防火墙F1060堆叠配置BFD MAD后CPU负载达67%

最新版的华三模拟器中，两台F1060防火墙配置好堆叠，检查正常后，再配置BDF MAD，一连线CPU负荷就飚升67%，删除连线CPU就恢复正常。除了堆叠和BFD MAD，其它任何配置都没做，也没连接任何其它设备（所以排除环路，用交换机配置也是同样的问题）。

防火墙的配置过程如下：

FW-A堆叠

irf member 1 priority 32

interface range Gi1/0/22 to Gi1/0/23

 shutdown

irf-port 1/2

 port group interface GigabitEthernet1/0/22

 port group interface GigabitEthernet1/0/23

interface range Gi1/0/22 to Gi1/0/23

 undo shutdown

save //保存配置

irf-port-configuration active

FW-B堆叠

irf member 1 renumber 2       //将IRF编号改为2，改完要保存重启

save --> quit --> reboot

interface range Gi2/0/22 to Gi2/0/23

 shutdown

irf-port 2/1

 port group interface GigabitEthernet2/0/22

 port group interface GigabitEthernet2/0/23

interface range Gi2/0/22 to Gi2/0/23

 undo shutdown

save //保存配置

irf-port-configuration active

连接好线，等竞选完毕。

MAD检测

interface GigabitEthernet1/0/1

 port link-mode bridge

interface GigabitEthernet2/0/1

 port link-mode bridge

vlan 4091 //此vlan唯一

 description BFD MAD

 port GigabitEthernet1/0/1 GigabitEthernet2/0/1

interface vlan-interface 4094

 mad bfd enable

 mad ip address 172.16.255.1 255.255.255.252 member 1

 mad ip address 172.16.255.2 255.255.255.252 member 2

interface GigabitEthernet1/0/1

 port link-mode bridge

 undo stp enable

interface GigabitEthernet2/0/1

 port link-mode bridge

 undo stp enable

============================

dis cpu 结果如下：

Slot 1 CPU 0 CPU usage: 

     65% in last 5 seconds 

     64% in last 1 minute 

     65% in last 5 minutes 

 Slot 2 CPU 0 CPU usage: 

     68% in last 5 seconds 

     67% in last 1 minute 

     65% in last 5 minutes 

dis bfd session

 Total Session Num: 1 Up Session Num: 0 Init Mode: Active 

 IPv4 Session Working Under Ctrl Mode: 

 LD/RD SourceAddr DestAddr State Holdtime Interface 

 97/0    172.16.1.1   172.16.1.2 Down 0ms        Vlan4094