BGP公网常见问题课件

HUAWEI TECHNOLOGIES CO., LTD.,Page,*,单击此处编辑母版标题样式,Huawei Confidential,英文标题,:32-35pt,颜色,: R153 G0 B0,内部使用字体,:,FrutigerNext LT Medium,外部使用字体,: Arial,中文标题,:30-32pt,颜色,: R153 G0 B0,字体,:,黑体,英文正文,:20-22pt,子目录,(2-5,级,) :18pt,颜色,:,黑色,内部使用字体,:,FrutigerNext LT Regular,外部使用字体,: Arial,中文正文,:18-20pt,子目录,(2-5,级,):18pt,颜色,:,黑色,字体,:,细黑体,配色参考方案：,建议同一页面内不超过四种颜色，以下是组配色方案，同一页面内只选择一组使用。,（仅供参考）,客户或者合作伙伴的标志放在右上角,.,单击此处编辑母版文本样式,第二级,第三级,第四级,第五级,HUAWEI TECHNOLOGIES CO., LTD.,Huawei Confidential,Security Level:,英文标题,:40-47pt,副标题,:26-30pt,字体颜色,:,反白,内部使用字体,:,FrutigerNext LT Medium,外部使用字体,: Arial,中文标题,:35-47pt,字体,:,黑体,副标题,:24-28pt,字体颜色,:,反白,字体,:,细黑体,单击此处编辑母版标题样式,单击此处编辑母版文本样式,第二级,第三级,第四级,第五级,单击此处编辑母版标题样式,单击此处编辑母版文本样式,第二级,第三级,第四级,第五级,英文目录标题,:35-40pt,颜色,: R153 G0 B0,内部使用字体,:,FrutigerNext LT Medium,外部使用字体,: Arial,中文目录标题,:35-40pt,颜色,: R153 G0 B0,字体,:,黑体,英文目录正文,:28-30pt,子目录,(2-5,级,) :20-30pt,颜色,:,黑色,内部使用字体,:,FrutigerNext LT Regular,外部使用字体,: Arial,中文目录正文,:28-30pt,子目录,(2-5,级,):20-30pt,颜色,:,黑色,字体,:,细黑体,Thank You,HUAWEI TECHNOLOGIES CO., LTD.,Page,*,单击此处编辑母版标题样式,Huawei Confidential,英文标题,:32-35pt,颜色,: R153 G0 B0,内部使用字体,:,FrutigerNext LT Medium,外部使用字体,: Arial,中文标题,:30-32pt,颜色,: R153 G0 B0,字体,:,黑体,英文正文,:20-22pt,子目录,(2-5,级,) :18pt,颜色,:,黑色,内部使用字体,:,FrutigerNext LT Regular,外部使用字体,: Arial,中文正文,:18-20pt,子目录,(2-5,级,):18pt,颜色,:,黑色,字体,:,细黑体,配色参考方案：,建议同一页面内不超过四种颜色，以下是,13,组配色方案，同一页面内只选择一组使用。（仅供参考）,客户或者合作伙伴的标志放在右上角,.,单击此处编辑母版文本样式,第二级,第三级,第四级,第五级,HUAWEI TECHNOLOGIES CO., LTD.,Huawei Confidential,Security Level:,英文标题,:40-47pt,副标题,:26-30pt,字体颜色,:,反白,内部使用字体,:,FrutigerNext LT Medium,外部使用字体,: Arial,中文标题,:35-47pt,字体,:,黑体,副标题,:24-28pt,字体颜色,:,反白,字体,:,细黑体,单击此处编辑母版标题样式,单击此处编辑母版文本样式,第二级,第三级,第四级,第五级,单击此处编辑母版标题样式,单击此处编辑母版文本样式,第二级,第三级,第四级,第五级,英文目录标题,:35-40pt,颜色,: R153 G0 B0,内部使用字体,:,FrutigerNext LT Medium,外部使用字体,: Arial,中文目录标题,:35-40pt,颜色,: R153 G0 B0,字体,:,黑体,英文目录正文,:28-30pt,子目录,(2-5,级,) :20-30pt,颜色,:,黑色,内部使用字体,:,FrutigerNext LT Regular,外部使用字体,: Arial,中文目录正文,:28-30pt,子目录,(2-5,级,):20-30pt,颜色,:,黑色,字体,:,细黑体,Thank you,单击此处编辑母版标题样式,单击此处编辑母版文本样式,第二级,第三级,第四级,第五级,英文目录标题,:35-40pt,颜色,: R153 G0 B0,内部使用字体,:,FrutigerNext LT Medium,外部使用字体,: Arial,中文目录标题,:35-40pt,颜色,: R153 G0 B0,字体,:,黑体,英文目录正文,:28-30pt,子目录,(2-5,级,) :20-30pt,颜色,:,黑色,内部使用字体,:,FrutigerNext LT Regular,外部使用字体,: Arial,中文目录正文,:28-30pt,子目录,(2-5,级,):20-30pt,颜色,:,黑色,字体,:,细黑体,Thank you,BGP,公网常见问题,Page,2,BGP,邻居异常的定位思路,Page,3,BGP,邻居无法建立常见问题,BGP,邻居未使能,/,未配置,没有配置,connect-interface,本地被,shutdown,邻居未协商,路由问题,MD5,认证,/TTL,错误,EBGP,邻居没有,ebgp-max-hop,Page,4,BGP,有限状态机,-,Connect,Page,5,Q1,：,BGP,邻居无法建立的可能原因,bgp 12479,group LEVEL1_IPV4 external,peer LEVEL1_IPV4 ignore,/,邻居被,shutdown,peer LEVEL1_IPV4 connect-interface LoopBack0,/,没有配置,connect-interface,peer LEVEL1_IPV4 valid-ttl-hops 2,/valid-ttl-hop,设置错误或未使能,eBGP-max-hop,peer LEVEL1_IPV4 password cipher 8*$OV“C1P$UV=;MD4A!,/MD5,密码不一致,peer 193.149.1.192 as-number 12478,peer 193.149.1.192 group LEVEL1_IPV4,#,ipv4-family unicast,undo synchronization,peer LEVEL1_IPV4 enable,undo peer 193.149.1.192 enable,/BGP,邻居未使能,peer 193.149.1.192 group LEVEL1_IPV4,Page,6,Q2:,本地被,shutdown,RT1-bgpdisplay bgp peer,Local AS number : 12479,Total number of peers : 1 Peers in established state : 0,PeerV ASMsgRcvd MsgSent OutQUp/Down State PrefRcv,193.149.1.1924 12478 0 0 000:03:17,Idle(Admin),0,RT1-bgp,邻居被,shutdown,Page,7,Q3:,邻居未协商,RT1-bgp,display bgp peer,/,本地未在,IPv4,单播上使能,RT1-bgp,RT1-bgp,display bgp,vpnv4,all peer,Local AS number : 12479,Total number of peers : 1 Peers in established state : 0,Peer V AS MsgRcvd MsgSent OutQ Up/Down StatePrefRcv,193.149.1.192 4 12478 0 0 0 00:03:17,Established,0,RT1-bgp,display bgp l2vpn peer,Local AS number : 12479,Total number of peers : 1 Peers in established state : 0,Peer V AS MsgRcvd MsgSent OutQ Up/Down StatePrefRcv,193.149.1.192 4 12478 0 0 0 00:03:17,No neg,0,本地配置了该地址族，但邻居未使能,Page,8,Q4:,路由问题,RT1 display ip routing-table 193.149.1.192,/,没有,IGP,路由,RT1,RT1 display current-configuration interface LoopBack 0,#,interface LoopBack0,#,return,RT1,ping -a,193.149.1.191 193.149.1.192,/,带源地址,ping,不通邻居,PING 193.149.1.192: 56 data bytes, press CTRL_C to break,Request time out,Request time out,Page,9,Q5:MD5,认证,/TTL,错误,TCPCB Tid/Soid Local Add:port Foreign Add:port VPNID State,6ebdab10 135/214 0.0.0.0:179 193.149.1.192:0 0,Listening,*,TCPCB Tid/Soid Local Add:port Foreign Add:port VPNID State,6ebdab10 135/214 0.0.0.0:179 193.149.1.192:0 0 Listening *,55419288 135/17 193.149.1.140:50731 193.149.1.192:179 0,Syn_Sent,*,MD5,认证,TCP,三次握手无法建立,Page,10,判断,BGP,邻居中断原因,RT1,display bgp peer 202.112.146.100,log-info,Date Time State Error Notification,2011/09/21 14:09:51 UTC-08:00 Down 4/0 Send Notification,2011/09/21 14:04:57 UTC-08:00 Up,RT1,日志：,Sep 14 2011 20:50:34 JSXZH-MC-CMNET-RT01-XAL_NE40E %01BGP/6/SEND_NOTIFY(l): The router,sent a NOTIFICATION,message to peer 211.138.205.2. (,ErrorCode=4, SubErrorCode=0, BgpAddressFamily=Public, ErrorData=NULL),邻居发的报文未收到，本地感知错误，通知邻居,断连时间、原因等,Page,11,BGP,五种报文类型,Open,：能力协商,（你好？ ）,Update,：路由更新,/,撤销（保活、增量更新）,KeepAlive,：保活，,19,字节，华为缺省,60,秒；,1/3,个,Hodtimer,；,Refresh,：路由全部重发,Notification,：邻居断连,Page,12,Page,13,BGP报文格式-Notification错误码1,错误码,子错误码,错误说明,1,BGP,报文头错误,1/1,Marker,错误,1/2,报文长度错误,1/3,报文类型错误,2,Open,报文错误,2/1,不支持的版本号（非,BGP4,版本）,2/2,Peer AS,错误,(,与配置不符,),2/3,BGP identify,错误,(,与自己的,id,相同,),2/4,不支持的可选参数,2/5,鉴权失败,2/6,不可接受的,hold time,时间,2/7,不支持的协商能力,(RFC3392),3,UPDATE,报文错误,0,Unspecific（,未使用，不可识别）,3/1,畸形的属性列表,(,报文过大,),3/2,不可识别的公认（,well-known）,属性,3/3,缺少公认属性,3/4,属性标记错误（标记与类型规定不符）,3/5,属性长度错误（长度与类型规定不符）,3/6,无效的起源属性（,ORINGIN）,3/7,AS,号环路,3/8,无效的下一跳（,NEXT-HOP）,属性,3/9,可选属性错误,3/10,无效的网络层信息,3/11,畸形的,AS-PATH,属性,Page,14,BGP报文格式-Notification错误码2,错误码,子错误码,错误说明,Hold Time,超时,4/0,Hold Time,超时,状态机错误,5/0,状态机错误,Cease/,连接终结,6/1,路由前缀超限,6/2,管理员关闭,6/3,邻居重新配置,6/4,管理员重置连接,6/5,拒绝连接,6/6,其他配置变更,6/7,连接冲突,6/8,资源不足,6/9,BFD,通知邻居,down,这两类最常见,Page,15,BGP,状态机故障终极方法,-debug,Page,16,BGP,邻居关系常用命令行总结,display current-configuration configuration bgp/,配置问题占绝大部分,display bgp peer,verbose,/,有,verbose,就尽量用,display bgp vpnv4 all peer,display bgp peer x.x.x.x log-info,Page,17,BGP,公网流量中断的定位思路,Page,18,BGP,公网路由常见问题,BGP,路由没收到，在,BGP,路由表中看不到；,BGP,路由收到，在,BGP,路由表中能看到但因下一跳不活跃,(valid),；,BGP,路由收到，在,BGP,路由表中活跃，但是在,IP,路由表中看不到；,Page,19,Q1,：,BGP,路由没收到？,display bgp rou 62.97.128.0 19,检查配置,1,、相应的,BGP,邻居是否,Established,状态？,display bgp peer,2,、相应的,BGP,邻居是否发送了此路由？,3,、查看的路由掩码是否错误？,display bgp routing-table x.x.x.x,4,、检查对应地址族下的入口,filter,是否被,deny,？,peer x.x.x.x route-policy *,import,peer x.x.x.x ip-prefix *,import,peer x.x.x.x as-path-filter *,import,peer x.x.x.x filter-policy *,import,peer x.x.x.x route-limit *,Page,20,Q2,：,BGP,路由收到，但在,BGP,路由表不活跃？,RT1,display bgp routing-table peer 202.112.146.100 received-routes,Total Number of Routes: 1,Status codes:,* - valid, - best,d - damped,h - history, i - internal, s - suppressed, S - Stale,Origin : i - IGP, e - EGP, ? - incomplete,Network NextHop MED LocPrf PrefVal Path/Ogn,i,RT1display ip routing-table 2.2.2.0 24 verbose/IP,路由表中没有,RT1,BGP,路由不活跃,Page,21,Q2,：,BGP,路由收到，但在,BGP,路由表不活跃？,RT1display ip routing-table verbose/,没有下一跳的路由,RT1display bgp routing-table 2.2.2.0 24,Local AS number : 100,Paths: 1 available,0 best,0 select,BGP routing table entry information of 2.2.2.0/24:,From: 202.112.146.100 (202.112.146.100),Route Duration: 00h05m36s,Relay IP Out-Interface:,Qos information : 0x0,AS-path Nil, origin igp, localpref 150, pref-val 0, internal, pre 255,Not advertised to any peer yet,迭代不到下一跳和出接口,Page,22,Q3,：,BGP,路由活跃，但在,IP,路由表中不活跃？,RT1display bgp routing-table peer 202.112.146.100 received-routes,Total Number of Routes: 1,Status codes: * - valid, - best, d - damped,h - history, i - internal, s - suppressed, S - Stale,Origin : i - IGP, e - EGP, ? - incomplete,Network NextHop MED LocPrf PrefVal Path/Ogn,*i,Route Flags: R - relay, D - download to fib,-,Routing Table : Public,Summary Count : 1,Destination/Mask Proto Pre Cost Flags NextHop Interface,/24,Static,60 0 D 0.0.0.0 NULL0,从邻居已经收到路由并活跃,Page,23,Q3,：,BGP,路由活跃，但在,IP,路由表中不活跃？,Quidway,display ip routing-table 129.1.1.0 24,verbose,Route Flags: R - relay, D - download to fib,-,Routing Table : Public,Summary Count : 2,Protocol:,Static,Process ID: 0,Preference: 60 Cost: 0,State:,Active,Adv Age: 00h00m34s,Tag: 0 Priority: medium,Label: NULL QoSInfo: 0x0,IndirectID: 0x0,RelayNextHop: 0.0.0.0 Interface: NULL0,TunnelID: 0x0 Flags: D,Protocol: BGP Process ID: 0,Preference:,255,Cost: 0,State:,Inactive,Adv Relied Age: 00h01m02s,Tag: 0 Priority: low,Label: NULL QoSInfo: 0x0,IndirectID: 0x2,RelayNextHop: 0.0.0.0 Interface: Ethernet0/0/0,TunnelID: 0x0 Flags: R,Quidway,优先级,preference,BGP,路由不活跃,Page,24,路由表的层级,Page,25,BGP,路由常用命令行总结,BGP,路由表和,IP,路由表详细信息同时查看，注意带掩码,display ip routing-table x.x.x.x x.x.x.x,verbose,/IP,路由详细信息,display bgp routing-table x.x.x.x x.x.x.x,/BGP,路由详细信息,display bgp routing-table statistics /BGP,路由总数,display ip routing-table statistics /IP,路由总数,display bgp routing-table peer x.x.x.x received-routes /,从邻居收到的路由,【,注意,】,display bgp routing-table peer x.x.x.x advertised-routes /,发给邻居的路由,当前版本显示的,BGP,路由属性是本地存储，并非是真正发送给邻居的,Page,26,BGP路由属性-,选路规则（,LAO MEN,老男人）,1,、,Preferred,-value,（大的优先，本地有效，不传递，,Cisco,叫,weight,）,2,、,L,ocal-,Preference,（大的优先）,3,、,A,ggregator Automic-Aggregate,4,、,A,S-Path,5,、,O,rigin,6,、,M,ED,7,、,e,BGPiBGPLocalCrossRemoteCross,8,、,N,ext hop(cost),-,负载分担选择条件,-,9,、,Cluster-List,10,、,Originator-ID(Router ID),11,、,BGP,邻居,IP,地址,Community/Ext-Community,(,缺省不发，需配置命令,peer advertise-community,才发,),Page,27,Local AS number : 100,Paths:,2 available, 1 best, 1 select,BGP routing table entry information of 129.1.1.0/24:,From: 202.112.146.100 (202.112.146.100),Route Duration: 00h09m43s,Relay IP Out-Interface: Ethernet0/0/0,Qos information : 0x0,AS-path Nil, origin igp, localpref 150, pref-val 0, valid, internal, best, select, pre 255,Advertised to such 1 peers:,BGP routing table entry information of 129.1.1.0/24:,Imported route.,From: 0.0.0.0 (0.0.0.0),Route Duration: 00h00m07s,Direct Out-interface: NULL0,Qos information : 0x0,AS-path Nil, origin incomplete, MED 0, pref-val 0, valid, local, pre 60,not preferred for Local_Pref,Not advertised to any peer yet,Q1,：,BGP,路由不被优选？,发给了邻居,不被优选的原因,