网络巡检方法

网络巡检交换机、三层交换机和路由器是构建网络的基础，他们信号繁杂、数量众多。我们将根据设备的类型进行一系列网络巡检（将巡检记录作为文本保存）交换机下面介绍一些在二层交换机上的主要操作和配置（灰色阴影部分为命令的输出结果）检查cpu使用率CMH-QDES-LAN-C2960-2FB-8#showprocesscpuCPUutilizationforfiveseconds:4%/0%;oneminute:1%;fiveminutes:1%PIDRuntime（ms）InvokeduSecs5Sec1Min5MinTTYProcess14140000.00%0.00%0.00%0ChunkManager213416600321320.00%0.00%0.00%0LoadMeter3117225013540.00%0.00%0.00%0DHCPDTimer47015156304844523010.00%0.01%0.00%0Checkheaps该命名可以查看交换机CPU的使用情况。主要看最后一个5分钟CPU占用率，不能超过50%。检査内存使用率CMH-QDES-LAN-C2960-2FB-8#showprocessmemTotal:7947968,Used:3051344,Free:4896624PIDTTYAllocatedFreedHoldingGetbufsRetbufsProcess001215485044188863600*lnit*00365283672092908181440*Sched*00640445565957592042724015210800*Dead*000680800ChunkManager0184184380800LoadMeter000680800DHCPDTimer000680800Checkheaps0100365443834436921670022408317240PoolManager该命令可以看到交换机目前的内存使用情况。第一行显示目前交换机的总内存是8M,使用了3M左右，还有4M多的空闲。使用率不应该超过60%。检査重启记录CMH-QDES-LAN-C2960-2FB-8#showversionCiscoInternetworkOperatingSystemSoftwareIOS(tm)C2950Software(C2950-I6Q4L2-M),Version12.1(22)EA1,RELEASESOFTWARE(fc1)Copyright(c)1986-2004byciscoSystems,Inc.CompiledMon12-Jul-0408:18bymadisonImagetext-base:0x80010000,data-base:0x8055C000ROM:BootstrapprogramisC2950bootloaderIN2IPSW1uptimeis49weeks,4days,10hours,14minutesSystemreturnedtoROMbypower-onSystemrestartedat00:21:06UTCMonJun82009Systemimagefileis"flash:/c2950-i6q4l2-mz.121-22.EA1.bin"该命令可以看到许多信息，如交换机的软硬件版本等。我们主要利用该命令看交换机已经正常运行了多久。如第7行所示，表示该交换机已经正常启动了49个星期了。该值不能太小，如果最近重启过，应了解重启的原因。检査各个端口的状态和错误包数量CMH-QDES-LAN-C2960-2FB-8#showinterfaceFastEthernetO/12isup,lineprotocolisup(connected)HardwareisFastEthernet,addressis0012.80d8.444c(bia0012.80d8.444c)Description:Siemens2IPMTU1500bytes,BW100000Kbit,DLY1000usec,reliability255/255,txload1/255,rxload1/255EncapsulationARPA,loopbacknotsetKeepaliveset(10sec)Half-duplex,100Mb/s,mediatypeis100BaseTXinputflow-controlisunsupportedoutputflow-controlisunsupportedARPtype:ARPA,ARPTimeout04:00:00Lastinputnever,output00:00:00,outputhangneverLastclearingof"showinterface"counters14w0dInputqueue:0/75/0/0(size/max/drops/flushes);Totaloutputdrops:0Queueingstrategy:fifoOutputqueue:0/40(size/max)5minuteinputrate578000bits/sec,281packets/sec5minuteoutputrate2000bits/sec,3packets/sec900721890packetsinput,3224733078bytes,0nobufferReceived30992broadcasts(0multicast)0runts,0giants,0throttles0inputerrors,0CRC,0frame,0overrun,0ignored0watchdog,7086multicast,0pauseinput0inputpacketswithdribbleconditiondetected31548079packetsoutput,2379855761bytes,0underruns5104outputerrors,33619collisions,0interfaceresets0babbles,5104latecollision,84059deferred0lostcarrier,0nocarrier,0PAUSEoutput0outputbufferfailures,0outputbuffersswappedout该命令会显示交换机上所有端口的信息。第一行显示该端口状态是正常的。还要看第21行和第25行显示的错误包的数量和与20行和24行总包书的比较。错误包应该低于2%。检査设备的日志CMH-QDES-LAN-C2960-2FB-8#showlog

protocolonInterfaceGigabitEthernet1/0/18,changedstatetodownDec1210:18:12.541beijing:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceGigabitEthernet1/0/18,changedstatetoupDec1210:18:45.023beijing:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceGigabitEthernet1/0/18,changedstatetodownDec1210:18:48.148beijing:%LINK-3-UPDOWN:InterfaceGigabitEthernet1/0/18,changedstatetodownDec1210:18:50.392beijing:%LINK-3-UPDOWN:InterfaceGigabitEthernet1/0/18,changedstatetoupDec1210:18:51.393beijing:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceGigabitEthernet1/0/18,changedstatetoup该命令会显示历史的故障情况，用于故障分析时使用。检査硬件状态CMH-QDES-LAN-C2960-2FB-8#shenvallFANisOKTEMPERATUREisOKTemperatureValue:34DegreeCelsiusTemperatureState:GREENYellowThreshold:50DegreeCelsiusRedThreshold:60DegreeCelsiusSWPIDSerial#StatusSysPwrPoEPwrWatts1Built-inGoodSWStatusRPSNameRPSSerial#RPSPort#1<><>CMH-QDES-LAN-C2960-2FB-8#根据反馈结果查看硬件状况检査环路情况CMH-QDES-LAN-C2960-2FB-8#shspanning-treeblockedportsNameBlockedInterfacesListNameBlockedInterfacesListNumberofblockedports(segments)inthesystem:0CMH-QDES-LAN-C2960-2FB-8#根据反馈结果査看有无阻塞端口，没有端口显示即为正常检查现有配置CMH-QDES-LAN-C2960-2FB-8#shrunBuildingconfiguration...Currentconfiguration:4425bytes!!Lastconfigurationchangeat11:12:16beijingTueJan72014bywangjian!NVRAMconfiglastupdatedat11:12:19beijingTueJan72014bywangjian!version12.2noservicepadservicetimestampsdebugdatetimemsecservicetimestampslogdatetimemseclocaltimeshow-timezonenoservicepassword-encryption!hostnameCMH-QDES-LAN-C2960-2FB-8!boot-start-markerboot-end-marker!enablesecret5$1$AAN5$dloMNip2gGVdjVdisgfLz.!usernamewangjianprivilege15secret5$1$7nP2$ZCgpppt90q3vyPxqfQJEh.usernamejiangweidongprivilege15secret5$1$UNBc$xELJnT0Rt23Lgp63BGm0K1!!noaaanew-modelclocktimezonebeijing8switch1provisionws-c2960s-24ts-l!!noipdomain-lookup!!cryptopkitrustpointTP-self-signed-128902656enrollmentselfsignedsubject-namecn=IOS-Self-Signed-Certificate-128902656revocation-checknonersakeypairTP-self-signed-128902656!spanning-treemodepvstspanning-treeextendsystem-idvlaninternalallocationpolicyascendinginterfacePort-channel1switchportmodetrunk!interfaceVlan1ipaddress4!ipdefault-gatewaynoiphttpserveriphttpsecure-serveripslaenablereaction-alerts!linecon0loginlocallinevty04loginlocallinevty515loginlocal!ntpclock-period22519063ntpserver17endCMH-QDES-LAN-C2960-2FB-8#保存配置至本地下面介绍一些在三层交换机上的主要操作和配置（灰色阴影部分为命令的输出结果）检査核心双机堆叠CORE-QDLC-WAN-c3750X-4FC-2#shswitchdetailSwitch/StackMacAddress:649e.f34a.0300H/WCurrentSwitch#RoleMacAddressPriorityVersionState*1Master649e.f34a.0300151Ready2Member649e.f34a.1000141Ready

StackPortStatusNeighborsSwitch#Port1Port2Port1Port2StackPortStatusNeighborsSwitch#Port1Port2Port1Port21OkOk2OkOkCORE-QDLC-WAN-c3750X-4FC-2#检查双机状态，注意master是否有切换，堆叠端口的状态是否ok检査叩u使用率showprocesscpu检查内存使用率showprocessmem检查重启记录showversion检查各个端口的状态和错误包数量showinterface检查设备的日志showlog检查硬件状态shenvall检查环路情况shspanning-treeblockedports检查现有配置shrun（UltraCompare软件对比功能，和前一次保存的配置做对比）保存配置至本地下面介绍一些在防火墙上的主要操作和配置(灰色阴影部分为命令的输出结果)

检查系统信息，包括当前os版本，接口信息，设备运行时间等VPN-QDLC-SSG140-4FC-2(M)->getsysProductName:SSG-140SerialNumber:0185082011000470,ControlNumber:ffffffffHardwareVersion:1010(0)-(00),FPGAchecksum:00000000,VLAN1IP()SoftwareVersion:6.2.0r5.0,Type:Firewall+VPNFeature:AV-KCompiledbybuild_masterat:ThuJan2811:42:23PST2010BaseMac:88e0.f334.e280FileName:ssgr5.0,Checksum:bc7b6d47,TotalMemory:256MBDate01/16/201415:45:41,DaylightSavingTimeenabledTheNetworkTimeProtocolisEnabledUp7206hours31minutes20secondsSince22Mar2013:10:14:21TotalDeviceResets:0SysteminNAT/routemode.UseinterfaceIP,ConfigPort:80ManagerIPenforced:FalseManagerIPs:0检查启动了多长时间，如果时间短，表示最近重启过，应了解重启的原因检査设备运行温度VPN-QDLC-SSG140-4FC-2(M)->getchassisMotherboardInformation:SerialNumber:0185082011000470ControlNumber:ffffffffHardwareVersion:1010(0)CPLDVersion:3.2SystemTemperature:29'Cor84'FTemperatureAlarmThreshold:20-60'CSlotInformation:SlotNameStatusAsm-idSerialNumberVersionVPN-QDLC-SSG140-4FC-2(M)->不超过40度检查cpu使用率VPN-QDLC-SSG140-4FC-2(M)->GetpercpudeAverageSystemUtilization:2%Last60seconds:TOC\o"1-5"\h\z59:258:257:256:255:254:253:252:251:250:249:248:247:246:245:244:243:242:241:240:239:238:237:236:235:234:233:232:231:230:229:228:227:226:225:224:223:222:221:220:219:218:217:216:215:214:213:212:211:210:29:28:27:26:25:24:23:22:21:20:2Last60minutes:59:258:157:256:155:154:153:252:251:250:149:148:147:146:145:144:143:142:241:240:239:238:137:236:235:234:233:232:231:230:229:228:227:226:225:224:223:222:221:220:219:218:217:116:115:114:213:212:211:210:29:28:27:26:25:24:23:22:21:20:2Last24hours:23:122:121:220:219:318:617:216:215:214:213:212:211:210:29:28:27:26:15:24:13:22:21:20:2VPN-QDLC-SSG140-4FC-2(M)->CPU占用率不超过60%检查NSRP双机状态VPN-QDLC-SSG140-4FC-2(M)->Getnsrpnsrpversion:2.0clusterinfo:clusterid:1,nonamelocalunitid:3465856activeunitsdiscovered:index:0,unitid:3465856,ctrlmac:88e0f334e280,datamac:88e0f334e285index:1,unitid:6776960,ctrlmac:78fe3d676880,datamac:78fe3d676885totalnumberofunits:2VSDgroupinfo:initholdtime:5heartbeatlostthresh