S5700链路故障导致

发布时间:  2017-02-27 浏览次数:  200 下载次数:  0
问题描述


173.4.33.16ping 173.4.35.13\173.4.35.12几百个包丢一两个包,延时不大

173.4.33.16ping173.4.35.10\173.4.35.9不丢包。


告警信息

处理过程

1.  在所有交换机上配置对匹配如下的ACL做流量统计,并应该到出、入接口上

acl number 3999

 rule 5 permit icmp source 173.4.33.16 0 destination 173.4.35.12 0

 rule 10 permit icmp source 173.4.35.12 0 destination 173.4.33.16 0

q

traffic classifier c1

 if-match acl 3999

q

traffic behavior b1

 permit

 statistic enable

q

traffic policy p1

 classifier c1 behavior b1

2. 173.4.33.16ping 173.4.35.12


可以看到ping 发送134个包、收到132个包,其中丢2个包,得用交换机流量统计分析包到底丢在哪里了。

3.S5700-5上对ping 请求包进行分析      

<S5700-5>display traffic policy statistics interface GigabitEthernet 0/0/4 inbound

 

 Interface: GigabitEthernet0/0/4

 Traffic policy inbound: p1

 Rule number: 2

 Current status: OK!

 Statistics interval: 300

---------------------------------------------------------------------

 Board : 0

---------------------------------------------------------------------

 Matched          |      Packets:                           134

                  |      Bytes:                               -

                  |      Rate(pps):                           0

                  |      Rate(bps):                           -

---------------------------------------------------------------------

   Passed         |      Packets:                           134

                  |      Bytes:                               -

                  |      Rate(pps):                           0

                  |      Rate(bps):                           -

---------------------------------------------------------------------

   Dropped        |      Packets:                             0

                  |      Bytes:                               -

                  |      Rate(pps):                           0

                  |      Rate(bps):                           -

---------------------------------------------------------------------

     Filter       |      Packets:                             0

                  |      Bytes:                               -

---------------------------------------------------------------------

     Car          |      Packets:                             0

                  |      Bytes:                               -

<S5700-5>display traffic policy statistics interface Eth-Trunk 22 outbound

 Interface: Eth-Trunk22

 Traffic policy outbound: p1

 Rule number: 2

 Current status: OK!

 Statistics interval: 300

---------------------------------------------------------------------

 Board : 0

---------------------------------------------------------------------

 Matched          |      Packets:                           134

                  |      Bytes:                               -

                  |      Rate(pps):                           0

                  |      Rate(bps):                           -

---------------------------------------------------------------------

   Passed         |      Packets:                           134

                  |      Bytes:                               -

                  |      Rate(pps):                           0

                  |      Rate(bps):                           -

---------------------------------------------------------------------

   Dropped        |      Packets:                             0

                  |      Bytes:                               -

                  |      Rate(pps):                           0

                  |      Rate(bps):                           -

---------------------------------------------------------------------

     Filter       |      Packets:                             0

                  |      Bytes:                               -

---------------------------------------------------------------------

     Car          |      Packets:                             0

                  |      Bytes:                               -

---------------------------------------------------------------------

结论:GigabitEthernet 0/0/4进来到Eth-Trunk 22出去无丢包

4. S5700-5上对ping 回应包进行分析

<S5700-5>display traffic policy statistics interface Eth-Trunk 22 inbound

Interface: Eth-Trunk22

 Traffic policy inbound: p1

 Rule number: 2

 Current status: OK!

 Statistics interval: 300

---------------------------------------------------------------------

 Board : 0

---------------------------------------------------------------------

 Matched          |      Packets:                           132

                  |      Bytes:                               -

                  |      Rate(pps):                           0

                  |      Rate(bps):                           -

---------------------------------------------------------------------

   Passed         |      Packets:                           132

                  |      Bytes:                               -

                  |      Rate(pps):                           0

                  |      Rate(bps):                           -

---------------------------------------------------------------------

   Dropped        |      Packets:                             0

                  |      Bytes:                               -

                  |      Rate(pps):                           0

                  |      Rate(bps):                           -

---------------------------------------------------------------------

     Filter       |      Packets:                             0

                  |      Bytes:                               -

---------------------------------------------------------------------

     Car          |      Packets:                             0

                  |      Bytes:                               -

---------------------------------------------------------------------

结论:发现在Eth-Trunk 22接口的入方向只收到132回应包。

5.下一步查看S9712 Trunk 22出方向上向S5700-5这边发的时候是否有丢包?

<9712-1>display traffic policy statistics interface Eth-Trunk 22 outbound

Interface: Eth-Trunk22

 Traffic policy outbound: p1

 Rule number: 2

 Current status: OK!

 Statistics interval: 300

Board : 2/8

---------------------------------------------------------------------

 Matched          |      Packets:                           134

                  |      Bytes:                          10,452

                  |      Rate(pps):                           0

                  |      Rate(bps):                           0

---------------------------------------------------------------------

   Passed         |      Packets:                           134

                  |      Bytes:                          10,452

                  |      Rate(pps):                           0

                  |      Rate(bps):                           0

---------------------------------------------------------------------

   Dropped        |      Packets:                             0

                  |      Bytes:                               0

                  |      Rate(pps):                           0

                  |      Rate(bps):                           0

---------------------------------------------------------------------

     Filter       |      Packets:                             0

                  |      Bytes:                               0

---------------------------------------------------------------------

     Car          |      Packets:                             0

                  |      Bytes:                               0

结论是:S9712 Trunk 22出方向上无丢包

综上述:S9712 Trunk 22出方向上向S5700-5这边发的时候没有丢包(回应包为134个),但

    S5700-5 Trunk 22入方向只收到132个回应包,说明经过中间链路丢2两个包。

7.进一步确认,查看 S5700-5 Trunk 22接口状态信息,如下:

查看端口具体情况,发现是CRC效验包错误包,一般是链路问题

 

<S5700-6>display interface GigabitEthernet 0/0/1

 

Total Error:                  80250

  CRC:                          30041,


根因

光纤物理链路故障导致丢包


解决方案

更换S5700该接口的光纤,故障解决。

建议与总结

对于一些丢包问题,使用流量统计方法,是一种不错方法。

END