路由器NE40-X8软件版本V600R003C00SPC300出现部分业务不通

发布时间:  2017-01-01 浏览次数:  142 下载次数:  0
问题描述

总部核心路由器为NE40E-X8,分支路由器设备为NE20E-X6。两端建立option A跨域mpls vpn互通。mpls bgp邻居关系建立正常,路由学习正常,但vpn业务网关互ping不通。

总部S5700-----总部NE40E-X8----------运行商传输设备OSN-----------分支NE20E-X6-------分支S5700

简单描述:

本端:NE40E-X8 V600R008C10SPC300  对端:NE20E-X6 V600R008C10SPC300

本端的lookback1地址为11.254.254.179   对端:Lookback1地址为11.254.252.7

本端的vpn_data的网关是19.92.0.1/16   对端vpn_data的网关是19.93.112.1/20

在本端、对端分别加vpn_data ping各自网关是可以通、mplsbgp状态都是正常的

问题现象:

在本端、对端设备上分别指定原地址进行ping对方的网关就ping不通了。

告警信息
Ping不通,无其他告警
处理过程

1、检查配置发现optionA跨域配置没有问题

2、检查两端设备路由学习结果,发现路由学习正常都能学到对端网关的有效地址。

3、两端互ping采集信息以及抓包分析:

NE40E上上快ping大包,

<NE40-X8>ping -vpn-instance vpn_data -a  19.92.0.1 -s 1500 -c 1000000  -t  50  -m  50  19.93.112.1

 

NE20E-X6上快ping大包

<NE20-X6>ping -vpn-instance vpn_data -a  19.93.112.1 -s 1500 –c  1000000  -t  50 -m 50  19.92.0.1

 

对应端口计数如下:

 

NE40Eping大包,对应的公网口G4/0/0

 

[NE40-X8-diagnose]display  interface GigabitEthernet  4/0/0

............

    Last 300 seconds input rate: 1136 bits/sec, 1 packets/sec——快ping时入方向接口包速率

    Last 300 seconds output rate: 65760 bits/sec, 19 packets/sec——快ping时出方向接口包速率

    Input: 72012304 bytes, 815065 packets

    Output: 381647128 bytes, 4332136 packets

    Input:

      Unicast: 92173 packets, Multicast: 561681 packets

      Broadcast: 161211 packets, JumboOctets: 0 packets——收到的Jumbo帧一直为0

      CRC: 0 packets, Symbol: 0 packets  

      Overrun: 0 packets, InRangeLength: 0 packets

      LongPacket: 0 packets, Jabber: 0 packets, Alignment: 0 packets

      Fragment: 0 packets, Undersized Frame: 0 packets

      RxPause: 0 packets

    Output:

      Unicast: 194984 packets, Multicast: 3976194 packets

      Broadcast: 160958 packets, JumboOctets: 2206 packets——ping大包时出方向Jumbo计数一直有增长

      Lost: 0 packets, Overflow: 0 packets, Underrun: 0 packets

      System: 0 packets, Overrun: 0 packets

      TxPause: 0 packets

      Unknown Vlan: 0 packets

    Input bandwidth utilization  :    0%

Output bandwidth utilization : 0.01%

 

NE40E上的快ping结果来看,报文有发送出去,但是入方向没有收到对应的Jumbo计数报文,且接口下入方向接收的包速率远远小于出方向报文发送的包速率,基本可以确定ping包没有收到回应报文。

且与此同时在对端NE20E-X6上接口的统计计数如下:

 

[NE20-X6-diagnose]display  interface GigabitEthernet  3/0/0

..........

    Last 300 seconds input rate: 1664 bits/sec, 2 packets/sec——接口入方向的包速率极小

    Last 300 seconds output rate: 4912 bits/sec, 6 packets/sec

    Input: 70834013 bytes, 811627 packets

    Output: 56073719 bytes, 656225 packets

    Input:

      Unicast: 96669 packets, Multicast: 553661 packets

      Broadcast: 161297 packets, JumboOctets: 0 packets——收到的Jumbo计数为0

      CRC: 0 packets, Symbol: 0 packets

      Overrun: 0 packets, InRangeLength: 0 packets

      LongPacket: 0 packets, Jabber: 0 packets, Alignment: 0 packets

      Fragment: 0 packets, Undersized Frame: 0 packets

      RxPause: 0 packets

    Output:

      Unicast: 94027 packets, Multicast: 562196 packets

      Broadcast: 2 packets, JumboOctets: 0 packets

      Lost: 0 packets, Overflow: 0 packets, Underrun: 0 packets

      System: 0 packets, Overrun: 0 packets

      TxPause: 0 packets

      Unknown Vlan: 0 packets

    Input bandwidth utilization  :    0%

    Output bandwidth utilization : 0.01%

 

同理在NE20E-X6设备上快ping,接口下的报文增长情况如下:

[NE20-X6-diagnose]display  interface GigabitEthernet  3/0/0

...........

   Last 300 seconds input rate: 4168 bits/sec, 7 packets/sec

    Last 300 seconds output rate: 67760 bits/sec, 27 packets/sec——出方向的包速率远大于入方向的包速率

    Input: 71128583 bytes, 815686 packets

    Output: 59188594 bytes, 667547 packets

    Input:

      Unicast: 99352 packets, Multicast: 554734 packets

      Broadcast: 161600 packets, JumboOctets: 0 packets——收到的Jumbo计数为0

      CRC: 0 packets, Symbol: 0 packets  

      Overrun: 0 packets, InRangeLength: 0 packets

      LongPacket: 0 packets, Jabber: 0 packets, Alignment: 0 packets

      Fragment: 0 packets, Undersized Frame: 0 packets

      RxPause: 0 packets

    Output:

      Unicast: 104298 packets, Multicast: 563247 packets

      Broadcast: 2 packets, JumboOctets: 1529 packets——ping大包时出方向Jumbo计数一直有增长

      Lost: 0 packets, Overflow: 0 packets, Underrun: 0 packets

      System: 0 packets, Overrun: 0 packets

      TxPause: 0 packets

      Unknown Vlan: 0 packets

    Input bandwidth utilization  : 0.01%

    Output bandwidth utilization : 0.07%

此时对端NE40E上查看端口计数如下:

<NE40-X8>display  interface GigabitEthernet  4/0/0

............

    Last 300 seconds input rate: 10168 bits/sec, 14 packets/sec

    Last 300 seconds output rate: 9072 bits/sec, 14 packets/sec

    Input: 73078191 bytes, 827191 packets

    Output: 389139633 bytes, 4356890 packets

    Input:

      Unicast: 102073 packets, Multicast: 563410 packets

      Broadcast: 161708 packets, JumboOctets: 0 packets——收到的Jumbo计数为0

      CRC: 0 packets, Symbol: 0 packets

      Overrun: 0 packets, InRangeLength: 0 packets

      LongPacket: 0 packets, Jabber: 0 packets, Alignment: 0 packets

      Fragment: 0 packets, Undersized Frame: 0 packets

      RxPause: 0 packets

    Output:

      Unicast: 206643 packets, Multicast: 3988791 packets

      Broadcast: 161456 packets, JumboOctets: 6002 packets

      Lost: 0 packets, Overflow: 0 packets, Underrun: 0 packets

      System: 0 packets, Overrun: 0 packets

      TxPause: 0 packets

      Unknown Vlan: 0 packets

    Input bandwidth utilization  :    0%

    Output bandwidth utilization :    0%

     根据快ping的结果来看,无论是从NE40E上快ping大包还是从NE20E-X6ping大包,ping包都已经发送出去,但是在对端设备上没有收到。且查看底层转发芯片的丢弃计数,没有发现有与ping包速率相吻合的丢弃计数,需要排查中间传输设备。  

根因

数据包在从本端发出后,在中间运行商链路中丢弃,

解决方案

运营商更换OSN550传输设备上办卡后,业务可以正常通讯

建议与总结

END