h3c防火墻巡檢報(bào)告

1、精選優(yōu)質(zhì)文檔-傾情為你奉上精選優(yōu)質(zhì)文檔-傾情為你奉上專(zhuān)心-專(zhuān)注-專(zhuān)業(yè)專(zhuān)心-專(zhuān)注-專(zhuān)業(yè)精選優(yōu)質(zhì)文檔-傾情為你奉上專(zhuān)心-專(zhuān)注-專(zhuān)業(yè)H3C防火墻巡檢報(bào)告 巡檢人員： 巡檢日期：2016-05-31巡檢項(xiàng)目網(wǎng)絡(luò)帶寬、鏈路類(lèi)型、鏈路信息網(wǎng)絡(luò)設(shè)備信息、設(shè)備品牌、設(shè)備型號(hào)、設(shè)備放置、設(shè)備性能參數(shù)、設(shè)備內(nèi)存大小、設(shè)備槽位、設(shè)備序列號(hào)、設(shè)備購(gòu)買(mǎi)年限、設(shè)備保修狀態(tài)、設(shè)備備件狀況、設(shè)備標(biāo)簽完善程度網(wǎng)絡(luò)設(shè)備軟件版本信息、當(dāng)前版本信息、最新版本信息、設(shè)備持續(xù)運(yùn)行時(shí)間、設(shè)備備份情況、設(shè)備CPU利用率、設(shè)備內(nèi)存利用率、設(shè)備模塊運(yùn)行狀態(tài)、設(shè)備風(fēng)扇及電源狀況、設(shè)備端口數(shù)量、設(shè)備端口類(lèi)別、設(shè)備端口類(lèi)型、設(shè)備運(yùn)行機(jī)箱溫度設(shè)備連通性

2、、冗余協(xié)議運(yùn)行狀態(tài)、VLAN信息、以太通道信息、路由協(xié)議、鄰居關(guān)系、交換協(xié)議、生成樹(shù)STP協(xié)議、NAT連接數(shù)狀態(tài)、FLASH信息、設(shè)備配置信息分析、多余配置信息分析、配置精簡(jiǎn)建議、安全建議、防火墻信息、防火墻策略、防火墻DMZ區(qū)檢查、防火墻連接數(shù)、應(yīng)用業(yè)務(wù)、IP地址使用狀況簡(jiǎn)單機(jī)房環(huán)境檢查檢查指導(dǎo)檢查設(shè)備軟件版本PPC_fs1編號(hào)：ppc_fs1檢查項(xiàng)目：H3C設(shè)備軟件版本、運(yùn)行時(shí)間、Memory大小等檢查命令：display version備注：主要顯示VRP的版本、路由器持續(xù)運(yùn)行的時(shí)間、路由器主存的大小、共享存儲(chǔ)器的大小、閃存的大小、VRP映像的文件名，以及路由器VRP從何處啟動(dòng)等信息。D

3、is version命令顯示了路由器的許多非常有用的信息display version=H3C Comware Platform SoftwareComware Software, Version 5.20, Feature 5123P18Copyright (c) 2004-2013 Hangzhou H3C Tech. Co., Ltd. All rights reserved.H3C SecPath U200-CS uptime is 163 weeks, 1 day, 23 hours, 24 minutes CPU type: RMI XLS404 800MHz CPU 512M b

4、ytes DDR2 SDRAM Memory 32M bytes Flash Memory PCB Version:Ver.B Logic Version: 3.0 Basic BootWare Version: 1.33 Extend BootWare Version: 1.33 FIXED PORT CON (Hardware)Ver.B, (Driver)1.0, (Cpld)3.0 FIXED PORT GE0/0 (Hardware)Ver.B, (Driver)1.0, (Cpld)3.0 FIXED PORT GE0/1 (Hardware)Ver.B, (Driver)1.0,

5、 (Cpld)3.0 FIXED PORT GE0/2 (Hardware)Ver.B, (Driver)1.0, (Cpld)3.0 FIXED PORT GE0/3 (Hardware)Ver.B, (Driver)1.0, (Cpld)3.0 FIXED PORT GE0/4 (Hardware)Ver.B, (Driver)1.0, (Cpld)3.0 SUBCARD 1 The SubCard is not present檢查結(jié)果：R正常 不正常ppc_fs2編號(hào)：ppc_fs2檢查項(xiàng)目：H3C設(shè)備軟件版本、運(yùn)行時(shí)間、Memory大小等檢查命令：display version備注：主

6、要顯示VRP的版本、路由器持續(xù)運(yùn)行的時(shí)間約、路由器主存的大小、共享存儲(chǔ)器的大小、閃存的大小、VRP映像的文件名，以及路由器VRP從何處啟動(dòng)等信息。Dis version命令顯示了路由器的許多非常有用的信息=_display version=H3C Comware Platform SoftwareComware Software, Version 5.20, Feature 5123P18Comware Platform Software Version COMWAREV500R002B83D219H3C SecPath U200-CS Software Version V500R001B01

7、D318SP05Copyright (c) 2004-2013 Hangzhou H3C Tech. Co., Ltd. All rights reserved.Compiled Jan 6 2013 12:56:02, RELEASE SOFTWAREH3C SecPath U200-CS uptime is 163 weeks, 1 day, 22 hours, 58 minutes CPU type: RMI XLS404 800MHz CPU 512M bytes DDR2 SDRAM Memory 32M bytes Flash Memory PCB Version:Ver.B Lo

8、gic Version: 3.0 Basic BootWare Version: 1.33 Extend BootWare Version: 1.33 FIXED PORT CON (Hardware)Ver.B, (Driver)1.0, (Cpld)3.0 FIXED PORT GE0/0 (Hardware)Ver.B, (Driver)1.0, (Cpld)3.0 FIXED PORT GE0/1 (Hardware)Ver.B, (Driver)1.0, (Cpld)3.0 FIXED PORT GE0/2 (Hardware)Ver.B, (Driver)1.0, (Cpld)3.

9、0 FIXED PORT GE0/3 (Hardware)Ver.B, (Driver)1.0, (Cpld)3.0 FIXED PORT GE0/4 (Hardware)Ver.B, (Driver)1.0, (Cpld)3.0 SUBCARD 1 The SubCard is not present檢查結(jié)果：R正常 不正常設(shè)備CPU利用率情況檢查編號(hào)：ppc_fs1檢查項(xiàng)目：H3C設(shè)備CPU利用率情況檢查 檢查命令：H3Cdisplay cpu H3Cdis cpu history備注：使用dis cpu命令檢查設(shè)備短時(shí)間內(nèi)（60秒）的CPU利用率。該命令將以百分比的形式給出路由器CPU的

10、利用率，同時(shí)顯示路由器中不同進(jìn)程的CPU占用率。在通常情況下，看VIDL這個(gè)進(jìn)程，這個(gè)進(jìn)程是空閑進(jìn)程，用100%減去這個(gè)進(jìn)程所占的百分比即為設(shè)備目前CPU所占比率。通過(guò)dis cpu history可以看60分鐘內(nèi)的平均CPU占用率，一般情況下平均值小于50%是可以接受的，當(dāng)然要根據(jù)這個(gè)設(shè)備所處位置和所跑協(xié)議。 檢查范例：（由于現(xiàn)實(shí)內(nèi)容過(guò)多，這里只截取部分）= Current CPU usage info =CPU Usage Stat. Cycle: 43 (Second)CPU Usage : 4%CPU Usage Stat. Time : 2016-06-01 14:51:34CPU

11、Usage Stat. Tick : 0 x1763b1(CPU Tick High) 0 x787bd230(CPU Tick Low)Actual Stat. Cycle : 0 x0(CPU Tick High) 0 xae6014a8(CPU Tick Low)TaskName CPU Runtime(CPU Tick High/CPU Tick Low)IPFF 0% 0/ 16988VIDL 96% 0/a7c31313TICK 0% 0/ 10ba299STMR 0% 0/ 1472f81DRVT 0% 0/ 66c596TMSG 0% 0/ 851d36 VP 0% 0/ 89

12、cIPCB 0% 0/ 1599cfRPCQ 0% 0/ 6e9704ADJ6 0% 0/ c67aIPCM 0% 0/ 1834bINFO 0% 0/ 7bdb OMS 0% 0/ 24b48 DEV 0% 0/ 50203SOCK 0% 0/ 41a2dADJ4 0% 0/ 275e7 ACL 0% 0/ 48dc1LAGG 0% 0/ 23432MSTP 0% 0/ 193e1PTMT 0% 0/ 1c8c8PTTP 0% 0/ 2c08f ARP 0% 0/ 2fdf47 IP 0% 0/ 74bad6FSLH 0% 0/ 11450FSLR 0% 0/ ce131NTPT 0% 0/

13、 1b838VTYD 0% 0/ 1271edVRRP 0% 0/ 31e108FIB6 0% 0/ 178dd ND 0% 0/ 12b5cfCWMP 0% 0/ 40565DT1X 0% 0/ 1362c ACM 0% 0/ ac957 LS 0% 0/ d9527RDSO 0% 0/ 7c8ee RDS 0% 0/ 2fdb8 SC 0% 0/ 573ec IKE 0% 0/ 5f4bIPSP 0% 0/ 52406L2TP 0% 0/ cc1b4MACA 0% 0/ 1961dPSEC 0% 0/ 182a7ULOG 0% 0/ bd352MFIB 0% 0/ 6824STND 0%

14、0/ 4c1caROUT 0% 0/ c2d864WIDS 0% 0/ bd689IFNT 0% 0/ 1c665 vt0 0% 0/ 89b91b檢查結(jié)果：R正常 不正常編號(hào)：ppc_fs2檢查項(xiàng)目：H3C設(shè)備CPU利用率情況檢查 檢查命令：H3Cdisplay cpu H3Cdis cpu history備注：使用dis cpu命令檢查設(shè)備短時(shí)間內(nèi)（60秒）的CPU利用率。該命令將以百分比的形式給出路由器CPU的利用率，同時(shí)顯示路由器中不同進(jìn)程的CPU占用率。在通常情況下，看VIDL這個(gè)進(jìn)程，這個(gè)進(jìn)程是空閑進(jìn)程，用100%減去這個(gè)進(jìn)程所占的百分比即為設(shè)備目前CPU所占比率。通過(guò)dis cp

15、u history可以看60分鐘內(nèi)的平均CPU占用率，一般情況下平均值小于50%是可以接受的，當(dāng)然要根據(jù)這個(gè)設(shè)備所處位置和所跑協(xié)議。 檢查范例：（由于現(xiàn)實(shí)內(nèi)容過(guò)多，這里只截取部分） =running CPU usage information= Current CPU usage info =CPU Usage Stat. Cycle: 24 (Second)CPU Usage : 4%CPU Usage Stat. Time : 2016-06-01 14:47:40CPU Usage Stat. Tick : 0 x(CPU Tick High) 0 x(CPU Tick Low)Actu

16、al Stat. Cycle : 0 x0(CPU Tick High) 0 x612f02ab(CPU Tick Low)TaskName CPU Runtime(CPU Tick High/CPU Tick Low)IPFF 0% 0/ d33eVIDL 96% 0/5d94f361TICK 0% 0/ 7d943aSTMR 0% 0/ b9a604DRVT 0% 0/ 371baaTMSG 0% 0/ 3db147IPCB 0% 0/ 9fd14RPCQ 0% 0/ 392a8bADJ6 0% 0/ 6d00IPCM 0% 0/ cfabINFO 0% 0/ 73ee OMS 0% 0/

17、 14013 DEV 0% 0/ 27c0fSOCK 0% 0/ 1ce79ADJ4 0% 0/ 16208 ACL 0% 0/ 2996aLAGG 0% 0/ 11bb4MSTP 0% 0/ dde7PTMT 0% 0/ fe2cPTTP 0% 0/ 17fee ARP 0% 0/ 18d7b2 IP 0% 0/ 3da0eeFSLH 0% 0/ a1f0FSLR 0% 0/ 65c7eNTPT 0% 0/ f054VTYD 0% 0/ a11dcVRRP 0% 0/ 1af7e9FIB6 0% 0/ d42b ND 0% 0/ 99f12CWMP 0% 0/ 1d5c8DT1X 0% 0/

18、 b039 ACM 0% 0/ 6272f LS 0% 0/ 65aa9RDSO 0% 0/ 391a2 RDS 0% 0/ 1a046 SC 0% 0/ 30898 IKE 0% 0/ 30dcIPSP 0% 0/ 24e00L2TP 0% 0/ 6ba70MACA 0% 0/ e211PSEC 0% 0/ d4e6ULOG 0% 0/ 62a43MFIB 0% 0/ 37b3STND 0% 0/ 27de2ROUT 0% 0/ WIDS 0% 0/ 6b521IFNT 0% 0/ f699 vt0 0% 0/ 7769be檢查結(jié)果：R正常 不正常設(shè)備memory利用狀況檢查編號(hào)：ppc_f

19、s1檢查項(xiàng)目：H3C設(shè)備memory利用狀況檢查 檢查命令：H3C#dis memory備注：dis memory顯示了存儲(chǔ)器的一般信息，它表明系統(tǒng)可用的內(nèi)存和使用內(nèi)存，注意使用的百分比數(shù)。檢查范例：（由于現(xiàn)實(shí)內(nèi)容過(guò)多，這里只截取部分） =display memory=System Total Memory(bytes): Total Used Memory(bytes): Used Rate: 31%檢查結(jié)果：R正常 不正常編號(hào)：ppc_fs2檢查項(xiàng)目：H3C設(shè)備memory利用狀況檢查 檢查命令：H3C#dis memory備注：dis memory顯示了存儲(chǔ)器的一般信息，它表明系統(tǒng)可用的

20、內(nèi)存和使用內(nèi)存，注意使用的百分比數(shù)。檢查范例：（由于現(xiàn)實(shí)內(nèi)容過(guò)多，這里只截取部分） =display memory=System Total Memory(bytes): Total Used Memory(bytes): Used Rate: 30%檢查結(jié)果：R正常 不正常設(shè)備系統(tǒng)模塊運(yùn)行狀況檢查編號(hào)：ppc_fs1檢查項(xiàng)目：H3C設(shè)備模塊運(yùn)行狀況檢查 檢查命令：H3Cdis device備注：此命令能看到電源及風(fēng)扇狀態(tài)。檢查范例：（由于現(xiàn)實(shí)內(nèi)容過(guò)多，這里只截取部分） =display device= Status :OK Type :RPU Hardware :B Driver :1.0

21、CPLD :3.0 SubCard Num :2 CFCard Num :1 Usb Num :1檢查結(jié)果：R正常 不正常編號(hào)：ppc_fs2檢查項(xiàng)目：H3C設(shè)備模塊運(yùn)行狀況檢查 檢查命令：H3Cdis device備注：此命令能看到電源及風(fēng)扇狀態(tài)。檢查范例：（由于現(xiàn)實(shí)內(nèi)容過(guò)多，這里只截取部分） =display device= Status :OK Type :RPU Hardware :B Driver :1.0 CPLD :3.0 SubCard Num :2 CFCard Num :1 Usb Num :1檢查結(jié)果：R正常 不正常設(shè)備系統(tǒng)LOG日志檢查編號(hào)：ppc_fs1檢查項(xiàng)目：H3

22、C設(shè)備系統(tǒng)LOG日志檢查 檢查命令：H3Cdis log備注: 最好使用dis clock看下設(shè)備時(shí)間，正常情況下設(shè)備日期時(shí)間與實(shí)際日期時(shí)間小于10分鐘。日期正確的話(huà)，可以更好的分析日志。檢查范例：（由于現(xiàn)實(shí)內(nèi)容過(guò)多，這里只截取部分） =display logbuffer=Logging buffer configuration and contents:enabledAllowed max buffer size : 1024Actual buffer size : 512Channel number : 4 , Channel name : logbufferDropped message

23、s : 0Overwritten messages : Current messages : 512%May 31 16:03:22:637 2016 ppc_fs1 SHELL/5/SHELL_LOGIN: nxdxppc logged in from 36.%May 31 16:03:42:569 2016 ppc_fs1 SHELL/6/SHELL_CMD: -Task=vt0-IPAddr=36-User=nxdxppc; Command is dis cur%May 31 16:06:08:697 2016 ppc_fs1 SHELL/6/SHELL_CMD: -Task=vt0-I

24、PAddr=36-User=nxdxppc; Command is quit%May 31 16:06:08:697 2016 ppc_fs1 SHELL/5/SHELL_LOGOUT: nxdxppc logged out from 36.%May 31 16:06:08:699 2016 ppc_fs1 SSH/6/SSH_CONNECTION_CLOSE: STEL user nxdxppc (IP: 36) logged out because the SSH client closed the connection.%May 31 16:06:14:200 2016 ppc_fs1

25、SHELL/5/SHELL_LOGINFAIL: SSH user nxdxppc failed to log in from 36 on VTY0.%May 31 16:22:46:789 2016 ppc_fs1 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 7 on VTY0 due to IP restriction.%May 31 16:22:47:028 2016 ppc_fs1 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 7 on VTY0 due

26、 to IP restriction.%May 31 16:48:55:583 2016 ppc_fs1 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 42 on VTY0 due to IP restriction.%May 31 16:48:55:637 2016 ppc_fs1 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 42 on VTY0 due to IP restriction.%May 31 17:04:02:386 2016 ppc_fs1 S

27、C/6/SC_AAA_LAUNCH: -AAAType=AUTHEN-AAAScheme= local-Service=login-UserName=patrolsystem; AAA launched.%May 31 17:04:02:386 2016 ppc_fs1 SC/6/SC_AAA_SUCCESS: -AAAType=AUTHEN-AAAScheme= local-Service=login-UserName=patrolsystem; AAA is successful.%May 31 17:04:02:386 2016 ppc_fs1 SC/6/SC_AAA_LAUNCH: -

28、AAAType=AUTHOR-AAAScheme= local-Service=login-UserName=patrolsystem; AAA launched.%May 31 17:04:02:387 2016 ppc_fs1 SC/6/SC_AAA_SUCCESS: -AAAType=AUTHOR-AAAScheme= local-Service=login-UserName=patrolsystem; AAA is successful.%May 31 17:04:02:387 2016 ppc_fs1 SC/6/SC_AAA_LAUNCH: -AAAType=ACCOUNT-AAAS

29、cheme= local-Service=login-UserName=patrolsystem; AAA launched.%May 31 17:04:02:387 2016 ppc_fs1 SC/6/SC_AAA_SUCCESS: -AAAType=ACCOUNT-AAAScheme= local-Service=login-UserName=patrolsystem; AAA is successful.%May 31 17:04:02:395 2016 ppc_fs1 SSH/6/SSH_LOGIN: STEL user patrol (IP: 36) logged in succes

30、sfully.%May 31 17:04:02:498 2016 ppc_fs1 SHELL/5/SHELL_LOGIN: patrol logged in from 36.%May 31 17:04:03:184 2016 ppc_fs1 SHELL/6/SHELL_CMD: -Task=vt0-IPAddr=36-User=patrol; Command is dis vrrp%May 31 17:04:04:203 2016 ppc_fs1 SHELL/6/SHELL_CMD: -Task=vt0-IPAddr=36-User=patrol; Command is dis ip inte

31、r br%May 31 17:04:05:198 2016 ppc_fs1 SHELL/6/SHELL_CMD: -Task=vt0-IPAddr=36-User=patrol; Command is display cpu-usage%May 31 17:04:06:199 2016 ppc_fs1 SHELL/6/SHELL_CMD: -Task=vt0-IPAddr=36-User=patrol; Command is dis memory%May 31 17:09:07:626 2016 ppc_fs1 SSH/6/SSH_LOGOUT: STEL user patrol (IP: 3

32、6) logged out.%May 31 17:09:07:642 2016 ppc_fs1 SHELL/5/SHELL_LOGOUT: patrol logged out from 36.%May 31 17:16:39:896 2016 ppc_fs1 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 35 on VTY0 due to IP restriction.%May 31 17:54:28:857 2016 ppc_fs1 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log

33、 in from 00 on VTY0 due to IP restriction.%May 31 17:54:32:231 2016 ppc_fs1 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 00 on VTY0 due to IP restriction.%May 31 18:58:31:848 2016 ppc_fs1 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 9 on VTY0 due to IP restriction.%May 31 18:58

34、:32:541 2016 ppc_fs1 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 9 on VTY0 due to IP restriction.%May 31 19:50:26:214 2016 ppc_fs1 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 00 on VTY0 due to IP restriction.%May 31 19:53:16:168 2016 ppc_fs1 SHELL/5/SHELL_LOGINFAIL: SSH user

35、failed to log in from 6 on VTY0 due to IP restriction.%May 31 19:55:17:679 2016 ppc_fs1 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 4 on VTY0 due to IP restriction.%May 31 20:01:29:367 2016 ppc_fs1 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 29 on VTY0 due to IP restriction.有

36、無(wú)異常日志：R有 沒(méi)有編號(hào)：ppc_fs2檢查項(xiàng)目：H3C設(shè)備系統(tǒng)LOG日志檢查 檢查命令：H3Cdis log備注: 最好使用dis clock看下設(shè)備時(shí)間，正常情況下設(shè)備日期時(shí)間與實(shí)際日期時(shí)間小于10分鐘。日期正確的話(huà)，可以更好的分析日志。檢查范例：（由于現(xiàn)實(shí)內(nèi)容過(guò)多，這里只截取部分） =display logbuffer=Logging buffer configuration and contents:enabledAllowed max buffer size : 1024Actual buffer size : 512Channel number : 4 , Channel nam

37、e : logbufferDropped messages : 0Overwritten messages : Current messages : 512%May 31 01:03:27:307 2016 ppc_fs2 SC/6/SC_AAA_SUCCESS: -AAAType=AUTHOR-AAAScheme= local-Service=login-UserName=patrolsystem; AAA is successful.%May 31 01:03:27:308 2016 ppc_fs2 SC/6/SC_AAA_LAUNCH: -AAAType=ACCOUNT-AAASchem

38、e= local-Service=login-UserName=patrolsystem; AAA launched.%May 31 01:03:27:308 2016 ppc_fs2 SC/6/SC_AAA_SUCCESS: -AAAType=ACCOUNT-AAAScheme= local-Service=login-UserName=patrolsystem; AAA is successful.%May 31 01:03:27:315 2016 ppc_fs2 SSH/6/SSH_LOGIN: STEL user patrol (IP: 36) logged in successful

39、ly.%May 31 01:03:27:417 2016 ppc_fs2 SHELL/5/SHELL_LOGIN: patrol logged in from 36.%May 31 01:03:28:128 2016 ppc_fs2 SHELL/6/SHELL_CMD: -Task=vt0-IPAddr=36-User=patrol; Command is dis memory%May 31 01:03:29:156 2016 ppc_fs2 SHELL/6/SHELL_CMD: -Task=vt0-IPAddr=36-User=patrol; Command is dis ip inter

40、br%May 31 01:03:30:143 2016 ppc_fs2 SHELL/6/SHELL_CMD: -Task=vt0-IPAddr=36-User=patrol; Command is display cpu-usage%May 31 01:08:31:405 2016 ppc_fs2 SSH/6/SSH_LOGOUT: STEL user patrol (IP: 36) logged out.%May 31 01:08:31:574 2016 ppc_fs2 SHELL/5/SHELL_LOGOUT: patrol logged out from 36.%May 31 01:19

41、:45:482 2016 ppc_fs2 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 64 on VTY0 due to IP restriction.%May 31 01:23:57:437 2016 ppc_fs2 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 95 on VTY0 due to IP restriction.%May 31 01:29:53:817 2016 ppc_fs2 SHELL/5/SHELL_LOGINFAIL: SSH user

42、 failed to log in from 64 on VTY0 due to IP restriction.%May 31 01:36:17:059 2016 ppc_fs2 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 41 on VTY0 due to IP restriction.%May 31 02:11:16:735 2016 ppc_fs2 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 94 on VTY0 due to IP restrictio

43、n.%May 31 02:43:34:013 2016 ppc_fs2 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 01 on VTY0 due to IP restriction.%May 31 02:43:34:310 2016 ppc_fs2 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 01 on VTY0 due to IP restriction.%May 31 02:43:37:555 2016 ppc_fs2 SHELL/5/SHELL_LOGI

44、NFAIL: SSH user failed to log in from 01 on VTY0 due to IP restriction.%May 31 03:09:45:119 2016 ppc_fs2 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 17 on VTY0 due to IP restriction.%May 31 03:16:29:024 2016 ppc_fs2 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 06 on VTY0 due t

45、o IP restriction.%May 31 03:45:16:520 2016 ppc_fs2 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 23 on VTY0 due to IP restriction.%May 31 03:45:19:590 2016 ppc_fs2 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 23 on VTY0 due to IP restriction.%May 31 03:45:22:664 2016 ppc_fs2 SHE

46、LL/5/SHELL_LOGINFAIL: SSH user failed to log in from 23 on VTY0 due to IP restriction.%May 31 03:45:25:729 2016 ppc_fs2 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 23 on VTY0 due to IP restriction.%May 31 03:45:28:801 2016 ppc_fs2 SHELL/5/SHELL_LOGINFAIL: SSH user failed to log in from 2

47、3 on VTY0 due to IP restriction.有無(wú)異常日志：R有 沒(méi)有設(shè)備冗余協(xié)議檢查編號(hào)：ppc_fs1檢查項(xiàng)目：VRRP熱備協(xié)議檢查檢查命令：H3Cdis vrrp H3Cdis vrrp statistics檢查期待結(jié)果:主備用狀態(tài)正常備注: 與自己期望配置相符檢查范例：（由于現(xiàn)實(shí)內(nèi)容過(guò)多，這里只截取部分） =display vrrp verbose= IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 6 Int

48、erface GigabitEthernet0/1.1 VRID : 40 Adver Timer : 1 Admin Status : Up State : Backup Config Pri : 105 Running Pri : 105 Preempt Mode : Yes Delay Time : 0 Auth Type : None Virtual IP : 44 Master IP : 45 VRRP Track Information: Track Interface: GE0/2.1 State : Up Pri Reduced : 30 Interface GigabitEt

49、hernet0/1.2 VRID : 50 Adver Timer : 1 Admin Status : Up State : Backup Config Pri : 105 Running Pri : 105 Preempt Mode : Yes Delay Time : 0 Auth Type : None Virtual IP : 8 Master IP : 9 VRRP Track Information: Track Interface: GE0/2.1 State : Up Pri Reduced : 30 Interface GigabitEthernet0/1.3 VRID :

50、 60 Adver Timer : 1 Admin Status : Up State : Backup Config Pri : 105 Running Pri : 105 Preempt Mode : Yes Delay Time : 0 Auth Type : None Virtual IP : 28 Master IP : 29 VRRP Track Information: Track Interface: GE0/2.1 State : Up Pri Reduced : 30 Interface GigabitEthernet0/2.1 VRID : 10 Adver Timer

51、: 1 Admin Status : Up State : Backup Config Pri : 105 Running Pri : 105 Preempt Mode : Yes Delay Time : 0 Auth Type : None Virtual IP : Master IP : VRRP Track Information: Track Interface: GE0/1.1 State : Up Pri Reduced : 30 Interface GigabitEthernet0/2.2 VRID : 20 Adver Timer : 1 Admin Status : Up

52、State : Backup Config Pri : 105 Running Pri : 105 Preempt Mode : Yes Delay Time : 0 Auth Type : None Virtual IP : Master IP : VRRP Track Information: Track Interface: GE0/1.1 State : Up Pri Reduced : 30 Interface GigabitEthernet0/2.3 VRID : 30 Adver Timer : 1 Admin Status : Up State : Backup Config

53、Pri : 105 Running Pri : 105 Preempt Mode : Yes Delay Time : 0 Auth Type : None Virtual IP : Master IP : VRRP Track Information: Track Interface: GE0/1.1 State : Up Pri Reduced : 30檢查結(jié)果：R正常 不正常編號(hào)：ppc_fs2檢查項(xiàng)目：VRRP熱備協(xié)議檢查檢查命令：H3Cdis vrrp H3Cdis vrrp statistics檢查期待結(jié)果:主備用狀態(tài)正常備注: 與自己期望配置相符檢查范例：（由于現(xiàn)實(shí)內(nèi)容過(guò)多，這里

54、只截取部分） =display vrrp verbose= IPv4 Standby Information: Run Mode : Standard Run Method : Virtual MAC Total number of virtual routers : 6 Interface GigabitEthernet0/1.1 VRID : 40 Adver Timer : 1 Admin Status : Up State : Backup Config Pri : 105 Running Pri : 105 Preempt Mode : Yes Delay Time : 0 Auth

55、 Type : None Virtual IP : 44 Master IP : 45 VRRP Track Information: Track Interface: GE0/2.1 State : Up Pri Reduced : 30 Interface GigabitEthernet0/1.2 VRID : 50 Adver Timer : 1 Admin Status : Up State : Backup Config Pri : 105 Running Pri : 105 Preempt Mode : Yes Delay Time : 0 Auth Type : None Vir

56、tual IP : 8 Master IP : 9 VRRP Track Information: Track Interface: GE0/2.1 State : Up Pri Reduced : 30 Interface GigabitEthernet0/1.3 VRID : 60 Adver Timer : 1 Admin Status : Up State : Backup Config Pri : 105 Running Pri : 105 Preempt Mode : Yes Delay Time : 0 Auth Type : None Virtual IP : 28 Maste

57、r IP : 29 VRRP Track Information: Track Interface: GE0/2.1 State : Up Pri Reduced : 30 Interface GigabitEthernet0/2.1 VRID : 10 Adver Timer : 1 Admin Status : Up State : Backup Config Pri : 105 Running Pri : 105 Preempt Mode : Yes Delay Time : 0 Auth Type : None Virtual IP : Master IP : VRRP Track I

58、nformation: Track Interface: GE0/1.1 State : Up Pri Reduced : 30 Interface GigabitEthernet0/2.2 VRID : 20 Adver Timer : 1 Admin Status : Up State : Backup Config Pri : 105 Running Pri : 105 Preempt Mode : Yes Delay Time : 0 Auth Type : None Virtual IP : Master IP : VRRP Track Information: Track Inte

59、rface: GE0/1.1 State : Up Pri Reduced : 30 Interface GigabitEthernet0/2.3 VRID : 30 Adver Timer : 1 Admin Status : Up State : Backup Config Pri : 105 Running Pri : 105 Preempt Mode : Yes Delay Time : 0 Auth Type : None Virtual IP : Master IP : VRRP Track Information: Track Interface: GE0/1.1 State :

60、 Up Pri Reduced : 30檢查結(jié)果：R正常 不正常路由狀況檢查編號(hào)：ppc_fs1檢查項(xiàng)目：路由狀況檢查檢查命令：H3Cdis ip route 檢查期待結(jié)果:路由表應(yīng)包含正確的路由信息備注:檢查范例：（由于現(xiàn)實(shí)內(nèi)容過(guò)多，這里只截取部分） =display ip routing-table=Routing Tables: Public Destinations : 51 Routes : 51Destination/Mask Proto Pre Cost NextHop Interface/0 Static 60 0 5 GE0/1.2/16 Static 60 0 25 GE0