《华为9306交换机ICMP包攻击导致直连丢包但业务不受影响故障处理》由会员分享,可在线阅读,更多相关《华为9306交换机ICMP包攻击导致直连丢包但业务不受影响故障处理(7页珍藏版)》请在金锄头文库上搜索。
1、华为9306交换机ICMP包攻击导致直连丢包但业务不受影响故障处理故报告故障现象描述与说明故障现象: Ping华为9306交换机的任何直连地址会丢包,经过交换机的业务数据不受影响。现状、拓扑与配置网络情况: 华为9303交换机 华为9306交换机故障现象及处理步骤一:1、在交换机9306-B上通过命令display logbuffer查看Apr 23 2012 14:25:16 JM-SN5L-DCN-9306-2 %01QOSE/4/CPCAR_DROP_LPU(l): Some packets are dropped by cpcar on the LPU in slot 1. (Prot
2、ocol=icmp, Drop-Count=0529546)Apr 23 2012 14:25:16 JM-SN5L-DCN-9306-2 %01QOSE/4/CPCAR_DROP_MPU(l): Some packets are dropped by cpcar on the MPU. (Protocol=icmp, Drop-Count=049663)Apr 23 2012 14:15:16 JM-SN5L-DCN-9306-2 %01QOSE/4/CPCAR_DROP_LPU(l): Some packets are dropped by cpcar on the LPU in slot
3、 1. (Protocol=icmp, Drop-Count=0489843)Apr 23 2012 14:15:16 JM-SN5L-DCN-9306-2 %01QOSE/4/CPCAR_DROP_MPU(l): Some packets are dropped by cpcar on the MPU. (Protocol=icmp, Drop-Count=049826)Apr 23 2012 14:09:39 JM-SN5L-DCN-9306-2 %01HWCM/4/EXIT(l): Exit from configure mode.Apr 23 2012 14:05:16 JM-SN5L
4、-DCN-9306-2 %01QOSE/4/CPCAR_DROP_LPU(l): Some packets are dropped by cpcar on the LPU in slot 1. (Protocol=icmp, Drop-Count=0483657)大量的icmp包到达设备后由主引擎和slot1的CPCAR进行丢弃。 2、在交换机9306-B上通过命令display cpu-defend statistics all查看 CPCAR on mainboard-Packet Type Pass(Bytes) Drop(Bytes) Pass(Packets) Drop(Packet
5、s)stp 0 0 0 0smart-link 0 0 0 0ldt 0 0 0 0lacp 0 0 0 0lldp 0 0 0 0dldp 0 0 0 0vrrp 0 0 0 0isis 0 0 0 0igmp 0 0 0 0pim 0 0 0 0rip 0 0 0 0ospf 14060 0 132 0bgp 88257 0 1175 0mpls-rsvp 0 0 0 0mpls-ldp 0 0 0 0ttl-expired 0 0 0 0icmp 118941948 52491134 1828397 807336eoam-3ah 0 0 0 0mpls-ping 0 0 0 0mpls-
6、ttl-expired 0 0 0 0ntp 0 0 0 0ripng 0 0 0 0ospfv3 0 0 0 0bgp4plus 0 0 0 0pimv6 0 0 0 0hotlimit 0 0 0 0vrrp6 0 0 0 0mld 13130 0 135 0icmpv6 0 0 0 0telnet 800735 0 12506 0ssh 0 0 0 0ftp 0 0 0 0snmp 0 0 0 0radius 0 0 0 0hw-tacacs 0 0 0 0tcp 14052 0 198 0mpls-fib-hit 0 0 0 0fib-hit 0 0 0 0arp-miss 16302 0 207 0unknown-packet 0 0 0 0hopbyhop 0 0 0 0pppoe 0 0 0 0bpdu-tunnel 0 0 0 0rrpp 0 0 0 0udp-helper 0 0 0 0- CPCAR on slot 1-