Fault Analysis
1.
Run the
display interface
command to check whether GigabitEthernet2/0/0 receives
packets from users.
In the command output, the value of
Input
is not 0 and keeps increasing, indicating that
GigabitEthernet2/0/0 receives packets from users.
2.
Check whether a traffic policy is applied.
Run the
display traffic-policy
policy-name
applied-record
command to check whether a
traffic policy is applied. The command output shows that the traffic policy
tp1
is applied
to GigabitEthernet2/0/0.
3.
Check whether the user packets match the traffic policy.
Run the
statistic enable
command in the traffic behavior view to enable the traffic statistics
function. Run the
display traffic policy statistics interface GigabitEthernet 2/0/0
inbound
command to view statistics about packets matching the traffic policy. The
command output shows that the number of received packets matching the traffic policy is
0, that is, the packets do not match the traffic policy.
4.
Check whether the traffic classifier and the traffic behavior in the traffic policy are correctly
configured.
Run the
display traffic policy
user-defined
command to check whether the traffic behavior
bound to the traffic policy contains the traffic mirroring action.
<Huawei>
display traffic policy user-defined tp1
User Defined Traffic Policy Information:
Policy:
tp1
Classifier: default-class
Behavior: be
-none-
Classifier:
tc1
Behavior:
tb1
statistic: enable
Port-mirroring to observe-port 1
The preceding information indicates that the traffic classifier
tc1
and the traffic behavior
tb1
are bound to the traffic policy, and
tb1
is configured with the traffic mirroring action.
Run the
display traffic classifier
user-defined
command to check whether the
configuration of the traffic classifier is correct. If an ACL is referenced in the traffic
classifier, run the
display acl
command to check the ACL rules.
<Huawei>
display traffic classifier user-defined tc1
User Defined Classifier Information:
Classifier: tc1
Precedence: 10
Operator:
AND
Rule(s) :
if-match acl 3000
if-match inbound-interface GigabitEthernet 1/0/0
<Huawei>
display acl 3000
Advanced ACL 3000, 1 rule
Acl's step is 5
rule 5 permit ip source 10.1.1.0 0.0.0.255
The preceding information indicates that the traffic classifier contains two matching rules:
ACL 3000 and inbound interface GigabitEthernet1/0/0. The logical relationship between
the matching rules is AND, If the rules are ANDed with each other, the packets must match
all the non-ACL rules and one of the ACL rules of the traffic classifier. The inbound
interface of user packets is GigabitEthernet2/0/0 but not GigabitEthernet1/0/0; therefore,
Huawei AR2200-S Series Enterprise Routers
Troubleshooting
2 System
Issue 01 (2012-01-06)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
25
