Radware LinkProof 巡检文档.doc

1.1 命令行维护命令以下全是命令行下面的常用维护命令，可以通过Console/Telenet/SSH来执行。1.1.1 查看接口地址LP-Master#net ip IP Interface ParametersIP Address Network Mask If Number VlanTag61.1.1.10 255.255.255.0 1 0192.168.1.10 255.255.255.0 8 0210.1.1.10 255.255.255.0 2 01.1.2 查看路由表LP-Master#net route table Routing TableDestination Network Mask Next Hop Interface TypeAddress Index0.0.0.0 0.0.0.0 61.1.1.1 1 remote61.1.1.0 255.255.255.0 0.0.0.0 1 local192.168.1.0 255.255.255.0 0.0.0.0 8 local210.1.1.0 255.255.255.0 0.0.0.0 2 local1.1.3 查看CPULinkProof#sys os cpuDevice Resource Utilization RS Resource Utilization : 0RE Resource Utilization : 0Last 5 sec. Average Utilization : 0Last 60 sec. Average Utilization : 0Master Utilization : 0如果有一项值超过90,就需要引起注意1.1.4 查看端口流量此命令用来查看各端口的当前流量详细信息。ODS-Master#sys last-sec-inf-stats Ports statistics for the last secondPort Index InBound InBound OutBound OutBound Megabytes Packets Megabytes Packets G-1 0 0 0 1 G-2 0 0 0 1 G-3 0 0 0 0 G-4 0 0 0 0 G-5 0 0 0 0 G-6 0 0 0 0 G-7 0 0 0 0 G-8 0 0 0 0 G-9 0 0 0 0 G-10 0 0 0 0 G-11 0 0 0 0 G-12 0 0 0 0 XG-1 0 0 0 0 XG-2 0 0 0 0 XG-3 0 0 0 0 XG-4 0 0 0 0 MNG-1 0 0 0 0 MNG-2 0 0 0 0 1.1.5 查看设备流量此命令用来查看当前设备的总流量信息。ODS-Master#sys last-sec-total-inputTotal Input in all ports in the last second: 10301.1.6 查看设备温度(仅限ODS)这条命令可以显示当前设备CPU的温度。正常值在70摄氏度以下，超过73摄氏度，系统会自动关机，请检查通风状态。LinkProof#sys hardware temperature-showSensor number: 0 - Status: normal, Temperature: 53Sensor number: 1 - Status: normal, Temperature: 521.1.7 查看链路的连接用户数可以查看每台Router的进出流量，连接用户数等信息。LP-Master#lp servers extended-table RS NextHopRouter Table IPaddress Name Mac addr AdminSt OperSt MacSt 210. 1. 1. 1 ALL /CNC 00124414d3fc Enable Active Found 61. 1. 1. 1 ALL /TEL 000911dcb6cc Enable Active Found 61. 1. 1. 1 CT /Telecom 000911dcb6cc Enable Active Found IPaddress Type Frms Kbits/s Wght OpMode UsrsNo ConLimit port 210. 1. 1. 1 NxtHopR 46894 168248 2 Regular 28261 0 2 61. 1. 1. 1 NxtHopR 23232 98989 1 Regular 12323 0 1 61. 1. 1. 1 NxtHopR 0 0 1 Regular 0 0 1 IPaddress Kb/s Limit In Limit Out Limit In Rate Out Rate 210. 1. 1. 1 0 0 0 113210 54184 61. 1. 1. 1 0 0 0 32132 11233 61. 1. 1. 1 0 0 0 0 0 IPaddress Total Load In Load Out Load In/Out Per Farm (Kbits) (Kbits) (Kbits) 210. 1. 1. 1 29751163 2211741 27539421 0% 0% 61. 1. 1. 1 24334324 234234 27834874 0% 0% 61. 1. 1. 1 0 0 0 0% 0%1.1.8 查看LinkProof的会话表LinkProof#lp client table Client TableTotal Number of Entries : 38702 Source Addr Dest Addr SPort DPort Protocol Flow218. 75. 79. 33 58. 67.136.125 6000 2967 TCP anyflow Farm Name Server Name Idx Action/PortNum Type Ext IdNHR CT2 1 Send T/F Farm Reg 260339 Source Addr Dest Addr SPort DPort Protocol Flow124. 15. 94. 46 117. 81. 51.185 1911 5670 TCP anyflow Farm Name Server Name Idx Action/PortNum Type Ext IdNHR CT2 1 Send T/F Farm DN 203763LinkProof#lp client table-summary Client TableNum of Entries : 38285 Source Addr Dest Addr SrcP DstP Farms sequence 0 1 2 3 4 5 6124. 15. 65. 50 117. 79. 68. 61 46644 4074 Rtr 220.113.236.111 119.147. 12.198 1032 8000 Rtr 211.162. 62.166 117.136. 19.162 0 0 Rtr 220.113.234.194 119.147. 18. 89 1076 443 Rtr 124. 15. 71.117 120. 15.125. 65 1146 1098 Rtr 124. 15. 64.113 122. 84. 10. 20 2475 18985 Rtr 220.113.232.158 119.129. 61.158 20056 24107 Rtr 172. 16.253.237 118.239. 50.103 49695 4167 Rtr 124. 15. 96.181 116.254.155.198 43573 38028 Rtr注意观察客户表的大小, 不要超过太大值. 一般情况下, 几千条是正常的.这个表的大小与Farm中设置的老化时间有很大关系, 老化时间越短, 表也就越小.lp client table命令带有丰富的参数功能，我们可以直接过滤出想看的内容。client table CLI command, which allow you to filterexisting client entries and display only relevant entries: -ipprint only entries with given IP address. -flprint only entries with given flow name. -fnprint only entries with given farm name. -snprint only entries with given server name. -vlprint only entries with forwarding type bridging. -apprint only entries with given application port. -dbprint only entries with delayed-bind information. -edprint only entries with edge farm information. -mappedprint entries including mapped information. -ptrprint only entries with given packet translation type (VIP, Dynamic NAT, VPN, and so on)1.1.9 查看LinkProof双机冗余状态下面为主机的状态，全部为MasterLP-Master#red v v VRRP TableIf Index VR ID VR MAC State Admin Status1 10 00005e00010a master up2 20 00005e000114 master up8 100 00005e000164 master up下面为备机的状态，全部为BackupLP-Backup#red v v VRRP TableIf Index VR ID VR MAC State Admin Status 1 10 00005e00010a backup up 2 20 00005e000114 backup up 8 100 00005e000164 backup up 1.1.10 查看LinkProof的命令全部配置appdirector#sys config immediateLP-Master#sys config immediate!Device Configuration!Date: 18-05-2009 10:17:14!DeviceDescription: LinkProof Application Switch - with SynApps!Base MAC Address: 00:03:b2:26:c3:c0!Software Version: 5.22.00DL (build Mar 1 2009, 16:23:30)!net ip-interface create 192.168.1.10 255.255.255.0 8net ip-interface create 61.1.1.10 255.255.255.0 1net ip-interface create 210.1.1.10 255.255.255.0 2net route table create 0.0.0.0 0.0.0.0 61.1.1.1 -i 1net route table create 0.0.0.0 0.0.0.0 210.1.1.1 -i 2 -m 20lp farms all-farms create CT -t Routerlp farms all-farms create ALL -t Routerlp servers all-servers create CT Telecom -ip 61.1.1.1lp servers all-servers create ALL TEL -ip 61.1.1.1lp servers all-servers create ALL CNC -ip 210.1.1.1lp flow-management farms-flow-table create