网络巡检方法[一类优选]

1、网络巡检交换机、三层交换机和路由器是构建网络的基础，他们信号繁杂、数量众多。我们将根据设备的类型进行一系列网络巡检（将巡检记录作为文本保存）交换机下面介绍一些在二层交换机上的主要操作和配置（灰色阴影部分为命令的输出结果）检查cpu使用率CMH-QDES-LAN-C2960-2FB-8#show process cpuCPU utilization for five seconds: 4%/0%; one minute: 1%; five minutes: 1% PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process 1 4 1 4000

2、 0.00% 0.00% 0.00% 0 Chunk Manager 2 13416 6003213 2 0.00% 0.00% 0.00% 0 Load Meter 3 1172 250135 4 0.00% 0.00% 0.00% 0 DHCPD Timer 4 7015156 3048445 2301 0.00% 0.01% 0.00% 0 Check heaps 该命名可以查看交换机CPU的使用情况。主要看最后一个5分钟CPU占用率，不能超过50%。检查内存使用率CMH-QDES-LAN-C2960-2FB-8#show process memTotal: 7947968, Used:

3、 3051344, Free: 4896624 PID TTY Allocated Freed Holding Getbufs Retbufs Process 0 0 121548 5044 1888636 0 0 *Init* 0 0 36528 3672092 908 18144 0 *Sched* 0 0 64044556 59575920 427240 1521080 0 *Dead* 1 0 0 0 6808 0 0 Chunk Manager 2 0 184 184 3808 0 0 Load Meter 3 0 0 0 6808 0 0 DHCPD Timer 4 0 0 0 6

4、808 0 0 Check heaps 5 0 10036544 3834436 9216 7002240 8317240 Pool Manager 该命令可以看到交换机目前的内存使用情况。第一行显示目前交换机的总内存是8M，使用了3M左右，还有4M多的空闲。使用率不应该超过60%。检查重启记录CMH-QDES-LAN-C2960-2FB-8#show versionCisco Internetwork Operating System Software IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(22)EA1, RELEASE

5、 SOFTWARE (fc1)Copyright (c) 1986-2004 by cisco Systems, Inc.Compiled Mon 12-Jul-04 08:18 by madisonImage text-base: 0x80010000, data-base: 0x8055C000ROM: Bootstrap program is C2950 boot loaderIN2IPSW1 uptime is 49 weeks, 4 days, 10 hours, 14 minutesSystem returned to ROM by power-onSystem restarted

6、 at 00:21:06 UTC Mon Jun 8 2009System image file is flash:/c2950-i6q4l2-mz.121-22.EA1.bin该命令可以看到许多信息，如交换机的软硬件版本等。我们主要利用该命令看交换机已经正常运行了多久。如第7行所示，表示该交换机已经正常启动了49个星期了。该值不能太小，如果最近重启过，应了解重启的原因。检查各个端口的状态和错误包数量CMH-QDES-LAN-C2960-2FB-8#show interface.FastEthernet0/12 is up, line protocol is up (connected) Ha

7、rdware is Fast Ethernet, address is 0012.80d8.444c (bia 0012.80d8.444c) Description: Siemens2IP MTU 1500 bytes, BW 100000 Kbit, DLY 1000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Half-duplex, 100Mb/s, media type is 100BaseTX inp

8、ut flow-control is unsupported output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output 00:00:00, output hang never Last clearing of show interface counters 14w0d Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Out

9、put queue: 0/40 (size/max) 5 minute input rate 578000 bits/sec, 281 packets/sec 5 minute output rate 2000 bits/sec, 3 packets/sec 900721890 packets input, 3224733078 bytes, 0 no buffer Received 30992 broadcasts (0 multicast) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0

10、 ignored 0 watchdog, 7086 multicast, 0 pause input 0 input packets with dribble condition detected 31548079 packets output, 2379855761 bytes, 0 underruns 5104 output errors, 33619 collisions, 0 interface resets 0 babbles, 5104 late collision, 84059 deferred 0 lost carrier, 0 no carrier, 0 PAUSE outp

11、ut 0 output buffer failures, 0 output buffers swapped out该命令会显示交换机上所有端口的信息。第一行显示该端口状态是正常的。还要看第21行和第25行显示的错误包的数量和与20行和24行总包书的比较。错误包应该低于2%。检查设备的日志CMH-QDES-LAN-C2960-2FB-8#show logprotocol on Interface GigabitEthernet1/0/18, changed state to downDec 12 10:18:12.541 beijing: %LINEPROTO-5-UPDOWN: Line pr

12、otocol on Interface GigabitEthernet1/0/18, changed state to upDec 12 10:18:45.023 beijing: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/18, changed state to downDec 12 10:18:48.148 beijing: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/18, changed state to downDec 12 10:18:50.39

13、2 beijing: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/18, changed state to upDec 12 10:18:51.393 beijing: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/18, changed state to up该命令会显示历史的故障情况，用于故障分析时使用。检查硬件状态CMH-QDES-LAN-C2960-2FB-8# sh env allFAN is OKTEMPERATURE is OKTemperatur

14、e Value: 34 Degree CelsiusTemperature State: GREENYellow Threshold : 50 Degree CelsiusRed Threshold : 60 Degree CelsiusSW PID Serial# Status Sys Pwr PoE Pwr Watts- - - - - - - 1 Built-in GoodSW Status RPS Name RPS Serial# RPS Port#- - - - -1 CMH-QDES-LAN-C2960-2FB-8#根据反馈结果查看硬件状况检查环路情况CMH-QDES-LAN-C2

15、960-2FB-8#sh spanning-tree blockedports Name Blocked Interfaces List- -Number of blocked ports (segments) in the system : 0CMH-QDES-LAN-C2960-2FB-8#根据反馈结果查看有无阻塞端口，没有端口显示即为正常检查现有配置CMH-QDES-LAN-C2960-2FB-8#sh runBuilding configuration.Current configuration : 4425 bytes! Last configuration change at 11

16、:12:16 beijing Tue Jan 7 2014 by wangjian! NVRAM config last updated at 11:12:19 beijing Tue Jan 7 2014 by wangjian!version 12.2no service padservice timestamps debug datetime msecservice timestamps log datetime msec localtime show-timezoneno service password-encryption!hostname CMH-QDES-LAN-C2960-2

17、FB-8!boot-start-markerboot-end-marker!enable secret 5 $1$AAN5$dloMNip2gGVdjVdisgfLz.!username wangjian privilege 15 secret 5 $1$7nP2$ZCgpppt9Oq3vyPxqfQJEh.username jiangweidong privilege 15 secret 5 $1$UNBc$xELJnT0Rt23Lgp63BGm0K1!no aaa new-modelclock timezone beijing 8switch 1 provision ws-c2960s-2

18、4ts-l!no ip domain-lookup!crypto pki trustpoint TP-self-signed-128902656 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-128902656 revocation-check none rsakeypair TP-self-signed-128902656!spanning-tree mode pvstspanning-tree extend system-id!vlan internal allocation policy ascendi

19、ng!interface Port-channel1 switchport mode trunk!interface Vlan1 ip address 4 !ip default-gateway no ip http serverip http secure-serverip sla enable reaction-alerts!line con 0 login localline vty 0 4 login localline vty 5 15 login local!ntp clock-period 22519063ntp

20、server 17endCMH-QDES-LAN-C2960-2FB-8#保存配置至本地下面介绍一些在三层交换机上的主要操作和配置（灰色阴影部分为命令的输出结果）检查核心双机堆叠CORE-QDLC-WAN-c3750X-4FC-2#sh switch detail Switch/Stack Mac Address : 649e.f34a.0300 H/W CurrentSwitch# Role Mac Address Priority Version State -*1 Master 649e.f34a.0300 15 1 Ready 2 Member 649e.f34

21、a.1000 14 1 Ready Stack Port Status Neighbors Switch# Port 1 Port 2 Port 1 Port 2 - 1 Ok Ok 2 2 2 Ok Ok 1 1 CORE-QDLC-WAN-c3750X-4FC-2#检查双机状态，注意master是否有切换，堆叠端口的状态是否ok检查cpu使用率show process cpu检查内存使用率show process mem检查重启记录show version检查各个端口的状态和错误包数量show interface检查设备的日志show log检查硬件状态sh env all检查环路情况sh

22、 spanning-tree blockedports 检查现有配置sh run（UltraCompare软件对比功能，和前一次保存的配置做对比）保存配置至本地下面介绍一些在防火墙上的主要操作和配置（灰色阴影部分为命令的输出结果）检查系统信息，包括当前os版本，接口信息，设备运行时间等VPN-QDLC-SSG140-4FC-2(M)- get sysProduct Name: SSG-140Serial Number: 0185082011000470, Control Number: ffffffffHardware Version: 1010(0)-(00), FPGA checksum:

23、 00000000, VLAN1 IP ()Software Version: 6.2.0r5.0, Type: Firewall+VPNFeature: AV-KCompiled by build_master at: Thu Jan 28 11:42:23 PST 2010Base Mac: 88e0.f334.e280File Name: ssgr5.0, Checksum: bc7b6d47, Total Memory: 256MBDate 01/16/2014 15:45:41, Daylight Saving Time enabledThe Netw

24、ork Time Protocol is EnabledUp 7206 hours 31 minutes 20 seconds Since 22Mar2013:10:14:21Total Device Resets: 0System in NAT/route mode.Use interface IP, Config Port: 80Manager IP enforced: FalseManager IPs: 0检查启动了多长时间，如果时间短，表示最近重启过，应了解重启的原因。检查设备运行温度VPN-QDLC-SSG140-4FC-2(M)- get chassis Motherboard I

25、nformation: Serial Number: 0185082011000470 Control Number: ffffffff Hardware Version: 1010(0) CPLD Version: 3.2 System Temperature: 29 C or 84 F Temperature Alarm Threshold: 20 - 60 C Slot Information:Slot Name Status Asm-id Serial Number Version 1 Empty 2 Empty 3 Empty 4 Empty VPN-QDLC-SSG140-4FC-

26、2(M)-不超过40度检查cpu使用率VPN-QDLC-SSG140-4FC-2(M)- Get per cpu deAverage System Utilization: 2%Last 60 seconds:59: 2 58: 2 57: 2 56: 2 55: 2 54: 2 53: 2 52: 2 51: 2 50: 2 49: 2 48: 2 47: 2 46: 2 45: 2 44: 2 43: 2 42: 2 41: 2 40: 2 39: 2 38: 2 37: 2 36: 2 35: 2 34: 2 33: 2 32: 2 31: 2 30: 2 29: 2 28: 2 27:

27、 2 26: 2 25: 2 24: 2 23: 2 22: 2 21: 2 20: 2 19: 2 18: 2 17: 2 16: 2 15: 2 14: 2 13: 2 12: 2 11: 2 10: 2 9: 2 8: 2 7: 2 6: 2 5: 2 4: 2 3: 2 2: 2 1: 2 0: 2 Last 60 minutes:59: 2 58: 1 57: 2 56: 1 55: 1 54: 1 53: 2 52: 2 51: 2 50: 1 49: 1 48: 1 47: 1 46: 1 45: 1 44: 1 43: 1 42: 2 41: 2 40: 2 39: 2 38:

28、 1 37: 2 36: 2 35: 2 34: 2 33: 2 32: 2 31: 2 30: 2 29: 2 28: 2 27: 2 26: 2 25: 2 24: 2 23: 2 22: 2 21: 2 20: 2 19: 2 18: 2 17: 1 16: 1 15: 1 14: 2 13: 2 12: 2 11: 2 10: 2 9: 2 8: 2 7: 2 6: 2 5: 2 4: 2 3: 2 2: 2 1: 2 0: 2 Last 24 hours:23: 1 22: 1 21: 2 20: 2 19: 3 18: 6 17: 2 16: 2 15: 2 14: 2 13: 2

29、 12: 2 11: 2 10: 2 9: 2 8: 2 7: 2 6: 1 5: 2 4: 1 3: 2 2: 2 1: 2 0: 2 VPN-QDLC-SSG140-4FC-2(M)-CPU占用率不超过60%检查NSRP双机状态VPN-QDLC-SSG140-4FC-2(M)- Get nsrpnsrp version: 2.0cluster info:cluster id: 1, no namelocal unit id: 3465856active units discovered: index: 0, unit id: 3465856, ctrl mac: 88e0f334e280 , data mac: 88e0f334e285index: 1, unit id: 6776960, ctrl mac: 78fe3d676880 , data mac: 78fe3d676885total number of units: 2VSD group info:init hold time: 5heartbe