华为9306交换机ICMP包攻击导致直连丢包但业务不受影响故障处理

《华为9306交换机ICMP包攻击导致直连丢包但业务不受影响故障处理》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、华为9306交换机ICMP包攻击导致直连丢包但业务不受影响故障处理故报告故障现象描述与说明故障现象：Ping华为9306交换机的任何直连地址会丢包，经过交换机的业务数据不受影响。现状、拓扑与配置网络情况：华为9303交换机华为9306交换机故障现象及处理步骤一：1、在交换机9306-B上通过命令displaylogbuffer查看Apr23201214:25:16JM-SN5L-DCN-9306-2%%01QOSE/4/CPCAR_DROP_LPU(l):SomepacketsaredroppedbycpcarontheLPUinslot1.(Pr

2、otocol=icmp,Drop-Count=0529546)Apr23201214:25:16JM-SN5L-DCN-9306-2%%01QOSE/4/CPCAR_DROP_MPU(l):SomepacketsaredroppedbycpcarontheMPU.(Protocol=icmp,Drop-Count=049663)Apr23201214:15:16JM-SN5L-DCN-9306-2%%01QOSE/4/CPCAR_DROP_LPU(l):SomepacketsaredroppedbycpcarontheLPUinslot1.(Pro

3、tocol=icmp,Drop-Count=0489843)Apr23201214:15:16JM-SN5L-DCN-9306-2%%01QOSE/4/CPCAR_DROP_MPU(l):SomepacketsaredroppedbycpcarontheMPU.(Protocol=icmp,Drop-Count=049826)Apr23201214:09:39JM-SN5L-DCN-9306-2%%01HWCM/4/EXIT(l):Exitfromconfiguremode.Apr23201214:05:16JM-SN5L-DCN-9306-2%%

4、01QOSE/4/CPCAR_DROP_LPU(l):SomepacketsaredroppedbycpcarontheLPUinslot1.(Protocol=icmp,Drop-Count=0483657)大量的icmp包到达设备后由主引擎和slot1的CPCAR进行丢弃。2、在交换机9306-B上通过命令displaycpu-defendstatisticsall查看CPCARonmainboard-------------------------------------------------------------------------

5、------PacketTypePass(Bytes)Drop(Bytes)Pass(Packets)Drop(Packets)stp0000smart-link0000ldt0000lacp0000lldp0000dldp0000vrrp0000isis0000igmp0000pim0000rip0000ospf1406001320bgp88257011750mpls-rsvp0000mpls-ldp0000ttl-expired0000icmp118941948524911341828397807336eoam-3ah0000mpls-ping

6、0000mpls-ttl-expired0000ntp0000ripng0000ospfv30000bgp4plus0000pimv60000hotlimit0000vrrp60000mld1313001350icmpv60000telnet8007350125060ssh0000ftp0000snmp0000radius0000hw-tacacs0000tcp1405201980mpls-fib-hit0000fib-hit0000arp-miss1630202070unknown-packet0000hopbyhop0000pppoe0000b

7、pdu-tunnel0000rrpp0000udp-helper0000-------------------------------------------------------------------------------CPCARonslot1-------------------------------------------------------------------------------PacketTypePass(Bytes)Drop(Bytes)Pass(Packets)Drop(Packets)arp-request11

8、96801760arp-reply44200660stp0000smart-link0000ldt0000lacp0000