H3C MSR 5006路由器在外网 ping wan 口丢包，请帮忙看看

david123

3条adsl（固定ip的）接入3个wan口 内网lan口
0/1 口单独一个ip段永
0/2 0/3 基于策略路由的负载分担
外网 ping 3个wan口地址 都有丢包 请问怎么解决

#
version 5.20, ESS 1807
#
sysname H3C
#
configure-user count 5
#
domain default enable system
#
dns server 202.96.209.5
dns server 202.96.209.133
#
telnet server enable
#
dar p2p signature-file flash:/p2p_default.mtd
#
qos carl 1 source-ip-address range 192.168.20.2 to 192.168.20.254 per-address
qos carl 2 destination-ip-address range 192.168.20.2 to 192.168.20.254 per-address
#
acl number 2999
#
acl number 3002
rule 1 permit ip source 192.168.21.0 0.0.0.255
acl number 3010
rule 0 permit ip source 192.168.20.0 0.0.0.254
rule 1 permit ip source 192.168.22.0 0.0.0.254
rule 2 permit ip source 192.168.23.0 0.0.0.254
acl number 3011
rule 0 permit ip source 192.168.20.1 0.0.0.254
rule 1 permit ip source 192.168.22.1 0.0.0.254
rule 2 permit ip source 192.168.23.1 0.0.0.254
#
vlan 1
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
dhcp server ip-pool vlan1 extended
network ip range 192.168.20.2 192.168.23.254
network mask 255.255.252.0
gateway-list 192.168.20.1
#
user-group system
#
local-user admin
password cipher test
authorization-attribute level 3
service-type telnet
local-user test
password cipher test
authorization-attribute level 3
service-type telnet
#
interface Aux0
async mode flow
link-protocol ppp
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.20.1 255.255.252.0
dhcp server apply ip-pool vlan1
qos car inbound carl 1 cir 350 cbs 15000 ebs 15000 green pass red discard
qos car outbound carl 2 cir 700 cbs 50000 ebs 50000 green pass red discard
nat outbound static
ip policy-based-route special
#
interface GigabitEthernet0/1
port link-mode route
nat outbound
ip address 1.1.1.114 255.255.255.252
#
interface GigabitEthernet0/2
port link-mode route
nat outbound
nat server 1 protocol tcp global current-interface 23000 inside 192.168.20.1 telnet
nat server 2 protocol tcp global current-interface 24000 inside 192.168.20.1 www
ip address 1.1.1.118 255.255.255.252
#
interface GigabitEthernet0/3
port link-mode route
nat outbound
ip address 1.1.1.122 255.255.255.252
#
interface GigabitEthernet0/0
port link-mode bridge
#
policy-based-route special permit node 1
   if-match acl 3002
   apply ip-address next-hop 1.1.1.113  
policy-based-route special permit node 2
   if-match acl 3010
   apply ip-address next-hop 1.1.1.117  
policy-based-route special permit node 3
   if-match acl 3011
   apply ip-address next-hop 1.1.1.121  
#
ip route-static 0.0.0.0 0.0.0.0 1.1.1.117
ip route-static 0.0.0.0 0.0.0.0 1.1.1.113
ip route-static 0.0.0.0 0.0.0.0 1.1.1.121
#
dhcp enable
#
ssh server enable
#
load tr069-configuration
#
user-interface con 0
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
#
return

ssffzz1

去掉QOS CAR 还有吗？？？？

jordan123123

端口设置为千兆全双工，不要自适应！试一试！

david123

QOS去掉没用
网卡看了下是工作在全双工模式
会不会是网口 对内对外回波问题呢 loopback

ssffzz1

直接在路由器上PING 3个WAN口对端的地址如何？？？？

然后帖dis int

chinavipe

go 学习

david123

直接在路由器上ping对端是好的
[H3C]dis int
Aux0 current state: DOWN
Line protocol current state: DOWN
Description: Aux0 Interface
The Maximum Transmit Unit is 1500, Hold timer is 10(sec)
Internet protocol processing : disabled
Link layer protocol is PPP
LCP initial
Output queue : (Urgent queuing : Size/Length/Discards)  0/100/0
Output queue : (Protocol queuing : Size/Length/Discards)  0/500/0
Output queue : (FIFO queuing : Size/Length/Discards)  0/75/0
Physical layer is asynchronous, Baudrate is 9600 bps
Phy-mru is 1700
Last clearing of counters: Never
    Last 300 seconds input rate 0.00 bytes/sec, 0 bits/sec, 0.00 packets/sec
    Last 300 seconds output rate 0.00 bytes/sec, 0 bits/sec, 0.00 packets/sec
    Input: 0 packets, 0 bytes
           0 broadcasts, 0 multicasts
           0 errors, 0 runts, 0 giants
           0 CRC, 0 align errors, 0 overruns
           0 dribbles, 0 aborts, 0 no buffers
           0 frame errors
    Output:0 packets, 0 bytes
           0 errors, 0 underruns, 0 collisions
           0 deferred
    DCD=DOWN  DTR=UP  DSR=DOWN  RTS=UP  CTS=DOWN

GigabitEthernet0/0 current state: UP
IP Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 0023-892a-f257
Description: GigabitEthernet0/0 Interface
Loopback is not set
Media type is twisted pair
1000Mbps-speed mode, full-duplex mode
Link speed type is autonegotiation, link duplex type is autonegotiation
Flow-control is not enabled
The Maximum Frame Length is 1518
PVID: 1
Mdi type: auto
Port link-type: access
  Tagged   VLAN ID : none
  Untagged VLAN ID : 1
Port priority: 0
Last 300 seconds input:  0 packets/sec 0 bytes/sec     0%
Last 300 seconds output:  0 packets/sec 0 bytes/sec    0%
Input (total):  187 packets, 26513 bytes
         - unicasts, - broadcasts, - multicasts
Input (normal):  187 packets, 26513 bytes
         - unicasts, 25 broadcasts, 4 multicasts
Input:  0 input errors, 0 runts, 0 giants, - throttles
         0 CRC, 0 frame, 0 overruns, 0 aborts
         0 ignored, - parity errors
Output (total): 157 packets, 27520 bytes
         - unicasts, 2 broadcasts, 0 multicasts, 0 pauses
Output (normal): 157 packets, 27520 bytes
         - unicasts, 2 broadcasts, 0 multicasts, 0 pauses
Output: 0 output errors, 0 underruns, - buffer failures
         - aborts, 0 deferred, 0 collisions, - late collisions
         0 lost carrier, - no carrier

GigabitEthernet0/1 current state: UP
Line protocol current state: UP
Description: GigabitEthernet0/1 Interface
The Maximum Transmit Unit is 1500, Hold timer is 10(sec)
Internet Address is 1.1.1..114/30 Primary
IP Packet Frame Type: PKTFMT_ETHNT_2,  Hardware Address: 0023-892a-f254
IPv6 Packet Frame Type: PKTFMT_ETHNT_2,  Hardware Address: 0023-892a-f254

Media type is twisted pair, loopback not set, promiscuous mode not set
100Mb/s, Full-duplex, link type is autonegotiation
Output flow-control is disabled, input flow-control is disabled
Output queue : (Urgent queuing : Size/Length/Discards)  0/100/0
Output queue : (Protocol queuing : Size/Length/Discards)  0/500/0
Output queue : (FIFO queuing : Size/Length/Discards)  0/75/0
Last clearing of counters: Never
    Last 300 seconds input rate 1.70 bytes/sec, 13 bits/sec, 0.02 packets/sec
    Last 300 seconds output rate 0.00 bytes/sec, 0 bits/sec, 0.00 packets/sec
    Input: 14 packets, 896 bytes, 14 buffers
           0 broadcasts, 0 multicasts, 0 pauses
           0 errors, 0 runts, 0 giants
           0 crc, 0 align errors, 0 overruns
           0 dribbles, 0 drops, 0 no buffers
    Output:2 packets, 120 bytes, 2 buffers
           2 broadcasts, 0 multicasts, 0 pauses
           0 errors, 0 underruns, 0 collisions
           0 deferred, 0 lost carriers

GigabitEthernet0/2 current state: UP
Line protocol current state: UP
Description: GigabitEthernet0/2 Interface
The Maximum Transmit Unit is 1500, Hold timer is 10(sec)
Internet Address is 1.1.1.118/30 Primary
IP Packet Frame Type: PKTFMT_ETHNT_2,  Hardware Address: 0023-892a-f255
IPv6 Packet Frame Type: PKTFMT_ETHNT_2,  Hardware Address: 0023-892a-f255

Media type is twisted pair, loopback not set, promiscuous mode not set
100Mb/s, Full-duplex, link type is autonegotiation
Output flow-control is disabled, input flow-control is disabled
Output queue : (Urgent queuing : Size/Length/Discards)  0/100/0
Output queue : (Protocol queuing : Size/Length/Discards)  0/500/0
Output queue : (FIFO queuing : Size/Length/Discards)  0/75/0
Last clearing of counters: Never
    Last 300 seconds input rate 231.94 bytes/sec, 1855 bits/sec, 3.56 packets/s
c
    Last 300 seconds output rate 324.51 bytes/sec, 2596 bits/sec, 4.34 packets/
ec
    Input: 2009 packets, 131794 bytes, 2009 buffers
           0 broadcasts, 0 multicasts, 0 pauses
           0 errors, 0 runts, 0 giants
           0 crc, 0 align errors, 0 overruns
           0 dribbles, 0 drops, 0 no buffers
    Output:2577 packets, 191679 bytes, 2577 buffers
           16 broadcasts, 0 multicasts, 0 pauses
           0 errors, 0 underruns, 0 collisions
           0 deferred, 0 lost carriers

GigabitEthernet0/3 current state: UP
Line protocol current state: UP
Description: GigabitEthernet0/3 Interface
The Maximum Transmit Unit is 1500, Hold timer is 10(sec)
Internet Address is 1.1.1.122/30 Primary
IP Packet Frame Type: PKTFMT_ETHNT_2,  Hardware Address: 0023-892a-f256
IPv6 Packet Frame Type: PKTFMT_ETHNT_2,  Hardware Address: 0023-892a-f256

Media type is twisted pair, loopback not set, promiscuous mode not set
100Mb/s, Full-duplex, link type is autonegotiation
Output flow-control is disabled, input flow-control is disabled
Output queue : (Urgent queuing : Size/Length/Discards)  0/100/0
Output queue : (Protocol queuing : Size/Length/Discards)  0/500/0
Output queue : (FIFO queuing : Size/Length/Discards)  0/75/0
Last clearing of counters: Never
    Last 300 seconds input rate 3.62 bytes/sec, 29 bits/sec, 0.05 packets/sec
    Last 300 seconds output rate 8.71 bytes/sec, 69 bits/sec, 0.13 packets/sec
    Input: 174 packets, 28962 bytes, 174 buffers
           0 broadcasts, 0 multicasts, 0 pauses
           0 errors, 0 runts, 0 giants
           0 crc, 0 align errors, 0 overruns
           0 dribbles, 0 drops, 0 no buffers
    Output:243 packets, 26751 bytes, 243 buffers
           13 broadcasts, 0 multicasts, 0 pauses
           0 errors, 0 underruns, 0 collisions
           0 deferred, 0 lost carriers

NULL0 current state: UP
Line protocol current state: UP (spoofing)
Description: NULL0 Interface
The Maximum Transmit Unit is 1500
Internet protocol processing : disabled
Physical is NULL DEV
Last clearing of counters:  Never
    Last 300 seconds input:  0 bytes/sec 0 packets/sec
    Last 300 seconds output:  0 bytes/sec 0 packets/sec
    0 packets input, 0 bytes, 0 drops
    0 packets output, 0 bytes, 0 drops

Vlan-interface1 current state: UP
Line protocol current state: UP
Description: Vlan-interface1 Interface
The Maximum Transmit Unit is 1500
Internet Address is 192.168.20.1/22 Primary
IP Packet Frame Type: PKTFMT_ETHNT_2,  Hardware Address: 0023-892a-f257
IPv6 Packet Frame Type: PKTFMT_ETHNT_2,  Hardware Address: 0023-892a-f257

Last clearing of counters:  Never
    Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
    Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
    0 packets input, 0 bytes, 0 drops
    0 packets output, 0 bytes, 0 drops

[ 本帖最后由 david123 于 2009-9-6 11:21 编辑 ]

ssffzz1

外网 ping 3个wan口地址 都有丢包 请问怎么解决
你这里说的3各WAN口地址，指的是路由器自身的WAN口地址，还是对端设备的地址？？

丢包率多少？？帖上来PING结果看看。

看接口的统计结果感觉问题不在链路上。

david123

是自身的wan口地址,外网ping对端地址是好的
3条静态路由都在话 基本上是一通2断 感觉就是ping过去，从wan口回来的时候随即选择一个wan口回来的原因，当回来的时候正好是过去的wan口时就通了，否则就造成丢包
去掉2条静态路由 留下一条以后 留下的那条就正常了，其他2条就彻底不通了

ssffzz1

#
acl number 3002
rule 1 permit ip source 192.168.21.0 0.0.0.255
acl number 3010
rule 0 permit ip source 192.168.20.0 0.0.0.254
rule 1 permit ip source 192.168.22.0 0.0.0.254
rule 2 permit ip source 192.168.23.0 0.0.0.254
acl number 3011
rule 0 permit ip source 192.168.20.1 0.0.0.254
rule 1 permit ip source 192.168.22.1 0.0.0.254
rule 2 permit ip source 192.168.23.1 0.0.0.254
#

上述3条ACL前加一句试试。

rule 0 deny ip dest 1.1.1.0 0.0.0.255