Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Common commands of network operation and maintenance

2025-01-16 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)06/01 Report--

CISCO

View port error messages

Show interfaces counters errors

First check the switch log

Sh log

Check to see if any system shuts down the port:

Show interfaces status err-disabled

View and clear port error information statistics:

Show interfaces gigabitEthernet 1-0-11 | include error

Clear counters gigabitEthernet 1-0-11

Look at the name of the switch / IP under G1Accord 11:

Show cdp neighbors

Show cdp neighbors gigabitEthernet 1-0-11 detail

Find IP/ through MAC, find MAC through IP

Show mac address-table | include xxxx.xxxx.xxx

Show arp | include xxxx.xxxx.xxxx

Show arp | include 192.168.88.88

H3C debugging principle is the same as above

Turn on the network device SSH:

H3C

Local-user admin class manage

Password hash xxxxxxxx

Service-type ssh terminal https

Authorization-attribute user-role network-admin

Line vty 0 63

Authentication-mode scheme

User-role network-admin

Protocol inbound ssh

Cisco

Username aaa privilege 1 password 0 bbb

Line vty 0 4

Login local

# R2 (config) # ip domain-name man.com

R2 (config) # crypto key generate rsa

R2 (config) # username man secret cisco

R2 (config-line) # transport input ssh

R2 (config-line) # login local

H3C QOS speed limit

Qos lr inbound cir

Qos lr outbound cir

H3C PBR Policy routing

[SwitchA] acl number 3101

[SwitchA-acl-adv-3101] rule permit tcp destination-port 80

[SwitchA-acl-adv-3101] quit

# define Node 5, specifying that the next hop of all TCP messages is 1.1.2.2.

[SwitchA] policy-based-route aaa permit node 5

[SwitchA-pbr-aaa-5] if-match acl 3101

[SwitchA-pbr-aaa-5] apply ip-address next-hop 1.1.2.2

[SwitchA-pbr-aaa-5] quit

# apply interface policy routing on the interface Vlan-interface11 to process the messages received by this interface.

[SwitchA] interface vlan-interface 11

[SwitchA-Vlan-interface11] ip address 10.110.0.10 255.255.255.0

[SwitchA-Vlan-interface11] ip policy-based-route aaa

[SwitchA-Vlan-interface11] quit

Cisco for similar function is IP SLA and has not been tested in production environment.

Route detection

H3C

Ip route-static 123.58.40.250 ip route-static 32 X.X.X.X (next hop of Unicom IP man)

Ip route-static 0.0.0.0 0.0.0.0 X.X.X.X preference 80

Ip route 0.0.0.0.0 0.0.0.0 A.A.A.A (Telecom IP Metropolitan area Network exit) track 1

Nqa entry admin test

Type icmp-echo

Destination ip A.A.A.A / / Telecom IP Metropolitan area Network exit

Frequency 100

Next-hop A.A.A.A

Reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only

Nqa schedule admin test start-time now lifetime forever

Track 1 nqa entry admin test reaction 1

Cisco for similar function is BFD and has not been tested in production environment.

Dual core configuration

H3C VRRP:

SW1

Interface Vlan-interface800

Ip address 1.1.1.249 255.255.255.0

Vrrp vrid 8 virtual-ip 1.1.1.253

Vrrp vrid 8 priority 110

SW2

Interface Vlan-interface800

Ip address 1.1.1.250 255.255.255.0

Vrrp vrid 8 virtual-ip 1.1.1.253

Vrrp vrid 8 priority 115

Dis vrrp

CISCO HSRP:

Sw1

Standby 2 ip 1.1.1.250

Standby 2 priority 120

Standby 2 preempt

Sw2

Standby 2 ip 1.1.1.250

Standby 2 priority 90

Standby 2 preempt

Show standby

Link aggregation

H3C:

Interface Bridge-Aggregation 1

Port link-type trunk

Port trunk permit vlan all

Int g1/0/1

Port link-mode bridge

Port link-type trunk

Port trunk permit vlan all

Port link-aggregation group 1

Int g1/0/2

Port link-mode bridge

Port link-type trunk

Port trunk permit vlan all

Port link-aggregation group 1

Cisco:

3550 (config) # interface gigabitethernet 0Compact 1

3550 (config-if) # no switchport

3550 (config-if) # channel-group 1 mode active

3550 (config) # interface gigabitethernet 0amp 2

3550 (config-if) # no switchport

3550 (config-if) # channel-group 1 mode active

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Network Security

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report