S7506E(版本 R7557P03,6槽位单板 LSQM1TGS16FD0)作为 MPLS L3VPN 的 PE,与远端 PE 组成 L3VPN,远端侧存在业务网段 10.149.149.0/24(测试目的地址 10.149.149.1)。测试终端属 VLAN 200,网关为设备上的 Vlan-interface200(10.150.247.1,绑定 VPN 实例 scgs-vpn-jk)。
三种测试均使用同一源地址 10.150.247.250:
方式一(对照):在设备上临时配置环回地址 10.150.247.250,ping 10.149.149.1 正常;
方式二(对照):终端直连 GigabitEthernet3/0/15 并配置该地址,ping 正常;
方式三(现场实际组网):接入交换机上联至6槽位 Ten-GigabitEthernet6/0/1(属二层聚合口 Bridge-Aggregation601),终端接在接入交换机下并配置同一地址,ping 10.149.149.1 不通,PC提示为(超时/不可达)。 测试期间已将聚合的另一成员 Ten-GigabitEthernet6/0/2 关闭(约 16:39 关闭、17:45 恢复),即测试时数据只经 6/0/1 转发。在 6/0/1 上对入、出两个方向应用仅做统计的流策略后,入方向计到275包、出方向为0包,即请求可进入设备、回程报文未从该口发出。该接入交换机下其他同网段终端业务正常;设备侧临时配置的环回地址已在测试后删除。流统结果如下:
dis qos policy interface Ten-GigabitEthernet 6/0/1
Interface: Ten-GigabitEthernet6/0/1
Direction: Inbound
Policy: test
Classifier: test
operator: AND
Rule(s) :
If-match acl 3999
Behavior: test
Accounting enable:
275 (packets)
Interface: Ten-GigabitEthernet6/0/1
Direction: outbound
Policy: test
Classifier: test
Operator: AND
Rule(s) :
If-match acl 3999
Behavior: test
Accounting enable:
0 (Packets)
(1)根据路由查看公网标签应该是8456,
[RMXin-XGSFZ987-RR-probe]dis fib vpn-instance scgs-vpn-jk 10.149.149.1
Destination count: 1 FIB entry count: 1
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
R:Relay F:FRR
Destination/Mask Nexthop Flag OutInterface/Token Label
10.149.149.0/24 30.30.193.19 UGR 366 1279
[RMXin-XGSFZ987-RR-probe]dis mpls lsp 30.30.193.19 32
FEC Proto In/Out Label Interface/Out NHLFE
30.30.193.19/32 LDP 1109/8456 RAGG1
30.30.193.19/32 LDP -/8456 RAGG1
[RMXin-XGSFZ987-RR]dis mpls forwarding nhlfe 366
Flags: T - Forwarded through a tunnel
N - Forwarded through the outgoing interface to the nexthop IP address
B - Backup forwarding information
A - Active forwarding information
M - P2MP forwarding information
NID Tnl-Type Flag OutLabel Forwarding Info
--------------------------------------------------------------------------------
366 LSP NA 8456 RAGG1 30.50.193.9
(2)查询底层信息发现,表象封装的是8452(0x2104)
[RMXin-XGSFZ987-RR-probe]debug ipv4-drv show route 2 10.149.149.1 slot 6
**********************************************************
- IPv4 Route Information Slot 6
**********************************************************
--- UNIT: 0 ---
- VRF: 2
- IP ADDR: 10.149.149.1
- MASK: 255.255.255.0
- EGRESS ID: 116580
- FLAGS: 0xc
- TUNNEL OPT: 0
- VC LABEL: 0
- HITBIT: Source Dest
- PRI: 0
- CLASS ID: 48
- HWINDEX: 11697
- EGRESS NUM: 0
- EGRESS FLAGS: 0xc000200
- INTF NUM: 4116
- MAC ADDR: dcda-80d0-62c0
- VLAN: 4095
- DMOD: 0
- DPORT: 0
- TRUNK: 0
- FRR LABEL: 1279
----------------------------------------------------------
**********************************************************
[RMXin-XGSFZ987-RR-probe]
[RMXin-XGSFZ987-RR-probe]b s 6 c 0 d/chg/egr_l3_ne
[RMXin-XGSFZ987-RR-probe]b s 6 c 0 d/chg/egr_l3_next_hop/16580
EGR_L3_NEXT_HOP.epipe0[16580]: <MPLS:VC_AND_SWAP_INDEX=0x401b,MPLS:PW_INIT_NUM=0x1b,MPLS:MAC_DA_PROFILE_INDEX=1,MPLS:INTF_NUM=0x1014,MPLS:HG_MODIFY_ENABLE=1,MPLS:HG_L3_OVERRIDE=1,ENTRY_TYPE=1,>
[RMXin-XGSFZ987-RR-probe]
[RMXin-XGSFZ987-RR-probe]
[RMXin-XGSFZ987-RR-probe]b s 6 c 0 d/chg/egr_l3_intf/0x1014
EGR_L3_INTF.epipe0[4116]: <VID=0xfff,VFI=0xfff,TUNNEL_INDEX=0x20,OVID=0xfff,MPLS_TUNNEL_INDEX=0x83,MAC_ADDRESS=0x7c1e069aa201,IVID_PRESENT_ACTION=2,>
[RMXin-XGSFZ987-RR-probe]b s 6 c 0 d/chg/egr_ip_tunnel_mpls/16
EGR_IP_TUNNEL_MPLS.epipe0[16]: <MPLS_PUSH_ACTION_3=1,MPLS_PUSH_ACTION_2=1,MPLS_PUSH_ACTION_1=1,MPLS_LABEL_3=0x2104(8452),MPLS_LABEL_2=0x2105,MPLS_LABEL_1=0x2107,MPLS_EXP_SELECT_3=1,MPLS_EXP_SELECT_2=1,MPLS_EXP_SELECT_1=1,MPLS_ENTRY_3=0x0000000000502104,MPLS_ENTRY_2=0x0000000000502105,MPLS_ENTRY_1=0x0000000000502107,ENTRY_TYPE_COPY=3,ENTRY_TYPE=3>
(3)抓包发现封装出去的报文是8452,正常应该是8456:
触发已知问题,建议版本升级
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作