软线监控和故障排除
DS-Lite 的 Ping 和 Traceroute
使用 Junos OS 11.4 版时,您可以使用 ping 和 traceroute 命令来确定 DS-Lite 软线隧道的状态:
IPv6 ping — DS-Lite 软线终端器 (AFTR) 上的软线地址端点通常仅在层次结构级别配置
[edit services softwire],不需要托管在任何接口上。当未在特定接口或环路上配置 AFTR 时,早期版本的 Junos OS 软件不提供对 IPv6 软线地址的 ping 的回复。IPv6 ping 使软线发起方 (B4) 能够在创建隧道之前验证 AFTR 的软线地址。IPv4 ping — 为 AFTR 保留一个特殊的 IPv4 地址 192.0.0.1。以前版本的 Junos OS 不会响应发送到此地址的任何 ping。B4 和其他 IPv4 节点现在可以对此地址执行 ping作,以确定 DS-Lite 隧道是否正常工作。
Traceroute—AFTR 现在通过 DS-Lite 隧道生成和转发 traceroute 数据包。
使用新功能无需额外的 CLI 配置。
监控软线统计信息
目的
您可以使用 show services softwire 或 show services softwire statistics 命令查看软线全局统计信息。
行动
user@host# show services softwire Interface: sp-0/0/0, Service set: sset Softwire Direction Flow count 2001:0:0:1::1 -> 1001::1 I 3
user@host# show services softwire statistics DS-Lite Statistics: Service PIC Name: :sp-0/0/0 Statistics ---------- Softwires Created :2 Softwires Deleted :1 Softwires Flows Created :2 Softwires Flows Deleted :1 Slow Path Packets Processed :2 Fast Path Packets Processed :274240 Fast Path Packets Encapsulated :583337 Rule Match Failed :0 Rule Match Succeeded :2 IPv6 Packets Fragmented :0 Transient Errors ---------------- Flow Creation Failed - Retry :0 Slow Path Failed - Retry :0 Errors ------ Softwire Creation Failed :0 Flow Creation Failed :0 Slow Path Failed :0 Packet not IPv4-in-IPv6 :0 IPv6 Fragmentation Error :0 Slow Path Failed - IPv6 Next Header Offset :0 Decapsulated Packet not IPv4 :0 Fast Path Failed - IPv6 Next Header Offset :0 No Softwire ID :0 No Flow Extension :0 Flow Limit Exceeded :0 6rd Statistics: Service PIC Name :sp-0/0/0 Statistics ---------- Softwires Created :0 Softwires Deleted :0 Softwires Flows Created :0 Softwires Flows Deleted :0 Slow Path Packets Processed :0 Fast Path Packets Processed :0 Fast Path Packets Encapsulated :0 Rule Match Failed :0 Rule Match Succeeded :0 Transient Errors ---------------- Flow Creation Failed - Retry :0 Slow Path Failed - Retry :0 Errors ------ Softwire Creation Failed :0 Flow Creation Failed :0 Slow Path Failed :0 Packet not IPv6-in-IPv4 :0 Slow Path Failed - IPv6 Next Header Offset :0 Decapsulated Packet not IPv6 :0 Encapsulation Failed - No packet memory :0 No Softwire ID :0 No Flow Extension :0 ICMPv4 Dropped Packets :0
监控 CGN、有状态防火墙和软线流量
目的
使用以下命令检查软线、前 NAT 流和后 NAT 流的创建。可以使用更具体的字段进行过滤,例如DS-Lite的AFTR或B4地址或两者,以及6rd的软线集中器或软线发起器或两者。
显示服务状态防火墙流
显示服务软线流
行动
user@host# show services stateful-firewall flows
Interface: sp-0/1/0, Service set: dslite-svc-set2
Flow State Dir Frm count
TCP 200.200.200.2:80 -> 44.44.44.1:1025 Forward O 219942
NAT dest 44.44.44.1:1025 -> 20.20.1.4:1025
Softwire 2001::2 -> 1001::1
TCP 20.20.1.2:1025 -> 200.200.200.2:80 Forward I 110244
NAT source 20.20.1.2:1025 -> 44.44.44.1:1024
Softwire 2001::2 -> 1001::1
TCP 200.200.200.2:80 -> 44.44.44.1:1024 Forward O 219140
NAT dest 44.44.44.1:1024 -> 20.20.1.2:1025
Softwire 2001::2 -> 1001::1
DS-LITE 2001::2 -> 1001::1 Forward I 988729
TCP 200.200.200.2:80 -> 44.44.44.1:1026 Forward O 218906
NAT dest 44.44.44.1:1026 -> 20.20.1.3:1025
Softwire 2001::2 -> 1001::1
TCP 20.20.1.3:1025 -> 200.200.200.2:80 Forward I 110303
NAT source 20.20.1.3:1025 -> 44.44.44.1:1026
Softwire 2001::2 -> 1001::1
TCP 20.20.1.4:1025 -> 200.200.200.2:80 Forward I 110944
NAT source 20.20.1.4:1025 -> 44.44.44.1:1025
Softwire 2001::2 -> 1001::1