防火墙出链路负载问题
- 0关注
- 0收藏，63浏览
问题描述：
防火墙出链路负载拨号口经常切换并且down是什么原因导致的？如何排查？
组网及组网描述：
%Aug 17 06:38:52:393 2026 H3c LB/5/LB_CHANGE_LINK_PROBERESULT: The probe state of link 6口 template 6口 was changed to Failed.
%Aug 17 06:38:52:394 2026 H3c LB/5/LB_CHANGE_LINK_HCSTATUS: The health state of link 6口 was changed to Inactive. Last state was kept for 73213 seconds.
%Aug 17 06:38:52:903 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_PROBERESULT: The probe state of (link group 拨号口,link 6口) template 6口 was changed to Failed.
%Aug 17 06:39:09:153 2026 H3c LB/5/LB_CHANGE_LINK_PROBERESULT: The probe state of link 7口 template 7口 was changed to Failed.
%Aug 17 06:39:09:154 2026 H3c LB/5/LB_CHANGE_LINK_HCSTATUS: The health state of link 7口 was changed to Inactive. Last state was kept for 241183 seconds.
%Aug 17 06:39:09:155 2026 H3c LB/5/LB_CHANGE_LG_STATUS: The number of available links in link group 拨号口 reached the lower percentage (0%).
%Aug 17 06:39:09:156 2026 H3c LB/5/LB_CHANGE_LG_STATE_ACTION: The state of link group associated with action ob$action$#for#rule was changed, primary link group is 拨号口, backup link group is linkgroup, current link group is linkgroup.
%Aug 17 06:39:11:853 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_PROBERESULT: The probe state of (link group 拨号口,link 7口) template 7口 was changed to Failed.
%Aug 17 06:39:14:098 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_PROBERESULT: The probe state of (link group link4,link bank) template xx.xx.xx.xx was changed to Failed.
%Aug 17 06:39:14:098 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_HCSTATUS: The health state of (link group link4,link bank)was changed to Inactive. Last state was kept for 73233 seconds.
%Aug 17 06:39:14:099 2026 H3c LB/5/LB_CHANGE_LG_STATUS: The number of available links in link group link4 reached the lower percentage (0%).
%Aug 17 06:39:14:833 2026 H3c LB/5/LB_CHANGE_LINK_PROBERESULT: The probe state of link xx.xx.xx.xx template xx.xx.xx.xx was changed to Failed.
%Aug 17 06:39:14:834 2026 H3c LB/5/LB_CHANGE_LINK_HCSTATUS: The health state of link xx.xx.xx.xx was changed to Inactive. Last state was kept for 73233 seconds.
%Aug 17 06:39:14:835 2026 H3c LB/5/LB_CHANGE_LG_STATUS: The number of available links in link group linkgroup reached the lower percentage (0%).
%Aug 17 06:39:17:293 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_PROBERESULT: The probe state of (link group linkgroup,link xx.xx.xx.xx) template xx.xx.xx.xx was changed to Failed.
%Aug 17 06:39:30:560 2026 H3c IFNET/5/LINK_UPDOWN: Line protocol state on the interface Virtual-Access2 changed to down.
%Aug 17 06:39:30:570 2026 H3c IFNET/5/LINK_UPDOWN: Line protocol state on the interface Dialer0 changed to down.
%Aug 17 06:39:30:571 2026 H3c IFNET/3/PHY_UPDOWN: Physical state on the interface Virtual-Access2 changed to down.
%Aug 17 06:39:49:960 2026 H3c IFNET/5/LINK_UPDOWN: Line protocol state on the interface Virtual-Access0 changed to down.
%Aug 17 06:39:49:972 2026 H3c IFNET/5/LINK_UPDOWN: Line protocol state on the interface Dialer1 changed to down.
%Aug 17 06:39:49:973 2026 H3c IFNET/3/PHY_UPDOWN: Physical state on the interface Virtual-Access0 changed to down.
%Aug 17 06:40:36:836 2026 H3c LB/5/LB_CHANGE_LINK_PROBERESULT: The probe state of link xx.xx.xx.xx template xx.xx.xx.xx was changed to Successful.
%Aug 17 06:40:36:837 2026 H3c LB/5/LB_CHANGE_LINK_HCSTATUS: The health state of link xx.xx.xx.xx was changed to Active. Last state was kept for 82 seconds.
%Aug 17 06:40:36:837 2026 H3c LB/5/LB_LINK_STATE_ACTIVE: The state of link xx.xx.xx.xx is active.
%Aug 17 06:40:39:292 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_PROBERESULT: The probe state of (link group linkgroup,link xx.xx.xx.xx) template xx.xx.xx.xx was changed to Successful.
%Aug 17 06:40:39:293 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_HCSTATUS: The health state of (link group linkgroup,link xx.xx.xx.xx)was changed to Active. Last state was kept for 73315 seconds.
%Aug 17 06:40:39:294 2026 H3c LB/5/LB_CHANGE_LG_STATUS: The number of available links in link group linkgroup reached the upper percentage (0%).
%Aug 17 06:40:41:092 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_PROBERESULT: The probe state of (link group link4,link bank) template xx.xx.xx.xx was changed to Successful.
%Aug 17 06:40:41:093 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_HCSTATUS: The health state of (link group link4,link bank)was changed to Active. Last state was kept for 87 seconds.
%Aug 17 06:40:41:094 2026 H3c LB/5/LB_CHANGE_LG_STATUS: The number of available links in link group link4 reached the upper percentage (0%).
%Aug 17 06:40:41:871 2026 H3c IFNET/3/PHY_UPDOWN: Physical state on the interface Virtual-Access0 changed to up.
%Aug 17 06:40:45:039 2026 H3c IFNET/5/LINK_UPDOWN: Line protocol state on the interface Virtual-Access0 changed to up.
%Aug 17 06:40:48:542 2026 H3c IFNET/5/LINK_UPDOWN: Line protocol state on the interface Dialer0 changed to up.
%Aug 17 06:40:59:406 2026 H3c LB/5/LB_CHANGE_LINK_PROBERESULT: The probe state of link 6口 template 6口 was changed to Successful.
%Aug 17 06:40:59:406 2026 H3c LB/5/LB_CHANGE_LINK_HCSTATUS: The health state of link 6口 was changed to Active. Last state was kept for 127 seconds.
%Aug 17 06:40:59:406 2026 H3c LB/5/LB_LINK_STATE_ACTIVE: The state of link 6口 is active.
%Aug 17 06:40:59:915 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_PROBERESULT: The probe state of (link group 拨号口,link 6口) template 6口 was changed to Successful.
%Aug 17 06:40:59:915 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_HCSTATUS: The health state of (link group 拨号口,link 6口)was changed to Active. Last state was kept for 73340 seconds.
%Aug 17 06:40:59:916 2026 H3c LB/5/LB_CHANGE_LG_STATUS: The number of available links in link group 拨号口 reached the upper percentage (0%).
%Aug 17 06:40:59:918 2026 H3c LB/5/LB_CHANGE_LG_STATE_ACTION: The state of link group associated with action ob$action$#for#rule was changed, primary link group is 拨号口, backup link group is linkgroup, current link group is 拨号口.
%Aug 17 06:41:02:288 2026 H3c IFNET/3/PHY_UPDOWN: Physical state on the interface Virtual-Access2 changed to up.
%Aug 17 06:41:05:536 2026 H3c IFNET/5/LINK_UPDOWN: Line protocol state on the interface Virtual-Access2 changed to up.
%Aug 17 06:41:09:040 2026 H3c IFNET/5/LINK_UPDOWN: Line protocol state on the interface Dialer1 changed to up.
%Aug 17 06:41:21:154 2026 H3c LB/5/LB_CHANGE_LINK_PROBERESULT: The probe state of link 7口 template 7口 was changed to Successful.
%Aug 17 06:41:21:154 2026 H3c LB/5/LB_CHANGE_LINK_HCSTATUS: The health state of link 7口 was changed to Active. Last state was kept for 132 seconds.
%Aug 17 06:41:21:154 2026 H3c LB/5/LB_LINK_STATE_ACTIVE: The state of link 7口 is active.
%Aug 17 06:41:23:854 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_PROBERESULT: The probe state of (link group 拨号口,link 7口) template 7口 was changed to Successful.
%Aug 17 06:41:23:855 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_HCSTATUS: The health state of (link group 拨号口,link 7口)was changed to Active. Last state was kept for 241318 seconds.
%Aug 17 08:44:27:293 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_PROBERESULT: The probe state of (link group linkgroup,link xx.xx.xx.xx) template xx.xx.xx.xx was changed to Failed.
%Aug 17 08:44:27:294 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_HCSTATUS: The health state of (link group linkgroup,link xx.xx.xx.xx)was changed to Inactive. Last state was kept for 7428 seconds.
%Aug 17 08:44:27:295 2026 H3c LB/5/LB_CHANGE_LG_STATUS: The number of available links in link group linkgroup reached the lower percentage (0%).
%Aug 17 08:44:27:913 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_PROBERESULT: The probe state of (link group 拨号口,link 6口) template 6口 was changed to Failed.
%Aug 17 08:44:27:914 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_HCSTATUS: The health state of (link group 拨号口,link 6口)was changed to Inactive. Last state was kept for 7408 seconds.
%Aug 17 08:44:29:093 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_PROBERESULT: The probe state of (link group link4,link bank) template xx.xx.xx.xx was changed to Failed.
%Aug 17 08:44:29:094 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_HCSTATUS: The health state of (link group link4,link bank)was changed to Inactive. Last state was kept for 7428 seconds.
%Aug 17 08:44:29:095 2026 H3c LB/5/LB_CHANGE_LG_STATUS: The number of available links in link group link4 reached the lower percentage (0%).
%Aug 17 08:44:29:833 2026 H3c LB/5/LB_CHANGE_LINK_PROBERESULT: The probe state of link xx.xx.xx.xx template xx.xx.xx.xx was changed to Failed.
%Aug 17 08:44:29:834 2026 H3c LB/5/LB_CHANGE_LINK_HCSTATUS: The health state of link xx.xx.xx.xx was changed to Inactive. Last state was kept for 7433 seconds.
%Aug 17 08:44:32:403 2026 H3c LB/5/LB_CHANGE_LINK_PROBERESULT: The probe state of link 6口 template 6口 was changed to Failed.
%Aug 17 08:44:32:404 2026 H3c LB/5/LB_CHANGE_LINK_HCSTATUS: The health state of link 6口 was changed to Inactive. Last state was kept for 7413 seconds.
%Aug 17 08:44:59:153 2026 H3c LB/5/LB_CHANGE_LINK_PROBERESULT: The probe state of link 7口 template 7口 was changed to Failed.
%Aug 17 08:44:59:154 2026 H3c LB/5/LB_CHANGE_LINK_HCSTATUS: The health state of link 7口 was changed to Inactive. Last state was kept for 7418 seconds.
%Aug 17 08:44:59:155 2026 H3c LB/5/LB_CHANGE_LG_STATUS: The number of available links in link group 拨号口 reached the lower percentage (0%).
%Aug 17 08:44:59:156 2026 H3c LB/5/LB_CHANGE_LG_STATE_ACTION: The state of link group associated with action ob$action$#for#rule was changed, primary link group is 拨号口, backup link group is linkgroup, current link group is linkgroup.
%Aug 17 08:45:07:560 2026 H3c IFNET/5/LINK_UPDOWN: Line protocol state on the interface Virtual-Access0 changed to down.
%Aug 17 08:45:07:568 2026 H3c IFNET/3/PHY_UPDOWN: Physical state on the interface Virtual-Access0 changed to down.
%Aug 17 08:45:07:570 2026 H3c IFNET/5/LINK_UPDOWN: Line protocol state on the interface Dialer0 changed to down.
%Aug 17 08:45:11:154 2026 H3c LB/5/LB_CHANGE_LINK_PROBERESULT: The probe state of link 7口 template 7口 was changed to Successful.
%Aug 17 08:45:11:155 2026 H3c LB/5/LB_CHANGE_LINK_HCSTATUS: The health state of link 7口 was changed to Active. Last state was kept for 12 seconds.
%Aug 17 08:45:11:155 2026 H3c LB/5/LB_LINK_STATE_ACTIVE: The state of link 7口 is active.
%Aug 17 08:45:11:155 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_HCSTATUS: The health state of (link group 拨号口,link 7口)was changed to Active. Last state was kept for 7427 seconds.
%Aug 17 08:45:11:156 2026 H3c LB/5/LB_CHANGE_LG_STATUS: The number of available links in link group 拨号口 reached the upper percentage (0%).
%Aug 17 08:45:11:157 2026 H3c LB/5/LB_CHANGE_LG_STATE_ACTION: The state of link group associated with action ob$action$#for#rule was changed, primary link group is 拨号口, backup link group is linkgroup, current link group is 拨号口.
%Aug 17 08:45:12:869 2026 H3c IFNET/3/PHY_UPDOWN: Physical state on the interface Virtual-Access0 changed to up.
%Aug 17 08:45:16:005 2026 H3c IFNET/5/LINK_UPDOWN: Line protocol state on the interface Virtual-Access0 changed to up.
%Aug 17 08:45:19:009 2026 H3c IFNET/5/LINK_UPDOWN: Line protocol state on the interface Dialer0 changed to up.
%Aug 17 08:45:21:083 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_PROBERESULT: The probe state of (link group link4,link bank) template xx.xx.xx.xx was changed to Successful.
%Aug 17 08:45:21:083 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_HCSTATUS: The health state of (link group link4,link bank)was changed to Active. Last state was kept for 52 seconds.
%Aug 17 08:45:21:084 2026 H3c LB/5/LB_CHANGE_LG_STATUS: The number of available links in link group link4 reached the upper percentage (0%).
%Aug 17 08:45:21:822 2026 H3c LB/5/LB_CHANGE_LINK_PROBERESULT: The probe state of link xx.xx.xx.xx template xx.xx.xx.xx was changed to Successful.
%Aug 17 08:45:21:823 2026 H3c LB/5/LB_CHANGE_LINK_HCSTATUS: The health state of link xx.xx.xx.xx was changed to Active. Last state was kept for 52 seconds.
%Aug 17 08:45:21:823 2026 H3c LB/5/LB_LINK_STATE_ACTIVE: The state of link xx.xx.xx.xx is active.
%Aug 17 08:45:24:282 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_PROBERESULT: The probe state of (link group linkgroup,link xx.xx.xx.xx) template xx.xx.xx.xx was changed to Successful.
%Aug 17 08:45:24:283 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_HCSTATUS: The health state of (link group linkgroup,link xx.xx.xx.xx)was changed to Active. Last state was kept for 57 seconds.
%Aug 17 08:45:24:284 2026 H3c LB/5/LB_CHANGE_LG_STATUS: The number of available links in link group linkgroup reached the upper percentage (0%).
%Aug 17 08:45:29:420 2026 H3c LB/5/LB_CHANGE_LINK_PROBERESULT: The probe state of link 6口 template 6口 was changed to Successful.
%Aug 17 08:45:29:421 2026 H3c LB/5/LB_CHANGE_LINK_HCSTATUS: The health state of link 6口 was changed to Active. Last state was kept for 57 seconds.
%Aug 17 08:45:29:421 2026 H3c LB/5/LB_LINK_STATE_ACTIVE: The state of link 6口 is active.
%Aug 17 08:45:29:924 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_PROBERESULT: The probe state of (link group 拨号口,link 6口) template 6口 was changed to Successful.
%Aug 17 08:45:29:925 2026 H3c LB/5/LB_CHANGE_LINKQUOTE_HCSTATUS: The health state of (link group 拨号口,link 6口)was changed to Active. Last state was kept for 62 seconds.
核心是链路健康检测失败，导致链路被标记为Inactive、拨号口切换/down，常见诱因：
1. 物理链路不稳定（光衰大、网线/光模块故障、运营商线路闪断）
2. 拨号链路本身质量差（PPP协商超时、运营商BRAS侧抖动）
3. 健康检测参数配置不合理（探测间隔太短、失败次数阈值太低，误判链路故障）
4. 防火墙CPU/带宽拥塞，导致健康探测报文被丢弃
5. 探测目标（公网IP/域名）本身不稳定或路由不可达
排查步骤&命令
1. 查看链路健康检测配置与状态
display loadbalance link // 查看所有链路状态、健康检测配置
display loadbalance link probe history // 查看探测失败历史记录
确认探测方式（ICMP/TCP/HTTP）、探测目标、间隔/失败次数阈值是否合理。
2. 排查物理/拨号链路本身稳定性
display interface Dialer // 查看拨号口物理/协议状态、丢包/错包
display interface 物理口（如G0/0） // 查看物理口光功率、错包、CRC
display ppp session // 查看PPP会话协商状态、掉线原因
若物理口有大量CRC/光功率异常，先排查光模块/光纤/运营商线路。
3. 验证探测目标连通性
从对应出接口ping/长ping探测目标，看是否丢包：
ping -a 出接口IP 探测目标IP -c 100
若丢包，换公网稳定探测地址（如114.114.114.114）测试，排除探测目标本身问题。
4. 检查设备资源与配置合理性
display cpu-usage // 看CPU是否持续高负载
display qos queue-statistics interface 出接口 // 看出接口是否拥塞丢包
若探测参数过严，可调整：比如将探测间隔从1s改3s，失败次数从3次改5次。
5. 抓包确认探测报文交互
在出接口抓包，看健康探测报文是否正常收发，定位是未发出、对端不回还是中间丢弃。
日志核心
多条 PPPoE 拨号真实 PPP 会话批量断开（Dialer/Virtual‑Access 协议 down，物理 up），LB 探测随之全部失败，链路组来回主备切换，之后自动重拨恢复。
故障顺序
PPPoE 会话断开 → LB 探测失败标记链路不可用 → 切备份链路；拨号重连成功 → 探测恢复 → 切回主链路。
最可能根因
运营商 BRAS / 光猫问题，批量踢掉 PPPoE 会话（概率最高）
LB 探测配置缺陷：拨号链路没指定 source‑interface DialerX、探测参数太灵敏，加剧抖动
次要：设备 CPU / 会话表满、二层环路风暴、版本 bug
排查要点
看 PPP 断开是对端拆除还是本端原因；关闭 LB 探测，观察拨号口是否还 down，区分根因
拨号链路 LB 探测模板必须绑定对应 Dialer 源接口，调大探测间隔、重试、hold‑time
Dialer 配置dialer timer idle 0，监控 CPU、会话、上联接口错包
关键判断
如果关掉 LB 探测，拨号口依旧 down → 故障和负载均衡无关，问题在 PPPoE 拨号链路本身。
暂无评论
编辑答案
亲~登录后才可以操作哦!
确定你的邮箱还未认证，请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
- 1. 您举报的内容是什么？（请在邮件中列出您举报的内容和链接地址）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
- 3. 是哪家企业？（营业执照，单位登记证明等证件）
- 4. 您与该企业的关系是？（您是企业法人或被授权人，需提供企业委托授权书）
抄袭了我的内容
×
原文链接或出处
诽谤我
×
- 1. 您举报的内容以及侵犯了您什么权益？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论