PowerPoint 프레젠테이션

Size: px

Start display at page:

Download "PowerPoint 프레젠테이션"

민환 초
5 years ago
Views:

1 Global Broadband No.1 V5724G 장애처리 v1.0 Technology Service 1 Team

2 개별가입자통신이안될경 우

3 1. 장애가입자의등록상태확인 장애접수된가입자의 PON Link 가정상적인지확인한다. 만약 Inactive 상태라면물리적인 Link 가안된경우이다. V5724G(pon)# sh onu register 2/ MAC ADDRESS OLT_ID ONU_ID STATUS MODE DESCRIPTION :d0:cb:2c:40:5d 2/2 1 inactive manual 00:d0:cb:2c:3e:b9 2/2 2 active manual 00:d0:cb:2c:3f:26 2/2 3 active manual 00:d0:cb:2c:40:7c 2/2 4 active manual 00:d0:cb:2c:42:6b 2/2 5 inactive manual 00:d0:cb:2c:42:ef 2/2 6 active manual 00:d0:cb:2c:48:88 2/2 7 inactive manual 00:d0:cb:2c:48:70 2/2 8 active manual 장애접수된가입자의 Link status 상태를조회

4 2. 장애가입자의 IP 부여확인 가입자링크가 Active 상태라면장애접수된가입자의 PON-port 로이동하여가입자가현재정상적으로 IP 를부여받아사용하고있는지확인한다. V5724G(config-pon-olt[2/2])# sh olt mac 장애접수된 PON-port mode로이동후 MAC-Address : ONU-ID : Type : Allocated IP :d0:cb:2c:3e:b9 2 Local ONU 00:0e:e8:0f:13:ba 3 Dynamic :d0:cb:2c:3f:26 3 Local ONU 00:d0:cb:2c:40:7c 4 Local ONU 00:09:15:69:12:14 6 Dynamic :d0:cb:2c:42:ef 6 Local ONU 00:30:18:74:15:77 8 Dynamic :d0:cb:2c:48:70 8 Local ONU 00:d0:cb:2c:46:59 11 Local ONU 00:00:f0:97:a2:e9 12 Dynamic :d0:cb:2c:49:11 12 Local ONU 정상적인경우 ONU ID 당가입자 MAC (Dynamic) 과 ONU MAC 이함께등록됨

5 3. 장애가입자의 ARP Table 확인 시스템의 ARP Table 에가입자의 MAC 으로정상적인 ARP table 이존재하는지확인한다. ( 단 include 옵션을이용 ) V5724G# sh arp include 2/2 해당옵션을이용할경우해당부분만디스플레이가가능하므로장애처리가빠 ether 00:c0:02:ff:05:cd 름 CH default 2/ ether 00:08:9f:23:be:0f CH default 2/ ether 00:09:15:69:12:14 CH default 2/ ether 00:a0:00:00:8a:70 CH default 2/ ether 00:e0:4d:0f:a7:8b CH default 2/ ether 00:0e:e8:0f:13:ba CH default 2/2 가입자의 MAC으로등록되었는지확인 ether 00:00:f0:97:a2:e9 CH default 2/ ether 00:50:8d:52:44:e2 CH default 2/ ether 00:30:18:74:15:77 CH default 2/2

6 4. IP 를부여받지못한경우 장애 ONU 의 Traffic Count 를조회하여가입자에서 Traffic 이발생하는지확인한다. V5724G(config-pon-olt[2/2])# sh olt mac MAC-Address : ONU-ID : Type : Allocated IP :d0:cb:2c:3e:b9 2 Local ONU IP를못받을경우해당 ONU의트래픽조회 00:0e:e8:0f:13:ba 3 Dynamic :d0:cb:2c:3f:26 3 Local ONU 00:d0:cb:2c:40:7c 4 Local ONU OLT ONU#1 PON Unit 1/1 Ethernet Switching Chip (Main) E-PON Chips Optic Block Optic Block E-PON Chip Ethernet Switching Chip sh port statistics avg-pkt 1/1 sh olt statistics sh onu statistics sh onu statistics switch

7 5. 장애가입자의 ONU 와 PC 링크조회 ONU 와가입자 PC 와의현재 Link 상태조회 V5724G(config-pon-olt[2/2])# sh onu status 2 ====================================================== ONU admin/operation uplink Port configuration Enable/Link Y/Y Y/N Y/N Y/N N/A Auto-nego Y Y Y Y N/A Speed auto/100 auto/ - auto/ - auto/ - N/A Duplex auto/full auto/ - auto/ - auto/ - N/A Max-host N/A Rate limiting Ingress rate N/A N/A N/A N/A N/A Ingress mode N/A N/A N/A N/A N/A Egress rate N/A N/A N/A N/A N/A

8 6. 장애가입자의 PC 의트래픽조회 가입자 PC 에서실제로트래픽을발생시키고있는지확인한다. V724G(config-pon-olt[1/1])# sh onu statistics OLT (1/1) / ONU 2 UNI PON Tx Frame Tx Bytes N/A Tx Pause 0 0 Tx Multicast N/A Tx Broadcast N/A 6 Rx Frame Rx Bytes Rx Errored Frame 0 1 Rx Errored Bytes 0 0 Rx Pause 0 0 Rx Multicast Rx Broadcast PON port 1/1 의 ONU id 1 인 ONU 트래픽조회 Optic Block PON ONU ID 1 E-PON Chip UNI Ethernet Switching Chip

9 7. 개별가입자에서 DHCP IP 를못받는경우 Debug Packet 을이용하여장애가입자의 DHCP discover 메시지가 CPU 로올라오는지확인한다. V5724G# debug packet port 1/1 protocol dhcp Packet-capture start... 장애포트 1/1 에서올라오는 DHCP 패킷덤프 tcpdump: WARNING: eth01: no IPv4 address assigned tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth01, link-type EN10MB (Ethernet), capture size 68 bytes :08: :14:bf:fa:42:02 > 00:d0:cb:2a:f0:28, ethertype IPv4, length 309: IP > : BOOTP/DHCP, Request [ bootp] :08: :d0:cb:2a:f0:28 > 00:14:bf:fa:42:02, ethertype IPv4, length 342: IP > : BOOTP/DHCP, Reply, length: packets captured 2 packets received by filter 0 packets dropped by kernel

10 8. Syslog 메시지를확인 Syslog 메시지를확인하여해당가입자에대한 Log 가있는지확인 V5724G# sh syslog local non-volatile reverse Reverse 옵션을줄경우최근이벤트부터조회 Jan 6 15:28:40 login[2429]: admin login on `ttyp0' from ` ' Jan 6 15:28:20 system: REGISTERED:: PORT 4/2 ONU 11 (LLID 2) 00:d0:cb:2c:42:43 Jan 6 15:26:27 system: REGISTERED:: PORT 9/1 ONU 20 (LLID 17) 00:d0:cb:45:47:1b Jan 6 15:21:15 system: DEREGISTERED:: PORT 1/1 ONU 3 (LLID 25) V5724G# sh syslog local non-volatile reverse include BER Jan 6 09:12:09 system: Got uplink BER alarm from OLT 7/1 regarding ONU 25. BER value: 0 Jan 6 09:04:18 system: Got uplink BER alarm from OLT 7/1 regarding ONU 25. BER value: 0 Jan 6 08:16:01 system: Got uplink BER alarm from OLT 7/1 regarding ONU 25. BER value: 0 Jan 6 08:15:00 system: Got uplink BER alarm from OLT 7/1 regarding ONU 25. BER value: 0 Jan 6 08:14:56 system: Got uplink BER alarm from OLT 7/1 regarding ONU 25. BER value: 0 특정장애문자열을알경우 include 옵션을이용하여해당장애로그만 sorting 가능함

11 전체가입자통신이안될경 우

12 1. 각포트의 Up/Down 상태정보확인 PON port 의업 / 다운정보를확인한다. FTTH-V5724G# sh port NO TYPE PVID STATUS MODE FLOWCTRL INSTALLED (ADMIN/OPER) (ADMIN/OPER) /1 GE-PON 1 Up/Up Force/Full/1000 Off/ Off Y 1/2 GE-PON 1 Up/Up Force/Full/1000 Off/ Off Y 2/1 GE-PON 1 Up/Up Force/Full/1000 Off/ Off Y 2/2 GE-PON 1 Up/Up Force/Full/1000 Off/ Off Y 3/1 GE-PON 1 Up/Up Force/Full/1000 Off/ Off Y 3/2 GE-PON 1 Up/Up Force/Full/1000 Off/ Off Y 4/1 GE-PON 1 Up/Up Force/Full/1000 Off/ Off Y 4/2 GE-PON 1 Up/Up Force/Full/1000 Off/ Off Y 5/1 GE-PON 1 Up/Up Force/Full/1000 Off/ Off Y 5/2 GE-PON 1 Up/Up Force/Full/1000 Off/ Off Y 중간생략

13 2. 업링크포트의트래픽상태정보확인 업링크와 PON port 의트래픽상황을확인한다. V5724G# sh port statistics avg-pkt 12/1,1/1 ====================================================================================== Port Tx Rx Time pkts/s bytes/s bits/s pkts/s bytes/s bits/s ====================================================================================== port 12/ sec: 6,308 3,871,579 30,972,632 7,850 8,022,248 64,177,984 시스템전체 Down Traffic 1 min: 6,338 4,113,773 32,910,184 7,364 7,273,128 58,185, min: 5,219 3,122,010 24,976,080 6,300 6,336,708 50,693,664 시스템전체 Up Traffic port 1/ sec: 898 1,008,448 8,067, , ,144 1 min: ,816 7,446, , , min: ,778 6,798, , ,600

14 3. CPU Load 확인 현재시스템에서사용중인 CPU Load 를확인 FTTH-V5724G# sh cpuload Average CPU load sec: 5.08( 0.34) % 1 min: 6.08( 0.33) % 10 min: 6.96( 0.40) % cpuload threshold (high) : 30 timer interval (high) : 5

15 4. 전체시스템에서 DHCP IP 할당을못받을경우 Debug 를사용하여정상적인패턴인지확인함정상적인경우 Request / Replay 가동일하게발생비정상적인경우 Request 가많이존재함 ( 상위에서 Replay 를못줄경우 ) EP-FTTH-V5724G# debug packet protocol dhcp Packet-capture start... tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on any, link-type LINUX_SLL (Linux cooked), capture size 68 bytes :51: eth14 < 00:40:2b:1a:f7: : IP > : BOOTP/DHCP, Request [ bootp] :51: br23 > 00:d0:cb:2a:f0: : IP > : BOOTP/DHCP, Request [ bootp] :51: bcmasic00 > 00:d0:cb:2a:f0: : IP > : BOOTP/DHCP, Request [ bootp] :51: eth23 < 00:19:07:2b:5c: : IP > : BOOTP/DHCP, Reply, length: :51: default > 00:d0:cb:2a:f0: : IP > : BOOTP/DHCP, Reply, length: :51: bcmasic00 > 00:d0:cb:2a:f0: : IP > : BOOTP/DHCP, Reply, length: :51: eth19 < 00:15:c5:bc:31:f : IP > : BOOTP/DHCP, Request [ bootp] :51: br23 > 00:d0:cb:2a:f0: : IP > : BOOTP/DHCP, Request [ bootp] :51: bcmasic00 > 00:d0:cb:2a:f0: : IP > : BOOTP/DHCP, Request [ bootp] :51: eth23 < 00:19:07:2b:5c: : IP > : BOOTP/DHCP, Reply, length: :51: default > 00:d0:cb:2a:f0: : IP > : BOOTP/DHCP, Reply, length: :51: bcmasic00 > 00:d0:cb:2a:f0: : IP > : BOOTP/DHCP, Reply, length: 302

16 5. 전체적으로가입자속도가저하되는경우 가입자속도측정시속도가불규칙적이거나인터넷 Web 이느리게동작하는경우 Tracert 를사용하여구간별 Ping Test 실시함 Tracert 실행 DNS 서버 Internet V5724G ONU 가입자구간에서부터어디에서 Ping loss 가발생하는지확인한다.

6. 전체적으로가입자속도가저하되는경우 ARP Table 을확인하여 ARP-Spoofing 공격에의한 ARP Table 손상유무확인 Gwangjin-OLT1-V5724G# sh arp ARP Spoofing 공격 Address HWtype HWaddress Flags Mask Iface Port 1.1.1.1 ether 00:04:96:20:25:40 CH default 12/1 1.

17 6. 전체적으로가입자속도가저하되는경우 ARP Table 을확인하여 ARP-Spoofing 공격에의한 ARP Table 손상유무확인 Gwangjin-OLT1-V5724G# sh arp ARP Spoofing 공격 Address HWtype HWaddress Flags Mask Iface Port ether 00:04:96:20:25:40 CH default 12/ ether 00:04:96:20:25:40 CH default 9/ ether 00:04:96:20:25:40 CH default 3/ ether 00:04:96:20:25:40 CH default 9/1 ARP Spoofing 공격에의해 ARP Table 이손상함예 ) IP 는여러개인데 MAC 은 1 개로됨

18 Global Broadband No.1 Thank you! 다산네트웍스고객지원팀 Technology Service 1 Team

PowerPoint 프레젠테이션

PowerPoint 프레젠테이션 V5724G 기능추가사항 Global Broadband No.1 NOS 3.13 NOS 3.15 Technology Service 1 Team 기능추가내용 고정 IP 차단및 ARP spoofing 차단기능 기능구현개요 : DHCP Snoop Table + ARP inspection Table ARP Spoofing 공격에의한 Switch 내부의 ARP table