过S7500X主核心二层不通的问题案例

服务器192.168.8.3——（1/7/0/17口连主设备，2/7/0/17口连备设备）7506X堆叠作为核心，虚地址vlan103的192.168.8.254（上行口BAGG101）——连汇聚的BAAG1口，vlan103的地址192.168.8.253。

服务器连主设备的1/7/0/17口业务不通，切换到备机的2/7/0/17口后业务能通   

1、192.168.8.253 ping 192.168.8.252，设备上是二层转发，入口是Bagg101，出口是g1/7/0/11：

[GQ-IDC-CORE-IRF]dis arp 192.168.8.253

  Type: S-Static   D-Dynamic   O-Openflow   R-Rule   M-Multiport  I-Invalid

IP address      MAC address    VLAN/VSI name Interface                Aging Type

192.168.8.253   f010-90b5-bdb9 103           BAGG101                  841   D  

[GQ-IDC-CORE-IRF]dis arp 192.168.8.252

  Type: S-Static   D-Dynamic   O-Openflow   R-Rule   M-Multiport  I-Invalid

IP address      MAC address    VLAN/VSI name Interface                Aging Type

192.168.8.252   28ee-5214-bc7c 103           GE1/7/0/11               1159  D  

 2、流统报文从te1/0/0/18进来，但没有正常从g1/7/0/11出去，配置全局出方向流统，也没有从别的口出去：

#

acl number 3999

rule 0 permit icmp source 192.168.8.253 0 destination 192.168.8.252 0

#

[GQ-IDC-CORE-IRF]dis qos policy int Ten-GigabitEthernet 1/0/0/18

Interface: Ten-GigabitEthernet1/0/0/18

  Direction: Inbound

  Policy: lt

   Classifier: lt

     Operator: AND

     Rule(s) :

      If-match acl 3999

     Behavior: lt

      Accounting enable:

        32 (Packets)

        0 (pps)

[GQ-IDC-CORE-IRF-acl-ipv4-adv-3999]dis qos policy interface

Interface: GigabitEthernet1/7/0/11

  Direction: Outbound

  Policy: lt

   Classifier: lt

     Operator: AND

     Rule(s) :

      If-match acl 3999

     Behavior: lt

      Accounting enable:

       0 (Packets)

        0 (pps)

3、设备是二层转发，检查mac表项正常，将报文镜像到cpu，报文封装也正常：

*Sep 14 16:02:40:280 2021 GQ-IDC-CORE-IRF DRVPLAT/7/RxTxDebug: -MDC=1-Chassis=1-Slot=0;

From board 0: received packet from chip0,port18,reason=0x0,cos=2,sMod=0,sPort=18,len=102,Matched=0,time=-6,src_vp=-1

*Sep 14 16:02:40:280 2021 GQ-IDC-CORE-IRF DRVPLAT/7/RxTxDebug: -MDC=1-Chassis=1-Slot=0;

 -----------------------------------------------------

0000  28 ee 52 14 bc 7c f0 10 90 b5 bd b9 81 00 00 67

 0010  08 00 45 00 00 54 de 85 00 00 ff 01 49 d9 c0 a8

 0020  08 fd c0 a8 08 fc 08 00 4e 98 91 49 00 ee 61 40

 0030  57 20 00 05 73 c7 08 09 0a 0b 0c 0d 0e 0f 10 11

 0040  12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21

 0050  22 23 24 25 26 27 28 29 2a 2b 2c 2d 2e 2f 30 31

 0060  32 33 34 35 36 37

 -----------------------------------------------------

 4、报文是框内跨板转发，需要经过主控，进一步内部HG口流统：

[GQ-IDC-CORE-IRF-probe]dis devm hgport ch 1 sl 0 ch 1 sl 3

(unit, port)   (unit port)

(0   , 26  )   (0   , 16  )

(0   , 28  )   (0   , 21  )

1/0接口板有从内部28口发给1/3主控：

[GQ-IDC-CORE-IRF-probe]debug qacl show packet pattern ch 1 sl 0 c 0  28 o

========

Acl-Type Statistics based PktPattern, Stage EFP, Pipe 0, SinglePort, Installed, Active

Prio Mjr/Sub 256/7, Group 10 [10], Slice/Idx 1/3, Entry 304, Single: 515

Rule Match --------

        Out Port: 28

        Source IP: 192.168.8.253, 255.255.255.255

        Dest IP: 192.168.8.252, 255.255.255.255

Actions --------

        Account mode  packets,  green and non-green

Accounting: Hi 21, LO 0

1/3主控对应21口有收到报文，但没有送到1/7槽位，报文确认是在1/3主控丢弃:

[GQ-IDC-CORE-IRF-probe]debug qacl show packet pattern ch 1 sl 3 ch 0 21 in

========

Acl-Type Statistics based PktPattern, Stage IFP, Pipe 0, SinglePort, Installed, Active

Prio Mjr/Sub 512/7, Group 6 [6], Slice/Idx 2/0, Entry 6, Single: 512

Rule Match --------

        Ports: 0x200000; 0x3fc03d

        Source IP: 192.168.8.253, 255.255.255.255

        Dest IP: 192.168.8.252, 255.255.255.255

Actions --------

        Account mode  packets,  green and non-green

Accounting: Hi 7, LO 0

[GQ-IDC-CORE-IRF-probe]dis devm hgport ch 1 sl 3 ch 1 sl 7

(unit, port)   (unit port)

(0   , 14  )   (0   , 55  )

连到1/7槽位的14口没有出去的计数：

[GQ-IDC-CORE-IRF-probe]debug qacl show packet pattern ch 1 sl 3 ch 0 14 o

========

Acl-Type Statistics based PktPattern, Stage EFP, Pipe 0, SinglePort, Installed, Active

Prio Mjr/Sub 256/7, Group 3 [3], Slice/Idx 0/0, Entry 7, Single: 0

Rule Match --------

        Out Port: 14

        Source IP: 192.168.8.253, 255.255.255.255

        Dest IP: 192.168.8.252, 255.255.255.255

Actions --------

        Account mode  packets,  green and non-green

Accounting: Hi 0, LO 0

5、进一步检查1/3主控的转发表项，未发现异常，设置表项都正常：

[GQ-IDC-CORE-IRF-probe]bcm ch 1 sl 3 ch 0 d/modport_map_sw/14/2

MODPORT_MAP_SW.ipipe0[14]: <HIGIG_TRUNK_OVERRIDE=0,HIGIG_PORT_BITMAP=0x000000000000004000,EVEN_PARITY=0>

MODPORT_MAP_SW.ipipe0[15]: <HIGIG_TRUNK_OVERRIDE=0,HIGIG_PORT_BITMAP=0x000000000000004000,EVEN_PARITY=0>

 6、经了解现网设备没有接地，设备一定要正常接地，以前有局点出现过设备没有正常接地，导致出现类似的这种奇怪的丢包问题。

设备正常接地后整框重启，故障恢复。