Устранение неисправностей теста Ping для S5720 c Ospf

10 0 0 0

Поиск и устранение неисправностей теста Ping для S5720 c Ospf (V200R008C00SPC500)

 

[Описание]

Частичный дроп пакетов ping для S5720

[Процесс]

Ping не пройден (с 10.148.X.132 до 10.198.X.138)

Ping успешен (с 10.198.X.150 до 10.198.X.138)

174817g5oylrbfcrcrcbrr.png

 

User B:

ping –S 10.148.X.150 10.198.X.138

  PING 10.148.X.138 from 10.198.X.150

    Request time out

    Request time out

    Request time out

    Request time out

    Request time out

 

User A:

Ping 10.198.X.138

Pinging 10.198.X.138 with 32 bytes of data:

Reply from 10.198.X.138: bytes=32 time<1ms TTL=60

Reply from 10.198.X.138: bytes=32 time<1ms TTL=60

Reply from 10.198.X.138: bytes=32 time<1ms TTL=60

Reply from 10.198.X.138: bytes=32 time<1ms TTL=60

 

Ping statistics for 10.198.X.138:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms

 

1. Tracert сервера от пользователя B.

174817l3chhkdjhc8ciln1.jpg

 

2. Поскольку пакет потерян на SW, включите статистику трафика на SW. Конфигурация так же, как показано ниже:

#

acl number 3002  

 rule 5 permit icmp source 10.148.X.132 0 destination 10.198.X.138 0        

 rule 10 permit icmp source 10.198.X.138 0 destination 10.148.X.132 0       

#                                                                              

traffic classifier tj operator and                                              

 if-match acl 3002                                                             

#

traffic behavior tj                                                            

 statistic enable                                                               

#                                                                              

traffic policy tj                                                              

 classifier tj behavior tj

#                                                                               

interface GigabitEthernet0/0/22                                                

 port link-type access                                                         

 port default vlan 258                                                          

 traffic-policy tj inbound                                                     

 traffic-policy tj outbound                                                    

interface GigabitEthernet0/0/47                                                

 description -== USG ==-                                                   

 port link-type access                                                         

 port default vlan 16                                                          

 traffic-policy tj inbound                                                     

 traffic-policy tj outbound                                                    

 

 

3. Запустите команду «ping 10.198.X.138 –t» для пользователя B

4. Запустите команды, как показано ниже, чтобы проверить статистику пакетов:

display traffic policy statistics interface GigabitEthernet 0/0/47 inbound

display traffic policy statistics interface GigabitEthernet 0/0/47 outbound

display traffic policy statistics interface GigabitEthernet 0/0/22 inbound

display traffic policy statistics interface GigabitEthernet 0/0/22 outbound

 

Результат:

[SW]display traffic policy stat interface GigabitEthernet 0/0/47  inbound

 Interface: GigabitEthernet0/0/47                                               

 Traffic policy inbound: tj                                                    

 Rule number: 2                                                                

 Current status: success                                                        

 Statistics interval: 300                                                      

---------------------------------------------------------------------          

 Board : 0                                                                     

---------------------------------------------------------------------          

 Matched          |      Packets:                             4                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------          

   Passed         |      Packets:                             4                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------          

   Dropped        |      Packets:                             0                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------           

[SW]display traffic policy stat interface GigabitEthernet 0/0/47 outbound 

 Interface: GigabitEthernet0/0/47                                              

 Traffic policy outbound: tj                                                   

 Rule number: 2                                                                

 Current status: success                                                       

 Statistics interval: 300                                                       

---------------------------------------------------------------------          

 Board : 0                                                                     

---------------------------------------------------------------------          

 Matched          |      Packets:                             0                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------          

   Passed         |      Packets:                             0                 

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------          

   Dropped        |      Packets:                             0                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------          

 [SW]display traffic policy stat interface GigabitEthernet 0/0/22 inbound   

 Interface: GigabitEthernet0/0/22                                              

 Traffic policy inbound: tj                                                    

 Rule number: 2                                                                

 Current status: success                                                       

 Statistics interval: 300                                                      

---------------------------------------------------------------------          

 Board : 0                                                                     

---------------------------------------------------------------------          

 Matched          |      Packets:                             0                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------          

   Passed         |      Packets:                             0                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------          

   Dropped        |      Packets:                             0                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                 

                  |      Rate(bps):                           -                

---------------------------------------------------------------------          

 [SW]display traffic policy stat interface GigabitEthernet 0/0/22 outbound   

 Interface: GigabitEthernet0/0/22                                              

 Traffic policy outbound: tj                                                   

 Rule number: 2                                                                

 Current status: success                                                        

 Statistics interval: 300                                                      

---------------------------------------------------------------------          

 Board : 0                                                                      

---------------------------------------------------------------------          

 Matched          |      Packets:                            10                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------          

   Passed         |      Packets:                            10                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------          

   Dropped        |      Packets:                             0                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------

 

 

5. В исходящем направлении GE0 / 0/47 нет пакетов, а во входящем направлении GE0 / 0/22 нет пакетов. Похоже, сервер не ответил на пакеты для проверки пинга.

6. Запустите команду «ping 10.198.179.138 –t» для пользователя A

7. Настройте статистику трафика для пользователя A, как показано ниже:

#                                                                              

acl number 3003                                                                 

 rule 5 permit icmp source 10.198.X.150 0 destination 10.198.X.138 0       

 rule 10 permit icmp source 10.198.X.138 0 destination 10.198.X.150 0      

#

traffic classifier tj operator and                                              

 undo if-match acl 3002    

 if-match acl 3003                                                       

#

 

8. Запустите команды, как показано ниже, чтобы проверить статистику пакетов:

display traffic policy statistics interface GigabitEthernet 0/0/47 inbound

display traffic policy statistics interface GigabitEthernet 0/0/47 outbound

display traffic policy statistics interface GigabitEthernet 0/0/22 inbound

display traffic policy statistics interface GigabitEthernet 0/0/22 outbound

 

Результат:

[SW]display traffic policy statistics interface GigabitEthernet 0/0/47 inbound

 Interface: GigabitEthernet0/0/47                                              

 Traffic policy inbound: tj                                                    

 Rule number: 2                                                                

 Current status: success                                                       

 Statistics interval: 300                                                      

---------------------------------------------------------------------          

 Board : 0                                                                     

---------------------------------------------------------------------          

 Matched          |      Packets:                            22                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------          

   Passed         |      Packets:                            22                

                  |      Bytes:                               -                 

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------           

   Dropped        |      Packets:                             0                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------          

 [SW]display traffic policy statistics interface GigabitEthernet 0/0/47 outbound 

 Interface: GigabitEthernet0/0/47                                              

 Traffic policy outbound: tj                                                   

 Rule number: 2                                                                

 Current status: success                                                       

 Statistics interval: 300                                                      

---------------------------------------------------------------------          

 Board : 0                                                                      

---------------------------------------------------------------------          

 Matched          |      Packets:                            32                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------          

   Passed         |      Packets:                            32                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------          

   Dropped        |      Packets:                             0                 

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                 

---------------------------------------------------------------------          

[SW]display traffic policy statistics interface GigabitEthernet 0/0/22 inbound 

  Interface: GigabitEthernet0/0/22                                              

 Traffic policy inbound: tj                                                    

 Rule number: 2                                                                

 Current status: success                                                       

 Statistics interval: 300                                                      

---------------------------------------------------------------------          

 Board : 0                                                                     

---------------------------------------------------------------------          

 Matched          |      Packets:                            42                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------          

   Passed         |      Packets:                            42                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------          

   Dropped        |      Packets:                             0                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------          

[SW]display traffic policy statistics interface GigabitEthernet 0/0/22 outbound 

 Interface: GigabitEthernet0/0/22                                              

 Traffic policy outbound: tj                                                    

 Rule number: 2                                                                

 Current status: success                                                       

 Statistics interval: 300                                                      

---------------------------------------------------------------------          

 Board : 0                                                                     

---------------------------------------------------------------------          

 Matched          |      Packets:                            47                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------          

   Passed         |      Packets:                            47                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

---------------------------------------------------------------------          

   Dropped        |      Packets:                             0                

                  |      Bytes:                               -                

                  |      Rate(pps):                           0                

                  |      Rate(bps):                           -                

--------------------------------------------------------------------- 

 

9. Для пользователя A нет пакетов, потерянных в GE0 / 0/47 и GE0 / 0/22. Итак, стоит ориентироваться на таблицу маршрутизации.

10. По результатам трассировки, пакеты потеряны в 10.198.X.97. Начните проверять IP-маршрутизацию FW (10.198.0.97).

 

174818s269o9f66u569g9p.png

 

От FW есть IP-маршрутизация по умолчанию внешний. А вот IP-маршрутизация ospf (сегмент 10.198.X.128 / 26) на сервер с ПО следующего перехода (10.X.16.2).

11. Проверьте таблицу IP-маршрутизации SW.

174818hqdhabxlj9lfh4zq.png

 

Существует IP-маршрутизация (10.198.X.128 / 26) от SW к серверу. Существует IP-маршрутизация (10.198.0.0/16) от SW к внешним пользователям. Но нет никакой IP-маршрутизации для пользователей (10.148.X.X).

12. Еще раз проверьте IP-маршрутизацию FW, и в FW уже есть IP-маршрутизация по умолчанию.

 

0.0.0.0/0   Static  60   0          RD   10.198.X.98   GigabitEthernet1/0/7  

 

 

Это означает, что FW не передал эту IP-маршрутизацию на SW успешно.

13. Снова проверьте конфигурацию FW для ospf.

 

#                                                                              

ospf 1                                                                          

 import-route static                                                           

 area 0.0.0.0                                                                  

  network 10.2.X.1 0.0.0.0                                                     

  network 10.X.1.1 0.0.0.0                                                    

  network 10.X.16.1 0.0.0.0                                                   

  network 10.198.X.129 0.0.0.0                                               

#

 

 

FW импортирует статическую IP-маршрутизацию в ospf. И проверьте конфигурацию для статической IP-маршрутизации.

14. Конфигурация статической IP-маршрутизации для FW, как показано ниже:

#                                                                              

ip route-static 0.0.0.0 0.0.0.0 10.198.X.98                                  

ip route-static 10.47.0.0 255.255.0.0 10.198.X.98                            

ip route-static 10.198.0.0 255.255.0.0 10.198.X.98                           

 

15. Найдите IP-маршрутизацию для 10.47.0.0 и 10.198.0.0 на SW как шаг 11. Это означает, что ip-маршрутизация по умолчанию «ip route-static 0.0.0.0 0.0.0.0 10.198.X.98» не импортировала ospf успешно.

16. Подтвердите команду «import-route static» еще раз, она показывает, что эта команда не может импортировать IP-маршрутизацию по умолчанию в ospf.

17. Коренная причина теперь ясна, она показана как шаг 16.

18. Есть два вида решения:

A. Добавьте команду «ip route-static 0.0.0.0 0.0.0.0 10.X.16.1» в SW.

Б. Добавьте команду «[FW-ospf-1] default-route-advertise».

19. Здесь применяется решение A. И тогда пользователь B может пропинговать сервер 10.198.X.138.

 


  • x

Ответ

Отправить
Выполните вход в систему, чтобы ответить на пост. Вход | Регистрация

Внимание! В целях защиты правовых интересов Вас, сообщества и третьих лиц, не публикуйте любой материал, содержащий политические высказывания, порнографию, упоминание азартных игр, употребление наркотиков, а также материал, нарушающий коммерческую тайну или содержащий персональные данные пользователей. Также не предоставляйте данные от вашей учетной записи. Вы будете нести ответственность за все действия, выполняемые под вашим аккаунтом. Подробная информация: “Политика конфиденциальности..”
Если кнопка вложения недоступна, обновите Adobe Flash Player до последней версии.

Авторизуйтесь и пользуйтесь всеми преимуществами участника!

Вход
Быстрый ответ Вверх