甄锡坤,某局点S6812-48X6C 部署DRNI组网随机一台成员设备不通，ARP学习异常
组网及说明
不涉及
告警信息
不涉及
问题描述
两台 6812使用 H1/0/49、 H1/0/50聚合做 IPP。 Ten1/0/48做 Keepalive。使用 Ten1/0/45、 Ten1/0/46聚合上联， 在6812上创建vlan1000，从核心交换机上ping 6812-1的IP 11.4.254.201能通，但是ping 6812-2的IP 11.4.254.202不通。在两台6812交换机之间ping对端设备的vlan1000地址也不通。
<XG-S097_096-S6812-BS-AS1:2>ping 11.4.254.201
Ping 11.4.254.201 (11.4.254.201): 56 data bytes, press CTRL+C to break
Request time out
Request time out
Request time out
Request time out
Request time out
--- Ping statistics for 11.4.254.201 ---
5 packet(s) transmitted, 0 packet(s) received, 100.0% packet loss
<XG-S097_096-S6812-BS-AS1:2>ping 11.4.254.203
Ping 11.4.254.203 (11.4.254.203): 56 data bytes, press CTRL+C to break
Request time out
--- Ping statistics for 11.4.254.203 ---
2 packet(s) transmitted, 0 packet(s) received, 100.0% packet loss
<XG-S097_096-S6812-BS-AS1:2>ping 11.4.254.254
Ping 11.4.254.254 (11.4.254.254): 56 data bytes, press CTRL+C to break
Request time out
--- Ping statistics for 11.4.254.254 ---
1 packet(s) transmitted, 0 packet(s) received, 100.0% packet loss
过程分析
<XG-S097_096-S6812-BS-AS1:1>dis drni summary
Flags: A -- Aggregate interface down, B -- No peer DR interface configured
C -- Configuration consistency check failed
IPP: BAGG1024
IPP state (cause): UP
Keepalive link state (cause): UP
DR interface information
DR interface DR group Local state (cause) Peer state Remaining down time(s)
BAGG1 1 UP UP -
BAGG101 101 UP UP -
BAGG102 102 UP UP -
BAGG103 103 UP UP -
BAGG104 104 UP UP -
BAGG105 105 UP UP -
BAGG106 106 UP UP -
BAGG107 107 UP UP -
BAGG108 108 UP UP -
BAGG109 109 UP UP -
BAGG110 110 UP UP -
BAGG111 111 UP UP -
<XG-S097_096-S6812-BS-AS1:2>dis drni summary
Flags: A -- Aggregate interface down, B -- No peer DR interface configured
C -- Configuration consistency check failed
IPP: BAGG1024
IPP state (cause): UP
Keepalive link state (cause): UP
DR interface information
DR interface DR group Local state (cause) Peer state Remaining down time(s)
BAGG1 1 UP UP -
BAGG101 101 UP UP -
BAGG102 102 UP UP -
BAGG103 103 UP UP -
BAGG104 104 UP UP -
BAGG105 105 UP UP -
BAGG106 106 UP UP -
BAGG107 107 UP UP -
BAGG108 108 UP UP -
BAGG109 109 UP UP -
BAGG110 110 UP UP -
BAGG111 111 UP UP -
drni mad exclude interface M-GigabitEthernet0/0/0
drni mad exclude interface Ten-GigabitEthernet1/0/48
drni mad exclude interface Vlan-interface1000
drni role priority 100
drni system-mac a8c9-8ac1-ca8d
drni system-number 1
drni system-priority 110
drni keepalive ip destination 11.1.255.2 source 11.1.255.1
drni mad exclude interface M-GigabitEthernet0/0/0
drni mad exclude interface Ten-GigabitEthernet1/0/48
drni mad exclude interface Vlan-interface1000
drni role priority 200
drni system-mac a8c9-8ac1-ca8d
drni system-number 2
drni system-priority 110
drni keepalive ip destination 11.1.255.1 source 11.1.255.2
drni 没有问题，查看 arp表项 68-2可以学到 68-1的 vlan 1000地址，是通过 ipp的聚合口学到的，但是 68-1学不到 68-2 vlan1000地址的 arp，检查无 mac地址漂移
但看设备上有收到对端vlan-int1000的报文
68-1：
#
interface Vlan-interface1000
ip address 11.4.254.201 255.255.255.0
#
VLAN ID: 1000
VLAN type: Static
Route interface: Configured
IPv4 address: 11.4.254.201
IPv4 subnet mask: 255.255.255.0
Description: dainei
Name: VLAN 1000
Tagged ports:
Bridge-Aggregation1(U) Bridge-Aggregation1024(U)
HundredGigE1/0/49(U) HundredGigE1/0/50(U)
Ten-GigabitEthernet1/0/45(U)
Ten-GigabitEthernet1/0/46(U)
Untagged ports:
None
===============display arp all===============
Type: S-Static D-Dynamic O-Openflow R-Rule M-Multiport I-Invalid
IP address MAC address VLAN/VSI name Interface Aging Type
11.1.255.2 642f-c75f-c6bb -- XGE1/0/48 401 D
11.24.1.202 642f-c75f-c696 -- MGE0/0/0 752 D
11.24.1.254 7057-bfdc-7aa7 -- MGE0/0/0 845 D
11.4.254.203 a8c9-8ac1-c7cf 1000 BAGG1 873 D
11.4.254.204 a8c9-8ac1-cfc7 1000 BAGG1 1197 D
11.4.254.205 a8c9-8ac1-d657 1000 BAGG1 148 D
11.4.254.206 a8c9-8ac1-d567 1000 BAGG1 1181 D
11.4.254.254 7057-bf15-9201 1000 BAGG1 1176 D
通过rlink同步过来
*Jan 1 08:43:43:855 2021 XG-S097_096-S6812-BS-AS1:1 ETHDRNI/7/ALARM: Rlink batset mac [vlan 1000] [MAC 642f-c75f-c6a4] [ulRet 0x40010006].
68-2
#
interface Vlan-interface1000
ip address 11.4.254.202 255.255.255.0
#
===============display arp all===============
Type: S-Static D-Dynamic O-Openflow R-Rule M-Multiport I-Invalid
IP address MAC address VLAN/VSI name Interface Aging Type
11.1.255.1 a8c9-8ac1-cab6 -- XGE1/0/48 389 D
11.24.1.201 a8c9-8ac1-ca91 -- MGE0/0/0 739 D
11.24.1.203 a8c9-8ac1-c7c1 -- MGE0/0/0 735 D
11.24.1.254 7057-bfdc-7aa7 -- MGE0/0/0 832 D
11.4.254.203 a8c9-8ac1-c7cf 1000 BAGG1 860 D
11.4.254.204 a8c9-8ac1-cfc7 1000 BAGG1 1184 D
11.4.254.205 a8c9-8ac1-d657 1000 BAGG1 135 D
11.4.254.206 a8c9-8ac1-d567 1000 BAGG1 1168 D
11.4.254.254 7057-bf15-9201 1000 BAGG1 1163 D
11.4.254.201 a8c9-8ac1-ca9f 1000 BAGG1024 523 D
Vlan-interface1000
Current state: UP
Line protocol state: UP
Description: Vlan-interface1000 Interface
Bandwidth: 10000000 kbps
Maximum transmission unit: 1500
Internet address: 11.4.254.202/24 (Primary)
IP packet frame type: Ethernet II, hardware address: 642f-c75f-c6a4
IPv6 packet frame type: Ethernet II, hardware address: 642f-c75f-c6a4
解决方法
配置mac-address static source-check enable解决
1.1.18 mac-address static source-check enable
mac-address static source-check enable命令用来开启报文入接口与静态MAC地址表项匹配检查功能。
undo mac-address static source-check enable命令用来关闭报文入接口与静态MAC地址表项匹配检查功能。
【命令】
mac-address static source-check enable
undo mac-address static source-check enable
【缺省情况】
报文入接口与静态MAC地址表项匹配检查功能处于开启状态。
【视图】
系统视图
二层以太网接口视图
二层聚合接口视图
三层以太网接口视图
三层以太网子接口视图
三层聚合接口视图
三层聚合子接口视图
IRF物理端口视图
配置为IPP口的二层聚合接口需要配置undo mac-address static source-check enable命令关闭报文入接口与静态MAC地址表项匹配检查功能，否则可能会导致跨IPL三层转发的流量不通。
CRM论坛（CRMbbs.com）——一个让用户更懂CRM的垂直性行业内容平台,CRM论坛致力于互联网、客户管理、销售管理、SCRM私域流量内容输出5年。 如果您有好的内容，欢迎向我们投稿，共建CRM多元化生态体系，创建CRM客户管理一体化生态解决方案。本文来源：知了社区基于知识共享署名-相同方式共享3.0中国大陆许可协议,某局点S6812-48X6C 部署DRNI组网随机一台成员设备不通，ARP学习异常
