網絡運維常用命令

CISCO

查看端口錯誤信息

show interfaces counters errors   

首先查看交換機log

sh log

查看是否有系統關閉端口：

show interfaces status err-disabled

查看及清除端口error信息統計：

show interfaces gigabitEthernet 1/0/11 | include error

clear counters gigabitEthernet 1/0/11

查看G1/0/11下交換機名字/IP：

show cdp neighbors

show cdp neighbors gigabitEthernet 1/0/11 detail

通過MAC找IP/通過IP找MAC

show mac address-table | include xxxx.xxxx.xxx

show arp | include xxxx.xxxx.xxxx

show arp | include 192.168.88.88

H3C排錯原理同上

開啟網絡設備SSH：

H3C

local-user admin class manage

 password hash xxxxxxxx

 service-type ssh terminal https

 authorization-attribute user-role network-admin

line vty 0 63

 authentication-mode scheme

 user-role network-admin

 protocol inbound ssh

cisco

username aaa privilege 1 password 0 bbb

line vty 0 4

login local

#######R2(config)#ip domain-name man.com

R2(config)#crypto key generate rsa

R2(config)#username man secret cisco

R2(config-line)#transport input ssh

R2(config-line)#login local

H3C QOS限速

qos lr inbound cir 

qos lr outbound cir 

H3C PBR策略路由

[SwitchA] acl number 3101

[SwitchA-acl-adv-3101] rule permit tcp destination-port 80

[SwitchA-acl-adv-3101] quit

# 定義5號節點，指定所有TCP報文的下一跳為1.1.2.2。

[SwitchA] policy-based-route aaa permit node 5

[SwitchA-pbr-aaa-5] if-match acl 3101

[SwitchA-pbr-aaa-5] apply ip-address next-hop 1.1.2.2

[SwitchA-pbr-aaa-5] quit

# 在接口Vlan-interface11上應用接口策略路由，處理此接口接收的報文。

[SwitchA] interface vlan-interface 11

[SwitchA-Vlan-interface11] ip address 10.110.0.10 255.255.255.0

[SwitchA-Vlan-interface11] ip policy-based-route aaa

[SwitchA-Vlan-interface11] quit

cisco 為類似功能為IP SLA，未在生產環境測試.

路由偵測

H3C

ip route-static 123.58.40.250/32 X.X.X.X (聯通IP城域網下一跳)

ip route-static 0.0.0.0 0.0.0.0 X.X.X.X preference  80

ip route 0.0.0.0.0 0.0.0.0 A.A.A.A(電信IP城域網出口) track 1 

 nqa entry admin test

 type icmp-echo

  destination ip A.A.A.A //電信IP城域網出口

  frequency 100

  next-hop  A.A.A.A

  reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only

nqa schedule admin test start-time now lifetime forever

track 1 nqa entry admin test reaction 1

cisco 為類似功能為BFD，未在生產環境測試.

雙核心配置

H3C VRRP：

SW1

interface Vlan-interface800  

 ip address 1.1.1.249 255.255.255.0

 vrrp vrid 8 virtual-ip 1.1.1.253

 vrrp vrid 8 priority 110

SW2

interface Vlan-interface800

ip address 1.1.1.250 255.255.255.0

vrrp vrid 8 virtual-ip 1.1.1.253

vrrp vrid 8 priority 115

dis vrrp

CISCO HSRP:

sw1

standby 2 ip 1.1.1.250

standby 2 priority 120

standby 2 preempt

sw2

standby 2 ip 1.1.1.250

standby 2 priority 90

standby 2 preempt

show standby

鏈路聚合

H3C：

interface Bridge-Aggregation 1

 port link-type trunk

 port trunk permit vlan all

int g1/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan all

 port link-aggregation group 1

int g1/0/2

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan all

 port link-aggregation group 1

cisco:

3550(config)#interface  gigabitethernet 0/1

3550(config-if)#no  switchport

3550(config-if)#channel-group  1  mode  active

3550(config)#interface  gigabitethernet 0/2

3550(config-if)#no  switchport

3550(config-if)#channel-group  1  mode active