主要报错如下:
%Jul 18 09:33:53:293 2024 W3100-5-3 ARP/5/ARP_BINDRULETOHW_FAILED: Failed to download binding rule to hardware on the interface GigabitEthernet1/0/21, SrcIP 192.168.2.236, SrcMAC 1831-bf84-d23e, VLAN 2, Gateway MAC ffff-ffff-ffff.
%Jul 18 09:33:53:294 2024 W3100-5-3 IPSG/6/IPSG_ADDENTRY_ERROR: Failed to add an IP source guard binding on interface GigabitEthernet1/0/21: IP=192.168.2.236, MAC=1831-bf84-d23e, VLAN=2. Reason: Resources not sufficient.
%Jul 18 09:33:53:366 2024 W3100-5-3 ARP/5/ARP_BINDRULETOHW_FAILED: Failed to download binding rule to hardware on the interface GigabitEthernet1/0/21, SrcIP 192.168.2.237, SrcMAC b06e-bfcb-e631, VLAN 2, Gateway MAC ffff-ffff-ffff.
%Jul 18 09:33:53:366 2024 W3100-5-3 IPSG/6/IPSG_ADDENTRY_ERROR: Failed to add an IP source guard binding on interface GigabitEthernet1/0/21: IP=192.168.2.237, MAC=b06e-bfcb-e631, VLAN=2. Reason: Resources not sufficient.
%Jul 18 09:33:53:422 2024 W3100-5-3 ARP/5/ARP_BINDRULETOHW_FAILED: Failed to download binding rule to hardware on the interface GigabitEthernet1/0/21, SrcIP 192.168.2.236, SrcMAC 1831-bf84-d23e, VLAN 2, Gateway MAC ffff-ffff-ffff.
%Jul 18 09:33:53:423 2024 W3100-5-3 IPSG/6/IPSG_ADDENTRY_ERROR: Failed to add an IP source guard binding on interface GigabitEthernet1/0/21: IP=192.168.2.236, MAC=1831-bf84-d23e, VLAN=2. Reason: Resources not sufficient.
%Jul 18 09:33:58:020 2024 W3100-5-3 ARP/5/ARP_BINDRULETOHW_FAILED: Failed to download binding rule to hardware on the interface GigabitEthernet1/0/21, SrcIP 192.168.2.5, SrcMAC 68dd-b79c-c164, VLAN 2, Gateway MAC ffff-ffff-ffff.
%Jul 18 09:33:58:020 2024 W3100-5-3 IPSG/6/IPSG_ADDENTRY_ERROR: Failed to add an IP source guard binding on interface GigabitEthernet1/0/21: IP=192.168.2.5, MAC=68dd-b79c-c164, VLAN=2. Reason: Resources not sufficient.
%Jul 18 09:34:34:076 2024 W3100-5-3 IPSG/6/IPSG_ADDENTRY_ERROR: Failed to add an IP source guard binding on interface GigabitEthernet1/0/22: IP=fe80::29b:50f1:8802:160a, MAC=7c94-2a76-febc, VLAN=2. Reason: Resources not sufficient.
%Jul 18 09:34:34:555 2024 W3100-5-3 IPSG/6/IPSG_ADDENTRY_ERROR: Failed to add an IP source guard binding on interface GigabitEthernet1/0/21: IP=fe80::6add:b7ff:fe9c:c163, MAC=68dd-b79c-c163, VLAN=2. Reason: Resources not sufficient.
%Jul 18 09:34:38:378 2024 W3100-5-3 ARP/5/ARP_BINDRULETOHW_FAILED: Failed to download binding rule to hardware on the interface GigabitEthernet1/0/21, SrcIP 192.168.2.5, SrcMAC 68dd-b79c-c164, VLAN 2, Gateway MAC ffff-ffff-ffff.
%Jul 18 09:34:38:378 2024 W3100-5-3 IPSG/6/IPSG_ADDENTRY_ERROR: Failed to add an IP source guard binding on interface GigabitEthernet1/0/21: IP=192.168.2.5, MAC=68dd-b79c-c164, VLAN=2. Reason: Resources not sufficient.
主要配置如下:
dhcp snooping enable
dhcp snooping binding database filename DHCP_BNCZ.DB
dhcp snooping binding database update interval 864000
ipv6 savi strict
ipv6 dhcp snooping enable
ipv6 dhcp snooping binding database filename DHCP6_BNCZ.DB
ipv6 dhcp snooping binding database update interval 864000
vlan 2
ipv6 nd snooping enable global
ipv6 nd snooping enable link-local
ipv6 nd detection enable
arp detection enable
arp restricted-forwarding enable
interface GigabitEthernet1/0/21
port access vlan 2
arp filter source 192.168.2.252
arp filter source 192.168.3.252
arp filter source 192.168.5.252
ip verify source ip-address mac-address
ipv6 verify source ip-address mac-address
loopback-detection enable vlan 1 to 4094
dhcp snooping binding record
ipv6 dhcp snooping binding record
interface GigabitEthernet1/0/22
port access vlan 2
arp filter source 192.168.2.252
arp filter source 192.168.3.252
arp filter source 192.168.5.252
ip verify source ip-address mac-address
ipv6 verify source ip-address mac-address
loopback-detection enable vlan 1 to 4094
dhcp snooping binding record
ipv6 dhcp snooping binding record
(0)
建议对下发的ACL方式进行裁剪
日志说明 | 由于硬件资源不足、内存不足或其他硬件错误导致绑定规则下发失败 |
处理建议 | 1. 使用display qos-acl resource查看硬件ACL资源是否充足 2. 如果充足,则请执行步骤2 3. 如果不充足,则请取消部分ACL配置或接受当前结果 4. 使用display memory查看内存资源是否充足 5. 如果充足,则请执行步骤3 6. 如果不充足,则请取消部分配置或接受当前结果 7. 硬件发生错误,请取消最后一次相关配置,并重新尝试 |
(0)
一代不如一代?我用S5024PV2-EI的时候,随便怎么弄IPSG都不会报资源不足问题,dhcp snooping绑定表项多到300多400个都一点问题都没,到了S5024PV3-EI才上线20来个用户就报端口资源不足?华三真恶心人
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
IPSG绑定表项和acl有什么关系???
也占用acl资源
一代不如一代?我用S5024PV2-EI的时候,随便怎么弄IPSG都不会报资源不足问题,dhcp snooping绑定表项多到300多400个都一点问题都没,到了S5024PV3-EI才上线20来个用户就报端口资源不足?华三真恶心人