首页 科技问答 甄锡坤,某局点S6812-48X6C 部署DRNI组网随机一台成员设备不通,ARP学习异常

甄锡坤,某局点S6812-48X6C 部署DRNI组网随机一台成员设备不通,ARP学习异常

科技问答 204
1676537586,

组网及说明

不涉及

告警信息

不涉及

问题描述

两台 6812使用 H1/0/49H1/0/50聚合做 IPPTen1/0/48Keepalive。使用 Ten1/0/45Ten1/0/46聚合上联,  在6812上创建vlan1000,从核心交换机上ping 6812-1IP 11.4.254.201能通,但是ping 6812-2IP 11.4.254.202不通。在两台6812交换机之间ping对端设备的vlan1000地址也不通。


<XG-S097_096-S6812-BS-AS1:2>ping 11.4.254.201

Ping 11.4.254.201 (11.4.254.201): 56 data bytes, press CTRL+C to break

Request time out

Request time out

Request time out

Request time out

Request time out

--- Ping statistics for 11.4.254.201 ---

5 packet(s) transmitted, 0 packet(s) received, 100.0% packet loss

 

<XG-S097_096-S6812-BS-AS1:2>ping 11.4.254.203

Ping 11.4.254.203 (11.4.254.203): 56 data bytes, press CTRL+C to break

Request time out

--- Ping statistics for 11.4.254.203 ---

2 packet(s) transmitted, 0 packet(s) received, 100.0% packet loss

 

<XG-S097_096-S6812-BS-AS1:2>ping 11.4.254.254

Ping 11.4.254.254 (11.4.254.254): 56 data bytes, press CTRL+C to break

Request time out

--- Ping statistics for 11.4.254.254 ---

1 packet(s) transmitted, 0 packet(s) received, 100.0% packet loss

过程分析


 <XG-S097_096-S6812-BS-AS1:1>dis drni summary

Flags: A -- Aggregate interface down, B -- No peer DR interface configured

       C -- Configuration consistency check failed

 

IPP: BAGG1024

IPP state (cause): UP

Keepalive link state (cause): UP

 

                     DR interface information

DR interface  DR group  Local state (cause)  Peer state  Remaining down time(s)

BAGG1         1         UP                   UP          -

BAGG101       101       UP                   UP          -

BAGG102       102       UP                   UP          -

BAGG103       103       UP                   UP          -

BAGG104       104       UP                   UP          -

BAGG105       105       UP                   UP          -

BAGG106       106       UP                   UP          -

BAGG107       107       UP                   UP          -

BAGG108       108       UP                   UP          -

BAGG109       109       UP                   UP          -

BAGG110       110       UP                   UP          -

BAGG111       111       UP                   UP          -

 

<XG-S097_096-S6812-BS-AS1:2>dis drni summary

Flags: A -- Aggregate interface down, B -- No peer DR interface configured

       C -- Configuration consistency check failed

 

IPP: BAGG1024

IPP state (cause): UP

Keepalive link state (cause): UP

 

                     DR interface information

DR interface  DR group  Local state (cause)  Peer state  Remaining down time(s)

BAGG1         1         UP                   UP          -

BAGG101       101       UP                   UP          -

BAGG102       102       UP                   UP          -

BAGG103       103       UP                   UP          -

BAGG104       104       UP                   UP          -

BAGG105       105       UP                   UP          -

BAGG106       106       UP                   UP          -

BAGG107       107       UP                   UP          -

BAGG108       108       UP                   UP          -

BAGG109       109       UP                   UP          -

BAGG110       110       UP                   UP          -

BAGG111       111       UP                   UP          -

 

drni mad exclude interface M-GigabitEthernet0/0/0

drni mad exclude interface Ten-GigabitEthernet1/0/48

drni mad exclude interface Vlan-interface1000

drni role priority 100

drni system-mac a8c9-8ac1-ca8d

drni system-number 1

drni system-priority 110

drni keepalive ip destination 11.1.255.2 source 11.1.255.1

 

drni mad exclude interface M-GigabitEthernet0/0/0

drni mad exclude interface Ten-GigabitEthernet1/0/48

drni mad exclude interface Vlan-interface1000

drni role priority 200

drni system-mac a8c9-8ac1-ca8d

drni system-number 2

drni system-priority 110

drni keepalive ip destination 11.1.255.1 source 11.1.255.2

 

drni 没有问题,查看 arp表项 68-2可以学到 68-1vlan 1000地址,是通过 ipp的聚合口学到的,但是 68-1学不到 68-2 vlan1000地址的 arp,检查无 mac地址漂移


但看设备上有收到对端vlan-int1000的报文

68-1

#

interface Vlan-interface1000

ip address 11.4.254.201 255.255.255.0

#

VLAN ID: 1000

VLAN type: Static

Route interface: Configured

IPv4 address: 11.4.254.201

IPv4 subnet mask: 255.255.255.0

Description: dainei

Name: VLAN 1000

Tagged ports:  

    Bridge-Aggregation1(U)             Bridge-Aggregation1024(U)         

    HundredGigE1/0/49(U)               HundredGigE1/0/50(U)              

    Ten-GigabitEthernet1/0/45(U)      

    Ten-GigabitEthernet1/0/46(U)      

 Untagged ports:

None

  ===============display arp all=============== 

  Type: S-Static   D-Dynamic   O-Openflow   R-Rule   M-Multiport  I-Invalid

IP address      MAC address    VLAN/VSI name Interface                Aging Type

11.1.255.2      642f-c75f-c6bb --            XGE1/0/48                401   D  

11.24.1.202     642f-c75f-c696 --            MGE0/0/0                 752   D  

11.24.1.254     7057-bfdc-7aa7 --            MGE0/0/0                 845   D  

11.4.254.203    a8c9-8ac1-c7cf 1000          BAGG1                    873   D  

11.4.254.204    a8c9-8ac1-cfc7 1000          BAGG1                    1197  D  

11.4.254.205    a8c9-8ac1-d657 1000          BAGG1                    148   D  

11.4.254.206    a8c9-8ac1-d567 1000          BAGG1                    1181  D  

11.4.254.254    7057-bf15-9201 1000          BAGG1                    1176  D  

 

通过rlink同步过来

*Jan  1 08:43:43:855 2021 XG-S097_096-S6812-BS-AS1:1 ETHDRNI/7/ALARM: Rlink batset mac [vlan 1000] [MAC 642f-c75f-c6a4] [ulRet 0x40010006].

 

 

68-2

#

interface Vlan-interface1000

ip address 11.4.254.202 255.255.255.0

#

  ===============display arp all=============== 

  Type: S-Static   D-Dynamic   O-Openflow   R-Rule   M-Multiport  I-Invalid

IP address      MAC address    VLAN/VSI name Interface                Aging Type

11.1.255.1      a8c9-8ac1-cab6 --            XGE1/0/48                389   D  

11.24.1.201     a8c9-8ac1-ca91 --            MGE0/0/0                 739   D  

11.24.1.203     a8c9-8ac1-c7c1 --            MGE0/0/0                 735   D   

11.24.1.254     7057-bfdc-7aa7 --            MGE0/0/0                 832   D  

11.4.254.203    a8c9-8ac1-c7cf 1000          BAGG1                    860   D  

11.4.254.204    a8c9-8ac1-cfc7 1000          BAGG1                    1184  D  

11.4.254.205    a8c9-8ac1-d657 1000          BAGG1                    135   D  

11.4.254.206    a8c9-8ac1-d567 1000          BAGG1                    1168  D  

11.4.254.254    7057-bf15-9201 1000          BAGG1                    1163  D  

11.4.254.201    a8c9-8ac1-ca9f 1000          BAGG1024                 523   D  

 

Vlan-interface1000

Current state: UP

Line protocol state: UP

Description: Vlan-interface1000 Interface

Bandwidth: 10000000 kbps

Maximum transmission unit: 1500

Internet address: 11.4.254.202/24 (Primary)

IP packet frame type: Ethernet II, hardware address: 642f-c75f-c6a4

IPv6 packet frame type: Ethernet II, hardware address: 642f-c75f-c6a4


解决方法

配置mac-address static source-check enable解决


  1.1.18  mac-address static source-check enable
mac-address static source-check enable命令用来开启报文入接口与静态MAC地址表项匹配检查功能。

undo mac-address static source-check enable命令用来关闭报文入接口与静态MAC地址表项匹配检查功能。

【命令】

mac-address static source-check enable

undo mac-address static source-check enable

【缺省情况】

报文入接口与静态MAC地址表项匹配检查功能处于开启状态。

【视图】

系统视图

二层以太网接口视图

二层聚合接口视图

三层以太网接口视图

三层以太网子接口视图

三层聚合接口视图

三层聚合子接口视图

IRF物理端口视图  


配置为IPP口的二层聚合接口需要配置undo mac-address static source-check enable命令关闭报文入接口与静态MAC地址表项匹配检查功能,否则可能会导致跨IPL三层转发的流量不通。

CRM论坛(CRMbbs.com)——一个让用户更懂CRM的垂直性行业内容平台,CRM论坛致力于互联网、客户管理、销售管理、SCRM私域流量内容输出5年。 如果您有好的内容,欢迎向我们投稿,共建CRM多元化生态体系,创建CRM客户管理一体化生态解决方案。本文来源:知了社区基于知识共享署名-相同方式共享3.0中国大陆许可协议,某局点S6812-48X6C 部署DRNI组网随机一台成员设备不通,ARP学习异常