Clean board faulty occurred in Anti-DDoS8080

Publication Date:  2014-05-05 Views:  269 Downloads:  0
Issue Description
The dirty traffic is coming to Anti-DDoS8080. as below:
<LS-DDoS-X8-1.UK>disp interface brief
20:52:28  2014/05/05
PHY: Physical
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
(b): BFD down
(e): ETHOAM down
(d): Dampening Suppressed
InUti/OutUti: input utility/output utility
Interface                     PHY   Protocol InUti  OutUti   inErrors  outErrors
Aux0/0/1                      down  down        0%      0%          0          0
Eth-Trunk0                    up    up       0.01%   0.01%          0          0
  GigabitEthernet2/0/0        up    up       0.01%   0.01%          0          0
  GigabitEthernet2/0/1        up    up          0%   0.01%          0          0
Eth-Trunk1                    up    up          0%      0%          0          0
  GigabitEthernet2/0/8        up    up          0%      0%          0          0
  GigabitEthernet2/0/9        up    up          0%      0%          0          0
Eth-Trunk2                    up    up       2.13%   0.01%          0          0
  GigabitEthernet2/0/2        up    up       2.12%   0.01%          0          0
  GigabitEthernet2/0/3        up    up       2.13%   0.01%          0          0
Eth-Trunk3                    up    up          0%   2.13%          0          0
  GigabitEthernet2/0/10       up    up          0%   1.90%          0          0
  GigabitEthernet2/0/11       up    up          0%   2.36%          0          0
GigabitEthernet0/0/0          down  down        0%      0%          0          0
GigabitEthernet1/0/0(10G)     down  down        0%      0%          0          0
GigabitEthernet1/0/1(10G)     down  down        0%      0%          0          0
GigabitEthernet1/1/0(10G)     down  down        0%      0%          0          0
GigabitEthernet1/1/1(10G)     down  down        0%      0%          0          0
GigabitEthernet2/0/4          down  down        0%      0%          0          0
GigabitEthernet2/0/5          down  down        0%      0%          0          0
GigabitEthernet2/0/6          down  down        0%      0%          0          0
GigabitEthernet2/0/7          down  down        0%      0%          0          0
GigabitEthernet2/0/12         down  down        0%      0%          0          0
GigabitEthernet2/0/13         down  down        0%      0%          0          0
GigabitEthernet2/0/14         down  down        0%      0%          0          0
GigabitEthernet2/0/15         down  down        0%      0%          0          0
GigabitEthernet2/0/16         down  down        0%      0%          0          0
GigabitEthernet2/0/17         down  down        0%      0%          0          0
GigabitEthernet2/0/18         down  down        0%      0%          0          0
GigabitEthernet2/0/19         up    up       0.01%   0.01%          0          0
NULL0                         up    up(s)       0%      0%          0          0
Virtual-Template0             up    up(s)       0%      0%          0          0
<LS-DDoS-X8-1.UK>
Check the device if it is runing properly. it is working fine as below:
<LS-DDoS-X8-1.UK>disp device
20:52:10  2014/05/05
AntiDDoS8080's Device status:
Slot #    Type       Online    Register      Status      Primary
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1         LPU        Present   Registered    Normal      NA
2         LPU        Present   Registered    Normal      NA
5         SPU        Present   Registered    Normal      NA
9         MPU        Present   NA            Normal      Master
10        MPU        Present   Registered    Normal      Slave
11        SFU        Present   Registered    Normal      NA
12        SFU        Present   Registered    Normal      NA
13        SFU        Present   Registered    Normal      NA
14        CLK        Present   Registered    Normal      Master
15        CLK        Present   Registered    Normal      Slave
16        PWR        Present   Registered    Normal      NA
17        PWR        Present   Registered    Normal      NA
18        FAN        Present   Registered    Normal      NA
19        FAN        Present   Registered    Normal      NA
<LS-DDoS-X8-1.UK>
why anti-DDoS seems not clean traffic?
Alarm Information
no alarm
Handling Process

So the next step: we need check if license is loaded.
<LS-DDoS-X8-1.UK>disp license
21:34:23  2014/05/05
MainBoard:
Device ESN is: 210305G08N10DC000081
The activated file is: cfcard:/lic800255519c9365198220001-af3b_antiddos8000.dat
The activated time is: 2014/03/31  17:27:14
Number of Virtual Firewalls: 100
6RD Session Scale: 1M
NAT64 Session Scale: 1M
DS-Lite Session Scale: 1M
Number of 20G Cleaning SPUs: 1
SlaveBoard:
Device ESN is: 210305G08N10DC000080
The activated file is: cfcard:/lic800255519c9365198220001-af3b_antiddos8000.dat
The activated time is: 2014/03/31  16:57:57
Number of Virtual Firewalls: 100
6RD Session Scale: 1M
NAT64 Session Scale: 1M
DS-Lite Session Scale: 1M
Number of 20G Cleaning SPUs: 1
<LS-DDoS-X8-1.UK>

from above resoult, license is loaded. we need go to step 3, check if we set up SPU for clean board or detect board:

<LS-DDoS-X8-1.UK>disp cur
.........  
firewall ddos clean-spu slot 5
..........
from above result , Slot 5 is clean board. so we need go to step 4, check if Clean board is loaded
<LS-DDoS-X8-1.UK>disp spu slot 5

 Slot ID  CPU Number  Config       Register      Status
-----------------------------------------------------------------
5        4           Ddos-clean   Registered    Ddos-clean unloaded
-----------------------------------------------------------------
<LS-DDoS-X8-1.UK>
so from above result, we can see the clean board is unload. we need reset the board.
 run "reset slot 5"
the problem is resolved.
Root Cause
For Anti-DDoS, we cannot just check board by "display device".  we need check board as below step:
1. check board by " display device" to confirm if board is working.
2. check if license is loaded
3. check if set up SPU for clean board or detect board
4. Check if Clean board or detect board is loaded
Suggestions
None

END