网络知识培训(第三部分)

1、网络知识培训网络知识培训普天润汇客户服务部 詹玉刚E_mail:第三部分第三部分 网络互连故障查找与排除 Juniper&Extreme设备基本配置VOIP技术原理与实现 广域网技术与业务应用 网络互连故障查找与排除 网络互连故障查找与排除网络互连故障查找与排除一、网络互连故障解决概述详细说明故障详细说明故障搜集详细情况搜集详细情况分析可能原因分析可能原因制定行动计划制定行动计划观察结果观察结果重复故障排除的过程重复故障排除的过程故障已排除故障已排除记录和整理有关情况记录和整理有关情况故障现象故障现象消除了么？消除了么？结束结束是是否否开始开始 网络互连故障查找与排除网络互连故障查找与

2、排除一、网络互连故障解决案例主机1主机2主机3主机4令牌环X广域网Y主机A主机B网络R网络S网络使用TCP/IP协议故障现象：主机1和主机2的用户得不到主机A或主机B的任何响应。 网络互连故障查找与排除网络互连故障查找与排除一、网络互连故障解决案例主机1主机2主机3主机4令牌环X广域网Y主机A主机B网络R网络S第一步：详细说明故障网络使用TCP/IP协议故障现象：主机1和主机2的用户得不到主机A或主机B的任何响应。主机1和主机2安装的网卡有故障主机1和主机2需要缺省网关，但是没有作配置主机1和主机2或路由器X中存在错误配置的子网掩码网络R连接了有故障的设备，它在以太网电缆上导致了 太多的冲突路

3、由器X或路由器Y访问控制列表配置不正确，导致来自受影响主机的数据流被阻塞广域网连接发生故障路由器没有配置有效的协议映射声明主机A和主机B没有识别主机1和主机2的配置 网络互连故障查找与排除网络互连故障查找与排除一、网络互连故障解决案例主机1主机2主机3主机4令牌环X广域网Y主机A主机B网络R网络S第二步：搜集详细情况主机3和主机4能够与主机A和主机B通信主机1和主机2能够与主机3和主机4通信主机1能够与主机2通信为了识别与主机1和主机2通信，主机A和主机B进行了正确的配置 网络互连故障查找与排除网络互连故障查找与排除一、网络互连故障解决案例主机1主机2主机3主机4令牌环X广域网Y主机A主机B网

4、络R网络S第三步：分析可能性假设1：主机1和主机2安装的网卡有故障可以不考虑这个可能的原因，因为主机1和主机2可以通信网卡故障配置假设2：主机1和主机2需要缺省网关，但没有作配置可以不考虑这个可能的原因，因为主机1和主机2能够与主机3和主机4通信假设3：主机1和主机2或路由器X中存在错误的子网掩码可以不考虑这个可能的原因，因为主机1和主机2能够与主机3和主机4通信子网掩码故障过多的冲突假设4：网络R连接了有故障的设备，导致太多的冲突可以不考虑这个可能的原因，因为主机1和主机2能够与主机3和主机4通信，并且主机1和主机2可以通信访问列表假设5：路由器X或Y访问列表不正确这是一种可能的原因，可以根

5、据收集的情况来判断假设6：广域网发生了故障可以不考虑这个可能的原因，因为主机3和主机4能够与主机A和主机B通信假设7：路由器没有配置有效的协议可以不考虑这个可能的原因，因为主机3和主机4能够与主机A和主机B通信故障范围被缩小为：路由器X或路由器Y中配置的访问控制列表可能阻塞了到达/来自主机1和主机2的数据流 网络互连故障查找与排除网络互连故障查找与排除一、网络互连故障解决案例主机1主机2主机3主机4令牌环X广域网Y主机A主机B网络R网络S第四步：制定操作计划Ip access-list extended connectdeny tcp any anypermit icmp any anyper

6、mit tcp any eq telnetinterface s0ip access-group connect 网络互连故障查找与排除网络互连故障查找与排除一、网络互连故障解决案例主机1主机2主机3主机4令牌环X广域网Y主机A主机B网络R网络S第五步：实施操作计划Router（config）#int s0router（config-if）#no ip accessgroup conect 网络互连故障查找与排除网络互连故障查找与排除一、网络互连故障解决案例主机1主机2主机3主机4令牌环X广域网Y主机A主机B网络R网络S第六步：观察操作计划的结果C

7、:ping Reply from : bytes=32 time10ms TTL=128 Reply from : bytes=32 time10ms TTL=128 Reply from : bytes=32 time10ms TTL=128 Reply from : bytes=32 time4、进入配置模式cli configureeditroot#5、设置路由器主机名，如果主机名包括空格，要将整个主机名放在引号内，如：“HLHB RT1”editroot# set system host-name HLH

8、B-RT16、设置路由器的域名editroot# set system domain-name 7、为路由器管理接口（MGIT）设置ip地址editroot# set interfaces fxp0 unit 0 family inet address/248、设置备份路由器的地址edit root# set system backup-router /289、设置系统DNS服务器地址editroot# set system name-server 4/28Juniper&Extreme设备基本配置设备基本配置1

9、、Juniper设备介绍基本配置10、设置ROOT用户密码editroot# set system root-authentication plain-text-passwordNew password: hljrootRetype new password: hljroot11、检查配置是否正确editroot# show system host-name HLHB-RT1 domain-name backup-router /28 name-server 4; Interfaces fxp0 unit 0 Family inet addr

10、ess /24; 12、提交配置editroot# commitJuniper&Extreme设备基本配置设备基本配置1、Juniper设备介绍层次配置模式第一层第一层systemsystemBackupBackuprouterrouteraddressaddressUser User usernameusernameFullFullnamenameAuthenticationAuthenticationencrypted-password password plain-text-password “password”ssh-rsa public-key;syst

11、em backup-router address;host-name host-name;login message text; class class-name allow-commands regular-expression ; allow-configuration regular-expression ; deny-commands regular-expression; deny-configuration regular-expression; idle-timeout minutes; permissions permissions ; user user-name full-

12、name complete-name; uid uid-value; class class-name; authentication (encrypted-password password | plain-text- password); ssh-rsa public-key; ssh-dsa public-key; Host-nameHost-namehostnamehostnameUID UID uiduidloginloginMessage Message texttextClass Class class-nameclass-nameJuniper&Extreme设备基本配

13、置设备基本配置1、Juniper设备介绍层次配置模式systemsystemBackupBackuprouterrouteraddressaddressUser User usernameusernameFullFullnamenameAuthenticationAuthenticationencrypted-password password plain-text-password “password”ssh-rsa public-key;editroot# set system host-name HLHB-RT1root# set system backup-router 211.137

14、.241.1/28root# set system login user hljcmnetroot# set system login user hljcmnet uid 2001root# set system login user hljcmnet class superuserroot# set system login user hljcmnet Aut en 123!#editroot# show system host-name HLHB-RT1 backup-router /28 login class superuser-local permissio

15、ns all; user hljcmnet uid 2001; class superuser; authentication encrypted-password$1$VdD2.$oaCTf4n/gnnh6Ke8ZSb1k/; # SECRET-DATA Host-nameHost-namehostnamehostnameUID UID uiduidloginloginMessage Message texttextClass Class class-nameclass-nameJuniper&Extreme设备基本配置设备基本配置1、Juniper设备介绍层次配置模式interfa

16、ceinterfacedisabledisablefamily familyeditroot# set interface fe-0/0/0 description “connect to summit48iroot# set interface fe-0/0/0 unit 0 family inet address 4/30rooteditroot# edit interface fe-0/0/0root# set description “connect to summit48iroot# edit unit 0 family inet root# set add

17、ress 4/30editroot# showinterfaces fe-0/0/0 description connect to summit48i; unit 0 family inet address 4/30; address address Interface nameInterface namedescription description texttextUnit Unit numbernumberJuniper&Extreme设备基本配置设备基本配置1、Juniper设备介绍常用命令配置静态路由editrouting-

18、options static defaults metric 10; preference 10; route /8 next-hop 54 retain; no-readvertise; route /8 next-hop qualified-next-hop 54 preference 5; metric 6 preference 7; root# set routing-options static defaults metric 10root# set routing-options st

19、atic defaults preference 10root# set routing-options static route /8 next-hop 54 retainroot# set routing-options static route /8 next-hop 54 no-readvertiseroot# set routing-options static route /8 next-hop root# set routing-options static route

20、 /8 qualified-next-hop 54 preference 5root# set routing-options static route /8 next-hop metric 6root# set routing-options static route /8 next-hop preference 7Juniper&Extreme设备基本配置设备基本配置1、Juniper设备介绍常用命令检查路由引擎的状态命令 userhost show chassis

21、 routing-engineuserhost show chassis routing-engine Routing Engine status Slot 0 Current state: Master Election priority: Master Temperature 41 C / 105 degrees F DRAM 765 Mbytes CPU utilization User 0 percent Background 0 percent Kernel 0 percent Interrupt 0 percent Idle 100 percent Serial ID 390000

22、04f8bdec01 Start time 2000-01-04 22:02:58 UTC Uptime 14 hours, 45 minutes, 40 seconds Load averages 1 minute 5 minute 15 minute 0.05 0.04 0.01 Slot 1 Current state Backup Election priority Backup (default) Temperature 41 C / 105 degrees F 。Juniper&Extreme设备基本配置设备基本配置1、Juniper设备介绍常用命令检查路由系统文件和启动盘

23、 userhost show system storageuserhost show system storageFilesystem 1K-blocks Used Avail Capacity Mounted on/dev/ad0s1a 65687 26701 33732 44% /devfs 16 16 0 100% /dev/dev/vn1 9310 9310 0 100% /packages/mnt/jbase/dev/vn2 8442 8442 0 100%/packages/mnt/jkernel-5.0R5.1/dev/vn3 11486 11486 0 100% /packag

24、es/mnt/jpfe-5.0R5.1/dev/vn4 5742 5742 0 100% /packages/mnt/jroute-5.0R5.1/dev/vn5 1488 1488 0 100%/packages/mnt/jcrypto-5.0R5.1/dev/vn6 792 792 0 100% /packages/mnt/jdocs-5.0R5.1mfs:181 762223 3 701243 0% /tmp/dev/ad0s1e 25263 7 23235 0% /configprocfs 4 4 0 100% /proc/dev/ad1s1f 7156052 337194 62463

25、74 5% /varJuniper&Extreme设备基本配置设备基本配置1、Juniper设备介绍常用命令显示当前路由引擎告警 userhost show chassis alarmsuserhost show chassis alarms1 alarms currently activeAlarm time Class Description2001-07-22 15:12:19 PDT Major hard-disk missing in Boot List2002-05-14 09:20:36 PDT Major compact-flash missing in Boot Li

26、st2002-05-14 09:20:31 PDT Minor Boot from alternate mediauserhost show chassis craft-interfaceuserhost show chassis craft-interfaceRed alarm: LED on, relay onYellow alarm: LED off, relay offHost OK LED: OffHost fail LED: OnJuniper&Extreme设备基本配置设备基本配置1、Juniper设备介绍常用命令显示日志文件中的错误信息 userhost show lo

27、g messagesuserhost show log messagesJul 11 07:23:24 mp1 /kernel: wd0s1a: hard error reading fsbn 66063 of66048-66063 (wd0s1 bn 66063; cn 258 tn 0 sn 15)wd0: status59 error 40Jul 11 07:23:25 mp1 /kernel: wdc0 unit 0 removed from the Boot ListJul 11 07:23:25 mp1 /kernel: wd0s1a: hard error reading fsb

28、n 66063 (wd0s1 bn66063; cn 258 tn 0 sn 15)wd0: status 59 error 40Jun 3 12:00:28 router /kernel: ad1: WRITE command timeout - resettingJun 3 12:00:44 router /kernel: ata0: resetting devices .Jun 3 12:00:44 router /kernel: ata0: Succeeded in resetting devices.Jun 3 12:00:28 router /kernel: ad1: WRITE

29、command timeout - resettingJun 3 12:00:17 router /kernel: ata0: resetting devices .Juniper&Extreme设备基本配置设备基本配置1、Juniper设备介绍常用命令显示路由器硬件信息 userhost show chassis hardwareuserhost show chassis hardwareHardware inventory:Item Version Part number Serial number DescriptionChassisBackplane REV 03 710-00

30、1517 AA7915Power Supply A Rev 01 740-001465 000011 ACPower Supply B Rev 01 740-001465 000016 ACDisplay REV 04 710-001519 AE6019Routing Engine 0 32000004f8ff1201 RE-2.0Routing Engine 1 REV 01 740-003239 AARCHOO RE-2.0FPC 0 REV 01 710-001292 AE3843PIC 0 REV 04 750-000617 AE2495 1x OC-48 SONET, SMIRFPC

31、 1 REV 07 710-000175 AA3408PIC 0 REV 01 750-001323 AB1244 1x TunnelPIC 1 REV 05 750-000613 AA3151 1x OC-12 SONET, SMIRFPC 3 REV 01 710-000175 AA0048PIC 0 REV 04 750-000613 aa0343 1x OC-12 SONET, SMIRPIC 1 REV 05 750-000616 AA1394 1x OC-12 ATM, MMJuniper&Extreme设备基本配置设备基本配置1、Juniper设备介绍常用命令显示FPC状

32、态和利用率 userhost show chassis fpcuserm160 show chassis fpcTemp CPU Utilization (%) Memory Utilization (%)Slot State (C) Total Interrupt DRAM (MB) Heap Buffer0 Online 43 3 0 32 1 391 Online 47 3 0 32 1 392 Online 42 3 0 32 1 403 Online 40 4 0 32 1 394 Online 41 4 0 32 1 395 Online 42 0 0 32 1 396 Empty

33、 0 0 0 0 0 07 Empty 0 0 0 0 0 0Juniper&Extreme设备基本配置设备基本配置1、Juniper设备介绍常用命令显示FPC详细信息和运行时间 userhost show chassis fpc detail fpc-slotuserM160 show chassis fpc detail 3Slot 3 information:State OnlineTemperature 36 degrees C / 96 degrees FTotal CPU DRAM 32 MbytesTotal SRAM 4 MbytesTotal SDRAM 256 Mb

34、ytesI/O Manager ASIC information Version 2.0, Foundry IBM, Part number 0I/O Manager ASIC information Version 2.0, Foundry IBM, Part number 0I/O Manager ASIC information Version 2.0, Foundry IBM, Part number 0Start time: 2002-03-19 13:13:26 PSTUptime: 6 days, 1 hour, 19 minutes, 36 secondsJuniper&

35、;Extreme设备基本配置设备基本配置1、Juniper设备介绍常用命令显示PIC类型和状态 userhost show chassis fpc pic-statususerhost show chassis fpc pic-statusSlot 0 Online PIC 0 1x OC-12 SONET, MM PIC 1 4x OC-3 SONET, SMIR PIC 2 4x E1, BNC PIC 3 1x CSTM1, SMIRSlot 1 Online PIC 0 4x CT3Slot 2 Online PIC 0 1x TunnelSlot 4 OnlineSlot 5 Off

36、lineSlot 6 Online PIC 0 1x OC-192 12xMM VSRJuniper&Extreme设备基本配置设备基本配置1、Juniper设备介绍常用命令显示PIC接口状态信息 userhost show interfaces terseshow interfaces terse show interfaces briefuserhost show interfaces terseInterface Adman Link Port Local Remoteso-0/0/0 up upso-0/0/0.0 up up inet 01 - 192

37、.168.36.200so-0/1/0 up downso-0/1/1 up downe1-0/2/0 up downe1-0/2/1 up downt1-1/0/0:1 up downt1-1/0/0:2 up downgr-2/0/0 up upip-2/0/0 up up.Output truncated.Juniper&Extreme设备基本配置设备基本配置1、Extreme设备介绍Juniper&Extreme设备基本配置设备基本配置1、Extreme设备介绍三层交换二二层层交交换换机机A AB BC CIDCIDCIDCIDCIDCIDC路由器路由器192.168.

38、1.0/24/24/24/24/24/24E0:/24E0:/24E1:/24E1:/24E2:/24E2:/24二二层层交交换换机机二二层层交交换换机机Juniper&Extreme设备基本配置设备基本配置1、Extreme设备介绍三层交换三三层层交交换换机机Vlan AVlan AVlan CVlan C路由引擎路由引擎IDCIDCIDCIDC

39、IDCIDCVlan BVlan BVlan AVlan A网段网段 /24/24网关网关 /24/24Vlan BVlan B网段网段 /24/24网关网关 /24/24Vlan CVlan C网段网段 /24/24网关网关 /24/24Juniper&Extreme设备基本配置设备基本配置1、Extreme设备介绍基本配置

40、命令管理Extreme交换机登陆方式通过终端由Console端口登陆到交换机 最多一个任务通过TCP/IP协议telnet到交换机 最多八个任务通过SSH2协议登陆到交换机 最多八个任务通过WEB方式登陆到交换机 最多一个任务例：HLHB-P-SW01:2 #Create account admin john encrypted 1234更改用户密码 config account encrypted HLHB-P-SW01:2 #config account john enterpassword:Reenter password:删除用户 delete account HLHB-P-SW01:

41、2 #delete account john查看用户 show account* HLHB-P-SW01:9 # sho account User Name Access LoginOK Failed Session - - - - - admin R/W 29 4 hrb RO 0 0 john R/W 0 0Juniper&Extreme设备基本配置设备基本配置1、Extreme设备介绍基本配置命令建立用户、设置密码、删除用户、查看用户建立用户 create account admin | user encrypted admin Specifies an access level

42、 for account type admin.user Specifies an access level for account type user.username Specifies a new user account nameencrypted Specifies an encrypted option.password Specifies a user password例：HLHB-P-SW01:2 #Create account admin john encrypted 1234更改用户密码 config account encrypted HLHB-P-SW01:2 #con

43、fig account john enterpassword:Reenter password:删除用户 delete account HLHB-P-SW01:2 #delete account john查看用户 show account* HLHB-P-SW01:9 # sho account User Name Access LoginOK Failed Session - - - - - admin R/W 29 4 hrb RO 0 0 john R/W 0 0Juniper&Extreme设备基本配置设备基本配置1、Extreme设备介绍基本配置命令端口配置命令config

44、ports vlan | all limit-learning |lock-learning | unlimited-learning | unlock-learningPortlist Specifies one or more ports or slots and ports. On a modular switch, can be a list of slots and ports. On a stand-alone switch, can be one or more port numbers. May be in the form 1, 2, 3-5, 2:5, 2:6-2:8.al

45、l Specifies that all virtual ports should be configured as Specifies the name of the VLANlimit-learning Specifies a limit on the number of MAC addresses that can be dynamically learned on the specified ports.lock-learning Specifies that the current FDB entries for the specified ports

46、should be made permanent static, and no additional learning should be allowed.unlimited-learning Specifies that there should not be a limit on MAC addresses that can be learned.unlock-learning Specifies that the port should be unlocked (allow unlimited, dynamic learning).例：HLHB-P-SW01:2 #config port

47、s 1, 2, 3, 6 vlan accounting learning-limit 128 允许在vlan accounting中的1,2,3,6端口可以学习最多128个MAC地址例：HLHB-P-SW01:2 # config ports 4,5 vlan accounting lock-learning 将vlan accounting中的端口4,5设置为静态地址，防止再学习其它地址解除端口地址学习限制config ports 1, 2, vlan accounting unlimited-learningconfig ports 4,5 vlan accounting unlock-

48、learningJuniper&Extreme设备基本配置设备基本配置1、Extreme设备介绍基本配置命令端口配置命令config ports | all | mgmt auto off speed 10 | 100 | 1000duplex half | fullPortlist Specifies one or more ports or slots and ports. On a modular switch, can be a list of slots and ports. On a stand-alone switch, can be one or more port n

49、umbers. May be in the form 1, 2, 3-5, 2:5, 2:6-2:8.all Specifies that all virtual ports should be configured as indicated.mgmt Specifies the management port. Supported only for switches that provide a management port.speed 10 Specifies 10 Mbps ports.speed 100 Specifies 100 Mbps ports.speed 1000 Spec

50、ifies 1000 Mbps ports. (6.1 and higher)duplex half Specifies half duplex; transmitting and receiving data one direction at a time.duplex full Specifies full duplex; transmitting and receiving data at the same time.例：HLHB-P-SW01:2 #config ports 4 auto off duplex full 将端口4设置为全双工模式例：HLHB-P-SW01:2 # con

51、fig ports 1 auto off speed 10 half full 将端口1设置为10M半双工模式例： HLHB-P-SW01:2 #config ports all auto on 将所有端口设置为自适应模式Juniper&Extreme设备基本配置设备基本配置1、Extreme设备介绍基本配置命令端口配置命令Disable 端口 disable ports | all例：HLHB-P-SW01:2 #disable ports allEnable 端口 enable port | all例：HLHB-P-SW01:2 # enable ports 3,5,12-15显示

52、端口冲突 show ports collisions例： HLHB-P-SW01:15 # sho port 5,17 collosions显示端口配置 show ports configuration例：* HLHB-P-SW01:20 # sho port 5,17 config显示端口数据包情况 show ports packet例：HLHB-P-SW01:22 # sho port packet显示端口利用率 show ports utilization例：* HLHB-P-SW01:23 # sho port utilization显示端口信息 show ports info det

53、ail例： * HLHB-P-SW01:20 # sho port 5,17 info Port Diag Flags Link Link Num Num Num Jumbo QOS Load State UPs STP VLAN Proto Size Profile Master 5 P e-m-E active 1 1 2 3 9216 17 P e-m-E active 1 1 2 3 9216 Juniper&Extreme设备基本配置设备基本配置1、Extreme设备介绍基本配置命令路由配置命令Vlan间路由 enable ipforwarding broadcast | f

54、ast-direct-broadcast |ignore-broadcast vlan 例：HLHB-P-SW01:2 #enable ipforwarding vlan manager配置静态路由 config iproute add 例： HLHB-P-SW01:2 # configure iproute add 28 28 3 配置默认路由 config iproute add default 例： HLHB-P-SW01:15 # config iproute add default 删

55、除静态路由 config iproute delete 例：* HLHB-P-SW01:20 # configure iproute delete 28/25 3 删除默认路由 config iproute delete default 例：HLHB-P-SW01:20 # config iproute delete default Juniper&Extreme设备基本配置设备基本配置1、Extreme设备介绍基本配置命令NAT服务配置路由器路由器192.16

56、8.2.1静态静态NATNATJuniper&Extreme设备基本配置设备基本配置1、Extreme设备介绍基本配置命令NAT服务配置路由器路由器211.137.24

57、1.2动态动态NATNATJuniper&Extreme设备基本配置设备基本配置1、Extreme设备介绍基本配置命令NAT服务配置路由器路由器：19871987211.137.2

58、41.1168.2.2：16541654PATPAT服务服务Juniper&Extreme设备基本配置设备基本配置1、Extreme设备介绍基本配置命令NAT服务配置Vlan_AVlan_A网段网段 /24/24Vlan_BVlan_B网

59、段网段 /24/24Vlan_BVlan_A第一步、启用NAT功能 HLHB-P-SW01:2 #enable nat第二步、为NAT配置Vlan HLHB-P-SW01:2 #config nat vlan Vlan_A outside HLHB-P-SW01:2 #config nat vlan Vlan_B inside配置NAT规则（静态NAT）HLHB-P-SW01:15 # config nat add Vlan_A map source /32 to /32配置NAT规则（动态NAT）HL

60、HB-P-SW01:15 # config nat add Vlan_A map source /24 to 54配置NAT规则（PAT）HLHB-P-SW01:15 # config nat add Vlan_A map source /24 to /24 both portmapJuniper&Extreme设备基本配置设备基本配置1、Extreme设备介绍基本配置命令DHCP服务配置Vlan_A Vlan_A 端口端口1 11010网段网段 /24/24网关网关 /24/24配置DHCP客户网关 HLHB-P-SW01:2 #config vlan Vlan_A dhcp-opt