网络设备巡检报告tscnbj-pfw bba001

1、网络设备巡检合同:设备型号: ASA5520地点:设备SN: JMX1603X0XV巡检时间:2015-2-15检查项目：cisco ASA5520 设备版本检查命令：Show verisco Adaptive Security Applian oftware Ver8.2(5) Device Manager Ver6.4(5)版本情况Compiled on Fri 20-May-11 16:00 by buildersSystem image file is disk0:/asa825-k8.binIOS 镜像Config file at boot was startup-config配置启

2、动文件BJ-PFW-BBA001 up 2 years 363 daysfailover cluster up 2 years 363 days设备运行时间Hardware:ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHz ernalompact Flash, 256MB设备硬件信息BIOS Flash Firmware Hub 0 xffe00000, 1024KB检查结果：通过上述信息分析，该无异常。检查项目：cisco ASA5520 设备 cpu 利用率检查检查命令：show cpu usageCPU utilization fo

3、r 5 seconds = 10%; 1 minute: 10%; 5 minutes: 9%检查结果：从上述数据分析，该cpu 利用率使用正常检查项目：cisco ASA5520 设备内存利用率检查检查命令：showmemoryFree memory:1876844880 bytes (87%)空闲情况Used memory:270638768 bytes (13%)使用情况Total memory:2147483648 bytes (100%)整体情况检查结果：通过上述信息分析所得，该设备内存使用无异常。检查项目：cisco ASA5520 设备 failover 状态检查命令：show

4、failoverFailover On该协议激活状态Failover unit Secondary说明该墙处于备墙状态Failover LANerface: failover GigabitEthernet0/2 (up)Unit Poll frequency 1 seconds, holdtime 15 seconds erface Poll frequency 5 seconds, holdtime 25 seconds erface Policy 1Monitorederfa3 of 160umVer: Ours 8.2(5), Mate 8.2(5)Last Failover at:

5、17:07:57Sep 2 2013This host: Secondary - Active同样说明该设备处于备墙状态Active time: 45835630 (sec)slot 0: ASA5520 hw/sw rev (2.0/8.2(5) sus (Up Sys) erface outside (172.16.1.117): Normalerface inside (172.16.1.121): Normal erface manage (10.255.253.33): Normalslot 1: emptyOther host: Primary - Standby Ready Ac

6、tive time: 48609890 (sec)slot 0: ASA5520 hw/sw rev (2.0/8.2(5) sus (Up Sys) erface outside (172.16.1.118): Normalerface inside (172.16.1.122): Normal erface manage (10.255.253.34): Normalslot 1: empty检查结果：该设备正处于备墙状态，并正常检测到主墙的工作状态，待主墙宕机时，备墙将及时切换至主墙状态，将网络影响降至最低。检查项目：cisco ASA5520 设备端口信息检查检查命令：showerfa

7、ceGigabitEthernet0/0erface GigabitEthernet0/0 outside, is up, line protocol is upHardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usecFull-Duplex(Full-duplex),1000Mbps(1000Mbps)Input flow control is unsupported, output flow control is offDescription:BJ-PSW-BBA001G0/5 VLAN 540MAC address 649e.f335.bd

8、16, MTU 1500IPaddress172.16.1.117,subnetmask 255.255.255.24864322224266 packets input, 26850946256003 bytes, 0 no bufferReceived 17690 broadcasts, 0 runts, 0 giants0 input errors, 0 CRC, 0 frame, 0 overrun, 0ignored, 0 abort0 pause input, 0 resume input 0 L2 decode drops73182177256packetsoutput,5997

9、5848469793 bytes, 368 underruns0 pause output, 0 resume output0 output errors, 0 collis, 16erface resets0 late collis, 0 deferred0 input reset drops, 0 output reset drops, 0 txhangsinput queue (blocks free curr/low): hardware (255/230)output queue (blocks free curr/low): hardware(255/0)Traffic Sisti

10、cs for outside:64299655304 packets input, 25546838875113bytes73173540371packetsoutput,58635951138236 bytes1832600 packets dropped丢弃的数据包GigabitEthernet0/1erface GigabitEthernet0/1 inside, is up, line protocol is upHardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usecFull-Duplex(Full-duplex),1000Mbps(

11、1000Mbps)-端口千兆全双工Input flow control is unsupported, output flow control is offDescription:BJ-PSW-BBA005G1/0/1 VLAN 550MAC address 649e.f335.bd17, MTU 1500IPaddress172.16.1.121,subnetmask 255.255.255.24873196378888 packets input, 59977686079670 bytes, 0 no buffer入流量Received 452740 broadcasts, 0 runts

12、,0giants接收的广播包0 input errors, 0 CRC, 0 frame, 0 overrun, 0ignored, 0 abort0 pause input, 0 resume input 0 L2 decode drops64304792670packetsoutput,26848709781908 bytes, 0 underruns出流量0 pause output, 0 resume output0 output errors, 0 collis, 12erface resets0 late collis, 0 deferred0 input reset drops,

13、 0 output reset drops, 0 txhangsinput queue (blocks free curr/low): hardware (255/230)output queue (blocks free curr/low): hardware(254/178)Traffic Sistics for “inside”:73176995730 packets input, 58636366945715bytes64294718346packetsoutput,25546382264879 bytes637846 packets dropped丢弃的数据包GigabitEther

14、net0/3erface GigabitEthernet0/3 se, is up, line protocol is upHardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usecAuto-Duplex(Full-duplex),Auto-Speed(1000Mbps)Input flow control is unsupported, output flow control is offDescription: SE Failovererface MAC address 649e.f3f8.fb31, MTU 1500IPaddress192

15、.168.2.2,subnetmask 255.255.255.0975455135 packets input, 1042631578024 bytes, 0 no buffer同上Received 41 broadcasts, 0 runts, 0 giants0 input errors, 0 CRC, 0 frame, 0 overrun, 0ignored, 0 abort0 pause input, 0 resume input 6 L2 decode drops1286238234 packets output, 1420444438608bytes, 0 underruns0

16、pause output, 0 resume output0 output errors, 0 collis, 15erface resets0 late collis, 0 deferred0 input reset drops, 0 output reset drops, 0 txhangsinput queue (blocks free curr/low): hardware (255/230)output queue (blocks free curr/low): hardware (255/221)Traffic Sistics for se:180204424packetsinpu

17、t,143598318868bytes1237330010 packets output, 1394150521266bytes0 packets dropped检查结果：通过上述对端口信息分析，部分端口传输数据包时存在少量的数据包丢弃，但从设备运行时间来看，丢弃数据包对整体网络造成影响的概率较低，总的来看端口流量正常。检查项目：cisco ASA5520 设备路由信息Gateway of last resort is not setO E1 85.125.87.87 255.255.255.255110/1120 via 172.16.1.113, 128:17:15, outsideO E

18、1 172.168.0.0 255.255.255.0 110/1120 via 172.16.1.113, 128:17:15, outsideO E1 172.17.189.0 255.255.255.0110/1120 via 172.16.1.113, 128:17:15, outsideO E1 172.17.188.0 255.255.255.0公司签字:惠所重华胜天成签字:日期:2015 年 02 月 15110/1120 via 172.16.1.113, 128:17:15, outsideO E1 172.17.191.0 255.255.255.0110/1120 via 172.16.1.113, 128:17:15, outsideO E1 172.17.190.0 255.255.255.0110/1120 via 172.16.1.113, 128:17:15, outsideO E1 172.17.184.0 255.255.255.0110/1120 via 172.16.1.113, 128:17:15, outsideO E1 172.17.187.0 255.255.255.0110/1120 via 172.16.1.113, 12