自己总结的中兴T240G、S3252A、S3228A 三种交换机的告警分析及处理。全文一共包括五部分： 一、IP 地址冲突 二、交换环路 三、路由环路 四、ARP 病毒 五、ICMP 病毒 一、IP 地址冲突 告警现象： Main_T240g# show logging alarm An alarm 19712 level 6 occurred at 20:16:42 09/24/2009 UTC sent by NPC 2 %ARP% The hardware address of IP address 85.16.19.5 is changed from 0023.8b83.3971 to 0023.8b83.3977 An alarm 19712 level 6 occurred at 20:16:42 09/24/2009 UTC sent by NPC 2 %ARP% The hardware address of IP address 85.16.19.5 is changed from 0023.8b83.3977 to 0023.8b83.3971 告警原因： 两台正常 PC 同时静态设置同一IP 地址所引起，这种情况通常会造成当前 PC IP 地址冲突且网络掉线，对整个网络其它用户不造成任何影响。 应用对策： 对无静态地址要求的 vlan 配置好 arp 动态检测,需要静态配置的 vlan 规划好 IP 地址以确保无IP 地址冲突。 相关命令： Main_T240g(config)##ip arp inspection //ARP 动态地址检测，防止静态 IP 地址接入 二、交换环路 告警现象： Main_T240g# show logging alarm An alarm 29440 level 6 occurred at 17:25:06 01/04/2011 UTC sent by NPC 7 %MUX% Receive too many packets of 'arp' from port gei_7/5 fu14f_3252A#show logging alarm An alarm 512 level 6 cleared at 16:02:46 01/04/2011 UTC sent by MCP %PORT% Interface up on fei_1/32 //10 分钟后自动up An alarm 512 level 6 occurred at 15:52:46 01/04/2011 UTC sent by MCP %PORT% Interface down on fei_1/32 //接入层交换机遇到环路自动shutdown An alarm 23296 level 4 occurred at 15:52:42 01/04/2011 UTC sent by MCP %LOOP-DETECT% %PORT% Interface looped on fei_1/32 PS，另一种环路核心告警 Main_T240g# show logging alarm An alarm 23296 level 4 occurred at 13:35:13 01/05/2011 UTC sent by NPC 7 %LOOP-DETECT% Find interface loop on gei_7/9 告警原因： 接入层自环引起。 应用对策： 1、防环检策机制配置： 相关命令： S3252A(config)# loop-detect interface...
