組網(wǎng)及說明

       ER3108G，WAN口接運營商，LAN口接自己的內(nèi)網(wǎng)

　　問題描述

       ER3108G內(nèi)網(wǎng)有50臺電腦左右，沒有下掛無線路由器，也沒有使用VPN，但是設備的CPU超過了90%

　　過程分析

       設備CPU利用率高，一般都為流量或者ARP攻擊或者廣播報文泛洪引起，跟組網(wǎng)有很大的關系，分析接口信息發(fā)現(xiàn)：

　　在用的5個lan口差不多流量都在七八百兆，但是上行口的WAN口只有34Mbps，這已經(jīng)快接近這款設備的性能了，所以CPU高也是正常的。

　　需要排查一下為何內(nèi)網(wǎng)流量這么大，從流量特征來看，LAN3口的上行流量很大，下行很小，其余LAN口下行都很大，上行比較小，懷疑是LAN3口有人私設下載服務器，其他人下載導致流量大的。

　　WAN:up packets:10630545, up bytes:77114010352, up packet rate:458pps, up byte rate:3338742Bps.

　　down packets:7377536, down bytes:29751121736, down packet rate:295pps, down byte rate:938404Bps.

　　total packets:18008081, total bytes:106865132088, total packet rate:753pps, total byte rate:4277146Bps. //約等于34Mbps

　　LAN1:up packets:81413784, up bytes:75692684248, up packet rate:5145pps, up byte rate:8458043Bps.

　　down packets:377604818, down bytes:487788362424, down packet rate:47957pps, down byte rate:86624718Bps.

　　total packets:459018602, total bytes:563481046672, total packet rate:53102pps, total byte rate:95082761Bps. //約等于760Mbps

　　LAN2:up packets:4299601365, up bytes:3340265616, up packet rate:263pps, up byte rate:314178Bps.

　　down packets:432550735, down bytes:501090195840, down packet rate:49657pps, down byte rate:88506780Bps.

　　total packets:4732152100, total bytes:504430461456, total packet rate:49920pps, total byte rate:88820958Bps. //約等于711Mbps

　　LAN3:up packets:358512478, up bytes:470078636656, up packet rate:47594pps, up byte rate:86400667Bps.

　　down packets:159157595, down bytes:134251957200, down packet rate:10083pps, down byte rate:13075013Bps.

　　total packets:517670073, total bytes:604330593856, total packet rate:57677pps, total byte rate:99475680Bps. //約等于796Mbps

　　LAN4:up packets:40962555, up bytes:26478131792, up packet rate:2064pps, up byte rate:2152372Bps.

　　down packets:408670098, down bytes:487770278272, down packet rate:48905pps, down byte rate:87737341Bps.

　　total packets:449632653, total bytes:514248410064, total packet rate:50969pps, total byte rate:89889713Bps. //約等于719Mbps

　　LAN5:up packets:34359778842, up bytes:5638584, up packet rate:0pps, up byte rate:0Bps.

　　down packets:71110080, down bytes:78785130336, down packet rate:0pps, down byte rate:0Bps.

　　total packets:34430888922, total bytes:78790768920, total packet rate:0pps, total byte rate:0Bps.

　　LAN6:up packets:0, up bytes:0, up packet rate:0pps, up byte rate:0Bps.

　　down packets:0, down bytes:0, down packet rate:0pps, down byte rate:0Bps.

　　total packets:0, total bytes:0, total packet rate:0pps, total byte rate:0Bps.

　　LAN7:up packets:0, up bytes:0, up packet rate:0pps, up byte rate:0Bps.

　　down packets:0, down bytes:0, down packet rate:0pps, down byte rate:0Bps.

　　total packets:0, total bytes:0, total packet rate:0pps, total byte rate:0Bps.

　　LAN8:up packets:34359974984, up bytes:26773360, up packet rate:1pps, up byte rate:1311Bps.

　　down packets:455934291, down bytes:524352921768, down packet rate:49641pps, down byte rate:88249567Bps.

　　total packets:34815909275, total bytes:524379695128, total packet rate:49642pps, total byte rate:88250878Bps. //約等于706Mbps

　　解決方法排查了LAN3口下的組網(wǎng)，發(fā)現(xiàn)有一臺服務器在大量給其他內(nèi)網(wǎng)PC發(fā)包，應該是中毒了，首先隔離了這臺服務器，進行全面殺毒后，問題解決了。

• 上一篇：H3C EIA等產(chǎn)品使用iOS11.3終端進行微信認證失敗的技術公告
• 下一篇：MSR3660路由器和天融信防火墻建立VPN不通的經(jīng)驗分析