监控和故障排除 软线
DS-Lite 的 Ping 和 Traceroute
在 Junos OS 11.4 版中，您可以使用 ping 和 traceroute 命令来确定 DS-Lite 软线隧道的状态：
IPv6 ping — DS-Lite 软线终结符 （AFTR） 上的软线地址端点通常仅在
[edit services softwire]层次结构级别上配置;不需要托管在任何接口上。如果特定接口或环路上未配置 AFTR，则早期版本的 Junos OS 软件不会提供对 IPv6 软线地址的 ping 响应。IPv6 ping 使软线发起方 （B4） 能够在创建隧道之前验证 AFTR 的软线地址。IPv4 ping — 为 AFTR 保留一个特殊的 IPv4 地址 192.0.0.1。Junos OS 的早期版本对发送到此地址的任何 ping作没有响应。B4 和其他 IPv4 节点现在可以 ping 到此地址，以确定 DS-Lite 隧道是否正常工作。
Traceroute — AFTR 现在通过 DS-Lite 隧道生成并转发 traceroute 数据包。
注意：
使用新功能无需额外的 CLI 配置。
监控 Softwire 统计信息
目的
您可以使用 show services softwire 或 show services softwire statistics 命令查看 softwire 全局统计信息。
行动
user@host# show services softwire Interface: sp-0/0/0, Service set: sset Softwire Direction Flow count 2001:0:0:1::1 -> 1001::1 I 3
user@host# show services softwire statistics DS-Lite Statistics: Service PIC Name: :sp-0/0/0 Statistics ---------- Softwires Created :2 Softwires Deleted :1 Softwires Flows Created :2 Softwires Flows Deleted :1 Slow Path Packets Processed :2 Fast Path Packets Processed :274240 Fast Path Packets Encapsulated :583337 Rule Match Failed :0 Rule Match Succeeded :2 IPv6 Packets Fragmented :0 Transient Errors ---------------- Flow Creation Failed - Retry :0 Slow Path Failed - Retry :0 Errors ------ Softwire Creation Failed :0 Flow Creation Failed :0 Slow Path Failed :0 Packet not IPv4-in-IPv6 :0 IPv6 Fragmentation Error :0 Slow Path Failed - IPv6 Next Header Offset :0 Decapsulated Packet not IPv4 :0 Fast Path Failed - IPv6 Next Header Offset :0 No Softwire ID :0 No Flow Extension :0 Flow Limit Exceeded :0 6rd Statistics: Service PIC Name :sp-0/0/0 Statistics ---------- Softwires Created :0 Softwires Deleted :0 Softwires Flows Created :0 Softwires Flows Deleted :0 Slow Path Packets Processed :0 Fast Path Packets Processed :0 Fast Path Packets Encapsulated :0 Rule Match Failed :0 Rule Match Succeeded :0 Transient Errors ---------------- Flow Creation Failed - Retry :0 Slow Path Failed - Retry :0 Errors ------ Softwire Creation Failed :0 Flow Creation Failed :0 Slow Path Failed :0 Packet not IPv6-in-IPv4 :0 Slow Path Failed - IPv6 Next Header Offset :0 Decapsulated Packet not IPv6 :0 Encapsulation Failed - No packet memory :0 No Softwire ID :0 No Flow Extension :0 ICMPv4 Dropped Packets :0
监控 CGN、有状态防火墙和软线流
目的
使用以下命令检查软线、NAT 前流和 NAT 后流的创建。输出可以使用更具体的字段进行过滤，例如 AFTR 或 B4 地址（DS-Lite 或两者兼而有之），以及 6rd 的 softwire-concentrator 或 softwire-initiator（两者兼而有之）。
显示服务状态式防火墙流
显示服务 软线流
行动
user@host# show services stateful-firewall flows
Interface: sp-0/1/0, Service set: dslite-svc-set2
Flow State Dir Frm count
TCP 200.200.200.2:80 -> 44.44.44.1:1025 Forward O 219942
NAT dest 44.44.44.1:1025 -> 20.20.1.4:1025
Softwire 2001::2 -> 1001::1
TCP 20.20.1.2:1025 -> 200.200.200.2:80 Forward I 110244
NAT source 20.20.1.2:1025 -> 44.44.44.1:1024
Softwire 2001::2 -> 1001::1
TCP 200.200.200.2:80 -> 44.44.44.1:1024 Forward O 219140
NAT dest 44.44.44.1:1024 -> 20.20.1.2:1025
Softwire 2001::2 -> 1001::1
DS-LITE 2001::2 -> 1001::1 Forward I 988729
TCP 200.200.200.2:80 -> 44.44.44.1:1026 Forward O 218906
NAT dest 44.44.44.1:1026 -> 20.20.1.3:1025
Softwire 2001::2 -> 1001::1
TCP 20.20.1.3:1025 -> 200.200.200.2:80 Forward I 110303
NAT source 20.20.1.3:1025 -> 44.44.44.1:1026
Softwire 2001::2 -> 1001::1
TCP 20.20.1.4:1025 -> 200.200.200.2:80 Forward I 110944
NAT source 20.20.1.4:1025 -> 44.44.44.1:1025
Softwire 2001::2 -> 1001::1