置为99%,容易出现链路负载过重,从而导致网络拥塞,使得用户访问外网时速度慢,网络有丢包的问题

解决方案

解决方法:

1.       通过WEB页面的接口--修改子接口修改全部链路接口带宽过载保护阀值为90%



2、调整全局选路策略的权重值相同


 

建议与总结

链路不设置保护阈值和过载保护阈值设置为99%,容易出现链路负载过重,网络稍有抖动就会超过阈值,出现网络拥塞的情况,建议设置过载保护阈值为85%-90%,权重值相同,链路质量稍差可以将权重值作小的调整

END