组网及说明
/
告警信息
/
问题描述
设备型号:S10508X Version 7.1.070, Release 7624P12
现场监控平台反馈当前设备的g1/3/0/3接口,出方向流量速率100%,存在异常;按理只有如下四个接口上来的流量,会通过G1/3/0/3发往华为云:XGE2/2/0/5 XGE1/2/0/6 聚合 Bridge-Aggregation40: XGE1/2/0/9 XGE2/2/0/9 ,不会达到这么高的流量.
于是前方配置本地镜像,想看看是否流量异常转发到路由口了导致,但是配置镜像后g1/3/0/3出方向速率立刻回落正常,取消镜像马上又达到100%.
[WZ-Croe-S10508X]dis interface GigabitEthernet 1/3/0/3
GigabitEthernet1/3/0/3
Current state: UP
Line protocol state: UP
Description: To-HuaWei-Cloud
Bandwidth: 100000 kbps
Maximum transmission unit: 1500
Allow jumbo frames to pass
Broadcast max-ratio: 100%
Multicast max-ratio: 100%
Unicast max-ratio: 100%
Known-unicast max-ratio: 100%
Internet address: 10.1.120.1/30 (Primary)
IP packet frame type: Ethernet II, hardware address: ecda-59b3-e401
IPv6 packet frame type: Ethernet II, hardware address: ecda-59b3-e401
Loopback is not set
Media type is twisted pair, port hardware type is 1000_BASE_T_AN_SFP
Port priority: 0
100Mbps-speed mode, Full-duplex mode
Link speed type is autonegotiation, link duplex type is autonegotiation
Flow-control is not enabled
Maximum frame length: 9216
Last link flapping: 10 weeks 2 days 1 hours 43 minutes
Last clearing of counters: 16:23:39 Thu 05/11/2023
Current system time:2023-05-11 16:26:21
Last time when physical state changed to up:2023-02-28 14:42:52
Last time when physical state changed to down:2023-02-28 14:42:49
Peak input rate: 664667 bytes/sec, at 2023-05-11 16:24:56
Peak output rate: 12176953 bytes/sec, at 2023-05-11 16:26:17
Last 5 seconds input: 394 packets/sec 282498 bytes/sec 2%
Last 5 seconds output: 14217 packets/sec 12176953 bytes/sec 100%
Input (total): 57192 packets, 41721604 bytes
57140 unicasts, 52 broadcasts, 0 multicasts, 0 pauses
Input (normal): 57192 packets, - bytes
57140 unicasts, 52 broadcasts, 0 multicasts, 0 pauses
Input: 0 input errors, 0 runts, 0 giants, 0 throttles
0 CRC, 0 frame, - overruns, 0 aborts
- ignored, - parity errors
Output (total): 164950 packets, 113717472 bytes
164928 unicasts, 0 broadcasts, 22 multicasts, 0 pauses
Output (normal): 164950 packets, - bytes
164928 unicasts, 0 broadcasts, 22 multicasts, 0 pauses
Output: 0 output errors, - underruns, - buffer failures
0 aborts, 0 deferred, 0 collisions, 0 late collisions
0 lost carrier, - no carrier
IPv4 traffic statistics:
Last 5 seconds input rate: 0 packets/sec, 0 bytes/sec
Last 5 seconds output rate: 0 packets/sec, 0 bytes/sec
Input: 0 packets, 0 bytes
Output: 0 packets, 0 bytes
IPv6 traffic statistics:
Last 5 seconds input rate: 0 packets/sec, 0 bytes/sec
Last 5 seconds output rate: 0 packets/sec, 0 bytes/sec
Input: 0 packets, 0 bytes
Output: 0 packets, 0 bytes
[WZ-Croe-S10508X]dis int link-info main | in 1/3/0/3
GE1/3/0/3 UP UP 4% 100% 0 0
[WZ-Croe-S10508X]dis counters rate outbound interface GigabitEthernet 1/3/0/3
Usage: Bandwidth utilization in percentage
Interface Usage (%) Total (pps) Broadcast (pps) Multicast (pps)
GE1/3/0/3 98 15726 -- --
多次收集下面命令,有明显丢包;
[WZ-Croe-S10508X]dis qos queue-statistics interface GigabitEthernet 1/3/0/3 outbo
und
Interface: GigabitEthernet1/3/0/3
Direction: outbound
Forwarded: 3226758 packets, 2755851482 bytes
Dropped: 45947130 packets, 41932815301 bytes
Queue 0
Forwarded: 0 packets, 0 bytes, 0 pps, 0 bps
Dropped: 0 packets, 0 bytes
Current queue length: 0 packets
Queue 1
Forwarded: 0 packets, 0 bytes, 0 pps, 0 bps
Dropped: 0 packets, 0 bytes
Current queue length: 0 packets
Queue 2
Forwarded: 3226706 packets, 2755844142 bytes, 13631 pps, 99703560 bps
Dropped: 45947130 packets, 41932815301 bytes
Current queue length: 2778 packets
如果配置镜像,流量就能下来:
[WZ-Croe-S10508X]dis counters rate inbound interface GigabitEthernet 1/3/0/3
Usage: Bandwidth utilization in percentage
Interface Usage (%) Total (pps) Broadcast (pps) Multicast (pps)
GE1/3/0/3 2 307 -- --
Overflow: More than 14 digits.
--: Not supported.
[WZ-Croe-S10508X]
[WZ-Croe-S10508X]
[WZ-Croe-S10508X]
[WZ-Croe-S10508X]
[WZ-Croe-S10508X]
[WZ-Croe-S10508X]int g1/3/0/3
[WZ-Croe-S10508X-GigabitEthernet1/3/0/3]dis this
#
interface GigabitEthernet1/3/0/3
port link-mode route
description To-HuaWei-Cloud
flow-interval 5
ip address 10.1.120.1 255.255.255.252
mirroring-group 4 mirroring-port both
过程分析
核查发现是另外一个镜像组3配置不规范,Prob vlan配置了对应虚接口:
mirroring-group 3 remote-probe vlan 4000
#
interface Vlan-interface4000
description TO-LianRuan-Mirroring
#
删除interface Vlan-interface4000解决.
解决方法
配置错误,导致报文异常上送cpu复制转发,带宽高,删除interface Vlan-interface4000解决.