ERX日常故障分析课件

Copyright©2007,WXTK,Inc.ERX故障分析及解决

一、用户能够通过认证、获得地址，但不能打开网页、访问互联网，或者打开网页慢、延迟大等可能原因：路由问题、策略限制问题、MTU问题步骤：1、在erx上查看用户及用户路由信息ShowsubscribersusernamexxxCopyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

erx-sc-ls-01#shsubscribersusernamels2275267SubscriberList---------------VirtualUserNameTypeAddr|EndptRouter-------------------------------------------------------------ls2275267ppp218.89.19.178/localdefaultUserNameInterface--------------------------------------------------------ls2275267atm4/3.11170290:117.290UserNameLoginTime-------------------------------------------ls227526706/11/1716:32:32Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

或者只知道用户的IP，不知道用户名，就Showsubscribers|includexxx.xxx.xxx.xxxerx-sc-ls-01#shsubscribers|include218.89.19.178ls2275267ppp218.89.19.178/localdefault再反查subscribersusername的详细信息。同前。Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

Showiproutexxx.xxx.xxx.xxxerx-sc-ls-01#shiprou218.89.19.178Protocol/Routetypecodes:I1-ISISlevel1,I2-ISISlevel2,I-routetypeintra,IA-routetypeinter,E-routetypeexternal,i-metrictypeinternal,e-metrictypeexternal,O-OSPF,E1-externaltype1,E2-externaltype2,N1-NSSAexternaltype1,N2-NSSAexternaltype2L-MPLSlabel,V-VRFPrefix/LengthTypeNextHopDst/MetIntf---------------------------------------------------------------------------218.89.19.178/32AccInte0.0.0.02/0ATM4/3.11170290.1rnCopyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

用Showiproute|includexxx.xxx.xxx.xxx查看是否有路由问题erx-sc-ls-01#shiproute|include218.89.19.178Pleasewait.....218.89.19.178/32AccInte0.0.0.02/0ATM4/3.11170290.12、查看用户的ipinterface及应用的策略Showipintatmx/y.zzzzz.1Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

erx-sc-ls-01#shipinterfaceATM4/3.11170290.1ATM4/3.11170290.1lineprotocolPppisup,ipisupNetworkProtocols:IPUnnumberedInterfaceonloopback0(IPaddress218.88.181.1)

OperationalMTU=1492AdministrativeMTU=0Operationalspeed=155520000Administrativespeed=0SA-validationEnabledIgnoreDFBitEnabledAccessrouting=enabled:Using218.89.19.178

InErrorPackets0InInvalidSourceAddressPackets0InDiscardedPackets0OutSchedulerDroppedPackets0,Bytes0OutPolicedPackets0,Bytes0OutDiscardedPackets0IPpolicyinputpro2MStatisticsaredisabledIPpolicyoutputpro8MStatisticsaredisabledIPpolicysecondary-inputUser_Local_InputStatisticsaredisabledCopyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

3、查看用户的pppoeinterface及pppinterface信息Showpppoeintatmx/y.zzzzzShowpppintatmx/y.zzzzz.1

Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

erx-sc-ls-01#shpppoeinterfaceatm4/3.11170290PPPoEinterfaceATM4/3.11170290isoperStatusUp(dynamic)PPPoEinterfaceATM4/3.11170290hasmaxsessions=1PPPoEinterfaceATM4/3.11170290hasnoacNamesetPPPoEinterfaceATM4/3.11170290has1activeconnections,outof1configuredsubinterfacesPPPoEStatisticsCounters:PADIreceived1PADItransmitted0PADOreceived0PADOtransmitted1PADRreceived1PADRtransmitted0PADSreceived0PADStransmitted1PADTreceived0PADTtransmitted0PADMreceived0PADMtransmitted0PADNreceived0PADNtransmitted0PADpacketsreceived2PADpacketstransmitted2

Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

erx-sc-ls-01#shpppinterfaceatm4/3.11170290.1fullPPPinterfaceATM4/3.11170290.1isupInterfaceadministrativestatusisopenConfigurednetworkprotocolisIPCPIPCPprotocolconfigurationconfiguredtrueadministrative-statusopenip-address218.88.181.1dns-precedencelocalwins-precedencelocalipcp-netmask-optiondisabledIPCPprotocolstatusoperational-statusupIPCPnegotiatedoptionslocalpeer

ip-address218.88.181.1218.89.19.178ip-address-masknonenoneprimary-dns-addressnone218.89.0.124secondary-dns-addressnone218.6.200.139primary-wins-addressnonenonesecondary-wins-addressnonenoneInterfacestatisticsinoutpackets4170764971octets250410711453789errors00discards00Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

LCPprotocolconfigurationmax-receive-unituselowerlayerauthenticationpapmagic-numberenabledkeepalive-timer30secondsrestart-timer3secondsmax-terminate2max-configure10max-failure5passive-modedisabledLCPprotocolstatuslink-statusnetworkLCPnegotiatedoptionslocalpeermax-receive-unit14921492authenticationpapnonemagic-number0x261044050x3cac754daccmnonenonepfcnonenoneacfcnonenoneLCPprotocolstatisticsin-keepalive-requests0out-keepalive-requests0in-keepalive-replies0out-keepalive-replies0keepalive-failures0Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

Authenticationconfigurationauthenticate-retry0authentication-router''aaa-profile''Authenticationstatusgranttruesession-timeout517980secondsinactivity-timeoutnoneaccounting-timeout900secondspeer-ip-address218.89.19.178peer-ip-address-masknonepeer-primary-dns-address218.89.0.124peer-secondary-dns-address218.6.200.139peer-primary-wins-addressnonepeer-secondary-wins-addressnonepeer-ipv6-interface-idnoneAuthenticationstatisticsup-time4500secondsin-octets2504027out-octets11453746in-packets41707out-packets64971PAPprotocolconfigurationrequest-timeout20secondsCHAPprotocolconfigurationname''challenge-retry10challenge-timeout4secondsminimum-challenge-length16maximum-challenge-length32minimum-rechallenge-timeout0secondsmaximum-rechallenge-timeout0seconds

Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

4、查看ERX的上行路由器有无该用户的路由信息5、在ERX上ping和trace该用户6、在公网上（比如管理员自己的PC机上）ping和trace该用户，看断在哪一级设备，再细查该设备7、mtu值过小会导致打不开某些网站、或者不能使用某些业务

Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

二、用户不能够通过认证、获得地址等可能原因：radius问题、用户端问题、bims问题步骤：1、在erx上查看用户及用户路由信息，查看用户是否在线Showsubscribersusernamexxx用户最多会在erx上挂死90秒，因为如果用户异常断线，erx会在90的轮询时间内清除掉其session2、在bims上查看用户是否挂死，注意，即使在bims的前台界面看到用户没有挂死，也还是有可能挂死在后台，此时最简单的验证方法是在bims上增加一个用户连接数看是否能够拨号通过Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

二、用户不能够通过认证、获得地址等1、在erx上查看radius是否正常工作：Showradiusserver是否配置正确地址、端口、keyShowradiusstatistics是否在往正确的radiusserver发送认证、计费报文，是否有正常回应Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

erx-sc-ls-01#shradiusserversRADIUSAuthenticationConfiguration-----------------------------------UdpRetryMaximumDeadIPAddressPortCountTimeoutSessionsTimeSecret----------------------------------------------218.89.0.1421812332550cisco61.139.81.31812332550ciscoRADIUSAccountingConfiguration-------------------------------UdpRetryMaximumDeadIPAddressPortCountTimeoutSessionsTimeSecret----------------------------------------------218.89.0.1421813332550cisco61.139.81.31813332550ciscoCopyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

erx-sc-ls-01#shradiusstatisticsRADIUSAuthenticationStatistics--------------------------------Statistic61.139.81.3218.89.0.142------------------------------------------UDPPort18121812RoundTripTime275AccessRequests129230271337RolloverRequests95560Retransmissions329436107AccessAccepts72389176363AccessRejects256321084825AccessChallenges00MalformedResponses00BadAuthenticators00RequestsPending00RequestTimeouts434146256UnknownResponses00PacketsDropped024Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

RADIUSAccountingStatistics----------------------------Statistic61.139.81.3218.89.0.142------------------------------------------UDPPort18131813RoundTripTime132Requests6628139212837StartRequests5818914486InterimRequests3824121124183StopRequests22239174168RejectRequests00RolloverRequests654509Retransmissions6911290950Responses70395139140433StartResponses54798908871InterimResponses55743121066204StopResponses91739165358RejectResponses00MalformedResponses00BadAuthenticators00RequestsPending00RequestTimeouts8594363363UnknownResponses00PacketsDropped6110033Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

二、用户不能够通过认证、获得地址等2、在erx上测试拨打：TestaaapppusernameuserpasswordCopyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

二、用户不能够通过认证、获得地址等3、在erx上打开aaa和radius的debug：ConftlogseveritydebugaaaUserAccessCopyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

erx-sc-ls-01#shlogdatacategoryaaaUserAccessseveritydebug***storedlogmessages******log:aaaUserAccess***severity:DEBUGandhigher***nobaselineINFO11/27/200611:45:54aaaUserAccess:User:ls3441241;id:atm4/0.42400172:240.172,accessdenied:permissiondeniedINFO11/27/200611:45:55aaaUserAccess:User:ls2111767;id:FastEthernet0/3.2135:2135,accessgrantedINFO11/27/200611:45:55aaaUserAccess:User:lsfgwa;id:GigabitEthernet5/0.100220933:22-933,accessdenied:permissiondeniedINFO11/27/200611:45:55aaaUserAccess:User:ls3682020;id:atm8/3.32350181:235.181,accessdenied:permissiondeniedINFO11/27/200611:45:57aaaUserAccess:User:ls2148276;id:atm4/0.41070051:107.51,accessdenied:permissiondeniedINFO11/27/200611:46:43aaaUserAccess:User:ls2193189;id:atm8/1.11120825:112.825,accessgrantedINFO11/27/200611:46:43aaaUserAccess:User:ls2150705;id:FastEthernet10/2.100001104:1104,accessgrantedINFO11/27/200611:46:44aaaUserAccess:User:LS2153898;id:atm8/1.31130197:113.197,accessgrantedINFO11/27/200611:46:44aaaUserAccess:User:ls2118577;id:FastEthernet0/0.1372:1372,accessgrantedCopyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

erx-sc-ls-01#shlogdatacategoryaaaUserAccessseveritydebug|includels3441241INFO11/27/200611:45:54aaaUserAccess:User:ls3441241;id:atm4/0.42400172:240.172,accessdenied:permissiondeniedINFO11/27/200611:45:57aaaUserAccess:User:ls3441241;id:atm4/0.42400172:240.172,accessdenied:permissiondeniedINFO11/27/200611:45:58aaaUserAccess:User:ls3441241;id:atm4/0.42400172:240.172,accessdenied:permissiondeniedCopyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

二、用户不能够通过认证、获得地址等3、在erx上打开aaa和radius的debug：ConftlogseveritydebugradiusAttributesCopyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

erx-sc-ls-01#shlogdatacategoryradiusAttributesseveritydebugDEBUG11/27/200611:50:09radiusAttributes:REJECT:replymessageattr:Userdial-insosoon.DEBUG11/27/200611:50:10radiusAttributes:REJECT:replymessageattr:Userdial-insosoon.DEBUG11/27/200611:50:13radiusAttributes:USERATTRIBUTES:(ls2309279)DEBUG11/27/200611:50:13radiusAttributes:servicetypeattr:2DEBUG11/27/200611:50:13radiusAttributes:framedprotocolattr:1DEBUG11/27/200611:50:13radiusAttributes:sessiontimeattr:86400DEBUG11/27/200611:50:13radiusAttributes:framedIPaddressattr:255.255.255.254DEBUG11/27/200611:50:13radiusAttributes:REJECT:replymessageattr:Userstateinvalid.DEBUG11/27/200611:50:14radiusAttributes:REJECT:replymessageattr:portisinvalid.DEBUG11/27/200611:50:14radiusAttributes:REJECT:replymessageattr:portisinvalid.Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

二、用户不能够通过认证、获得地址等3、在erx上打开aaa和radius的debug：ConftlogseveritydebugradiusSendAttributesCopyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

erx-sc-ls-01#shlogdatacategoryradiusSendAttributesseveritydebugDEBUG11/27/200611:53:21radiusSendAttributes:ACCOUNTING-REQUESTattributes(default)DEBUG11/27/200611:53:21radiusSendAttributes:acct-status-typeattradded:3DEBUG11/27/200611:53:21radiusSendAttributes:usernameattradded:ls3540445DEBUG11/27/200611:53:21radiusSendAttributes:event-timestampattradded:1164628401DEBUG11/27/200611:53:21radiusSendAttributes:acct-delay-timeattradded:0DEBUG11/27/200611:53:21radiusSendAttributes:nas-identifierattradded:erx-sc-ls-01DEBUG11/27/200611:53:21radiusSendAttributes:acct-session-idattradded:erxatm8/3.32350100:235.100:0039714731DEBUG11/27/200611:53:21radiusSendAttributes:nas-ip-addressattradded:218.88.181.1Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

DEBUG11/27/200611:53:21radiusSendAttributes:service-typeattradded:2DEBUG11/27/200611:53:21radiusSendAttributes:framed-protocolattradded:1DEBUG11/27/200611:53:21radiusSendAttributes:framed-compressionattradded:0DEBUG11/27/200611:53:21radiusSendAttributes:pppoe-description(vsa)attradded:pppoe00:e0:4c:90:ce:a5DEBUG11/27/200611:53:21radiusSendAttributes:framed-ip-addressattradded:218.88.183.190DEBUG11/27/200611:53:21radiusSendAttributes:framed-ip-netmaskattradded:255.255.255.255DEBUG11/27/200611:53:21radiusSendAttributes:ingress-policy-name(vsa)attradded:pro2MDEBUG11/27/200611:53:21radiusSendAttributes:egress-policy-name(vsa)attradded:pro8MDEBUG11/27/200611:53:21radiusSendAttributes:calling-station-idattradded:#erx-sc-ls-01#A83#235#100DEBUG11/27/200611:53:21radiusSendAttributes:acct-input-gigawordsattradded:0DEBUG11/27/200611:53:21radiusSendAttributes:acct-input-octetsattradded:33964318Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

DEBUG11/27/200611:53:21radiusSendAttributes:acct-output-gigawordsattradded:0DEBUG11/27/200611:53:21radiusSendAttributes:acct-output-octetsattradded:6104700DEBUG11/27/200611:53:21radiusSendAttributes:acct-input-gigapackets(vsa)attradded:0DEBUG11/27/200611:53:21radiusSendAttributes:acct-input-packetsattradded:60673DEBUG11/27/200611:53:21radiusSendAttributes:acct-output-gigapackets(vsa)attradded:0DEBUG11/27/200611:53:21radiusSendAttributes:acct-output-packetsattradded:60815DEBUG11/27/200611:53:21radiusSendAttributes:connect-infoattradded:speed:UBRDEBUG11/27/200611:53:21radiusSendAttributes:nas-port-typeattradded:16DEBUG11/27/200611:53:21radiusSendAttributes:nas-portattradded:2213216356DEBUG11/27/200611:53:21radiusSendAttributes:nas-port-idattradded:atm8/3.32350100:235.100DEBUG11/27/200611:53:21radiusSendAttributes:acct-authenticattradded:1DEBUG11/27/200611:53:21radiusSendAttributes:acct-session-timeattradded:9901Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

二、用户不能够通过认证、获得地址等4、在erx上打开pppoe的debug：ConftlogseveritydebugpppoeControlPacketatm2/0.20240032Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

二、用户不能够通过认证、获得地址等4、在erx上打开pppoe的debug：ConftlogseveritydebugpppoeControlPacketatm2/0.20240032erx-sc-ls-01#shlogdacapppoeControlPacketsede***storedlogmessages******log:pppoeControlPacket***severity:DEBUGandhigher***nobaselineDEBUG11/27/200614:13:36pppoeControlPacket(interfaceATM2/0.20240032):ControlpackettracingenabledCopyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.PPPoverEthernetSuccessfulLog

PPPIPNCP&PPPoECopyright©2007,WXTK,Inc.PPCopyright©2007,WXTK,Inc.ERX故障分析及解决

二、用户不能够通过认证、获得地址等5、在erx上打开的debug，请在使用完毕后关闭：ConftNologseveritydebug…………Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决用户报登陆慢，下线后需要等2、3分钟才能拨号登陆目前四川所有erx升级到新版本7-3-2p0-6。该版本具有自我保护机制。防止有用户不断拨号而造成erx资源消耗过多，造成其他正常用户出现不能登陆的情况。

出现用户不断拨号的可能有：1、用户端设备可以在1、2秒钟能自动连线重拨号功能。2、用户着急，在1、2秒钟内不断拨号。3、该用户可能已经欠费，无法正常登陆，但在BIMS上该用户的绑定数据仍然没有修改，用户端的设备仍然在向erx发送登陆请求。4、有恶意拨号攻击。Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决对以上情况erx会把该子接口用的接口处于自动“锁死”状态，在2－3分钟内不对该子接口下的用户拨号请求做回应。在“锁死”发生时，用户端现象是报678错误。等到“锁死”时间timeout之后，用户才能再次正常拨号登陆。查看“锁死”用户：ERX-01#showatmsubinterfaceatm4/2.10140179CircuitInterfaceATM-ProtVCDVPIVCITypeEncapMTUStatus--------------------------------------------------------------------ATM4/2.10140179RFC-14831014017914179PVCSNAP9180dormantLockout查看atm所有被“锁死”的接口：ERX-01#showatmsubinterfacestatusdormantLockoutPleasewait..............................CircuitInterfaceATM-ProtVCDVPIVCITypeEncapMTUStatus--------------------------------------------------------------------ATM3/0.10230119RFC-14831023011923119PVCSNAP9180dormantLockoutATM3/0.10230126RFC-14831023012623126PVCSNAP9180dormantLockoutATM3/0.10260242RFC-14831026024226242PVCSNAP9180dormantLockoutATM3/1.10220271RFC-14831022027122271PVCSNAP9180dormantLockoutATM3/2.10020117RFC-1483100201172117PVCSNAP9180dormantLockoutATM3/2.10030048RFC-148310030048348PVCSNAP9180dormantLockoutATM3/2.10050101RFC-1483100501015101PVCSNAP9180dormantLockoutATM3/2.10070058RFC-148310070058758PVCSNAP9180dormantLockoutATM3/2.10310078RFC-1483103100783178PVCSNAP9180dormantLockout用命令看哪些用户被dormantLockout了，就是被锁住了。Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决可以人工修改“锁死”的时间范围：ERX-01(config)#interfaceatm4/2.10140179point-to-pointERX-01(config-subif)#auto-configurepppoelockout-time3030ERX-01(config-subif)#

或ERX-01(config-subif)#auto-configurepppoelockout-timenone关闭这个功能（建议打开）。Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决发生“锁死”后的处理：1、用户命令检查，是不是锁死；2、告诉用户不要在1、2秒中内马上拨号；3、确实有必要，可以先修改锁住的保障用户，把该用户子接口下的“锁死”时间调整短一些，如30秒，其他用户只要不连续拨，不会有“锁死”问题。Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

一、用户能够通过认证、获得地址，但不能打开网页、访问互联网，或者打开网页慢、延迟大等可能原因：路由问题、策略限制问题、MTU问题步骤：1、在erx上查看用户及用户路由信息ShowsubscribersusernamexxxCopyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

erx-sc-ls-01#shsubscribersusernamels2275267SubscriberList---------------VirtualUserNameTypeAddr|EndptRouter-------------------------------------------------------------ls2275267ppp218.89.19.178/localdefaultUserNameInterface--------------------------------------------------------ls2275267atm4/3.11170290:117.290UserNameLoginTime-------------------------------------------ls227526706/11/1716:32:32Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

或者只知道用户的IP，不知道用户名，就Showsubscribers|includexxx.xxx.xxx.xxxerx-sc-ls-01#shsubscribers|include218.89.19.178ls2275267ppp218.89.19.178/localdefault再反查subscribersusername的详细信息。同前。Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

Showiproutexxx.xxx.xxx.xxxerx-sc-ls-01#shiprou218.89.19.178Protocol/Routetypecodes:I1-ISISlevel1,I2-ISISlevel2,I-routetypeintra,IA-routetypeinter,E-routetypeexternal,i-metrictypeinternal,e-metrictypeexternal,O-OSPF,E1-externaltype1,E2-externaltype2,N1-NSSAexternaltype1,N2-NSSAexternaltype2L-MPLSlabel,V-VRFPrefix/LengthTypeNextHopDst/MetIntf---------------------------------------------------------------------------218.89.19.178/32AccInte0.0.0.02/0ATM4/3.11170290.1rnCopyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

用Showiproute|includexxx.xxx.xxx.xxx查看是否有路由问题erx-sc-ls-01#shiproute|include218.89.19.178Pleasewait.....218.89.19.178/32AccInte0.0.0.02/0ATM4/3.11170290.12、查看用户的ipinterface及应用的策略Showipintatmx/y.zzzzz.1Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

erx-sc-ls-01#shipinterfaceATM4/3.11170290.1ATM4/3.11170290.1lineprotocolPppisup,ipisupNetworkProtocols:IPUnnumberedInterfaceonloopback0(IPaddress218.88.181.1)

OperationalMTU=1492AdministrativeMTU=0Operationalspeed=155520000Administrativespeed=0SA-validationEnabledIgnoreDFBitEnabledAccessrouting=enabled:Using218.89.19.178

InErrorPackets0InInvalidSourceAddressPackets0InDiscardedPackets0OutSchedulerDroppedPackets0,Bytes0OutPolicedPackets0,Bytes0OutDiscardedPackets0IPpolicyinputpro2MStatisticsaredisabledIPpolicyoutputpro8MStatisticsaredisabledIPpolicysecondary-inputUser_Local_InputStatisticsaredisabledCopyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

3、查看用户的pppoeinterface及pppinterface信息Showpppoeintatmx/y.zzzzzShowpppintatmx/y.zzzzz.1

Copyright©2007,WXTK,Inc.ERCopyright©2007,WXTK,Inc.ERX故障分析及解决

erx-sc-ls-01#shpppoeinterfaceatm4/3.11170290PPPoEinterfaceATM4/3.11170290isoperStatusUp(dynamic)PPPoEinterfaceATM4/3.11170290hasmaxsessions=1PPPoEinterfaceATM4/3.11170290hasnoacNamesetPPPoEinterfaceATM4/3.11170290has1activeconnections,outof1configuredsubinterfacesPPPoEStatisticsCounters:PADIreceived1PADItransmitted0PADOreceived0PADOtransmitted1PADRreceived1PADRtransmitted0PADSreceived0PADStransmitted1PADTreceived0PADTtransmitted0PADMreceived0PADMtransmitted0PADNreceived0PADNtransmitted0PADpacketsreceived2PADpacketstransmi