网络灾备演练预案[荟萃内容]

1、XXXX网络灾备演练预案月份任务操作方法查看或者测试方法1月任务一：交易网主备防火墙切换手动将主防火墙切换到SSG140(B)命令：进入SSG140(M)执行exec nsrp vsd-group 1 mode backup手动将主防火墙切换到SSG140(M)命令：进入SSG140(M)执行exec nsrp vsd-group 1 mode ineligible在SSG140(M)使用get ha查看，当看到Master是1884928，说明主机已经切到SSG140(B)上了：nsrp version: 2.0cluster info:cluster id: 1, no namelocal

2、 unit id: 1884160active units discovered: index: 0, unit id: 1884160, ctrl mac: 001f121cc007, index: 1, unit id: 1884928, ctrl mac: 001f121cc307, data mac: fffffffffffftotal number of units: 2VSD group info:init hold time: 5heartbeat lost threshold: 3heartbeat interval: 1000(ms)master always exist:

3、disabledgroup priority preempt holddown inelig master PB other members 0 90 yes 3 no 1884928 myself total number of vsd groups: 1Total iteration=775815440,time=3105052458,max=22724,min=74,average=4任务二：办公网internet出口线路切换将连电信线路光端机A电源关闭，让所有流量走联通出口B练演完后，打开光端机A的电源，访问电信网站切回电信出口。使用ping命令，看ping电信的网站能否ping通且延

4、时多少。使用IE访问电信的网站看能否正常访问。切回电信网站后，看ping电信的网站能否ping通且延时多少。使用IE访问电信的网站看能否正常访问。2月任务一：交易网主备线路切换进入JY-UT-A交换机，将主线路接口关闭，让以检测备用线路是否可用：Y-UT-A(config-if)#shutdown待检测完后将JY-UT-A端口开启：Y-UT-A(config-if)#no shutdown使用ping命令，ping深交所上交所主机是否能ping通。任务二：蛇口备份中心路由器切换进入2811-A路由器，将HSRP热备份路由器协议优先级调低，FW3和FW4网关将自动跳到2811-B路由器。inte

5、rface FastEthernet0/0 ip address 196.1.88.8 255.255.252.0standby 1 ip 196.1.88.6 standby 1 priority 95standby 1 preempt在办公网使用tracroute跟踪一下路由，看看路径是否已经经过到2811-B3月任务一：交易网和办公网到北京专线互相切换1、进入C2911-SZtoBJ-JY-1和C2911-SZtoBJ-JY-2的ga0/1口，将delay延时参数调到100以上，这样交易网的eigrp路由协议就会优先走C2911-SZtoBJ-JY-1和C2911-SZtoBJ-JY-2

6、路由器。C2911-SZtoBJ-JY-1(config)#int gi 0/1C2911-SZtoBJ-JY-1 (config-if)#delay 1002、进入C2911-SZtoBJ-JY-1和C2911-SZtoBJ-JY-2的ga0/2口，将delay延时参数调到100以上，这样办公网的eigrp路由协议就会优先走C2911-SZtoBJ-JY-1和C2911-SZtoBJ-JY-2路由器。C2911-SZtoBJ-JY-1 (config)#int gi 0/1C2911-SZtoBJ-JY-1 (config-if)#delay 1003、换回原来的线路，将延时参数调到1即可。

7、在JY-Main核心交换机上用show ip route命令查看到北京的路由下一跳会指向Fa 0/1 192.168.0.152。在3750_OA核心交换机上用show ip route命令查看到北京的路由下一跳会指向Fa 0/1 196.1.88.152。C2911-SZtoBJ-JY-1(config)#int gi 0/1C2911-SZtoBJ-JY-1 (config-if)#delay 14月任务一：ASA防火墙主备切换进入主防火墙196.1.88.5，使用no failover active命令将主防火墙切为备防火墙，备防火墙会自动切为主防火墙FW7-8#no failover

8、active使用Show failover命令查看，主备情况：Failover On Failover unit PrimaryFailover LAN Interface: failover GigabitEthernet0/3 (up)Unit Poll frequency 1 seconds, holdtime 15 secondsInterface Poll frequency 15 secondsInterface Policy 1Monitored Interfaces 4 of 250 maximumVersion: Ours 7.0(7), Mate 7.0(7)Last Fa

9、ilover at: 21:44:19 UTC Jun 30 2012 This host: Primary - Active Active time: 34406770 (sec) slot 0: ASA5520 hw/sw rev (2.0/7.0(7) status (Up Sys) slot 1: empty Interface inside (196.1.88.5): Normal (Waiting) Interface JY_SW (196.1.3.6): Normal (Waiting) Interface outside (196.1.1.6): Normal (Waiting

10、) Interface management (196.1.200.101): Normal (Waiting) Other host: Secondary - Standby Ready Active time: 0 (sec) slot 0: ASA5520 hw/sw rev (2.0/7.0(7) status (Up Sys) slot 1: empty Interface inside (0.0.0.0): Normal (Waiting) Interface JY_SW (0.0.0.0): Normal (Waiting) Interface outside (0.0.0.0)

11、: Normal (Waiting) Interface management (0.0.0.0): Normal (Waiting)任务二：模拟交易网核心交换机JY_MAIN故障切换到备机准备工作：通知小机服务工程师，因为交换机关机，可能引起小机双机切换工作不正常模拟方法：关闭JY_MAIN核心交换机电源此时HSRP双机协议将网关切换到备机JY_BAK上测试所有交易及应用是否能正常操作，如果不能操作和交易我们将查找原因并调整相关网络或者服务器等，保证最快速度能正常交易。当交易正常以后，切换回JY-MAIN核心交换机，再次测试所有交易及应用。5月任务一：FW1和FW2主备防火墙切换手动将主防火

12、墙切换到SSG550(B)命令：进入SSG550(M)执行exec nsrp vsd-group 0 mode backup手动将主防火墙切换到SSG550(M)命令：进入SSG550(M)执行exec nsrp vsd-group 0 mode ineligible在SSG550(M)使用get ha查看，当看到Master是1065472，说明主机已经切到SSG550(B)上了：get ha nsrp version: 2.0cluster info:cluster id: 1, no namelocal unit id: 3039104active units discovered: i

13、ndex: 0, unit id: 3039104, ctrl mac: 001f122e5f87, data mac: 001f122e5f87index: 1, unit id: 1065472, ctrl mac: 002159104207, data mac: 002159104207total number of units: 2VSD group info:init hold time: 8heartbeat lost threshold: 3heartbeat interval: 1000(ms)master always exist: disabledgroup priorit

14、y preempt holddown inelig master PB other members 0 50 yes 3 no 1065472 myself 任务二：6月任务一：FW5和FW6主备防火墙切换手动将主防火墙切换到SSG140(B)命令：进入SSG140(M)执行exec nsrp vsd-group 1 mode backup手动将主防火墙切换到SSG140(M)命令：进入SSG140(M)执行exec nsrp vsd-group 1 mode ineligible在SSG140(M)使用get ha查看，当看到Master是1884416，说明主机已经切到SSG140(B)上

15、了：get ha nsrp version: 2.0cluster info:cluster id: 1, no namelocal unit id: 2834816active units discovered: index: 0, unit id: 2834816, total number of units: 1VSD group info:init hold time: 5heartbeat lost threshold: 3heartbeat interval: 1000(ms)master always exist: disabledgroup priority preempt holddown inelig master PB other members 0 100 no 3 no 1884416 myself