ENUS应急文档20111022.doc

ENUS应急文档二二二二年二月地址：北京市海淀区大钟寺东路9号京仪科技大厦B座四层418房间 邮编：100086 电话：（86）10-82119911 传真：（86）10-82119049 网址：1. 正式割接方案1.1. 录入数据建立ENUSR4数据库对象华数原来DHCP采用文件方式保存地址池信息，需要把dhcpd.conf的内容录入配置默认租期时间max-lease-time 14400; 配置用户可以获得的最长租期时间default-lease-time 14400; 配置DNS服务器地址为1option domain-name-servers 1; 配置dhcp option60 option vendor-class-identifier HZCNCAMSV1; class allow match if option vendor-class-identifier = HZCNCSTBV1; 配置地址池:subnet netmask 24 #district=hzcnc_idc option routers ; 配置默认网关 pool deny dynamic bootp clients; allow members of allow; 配置只允许option60分地址 range 6 0; 配置地址池 重启ENUSR4软件1.2. 实际割接步骤一、采用逐个修改接入设备DHCP RELAY方式，老系统保持不动，第一次设备割接时间序号设备名字设备地址备注10905I_B_SGXC8曙光新村(2#)20909I_B_HYXC7花园新村2通过管理页面和接入设备对比，检查网关、IP地址池有无变化，应该一致；二. 第二次设备割接时间，设备如下序号设备名设备地址备注11001I_B_KLXC康乐新村21002_DJGY(XQ)_06德嘉公寓西区31003I_A_WYNCT7维也纳春天41004I_B_XJD(LG)4新金都51006I_A_QYHY00沁雅花园（丹桂）61007I_B_JLBY7嘉绿北苑71008I_B_YZC(HLGY)3亚洲城黄龙公寓81009I_B_GDXQ1 古荡西区N、最后设备割接时间，所有剩余设备割接到新系统1.3. 后续割接1、监控系统运行，确保R4系统稳定。1.4. 割接失败回退 1、割接设备修改RELAY到老系统；2、失败原因定位总结。1.5. 遇到的问题地址池冲突需要添加/修改的地址池与数据库中的地址池冲突了：startip：9该ip属于系统中已有的古荡pop点：10pop设备中5/27地址池；网关ip冲突在手工添加POP:高银巷93/27地址池的时候报错：经过查询发现有POP干休所/19地址池包含了上述ip，确认后删除干休所的群组后添加正常。同一个网段内网关是.1，中继是.19的情况：15:52:44.441734 IP (tos 0x0, ttl 251, id 38712, offset 0, flags none, proto: UDP (17), length: 291) 9.18601 hzenus2.bootps: udp sum ok BOOTP/DHCP, Request from 00:24:c1:09:d0:84 (oui Unknown), length: 263, hops:1, xid:0xb27fd900, flags: none (0x0000) Gateway IP: 9 Client Ethernet Address: 00:24:c1:09:d0:84 (oui Unknown) Vendor-rfc1048: DHCP:DISCOVER PR:VO+VC+SM+DG+NS VC:HZCNCSTBV1同一个设备下，不同VLAN，需要使用一个群组对应一个地址池；同一个设备下，相同VLAN,有多个地址段的，如secondary，就是一个群组对应多个地址池；通过19或者非1中继上来的，选择backup类型即可，网关写.19.H3-7502E的epon设备发包 堵塞网络后台日志dhcp_enus_dhcp.log中包含有epon网关设备的mac信息具体如下：grep 00:23:89:70:90:06 /home/enus_r4/enus_r4_projects_hzhsb/logs/dhcp_enus_dhcp.log Caused by: com.runway.enus.util.EnusException: ip:27,mac:00:23:89:70:90:06 not on line. entry:27|00:24:C1:1A:FC:AC|requested|normal|2ipAddress: 27, macAddress: 00:24:C1:1A:FC:AC, option82: null, offerTime: 1313334278439, interfaceId: 4768, serviceInfoId: 2, subMask: , gateway: 15 00:31:34,784 ERROR dhcp_handler_thread-73 dhcp.backend.AddressRenewHandler - Renew fail, mac:00:23:89:70:90:06 ,gateway: ,ip:54com.runway.enus.util.EnusException: com.runway.enus.util.EnusException: ip:54,mac:00:23:89:70:90:06 not on line. entry:54|00:24:C1:21:47:66|requested|normal|2ipAddress: 54, macAddress: 00:24:C1:21:47:66, option82: null, offerTime: 1313334197797, interfaceId: 4768, serviceInfoId: 2, subMask: , gateway: 18:15:17.790291 IP (tos 0x0, ttl 252, id 7260, offset 0, flags none, proto: UDP (17), length: 293) 78.bootps hzenus2.bootps: udp sum ok BOOTP/DHCP, Request from 00:23:89:70:90:06 (oui Unknown), length: 265, xid:0xad36278, flags: none (0x0000) Gateway IP: Client Ethernet Address: 00:23:89:70:90:06 (oui Unknown) Vendor-rfc1048: DHCP:REQUEST SID:hzenus2 RQ:20 CID:ether00:23:89:70:90:06HZKDL1-A-PersonalPON-7502E-02display interface Vlan-interface 963Vlan-interface963 current state: UP Line protocol current state: UPDescription: New IPTV POOLThe Maximum Transmit Unit is 1500Internet Address is /20 PrimaryIP Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 0023-8970-9006IPv6 Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 0023-8970-9006解决办法：H3C厂家对设备进行IOS升级，使用如下命令关闭arp刷新功能：undo dhcp relay security refresh enable接入网交换机的VLAN透传到7609上面16 09:42:54,094 ERROR dhcp_handler_thread-84 dhcp.backend.AddressRenewHandler - Renew fail, mac:52:54:4C:2C:E4:71 ,gateway:9 ,ip:44com.runway.enus.util.EnusException: ip is out of range pool. ip:44at com.runway.enus.addressAssigner.refactor.AddressAssignerImpl.findIpPoolByIp(AddressAssignerImpl.java:768)at com.runway.enus.addressAssigner.refactor.AddressAssignerImpl.renewAddress(AddressAssignerImpl.java:705)at sun.reflect.GeneratedMethodAccessor36.invoke(Unknown Source)16 09:42:54,096 ERROR dhcp_handler_thread-29 dhcp.backend.AddressRenewHandler - Renew fail, mac:52:54:4C:2C:E4:71 ,gateway: ,ip:44com.runway.enus.util.EnusException: ip is out of range pool. ip:44at com.runway.enus.addressAssigner.refactor.AddressAssignerImpl.findIpPoolByIp(AddressAssignerImpl.java:768)at com.runway.enus.addressAssigner.refactor.AddressAssignerImpl.renewAddress(AddressAssignerImpl.java:705)at sun.reflect.GeneratedMethodAccessor36.invoke(Unknown Source)这个是接入网问题，可以将vlan划分多个，禁止透传后台日志报错：permission:0 0对应网内服务 1对应网外服务 2是机顶盒 上来的VC包不正确 是电脑接入16 10:19:57,098 ERROR dhcp_handler_thread-29 dhcp.backend.AddressAssignRefactorHandler - Assign address fail, mac:00:E0:4C:81:E3:8B ,gateway: ,permission:0com.runway.enus.util.EnusException: Invalid macAddress serviceInfoId interfaceId on assign ip!at com.runway.enus.addressAssigner.refactor.AddressAssignerImpl.assignAddress(AddressAssignerImpl.java:1096)at sun.reflect.GeneratedMethodAccessor37.invoke(Unknown Source)11:01:50.549602 IP (tos 0x0, ttl 251, id 8582, offset 0, flags none, proto: UDP (17), length: 328) 9.appleugcontrol hzenus2.bootps: udp sum ok BOOTP/DHCP, Request from 00:16:36:1d:cd:e8 (oui Unknown), length: 300, hops:1, xid:0x5, flags: none (0x0000) Gateway IP: 9 Client Ethernet Address: 00:16:36:1d:cd:e8 (oui Unknown) Vendor-rfc1048: DHCP:DISCOVER VC:udhcp CID:ether00:16:36:1d:cd:e8 PR:SM+DG+NS11:00:21.715523 IP (tos 0x0, ttl 253, id 58465, offset 0, flags none, proto: UDP (17), length: 334) .39647 hzenus2.bootps: udp sum ok BOOTP/DHCP, Request from 00:1f:d0:c6:d3:b9 (oui Unknown), length: 306, hops:1, xid:0xa65542df, secs:768, flags: Broadcast (0x8000) Gateway IP: Client Ethernet Address: 00:1f:d0:c6:d3:b9 (oui Unknown) Vendor-rfc1048: DHCP:DISCOVER NOAUTO:Y CID:ether00:1f:d0:c6:d3:b9 RQ:05 HN:MICROSOF-6C646B VC:MSFT 5.0 PR:SM+DN+DG+NS+WNS+WNT+WSC+RD+SR+T249+VO VO:220.0包中带option50，IP冲突HZCNC-10-BRAS-02#show logging | in option057365: Aug 16 13:10:23.644: DHCPD: option 50 is a duplicate.057403: Aug 16 13:10:24.016: DHCPD: option 50 is a duplicate.057808: Aug 16 13:10:28.736: DHCPD: option 50 is a duplicate.058466: Aug 16 13:10:37.788: DHCPD: option 50 is a duplicate.058666: Aug 16 13:10:41.000: DHCPD: option 50 is a duplicate.058695: Aug 16 13:10:41.672: DHCPD: option 50 is a duplicate.不同VLAN相同MAC地址 HZKDL1-B-POP-7609-01#show ip arp | include 0024.c10d.a36cInternet 02 25 0024.c10d.a36c ARPA Vlan69Internet 29 22 0024.c10d.a36c ARPA Vlan69仝青山(18951500) 22:32:461017I-B_NZGXC#show ip arp | include a36c Internet 03 196 0024.c10d.a36c ARPA Vlan963Internet 24 156 0024.c10d.a36c ARPA Vlan963Internet 2 5 0024.c10d.a36c ARPA Vlan963cisco WS-C3750X-48P2已分配00:24:C1:0D:A3:6C2011/08/22 21:34:5800:24:C1:0D:A3:6C已分配022011/08/22 20:20:26机顶盒roothzenus4 # ping 02PING 02 (02) 56(84) bytes of data.64 bytes from 02: icmp_seq=1 ttl=60 time=0.831 ms64 bytes from 02: icmp_seq=2 ttl=60 time=0.994 ms64 bytes from 02: icmp_seq=3 ttl=60 time=0.824 ms64 bytes from 02: icmp_seq=4 ttl=60 time=0.818 ms- 02 ping statistics -4 packets transmitted, 4 received, 0% packet loss, time 2999msrtt min/avg/max/mdev = 0.818/0.866/0.994/0.081 msroothzenus4 # ping 2PING 2 (2) 56(84) bytes of data.64 bytes from 2: icmp_seq=1 ttl=59 time=1.30 ms64 bytes from 2: icmp_seq=2 ttl=59 time=1.18 ms- 2 ping statistics -2 packets transmitted, 2 received, 0% packet loss, time 1000msrtt min/avg/max/mdev = 1.184/1.243/1.303/0.069 ms机顶盒部门已经回收。Address pools dont have this gateway, gateway:原因是198 199地址分配模块里没有该对应设