背景
局域网中大概有600-700台使用的电脑,最近有个别电脑出现网络偶尔性闪断的情况,造成业务无法正常进行。经过重做水晶头等方式,确定了线路是正常的。还是无法解决。
处理步骤
一、查看交换机的日志发现,交换机里面有大量的接口异常信息。
1 2 3 4 5 6 7 8 9 10 11 12 |
Apr 25 2021 18:10:18 MT037 %%01MSTP/4/SET_PORT_FORWARDING(l)[316]:In MSTP process 0 instance 0, MSTP set port GigabitEthernet0/0/35 state as forwarding. Apr 25 2021 18:10:14 MT037 %%01IFPDT/4/IF_STATE(l)[317]:Interface GigabitEthernet0/0/35 has turned into UP state. Apr 25 2021 18:10:12 MT037 %%01IFADP/4/PORTUPINFO(l)[318]:Interface GigabitEthernet0/0/35 has turned into UP state. (Information=Physical state: up, Negotiation: enable, Negotiation complete: yes, Local full-duplex(10M: yes, 100M: yes, 1000M: yes), Local half-duplex(10M: yes, 100M: yes, 1000M: no), Remote full-duplex(10M: yes, 100M: yes, 1000M: yes), Remote half-duplex(10M: yes, 100M: yes, 1000M: no)) Apr 25 2021 18:10:11 MT037 %%01IFPDT/4/IF_STATE(l)[319]:Interface GigabitEthernet0/0/35 has turned into DOWN state. Apr 25 2021 18:10:11 MT037 %%01IFADP/4/PORTDOWNINFO(l)[320]:Interface GigabitEthernet0/0/35 has turned into DOWN state. (Information=Physical state: down, Negotiation: enable, Negotiation complete: no, Local full-duplex(10M: yes, 100M: yes, 1000M: yes), Local half-duplex(10M: yes, 100M: yes, 1000M: no), Remote full-duplex(10M: yes, 100M: yes, 1000M: yes), Remote half-duplex(10M: yes, 100M: yes, 1000M: no)) Apr 25 2021 17:23:15 MT037 %%01MSTP/4/SET_PORT_FORWARDING(l)[321]:In MSTP process 0 instance 0, MSTP set port GigabitEthernet0/0/35 state as forwarding. Apr 25 2021 17:23:11 MT037 %%01IFPDT/4/IF_STATE(l)[322]:Interface GigabitEthernet0/0/35 has turned into UP state. Apr 25 2021 17:23:09 MT037 %%01IFADP/4/PORTUPINFO(l)[323]:Interface GigabitEthernet0/0/35 has turned into UP state. (Information=Physical state: up, Negotiation: enable, Negotiation complete: yes, Local full-duplex(10M: yes, 100M: yes, 1000M: yes), Local half-duplex(10M: yes, 100M: yes, 1000M: no), Remote full-duplex(10M: yes, 100M: yes, 1000M: yes), Remote half-duplex(10M: yes, 100M: yes, 1000M: no)) Apr 25 2021 17:23:08 MT037 %%01IFADP/4/PORTDOWNINFO(l)[324]:Interface GigabitEthernet0/0/35 has turned into DOWN state. (Information=Physical state: down, Negotiation: enable, Negotiation complete: no, Local full-duplex(10M: yes, 100M: yes, 1000M: yes), Local half-duplex(10M: yes, 100M: yes, 1000M: no), Remote full-duplex(10M: yes, 100M: yes, 1000M: yes), Remote half-duplex(10M: yes, 100M: yes, 1000M: no)) Apr 25 2021 17:23:07 MT037 %%01IFADP/4/PORTUPINFO(l)[325]:Interface GigabitEthernet0/0/35 has turned into UP state. (Information=Physical state: up, Negotiation: enable, Negotiation complete: yes, Local full-duplex(10M: yes, 100M: yes, 1000M: yes), Local half-duplex(10M: yes, 100M: yes, 1000M: no), Remote full-duplex(10M: yes, 100M: yes, 1000M: yes), Remote half-duplex(10M: yes, 100M: yes, 1000M: no)) Apr 25 2021 17:23:05 MT037 %%01IFADP/4/PORTDOWNINFO(l)[326]:Interface GigabitEthernet0/0/35 has turned into DOWN state. (Information=Physical state: down, Negotiation: enable, Negotiation complete: no, Local full-duplex(10M: yes, 100M: yes, 1000M: yes), Local half-duplex(10M: yes, 100M: yes, 1000M: no), Remote full-duplex(10M: yes, 100M: yes, 1000M: yes), Remote half-duplex(10M: yes, 100M: yes, 1000M: no)) Apr 25 2021 17:23:05 MT037 %%01IFPDT/4/IF_STATE(l)[327]:Interface GigabitEthernet0/0/35 has turned into DOWN state. |
通过以上截取的日志分析:
1. 接口状态DOWN的时候,物理线路还是正常的,只是在协商两端的速率。
2. 当速率协商成功后,接口状态变为UP。
3. 当状态变为UP后,经过了4秒后,将端口STP状态设置为FORWARDING。
二、通过以上日志判断,有可能是由于STP广播报文过量导致端口异常。
经过百度搜索,找到了华为案例库里面出现过些类的情况。
三、去除广播抑制
因为华为设备上默认会有端口广播抑制的功能。默认为10%,可以通过broadcast-suppression 100设置为不限制。
在交换机接口下配置如下:
配置完成后,经过半天测试没有再出现此类问题。
四、解决方案
将局域网中所有交换机的下联终端口设置为stp edged-port,解决由于终端电脑上下线、休眠等原因导致的端口状态改变,造成STP广播报文过多,端口抑制功能触发的问题。
状态设置完毕后,端口日志状态如下:
1 2 3 |
Apr 26 2021 07:56:27 MT037 %%01MSTP/4/SET_PORT_FORWARDING(l)[0]:In MSTP process 0 instance 0, MSTP set port GigabitEthernet0/0/35 state as forwarding. Apr 26 2021 07:56:27 MT037 %%01MSTP/4/SET_PORT_LEARNING(l)[1]:In process 0 instance 0, MSTP set port GigabitEthernet0/0/35 state as learning. Apr 26 2021 07:56:27 MT037 %%01IFPDT/4/IF_STATE(l)[2]:Interface GigabitEthernet0/0/35 has turned into UP state. Apr 26 2021 07:56:26 MT037 %%01IFADP/4/PORTUPINFO(l)[3]:Interface GigabitEthernet0/0/35 has turned into UP state. (Information=Physical state: up, Negotiation: enable, Negotiation complete: yes, Local full-duplex(10M: yes, 100M: yes, 1000M: yes), Local half-duplex(10M: yes, 100M: yes, 1000M: no), Remote full-duplex(10M: yes, 100M: yes, 1000M: yes), Remote half-duplex(10M: yes, 100M: yes, 1000M: no)) |
通过日志分析:
在接口变为UP状态后,立即将STP状态转为FORWARDING。
备注:
配置流量抑制示例
配置流量抑制后的广播、未知单播和组播报文的速率为接口速率的 %
1. 进入接口视图
1 2 |
<Quidway> system-view [Quidway] interface gigabitethernet 2/0/12 |
2. 配置广播流量抑制
1 |
[Quidway-GigabitEthernet2/0/12] broadcast-suppression 80 |
3. 配置组播流量抑制
1 |
[Quidway-GigabitEthernet2/0/12] multicast-suppression 80 |
4. 配置未知单播流量抑制
1 |
[Quidway-GigabitEthernet2/0/12] unicast-suppression 80 |
5. 验证配置结果
执行命令display flow-suppression interface查看GE0/0/1接口下的流量抑制配置情况。
1 2 3 4 5 6 7 |
<Quidway> display flow-suppression interface gigabitethernet 2/0/12 storm type rate mode set rate value ------------------------------------------------------------------------------- unknown-unicast percent percent: 80% multicast percent percent: 80% broadcast percent percent: 80% ------------------------------------------------------------------------------- |
借鉴资料
https://support.huawei.com/enterprise/zh/knowledge/KB1001884086/
https://www.cnblogs.com/dengcongcong/p/10242509.html
https://zhiliao.h3c.com/theme/details/83425
2021-10-9 11:24:22