No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


AR Router Troubleshooting Guide

This Product Documentation provides guidance for maintaining AR Enterprise Router, covering common information collection and fault diagnostic commands, typical fault troubleshooting guide, and troubleshooting.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Packet Filtering Does Not Take Effect When the External Network Is Pinged on the AR

Packet Filtering Does Not Take Effect When the External Network Is Pinged on the AR

This section provides a case that packet filtering does not take effect when the external network is pinged on the AR.


Figure 28-2  Networking diagram for an AR used as a gateway

Main configuration on the AR:

acl number 3301 
 rule 5 deny icmp destination 0
 rule 10 permit ip 
interface GigabitEthernet0/0/1
 traffic-filter outbound acl 3301 

Fault Symptom

Run the traffic-filter outbound acl 3301 command on an AR interface to block ping packets with destination address When destination address is pinged on the AR, the ping operation succeeds but packet filtering does not take effect.

Fault Analysis

The ping command cannot be executed on a PC but can be executed on the AR.

The ping command executed on the AR is directly sent from the protocol stack to the outbound interface without entering the forwarding plane. Traffic filtering applies to the forwarding plane without involving the QoS process, so packets cannot be filtered. This is a normal situation that destination address can be pinged on the AR.


The AR software includes the control and forwarding planes. The differences are as follows:

  • The forwarding panel forwards packets destined for another device. Generally, packets with inbound and outbound physical interfaces are called packets destined for another device.
  • Packets sent by the control plane do not enter the forwarding plane. Most of these packets are irrelevant to services deployed on the forwarding plane.
Updated: 2019-05-10

Document ID: EDOC1000079719

Views: 448355

Downloads: 4305

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next