網(wǎng)絡(luò)巡檢方法[一類優(yōu)選]

1、網(wǎng)絡(luò)巡檢交換機、三層交換機和路由器是構(gòu)建網(wǎng)絡(luò)的基礎(chǔ)，他們信號繁雜、數(shù)量眾多。我們將根據(jù)設(shè)備的類型進行一系列網(wǎng)絡(luò)巡檢（將巡檢記錄作為文本保存）交換機下面介紹一些在二層交換機上的主要操作和配置（灰色陰影部分為命令的輸出結(jié)果）檢查cpu使用率CMH-QDES-LAN-C2960-2FB-8#show process cpuCPU utilization for five seconds: 4%/0%; one minute: 1%; five minutes: 1% PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process 1 4 1 4000

2、 0.00% 0.00% 0.00% 0 Chunk Manager 2 13416 6003213 2 0.00% 0.00% 0.00% 0 Load Meter 3 1172 250135 4 0.00% 0.00% 0.00% 0 DHCPD Timer 4 7015156 3048445 2301 0.00% 0.01% 0.00% 0 Check heaps 該命名可以查看交換機CPU的使用情況。主要看最后一個5分鐘CPU占用率，不能超過50%。檢查內(nèi)存使用率CMH-QDES-LAN-C2960-2FB-8#show process memTotal: 7947968, Used:

3、 3051344, Free: 4896624 PID TTY Allocated Freed Holding Getbufs Retbufs Process 0 0 121548 5044 1888636 0 0 *Init* 0 0 36528 3672092 908 18144 0 *Sched* 0 0 64044556 59575920 427240 1521080 0 *Dead* 1 0 0 0 6808 0 0 Chunk Manager 2 0 184 184 3808 0 0 Load Meter 3 0 0 0 6808 0 0 DHCPD Timer 4 0 0 0 6

4、808 0 0 Check heaps 5 0 10036544 3834436 9216 7002240 8317240 Pool Manager 該命令可以看到交換機目前的內(nèi)存使用情況。第一行顯示目前交換機的總內(nèi)存是8M，使用了3M左右，還有4M多的空閑。使用率不應(yīng)該超過60%。檢查重啟記錄CMH-QDES-LAN-C2960-2FB-8#show versionCisco Internetwork Operating System Software IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(22)EA1, RELEASE

5、 SOFTWARE (fc1)Copyright (c) 1986-2004 by cisco Systems, Inc.Compiled Mon 12-Jul-04 08:18 by madisonImage text-base: 0x80010000, data-base: 0x8055C000ROM: Bootstrap program is C2950 boot loaderIN2IPSW1 uptime is 49 weeks, 4 days, 10 hours, 14 minutesSystem returned to ROM by power-onSystem restarted

6、 at 00:21:06 UTC Mon Jun 8 2009System image file is flash:/c2950-i6q4l2-mz.121-22.EA1.bin該命令可以看到許多信息，如交換機的軟硬件版本等。我們主要利用該命令看交換機已經(jīng)正常運行了多久。如第7行所示，表示該交換機已經(jīng)正常啟動了49個星期了。該值不能太小，如果最近重啟過，應(yīng)了解重啟的原因。檢查各個端口的狀態(tài)和錯誤包數(shù)量CMH-QDES-LAN-C2960-2FB-8#show interface.FastEthernet0/12 is up, line protocol is up (connected) Ha

7、rdware is Fast Ethernet, address is 0012.80d8.444c (bia 0012.80d8.444c) Description: Siemens2IP MTU 1500 bytes, BW 100000 Kbit, DLY 1000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Half-duplex, 100Mb/s, media type is 100BaseTX inp

8、ut flow-control is unsupported output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output 00:00:00, output hang never Last clearing of show interface counters 14w0d Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Out

9、put queue: 0/40 (size/max) 5 minute input rate 578000 bits/sec, 281 packets/sec 5 minute output rate 2000 bits/sec, 3 packets/sec 900721890 packets input, 3224733078 bytes, 0 no buffer Received 30992 broadcasts (0 multicast) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0

10、 ignored 0 watchdog, 7086 multicast, 0 pause input 0 input packets with dribble condition detected 31548079 packets output, 2379855761 bytes, 0 underruns 5104 output errors, 33619 collisions, 0 interface resets 0 babbles, 5104 late collision, 84059 deferred 0 lost carrier, 0 no carrier, 0 PAUSE outp

11、ut 0 output buffer failures, 0 output buffers swapped out該命令會顯示交換機上所有端口的信息。第一行顯示該端口狀態(tài)是正常的。還要看第21行和第25行顯示的錯誤包的數(shù)量和與20行和24行總包書的比較。錯誤包應(yīng)該低于2%。檢查設(shè)備的日志CMH-QDES-LAN-C2960-2FB-8#show logprotocol on Interface GigabitEthernet1/0/18, changed state to downDec 12 10:18:12.541 beijing: %LINEPROTO-5-UPDOWN: Line pr

12、otocol on Interface GigabitEthernet1/0/18, changed state to upDec 12 10:18:45.023 beijing: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/18, changed state to downDec 12 10:18:48.148 beijing: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/18, changed state to downDec 12 10:18:50.39

13、2 beijing: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/18, changed state to upDec 12 10:18:51.393 beijing: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/18, changed state to up該命令會顯示歷史的故障情況，用于故障分析時使用。檢查硬件狀態(tài)CMH-QDES-LAN-C2960-2FB-8# sh env allFAN is OKTEMPERATURE is OKTemperatur

14、e Value: 34 Degree CelsiusTemperature State: GREENYellow Threshold : 50 Degree CelsiusRed Threshold : 60 Degree CelsiusSW PID Serial# Status Sys Pwr PoE Pwr Watts- - - - - - - 1 Built-in GoodSW Status RPS Name RPS Serial# RPS Port#- - - - -1 CMH-QDES-LAN-C2960-2FB-8#根據(jù)反饋結(jié)果查看硬件狀況檢查環(huán)路情況CMH-QDES-LAN-C2

15、960-2FB-8#sh spanning-tree blockedports Name Blocked Interfaces List- -Number of blocked ports (segments) in the system : 0CMH-QDES-LAN-C2960-2FB-8#根據(jù)反饋結(jié)果查看有無阻塞端口，沒有端口顯示即為正常檢查現(xiàn)有配置CMH-QDES-LAN-C2960-2FB-8#sh runBuilding configuration.Current configuration : 4425 bytes! Last configuration change at 11

16、:12:16 beijing Tue Jan 7 2014 by wangjian! NVRAM config last updated at 11:12:19 beijing Tue Jan 7 2014 by wangjian!version 12.2no service padservice timestamps debug datetime msecservice timestamps log datetime msec localtime show-timezoneno service password-encryption!hostname CMH-QDES-LAN-C2960-2

17、FB-8!boot-start-markerboot-end-marker!enable secret 5 $1$AAN5$dloMNip2gGVdjVdisgfLz.!username wangjian privilege 15 secret 5 $1$7nP2$ZCgpppt9Oq3vyPxqfQJEh.username jiangweidong privilege 15 secret 5 $1$UNBc$xELJnT0Rt23Lgp63BGm0K1!no aaa new-modelclock timezone beijing 8switch 1 provision ws-c2960s-2

18、4ts-l!no ip domain-lookup!crypto pki trustpoint TP-self-signed-128902656 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-128902656 revocation-check none rsakeypair TP-self-signed-128902656!spanning-tree mode pvstspanning-tree extend system-id!vlan internal allocation policy ascendi

19、ng!interface Port-channel1 switchport mode trunk!interface Vlan1 ip address 4 !ip default-gateway no ip http serverip http secure-serverip sla enable reaction-alerts!line con 0 login localline vty 0 4 login localline vty 5 15 login local!ntp clock-period 22519063ntp

20、server 17endCMH-QDES-LAN-C2960-2FB-8#保存配置至本地下面介紹一些在三層交換機上的主要操作和配置（灰色陰影部分為命令的輸出結(jié)果）檢查核心雙機堆疊CORE-QDLC-WAN-c3750X-4FC-2#sh switch detail Switch/Stack Mac Address : 649e.f34a.0300 H/W CurrentSwitch# Role Mac Address Priority Version State -*1 Master 649e.f34a.0300 15 1 Ready 2 Member 649e.f34

21、a.1000 14 1 Ready Stack Port Status Neighbors Switch# Port 1 Port 2 Port 1 Port 2 - 1 Ok Ok 2 2 2 Ok Ok 1 1 CORE-QDLC-WAN-c3750X-4FC-2#檢查雙機狀態(tài)，注意master是否有切換，堆疊端口的狀態(tài)是否ok檢查cpu使用率show process cpu檢查內(nèi)存使用率show process mem檢查重啟記錄show version檢查各個端口的狀態(tài)和錯誤包數(shù)量show interface檢查設(shè)備的日志show log檢查硬件狀態(tài)sh env all檢查環(huán)路情況sh

22、 spanning-tree blockedports 檢查現(xiàn)有配置sh run（UltraCompare軟件對比功能，和前一次保存的配置做對比）保存配置至本地下面介紹一些在防火墻上的主要操作和配置（灰色陰影部分為命令的輸出結(jié)果）檢查系統(tǒng)信息，包括當(dāng)前os版本，接口信息，設(shè)備運行時間等VPN-QDLC-SSG140-4FC-2(M)- get sysProduct Name: SSG-140Serial Number: 0185082011000470, Control Number: ffffffffHardware Version: 1010(0)-(00), FPGA checksum:

23、 00000000, VLAN1 IP ()Software Version: 6.2.0r5.0, Type: Firewall+VPNFeature: AV-KCompiled by build_master at: Thu Jan 28 11:42:23 PST 2010Base Mac: 88e0.f334.e280File Name: ssgr5.0, Checksum: bc7b6d47, Total Memory: 256MBDate 01/16/2014 15:45:41, Daylight Saving Time enabledThe Netw

24、ork Time Protocol is EnabledUp 7206 hours 31 minutes 20 seconds Since 22Mar2013:10:14:21Total Device Resets: 0System in NAT/route mode.Use interface IP, Config Port: 80Manager IP enforced: FalseManager IPs: 0檢查啟動了多長時間，如果時間短，表示最近重啟過，應(yīng)了解重啟的原因。檢查設(shè)備運行溫度VPN-QDLC-SSG140-4FC-2(M)- get chassis Motherboard I

25、nformation: Serial Number: 0185082011000470 Control Number: ffffffff Hardware Version: 1010(0) CPLD Version: 3.2 System Temperature: 29 C or 84 F Temperature Alarm Threshold: 20 - 60 C Slot Information:Slot Name Status Asm-id Serial Number Version 1 Empty 2 Empty 3 Empty 4 Empty VPN-QDLC-SSG140-4FC-

26、2(M)-不超過40度檢查cpu使用率VPN-QDLC-SSG140-4FC-2(M)- Get per cpu deAverage System Utilization: 2%Last 60 seconds:59: 2 58: 2 57: 2 56: 2 55: 2 54: 2 53: 2 52: 2 51: 2 50: 2 49: 2 48: 2 47: 2 46: 2 45: 2 44: 2 43: 2 42: 2 41: 2 40: 2 39: 2 38: 2 37: 2 36: 2 35: 2 34: 2 33: 2 32: 2 31: 2 30: 2 29: 2 28: 2 27:

27、 2 26: 2 25: 2 24: 2 23: 2 22: 2 21: 2 20: 2 19: 2 18: 2 17: 2 16: 2 15: 2 14: 2 13: 2 12: 2 11: 2 10: 2 9: 2 8: 2 7: 2 6: 2 5: 2 4: 2 3: 2 2: 2 1: 2 0: 2 Last 60 minutes:59: 2 58: 1 57: 2 56: 1 55: 1 54: 1 53: 2 52: 2 51: 2 50: 1 49: 1 48: 1 47: 1 46: 1 45: 1 44: 1 43: 1 42: 2 41: 2 40: 2 39: 2 38:

28、 1 37: 2 36: 2 35: 2 34: 2 33: 2 32: 2 31: 2 30: 2 29: 2 28: 2 27: 2 26: 2 25: 2 24: 2 23: 2 22: 2 21: 2 20: 2 19: 2 18: 2 17: 1 16: 1 15: 1 14: 2 13: 2 12: 2 11: 2 10: 2 9: 2 8: 2 7: 2 6: 2 5: 2 4: 2 3: 2 2: 2 1: 2 0: 2 Last 24 hours:23: 1 22: 1 21: 2 20: 2 19: 3 18: 6 17: 2 16: 2 15: 2 14: 2 13: 2

29、 12: 2 11: 2 10: 2 9: 2 8: 2 7: 2 6: 1 5: 2 4: 1 3: 2 2: 2 1: 2 0: 2 VPN-QDLC-SSG140-4FC-2(M)-CPU占用率不超過60%檢查NSRP雙機狀態(tài)VPN-QDLC-SSG140-4FC-2(M)- Get nsrpnsrp version: 2.0cluster info:cluster id: 1, no namelocal unit id: 3465856active units discovered: index: 0, unit id: 3465856, ctrl mac: 88e0f334e280 , data mac: 88e0f334e285index: 1, unit id: 6776960, ctrl mac: 78fe3d676880 , data mac: 78fe3d676885total number of units: 2VSD group info:init hold time: 5heartbe