Evgen_ Posted January 29, 2024 Posted January 29, 2024 (edited) Доброго здравия товарищи профессионалы и знатоки ZXAN product C320 of ZTE Corporation Столкнулся с такой проблемой, закупили ZXAN C320 для замены ELTEX LTP 4X, и появилась проблема Есть Микротик в роли маршрутизатора, на нем 225 vlan MGMT 500 vlan PPPoE От него OLT ZXAN C320 На ZXAN C320 225 vlan MGMT 500 vlan PPPoE подается ONU ZTE-F601 eth_0/1 mode tag vlan 500 Проблема в том, что Микрот периодически ловит петлю, mac vlan 225 MGMT появляется в vlan 500 PPPoE И микрот гасит vlan 500 на котором все абоненты И mac MGMT появляется на ONU абонента В логах при этом о данной ONU нет информации Скрин с ZTE мак MGMT на ONU абонента Небольшая схема подключения с скринами проблемы Текстовый файл краткой конфигурации Прошу помощи в разборе проблемы и ее устранении, на форумах ничего не нашел timestamp_write: 13:48:44 01/29/2024 config-version 2.1 ! crtv disable ! load-balance enable ! operator-mode NORMAL ! system-forwarding-mode normal-mode ! ! ! set-pnp enable add-rack rackno 1 racktype C320Rack add-shelf rackno 1 shelfno 1 shelftype C320_SHELF add-card rackno 1 shelfno 1 slotno 1 GTGO add-card rackno 1 shelfno 1 slotno 3 PRAM add-subcard rackno 1 shelfno 1 slotno 4 subcardno 1 UCDC/1 ! ip tcp finwait-time 600 ip tcp queuemax 5 ip tcp synwait-time 30 ip tcp window-size 2144 ! urpf log off ! fan card-critical-protect disable ! ! ! ! mac aging-time 300 mac monitor-period 10 mac usage-threshold 70 ! eth-switch max-frame-length 1600 port diaglog status-info disable ! sdisk disable ! auto-update backup disable auto-update activate disable ! ! ! ! ! gpon profile tcont DBA_1000MB type 4 maximum 1024000 profile traffic 100M sir 1000000 pir 1000000 ! ! gpon ! ! epon ! ! pon onu-type ELTEX-NTU1 gpon description ELTEX-NTU1 onu-type-if ELTEX-NTU1 eth_0/1 uncfg-onu-display-info model sn pw onu-profile gpon line INETDefault fec upstream tcont 1 name InetD profile DBA_1000MB gemport 1 name InetD tcont 1 ! pon onu-profile gpon line LP_ONU-1G fec upstream ! pon onu-profile gpon remote INETV500 service INTERNET gemport 1 cos 0 vlan 500 loop-detect ethuni eth_0/1 enable vlan port eth_0/1 mode tag vlan 500 ! pon onu-profile gpon remote INETV500trunk service INTERNET gemport 1 cos 0 vlan 500 service MGMT gemport 2 cos 0 vlan 225 loop-detect ethuni eth_0/1 enable vlan port eth_0/1 mode trunk vlan port eth_0/1 vlan 225,500 ! pon ! ! onu-pnp ! no vlan-reserve 4091 out-voip no vlan-reserve 4092 in-voip no vlan-reserve 4094 gpon ! vlan database vlan 1,225,500 ! vlan 225 name MGMT ! vlan 500 name PPPoE ! ! ! his-performance sample enable his-performance alarm enable his-performance auto-upload disable ! ! clock ! ! ! clock ! ! ! ptp ! ! ip dhcp snooping control-port enable port-identification access-node-id-type inband-mac port-identification rackno 1 frameno 1 ! igmp enable mld disable mib-compatibility iftable v1 ! ip-source-guard disable ipv6 nd snooping disable ! loopback-detection enable loopback-detection port-control enable loopback-detection auto-recheck interval 60 ! security port-protect enable ! ! ! virtual-mac flexible-syntax-profile MT add Ctrl-Byte 0 width 6 index 6 exit virtual-mac access-node-id 0 ! epm mode passthrough ! ! ! interface mng1 ip address 6.6.6.6 255.255.255.0 config-filename startrun.dat negotiation auto tag-mode untag ! interface vlan 225 ip address 172.22.32.1 255.255.255.0 ! interface null1 ! interface gpon-olt_1/1/1 no shutdown linktrap enable onu 1 type ZTE-F601 sn ZTEGC6EF57D3 loopback-detection enable loopback-detection active-detect vlan 500 ! interface gpon-onu_1/1/1:1 service-port 1 vport 1 user-vlan 500 vlan 500 ! interface gei_1/4/1 no shutdown hybrid-attribute fiber negotiation auto flowcontrol disable linktrap enable switchport mode trunk switchport vlan 1,225,500 tag port-protect disable uplink-isolate disable ! interface gei_1/4/2 shutdown hybrid-attribute fiber negotiation auto flowcontrol disable linktrap enable switchport mode trunk switchport vlan 1 tag port-protect disable uplink-isolate disable ! interface gei_1/4/3 no shutdown hybrid-attribute copper negotiation auto flowcontrol disable linktrap enable switchport mode trunk switchport vlan 1,225,500 tag port-protect disable uplink-isolate disable ! ! mpls ldp dynamic-capability ! ! ! ! ! ! ! ip route 0.0.0.0 0.0.0.0 172.22.32.254 ! lldp enable lldp enable interface gei_1/4/1 ! ipoa inatmarp-interval 10 ipoa gateway-arp-interval 10 ! mpnat trans-table aging-time 60 mpnat onu-telnet idle-time 3 mpnat onu-ftp aging-time 5 mpnat onu-snmp aging-time 30 mpnat onu-ftp-data aging-time 5 mpnat onu-mng-port auto-alloc disable mpnat modem-telnet idle-time 3 ! pon ! ! pon-onu-mng gpon-onu_1/1/1:1 ! ! pon ! ! mac vpn ec1d.7f0b.73c8 ! ! ! auto-write disable ! inband-management enable ! username user-suspend mode none ! username high-level-security disable username inactivity-day 120 username pwd-expire-day 90 ! version V4.8.35 ! hostname OLT1 ! enable secret level 15 5 ! service password-encryption ! ! username enable password 7 username enable password 7 username enable enable username login-range name enable login-begin 00:00:00 login-end 23:59:59 username expire-date name enable datetime 12-31-2099 23:59:59 username password-changed name enable is-changed false username manager password 7 == privilege 15 first-login t rue username manager password 7 == max-sessions 16 username manager enable username login-range name manager login-begin 00:00:00 login-end 23:59:59 username expire-date name manager datetime 12-31-2099 23:59:59 username password-changed name manager is-changed false ! ! ! user-authentication-type local user-authorization-type local ! help message full ! clock timezone IRKT 8 0 ! banner incoming @ ************************************************************************* Welcome to ZXAN product C320 of ZTE Corporation ************************************************************************* @ ! message-of-day @ @ ! ! service timestamps log datetime localtime service timestamps debug datetime localtime ! ! ! ! snmp-server location No.889 BiBo Rd.PuDong District, Shanghai, China snmp-server contact +86-21-68895000 snmp-server packetsize 8192 snmp-server engine-id mode mac snmp-server group GroupPriv15 v3 priv read AllView write AllView snmp-server group GroupPriv10 v3 priv read AllView write ViewPriv10 snmp-server group GroupPriv5 v3 priv read AllView write ViewPriv5 snmp-server group GroupPriv0 v3 priv read AllView snmp-server community public view AllView rw snmp-server community view AllView ro snmp-server view AllView 1.2 included snmp-server view AllView 1.3 included snmp-server view ViewPriv5 1.2 included snmp-server view ViewPriv5 1.3 included snmp-server view ViewPriv5 1.3.6.1.4.1.3902.1082.10.1 excluded snmp-server view ViewPriv5 1.3.6.1.4.1.3902.1082.10.10 excluded snmp-server view ViewPriv5 1.3.6.1.4.1.3902.1082.20.1 excluded snmp-server view ViewPriv5 1.3.6.1.4.1.3902.1082.20.10 excluded snmp-server view ViewPriv10 1.2 included snmp-server view ViewPriv10 1.3 included snmp-server view ViewPriv10 1.3.6.1.4.1.3902.1082.20.10 excluded ! ! no ftp-server enable listen 21 ftp-server top-directory /flash/ ! ntp server 172.24.2.254 priority 1 ntp server 172.22.202.254 priority 2 ntp enable ntp client ! logging alarmlog enable logging exc-event auto-write enable logging level notification logging cmdlog enable logging snmplog disable logging igmplog disable syslog facility local0 syslog severity 6 syslog hostname-field hostname line console idle-timeout 15 line console absolute-timeout 1440 line telnet idle-timeout 15 line telnet absolute-timeout 1440 line telnet users 16 line cli detail-info-show disable no hotkey ctrl_g no hotkey ctrl_l no hotkey ctrl_o no hotkey ctrl_r no hotkey ctrl_s no hotkey ctrl_t ! ssh server enable ssh server authentication mode local ssh server authentication type pap no ssh server only ssh server version 2 ! ! radius attribute vendor-specific vendor-id 3902 ! ! ! radius server-port-check on ! ! tacacs disable tacacs-server timeout 5 tacacs-server deadtime 5 tacacs-server packet 1024 ! ! alarm enable alarm confirm alarm trap-confirm retry 3 timeout 20 nms-hello-trap disable alarm report-speed 0 alarm anti-jitter 0 ! end Edited February 1, 2024 by Evgen_ Вставить ник Quote
seregaelcin Posted January 29, 2024 Posted January 29, 2024 Петля значит где-то за какой-то онт. Вот так будет в логах show logging alarmlog An alarm 38146 level warning occurred at 11:22:01 Tue Jul 30 2019 plus4 cleared at 11:22:08 Tue Jul 30 2019 plus4 %s Loopdetect alarm msg when shelf 1, slot 1, port 1, onu 1, vport 2 is loopback and shut down Можно еще накинуть (config)#security mac-move-report enable (config)#security mac-anti-spoofing disable А потом посмотреть что пишет в security mac-move-report Не уверен особо на счет loop-detect ethuni eth_0/1 enable Сразу не прочитал до конца - выясняйте почему на 1/1/4:12 петля, что тут думать то. Положите административно vport 1 на этой онт просто. Абон собрал кольцо у себя, либо это онт гребет. Вставить ник Quote
Evgen_ Posted January 31, 2024 Author Posted January 31, 2024 На тестовом стенде пробовали петлить, в итоге петля за пределы роутера не выходила, ONU с одним портом, прикол в том, что на ONU нет vlan 225, и как от него во vlan 500 попадает мак с 225го не ясно, абоненты при этом ничего не делают в плане петель, подключение стандартное, терминал -> роутер -> устройства абонента Спасибо за команды, проверим обязательно Вставить ник Quote
.png.5d2afa2996cc6a85d0f2c09b92dd0a28.png)
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.