做了NQA+TRACK联动,NQA检测失败,但直接去PING114.114.114.114是通的
[ChuKou-Firewall]dis track all
Track ID:
1 State: Negative
Duration: 0 days 0 hours 29 minutes 45 second
s Tracked object type: NQA
Notification delay: Positive 0, Negative 0 (in seconds)
Tracked object:
NQA entry: yidong test
Reaction: 1
Remote IP/URL: 114.114.114.114
Local IP
: -- Interface: --
NQA entry (admin yidong, tag test) test statistics:
NO. : 24
Start time: 2022-11-30 09:39:50.4
Life time: 230 seco
nds Send operation times: 280 Receive response times: 0
Min/Max/Average round trip time: 0/
0/0 Square-Sum of round trip time: 0
Extended results: Packet loss ratio: 1
00% Failures due to timeout: 280
Failures due to internal error: 0
Failures due to other errors: 0
Reaction statisti
cs: Index Checked Element Threshold Type Checked Num Over-threshold Num
1 probe-fail consecutive 280 280
NO. : 23
Start time: 2022-11-30 08:39:50.4
Life time: 3600 seco
nds Send operation times: 4100 Receive response times: 13
Min/Max/Average round trip time: 35/94/40
Square-Sum of round trip time: 24783
Extended results:
Packet loss ratio: 99%
Failures due to timeout: 4087
Failures due to internal error
: 0 Failures due to other errors: 0
Reaction statistics:
Index Checked Element Threshold Type Checked Num Over-threshold Num
1 probe-fail consecutive 4100 4087
[ChuKou-Firewall]ping 114.114.114.114
Ping 114.114.114.114 (114.114.114.114): 56 data bytes, press CTRL_C to break
56 bytes from 114.114.114.114: icmp_seq=0 ttl=89 time=29.979 ms
56 bytes from 114.114.114.114: icmp_seq=1 ttl=78 time=41.989 ms
56 bytes from 114.114.114.114: icmp_seq=2 ttl=76 time=29.928 ms
56 bytes from 114.114.114.114: icmp_seq=3 ttl=65 time=49.783 ms
56 bytes from 114.114.114.114: icmp_seq=4 ttl=87 time=59.160 ms
--- Ping statistics for 114.114.114.114 ---
5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss
round-trip min/avg/max/std-dev = 29.928/42.168/59.160/11.359 ms
电信和移动双线接防火墙,防火墙双路由,移动路由优先级低结合TRACK,当NQA检测失败,切换到电信路由上,但实际移动线路PING和检测是正常的
nqa entry yidong test
type icmp-echo
destination ip 114.114.114.114
frequency 500
0 history-record enable
history-record number 10
next-hop ip 120.x.x.x
probe count 10
probe timeout 500
reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only
nqa schedule yidong test start-time now lifetime forever
ip route-static 0.0.0.0 0 120.x.x.x track 1
ip route-static 0.0.0.0 0 183.x.x.x preference 80
(0)
直接ping的话,走的是183.x.x.x出接口吧,现场的配置移动路由被track失效了
还有可能就是探测间隔frequency 500太快和发送个数probe count 10 太多了,有些情况可能会被服务器禁掉
(0)
修改下探测间隔,排查一下是不是链路不稳定
配置一下下一跳地址
#配置探测报文的下一跳IP地址,这个一般在探测的目的地址不是网关地址的时候建议配置
[H3C-nqa-admin-test-icmp-echo] next-hop 100.0.0.1
(0)
暂无评论
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论