CGN运维综述-VSUF-培训文档之三.ppt
- 【下载声明】
1. 本站全部试题类文档,若标题没写含答案,则无答案;标题注明含答案的文档,主观题也可能无答案。请谨慎下单,一旦售出,不予退换。
2. 本站全部PPT文档均不含视频和音频,PPT中出现的音频或视频标识(或文字)仅表示流程,实际无音频或视频文件。请谨慎下单,一旦售出,不予退换。
3. 本页资料《CGN运维综述-VSUF-培训文档之三.ppt》由用户(三亚风情)主动上传,其收益全归该用户。163文库仅提供信息存储空间,仅对该用户上传内容的表现方式做保护处理,对上传内容本身不做任何修改或编辑。 若此文所含内容侵犯了您的版权或隐私,请立即通知163文库(点击联系客服),我们立即给予删除!
4. 请根据预览情况,自愿下载本文。本站不保证下载资源的准确性、安全性和完整性, 同时也不承担用户因使用这些下载资源对自己和他人造成任何形式的伤害或损失。
5. 本站所有资源如无特殊说明,都需要本地电脑安装OFFICE2007及以上版本和PDF阅读器,压缩文件请下载最新的WinRAR软件解压。
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- CGN 综述 _VSUF 培训 文档
- 资源描述:
-
1、Copyright 2009 Huawei Technologies Co.,Ltd.All rights reserved.CGN运维综述第1页,共44页。Copyright 2009 Huawei Technologies Co.,Ltd.All rights reserved.Page2目目 录录l CGN故障处理故障处理故障处理流程故障处理流程典型故障场景典型故障场景常用维护手段常用维护手段l CGN常见问题常见问题FAQ第2页,共44页。Copyright 2009 Huawei Technologies Co.,Ltd.All rights reserved.l CGN业务采用多核
2、业务板VSUF实现,该单板为无出接口的单板。l 业务流程:接口板把流量引入到业务板,业务板负责CGN的处理,完成后再交给接口板发出。Page3SFULPU1LPU2VSUF(CGN)123567CGN业务流程简介第3页,共44页。Copyright 2009 Huawei Technologies Co.,Ltd.All rights reserved.Page4NATNAT故障处理流程故障处理流程定位思路定位思路正向:报文在接口板通过ACL(分布式为UCL)引流,根据匹配的规则将流量引入到业务板;首包在业务板上建立会话表,然后与后续包一样,匹配会话表,做NAT转换,然后根据目的IP查fib发
3、送到下行接口板;下行接口板根据转发帧头直接将报文转发。反向:报文到达接口板后,在接口板根据目的IP查询fib将报文转发到业务板;在业务板上匹配会话表,并作NAT转换,然后根据私网IP查fib转发到出接口板;接口板根据转发帧头将报文转发出去。当出现问题时,可以根据转发流程逐步缩小定位范围,确认问题出在业务板或者接口板,在根据各个单板的查询命令来确认故障。第4页,共44页。Copyright 2009 Huawei Technologies Co.,Ltd.All rights reserved.Page5 NATNAT故障处理流程故障处理流程Page5第5页,共44页。Copyright 200
4、9 Huawei Technologies Co.,Ltd.All rights reserved.Page6 NATNAT故障处理流程故障处理流程Page6步骤一:报文是否到达业务板TM,并且从TM发送出去 报文从接口板进入业务板,首先到达TM。如果TM没有进入的报文计数,说明报文没有进入业务板。查询命令,进入诊断试图:display tm 7 0 received-packets TM 收到的报文计数 /7号单板为业务板 display tm 7 0 transmitted-packets TM 发送报文计数步骤二:报文是否到达CPU 报文从TM进入CPU,如果是首包,会先建立会话表,然后
5、根据会话表做NAT转换,然后根据目的IP查询FIB进行报转发。后续报文直接查询会话表,如果匹配会话表的话进行NAT转换,然后根据目的IP查询FIB进行转发。确认报文是否到达CPU,查询命令:display nat statistics received slot 7 engine 0步骤三:在CPU上是否建立用户表 分布式场景用户上线的时候就会创建用户表。查询CPU上是否创建用户表,查询命令:display nat user-information 第6页,共44页。Copyright 2009 Huawei Technologies Co.,Ltd.All rights reserved.P
6、age7 NATNAT故障处理流程故障处理流程Page7步骤四:在CPU上是否建立会话表首包创建会话表,后续包直接查询会话表,然后进行nat转换。三元组模式会话表的目的IP和端口无法看到,五元组模式可以查看到目的IP和端口。会话表查询命令:display nat session table slot 7 engine 0 查询cpu上的所有会话信息 display nat session table slot 7 engine 0 verberse 查询会话表向信息 步骤五:报文是否从CPU发送出去查询命令:display nat statistics transmitted slot 7 e
7、ngine 0如果报文没有从CPU发送出去,可能是因为某种原因丢包:查询命令:display nat statistics discard slot 7 engine 0步骤六:报文是否到TM并且从TM发送出去报文做完nat转换之后,根据目的IP查询FIB,根据路由信息将报文转发到接口板。从CPU出来,首先进入TM,然后经过交换网板,进入接口板。确认报文进入TM和从TM转发出去的查询命令:display tm 7 0 received-packets TM 收到的报文计数 display tm 7 0 transmitted-packets TM 发送报文计数第7页,共44页。Copyrigh
8、t 2009 Huawei Technologies Co.,Ltd.All rights reserved.Page8 NATNAT故障处理流程故障处理流程Page8从交换网板出来,首先到达业务板的TM。查看报文是否到达TM下行,通过命令行查看计数,多次查询看是否计数有增长R15-diagnosedisplay tm 7 0 received-packets TMI Rx Received Total 0 x00000000028b packets(0 x000000080ca4 bytes)(UC)收到的单播报文TMI Rx Received Total 0 x000000000516 p
9、ackets(MC)TMI Rx SP:0 COS:7 Received 0 x00000516 packets(0 x00102374 bytes)TMI Rx SP:63 COS:7 Received 0 x0000028b packets(0 x0000a2c0 bytes)TME Rx SB(6)Received 0 x00000002 packets(0 x00000458 bytes)TME Rx SB(7)Received 0 x00000003 packets(0 x00000684 bytes)查看报文是否从TM发送出去R15-diagnosedisplay tm 7 0 t
10、ransmitted-packets TMI Tx TB:24 COS:0 Transmit 0 x000000000001 packets(0 x0000000005dd bytes)TMI Tx Multicast COS:0 Transmit 0 x000000000002 packets(0 x000000000621 bytes)TME Tx TP:0 COS:7 Transmit 0 x00000005c924 packets(0 x000006dedac0 bytes)发送报文计数TME Tx TP:1 COS:0 Transmit 0 x000000000008 packets
11、(0 x000000000d3a bytes)TME Tx TP:65 COS:0 Transmit 0 x000000000006 packets(0 x000000000174 bytes)第8页,共44页。Copyright 2009 Huawei Technologies Co.,Ltd.All rights reserved.Page9 NATNAT故障处理流程故障处理流程Page92.查看报文是否到达CPUcgn-diagnosedisplay nat statistics received slot 7 engine 0This operation will take a few
12、 minutes.Press Ctrl+C to break.Slot:7 Engine:0-Packets received from interface :390243177 CPU收到从TM过来的报文计数 Packets received from mainboard :4040 Packets received by nat entry :390242120 送到NAT模块处理的报文计数-3.查看是否在业务板上建立用户表先查到用户的Idcgndisplay access-user user-id 1 -User access index :1 State :Used User name
13、 :user#Domain name :yxma User backup state :No User access interface :GigabitEthernet2/1/0 User access PeVlan/CeVlan :-/-User access slot :2 User MAC :0030-0101-0101 User IP address :10.64.0.253 User gateway address :10.64.0.1第9页,共44页。Copyright 2009 Huawei Technologies Co.,Ltd.All rights reserved.Pa
14、ge10 NATNAT故障处理流程故障处理流程Page10业务板上的用户表信息cgn-diagnosedisplay NAT user-information user-id 1 slot 7 engine 0 This operation will take a few minutes.Press Ctrl+C to break.Slot:7 Engine:0Total number:1.-CPE IP :10.64.0.252 VPN Instance :-Public IP :13.13.13.109 Start Port :1024 Port Range :4096 Extend Po
15、rt Alloc Times :0 Extend Port Alloc Number :0 First/Second/Third Extend Port Start :0/0/0 Total/TCP/UDP/ICMP Session Limit :8192/10240/10240/512 Total/TCP/UDP/ICMP Session Current :1/0/1/0 Total/TCP/UDP/ICMP Port Limit :0/0/0/0 Total/TCP/UDP/ICMP Port Current :1/0/1/0 Nat ALG Enable :NULL -第10页,共44页
16、。Copyright 2009 Huawei Technologies Co.,Ltd.All rights reserved.Page11 NAT NAT故障处理流程故障处理流程Page11 4.查看业务板上的是否有会话表cgndisplay nat session table slot 7 engine 0 This operation will take a few minutes.Press Ctrl+C to break.Slot:7 Engine:0Current total sessions:1.udp:10.64.0.253:23413.13.13.163:1037-*:*实例
17、下配置了三元组会话表中目的地址和端口显示成*.*cgndisplay nat session table slot 7 engine 0 verbose This operation will take a few minutes.Press Ctrl+C to break.Slot:7 Engine:0Current total sessions:1.udp:10.64.0.253:23413.13.13.163:1037-*:*:*-13.13.13.163:103710.64.0.253:234 NAT Instance:yxma User-id:1 VPN:-Tag:0 x2,Fixe
18、dTag:0 x1,Status:hit,Create:2010-1-16 08:10:26,TTL:00:04:00,Left:00:04:00,Master AppProID:0 x0,CPEIP:10.64.0.253,FwdType:NATPTStatus:hit 表示有报文命中会话 Create:2010-1-16 08:10:26 会话表创建的时间TTL:00:04:00 会话老化时间 Left:00:04:00 剩余老化时间配置了五元组的情况,显示目的地址和端口。cgndisplay nat session table slot 7 engine 0This operation
19、will take a few minutes.Press Ctrl+C to break.Slot:7 Engine:0Current total sessions:1.udp:10.64.0.252:23413.13.13.109:1024-193.5.1.2:7777第11页,共44页。Copyright 2009 Huawei Technologies Co.,Ltd.All rights reserved.Page12 NAT NAT故障处理流程故障处理流程Page125.查看报文是否从CPU发送出去cgndisplay nat statistics transmitted slot
20、 7 engine 0This operation will take a few minutes.Press Ctrl+C to break.Slot:7 Engine:0-Packets transmitted to interface :132 Packets transmitted to mainboard :132 session log packets transmitted :0 user log packets transmitted :0 Transparent packet with nat :29684258 做完nat发送出去的报文计数 Transparent pack
21、et without nat :0 没有做nat发送出去的报文计数-查看报文是否在CPU丢包cgn-diagnosedisplay nat statistics discard slot 7 engine 0This operation will take a few minutes.Press Ctrl+C to break.Slot:7 Engine:0-Fib miss discard :2190892444 没有路由导致丢包-第12页,共44页。Copyright 2009 Huawei Technologies Co.,Ltd.All rights reserved.Page13 N
22、ATNAT故障处理流程故障处理流程Page136.报文从业务板cpu出来,首先到达TM,然后从TM到达交换网板.1)查看报文是否进入TMR15-diagnosedisplay tm 7 0 received-packets TMI Rx Received Total 0 x00000000028b packets(0 x000000080ca4 bytes)(UC)上行收到的单播报文TMI Rx Received Total 0 x000000000516 packets(MC)TMI Rx SP:0 COS:7 Received 0 x00000516 packets(0 x00102374
23、 bytes)TMI Rx SP:63 COS:7 Received 0 x0000028b packets(0 x0000a2c0 bytes)TME Rx SB(6)Received 0 x00000002 packets(0 x00000458 bytes)TME Rx SB(7)Received 0 x00000003 packets(0 x00000684 bytes)从CPU进入TM的报文2)查看报文是否从TM发送出去R15-diagnosedisplay tm 7 0 transmitted-packets TMI Tx TB:24 COS:0 Transmit 0 x00000
24、0000001 packets(0 x0000000005dd bytes)从TM发送到交换网板的报文TMI Tx Multicast COS:0 Transmit 0 x000000000002 packets(0 x000000000621 bytes)TME Tx TP:0 COS:7 Transmit 0 x00000005c924 packets(0 x000006dedac0 bytes)TME Tx TP:1 COS:0 Transmit 0 x000000000008 packets(0 x000000000d3a bytes)TME Tx TP:65 COS:0 Transm
25、it 0 x000000000006 packets(0 x000000000174 bytes)第13页,共44页。Copyright 2009 Huawei Technologies Co.,Ltd.All rights reserved.Page14目目 录录l CGN故障处理故障处理故障处理流程故障处理流程典型故障场景典型故障场景常用维护手段常用维护手段l CGN常见问题常见问题FAQ第14页,共44页。Copyright 2009 Huawei Technologies Co.,Ltd.All rights reserved.Page15License故障排查1 1)查看)查看lic
展开阅读全文