S6520X-54QC-HI 端口异常down告警信息问题咨询
- 0关注
- 0收藏，61浏览
问题描述：
%Aug 7 08:40:23:260 2026 ITC-C15-U16-Border-Leaf-1 DRVPLAT/4/DRVPLAT_SOFTCAR_DROP:
PktType=ROOT, SrcMAC=001c-54ff-080b, Dropped from interface=Ten-GigabitEthernet1/0/1 at Stage=1, StageCnt=31, TotalCnt=181953, MaxRateInterface=Ten-GigabitEthernet1/0/1.
%Aug 7 08:46:45:696 2026 ITC-C15-U16-Border-Leaf-1 SNMP/6/SNMP_SET: -seqNO=1406-srcIP=10.20.51.33-op=SET-errorIndex=0-errorStatus=noError-node=sysName(1.3.6.1.2.1.1.5.0)-value=ITC-C15-U16-Border-Leaf-1; The agent received a message.
%Aug 7 08:53:19:169 2026 ITC-C15-U16-Border-Leaf-1 CFGMAN/5/CFGMAN_CFGCHANGED: -EventIndex=2579-CommandSource=snmp-COnfigSource=startup-COnfigDestination=running; Configuration changed.
%Aug 7 09:40:33:369 2026 ITC-C15-U16-Border-Leaf-1 DRVPLAT/4/DRVPLAT_SOFTCAR_DROP:
PktType=ROOT, SrcMAC=001c-54ff-080b, Dropped from interface=Ten-GigabitEthernet1/0/1 at Stage=63, StageCnt=6292, TotalCnt=188245, MaxRateInterface=Ten-GigabitEthernet1/0/1.
%Aug 7 10:32:19:928 2026 ITC-C15-U16-Border-Leaf-1 SYSLOG/5/LOGFILE_USAGEHIGH: The usage of log-file flash:/logfile/logfile.log reaches 80%.
%Aug 7 10:40:42:247 2026 ITC-C15-U16-Border-Leaf-1 DRVPLAT/4/DRVPLAT_SOFTCAR_DROP:
PktType=ROOT, SrcMAC=001c-54ff-080b, Dropped from interface=Ten-GigabitEthernet1/0/1 at Stage=63, StageCnt=2965, TotalCnt=191210, MaxRateInterface=Ten-GigabitEthernet1/0/1.
%Aug 7 10:46:46:923 2026 ITC-C15-U16-Border-Leaf-1 SNMP/6/SNMP_SET: -seqNO=1407-srcIP=10.20.51.33-op=SET-errorIndex=0-errorStatus=noError-node=sysName(1.3.6.1.2.1.1.5.0)-value=ITC-C15-U16-Border-Leaf-1; The agent received a message.
%Aug 7 10:53:19:169 2026 ITC-C15-U16-Border-Leaf-1 CFGMAN/5/CFGMAN_CFGCHANGED: -EventIndex=2581-CommandSource=snmp-COnfigSource=startup-COnfigDestination=running; Configuration changed.
%Aug 7 11:00:12:445 2026 ITC-C15-U16-Border-Leaf-1 IFNET/4/IF_LOCAL_FAULT: A local fault alarm occurs on Ten-GigabitEthernet1/0/48.
%Aug 7 11:00:12:458 2026 ITC-C15-U16-Border-Leaf-1 IFNET/3/PHY_UPDOWN: Physical state on the interface Ten-GigabitEthernet1/0/48 changed to down.
%Aug 7 11:00:12:474 2026 ITC-C15-U16-Border-Leaf-1 IFNET/5/LINK_UPDOWN: Line protocol state on the interface Ten-GigabitEthernet1/0/48 changed to down.
%Aug 7 11:00:12:475 2026 ITC-C15-U16-Border-Leaf-1 LAGG/6/LAGG_PORT_DISCARDING_STATE: Member port XGE1/0/48 of RAGG1023 changed to the discarding state.
%Aug 7 11:00:12:486 2026 ITC-C15-U16-Border-Leaf-1 LAGG/6/LAGG_INACTIVE_PHYSTATE: Member port XGE1/0/48 of aggregation group RAGG1023 changed to the inactive state, because the physical or line protocol state of the port was down.
%Aug 7 11:00:31:118 2026 ITC-C15-U16-Border-Leaf-1 IFNET/4/IF_LOS: A LOS alarm occurs on Ten-GigabitEthernet1/0/48.
%Aug 7 11:01:44:723 2026 ITC-C15-U16-Border-Leaf-1 LLDP/5/LLDP_NEIGHBOR_AGE_OUT: Nearest bridge agent neighbor aged out on port Ten-GigabitEthernet1/0/48 (IfIndex 48), neighbor's chassis ID is 8061-6c7a-9723, port ID is Ten-GigabitEthernet1/0/48.
上面是日志，这48口是mlag的keepalive口，更换光模块恢复正常，但是过几个小时又down了
这个1/0/1口的丢包跟1/0/48会有关系吗
排查步骤及命令：
1. 确认端口状态：
display interface Ten-GigabitEthernet 1/0/1
display interface brief
查看端口是否真的Down，以及入方向报文统计是否存在异常增长。
2. 溯源攻击源：
告警中SrcMAC=001c-54ff-080b为源MAC，通过MAC地址表定位接入位置：
display mac-address 001c-54ff-080b
display arp | include 001c-54ff-080b
3. 检查软CAR配置：
查看当前ROOT类型报文的软CAR限速值：
display cpu-protect type 2 // 2对应STP/ROOT类报文，不同版本索引可能有差异，可通过display cpu-protect ?查看
4. 临时缓解：
若确认是合法报文但阈值偏低，可调整软CAR限速（需谨慎，避免冲击CPU）：
system-view
cpu-protect type 2 cir 64 // 单位为kbps，根据实际业务调整
若为非法攻击，可在接入端口配置ACL过滤或配置端口安全、BPDU保护等功能。
5. 收集信息反馈：
若需进一步定位，收集display diagnostic-information日志，联系H3C技术支持分析。
暂无评论
编辑答案
亲~登录后才可以操作哦!
确定你的邮箱还未认证，请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
- 1. 您举报的内容是什么？（请在邮件中列出您举报的内容和链接地址）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
- 3. 是哪家企业？（营业执照，单位登记证明等证件）
- 4. 您与该企业的关系是？（您是企业法人或被授权人，需提供企业委托授权书）
抄袭了我的内容
×
原文链接或出处
诽谤我
×
- 1. 您举报的内容以及侵犯了您什么权益？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论