【正文】 L2 64 Pos2/0/0 003 Up 19s L2 Pos6/0/0 004 Up 29s L2 Total Peer(s): 3 檢查OSPF運(yùn)行狀態(tài)。s neighbors Router ID: Address: State: Full Mode:Nbr is Slave Priority: 1 DR: None BDR: None MTU: 0 Dead timer due in 30 sec Neighbor is up for 486:22:15 Authentication Sequence: [ 0 ] 1檢查MPLS運(yùn)行狀態(tài),所有期望支持MPLS的接口狀態(tài)為Active。執(zhí)行命令：display currentconfiguration configuration userinterface輸出舉例：display fib statisticsRoute Entry Count : 832display currentconfiguration configuration userinterfaceuserinterface con 0 idletimeout 5 0userinterface aux 0userinterface vty 0 4 acl 2999 inbound authenticationmode aaa idletimeout 60 0userinterface vty 16 20檢查本地賬戶管理策略。YM9/I[。執(zhí)行命令：display snmpagent statistics輸出舉例：display snmpagent statistics 1251274 Messages delivered to the SNMP entity 0 Messages which were for an unsupported version 86 Messages which used a SNMP munity name not known 0 Messages which represented an illegal operation for the munity supplied 0 or BER errors in the process of decoding 1251422 Messages passed from the SNMP entity 0 SNMP PDUs which had badValue errorstatus 0 SNMP PDUs which had genErr errorstatus 0 SNMP PDUs which had noSuchName errorstatus 0 SNMP PDUs which had tooBig errorstatus 1895555 MIB objects retrieved successfully 0 MIB objects altered successfully 436072 GetRequestPDU accepted and processed 815115 GetNextRequestPDU accepted and processed 1251187 GetResponsePDU accepted and processed 0 SetRequestPDU accepted and processed 235 TrapPDU accepted and processed 0 InformPDU sent 0 InformPDU received with no acknowledgement 0 InformPDU received with acknowledgement檢查設(shè)備部署的acl配置。s step is 5 rule 5 deny tcp destinationport eq 4444 rule 10 deny udp destinationport eq 1434 rule 15 deny udp destinationport eq 4444 rule 20 deny tcp destinationport eq 9995 rule 25 deny udp destinationport eq 135 rule 30 deny tcp destinationport eq 135 rule 35 deny tcp destinationport eq 139 rule 40 deny udp destinationport eq netbiosssn rule 45 deny 。s step is 5 rule 5 permit source rule 10 permit source 0 rule 15 permit source Basic ACL 2999, 8 rulestelnet_managerAcl39。ZY_G5DK+1!! localuser nmgtemp servicetype telnet localuser nmgtemp level 3 localuser huawei password cipher PTKJ5++[_/Q=^Q`MAF41!! localuser huawei servicetype ftp telnet localuser huawei level 3 authenticationscheme default authenticationscheme nmgnoc authenticationmode local hwtacacs authorizationscheme default authorizationscheme nmgnoc authorizationmode local hwtacacs accountingscheme default accountingscheme nmgnoc accountingmode hwtacacs accounting startfail online domain default authenticationscheme nmgnoc authorizationscheme nmgnoc accountingscheme nmgnoc hwtacacsserver nmgnoc recordingscheme nmgnoc recordingmode hwtacacs nmgnoc system recordingscheme nmgnoc outbound recordingscheme nmgnoc cmd recordingscheme nmgnoc檢查SNMP服務(wù)的相關(guān)屬性，所有的munity字符串要滿足復(fù)雜度要求,對(duì)于不需要SNMP RW權(quán)限的設(shè)備，建議關(guān)閉SNMP RW功能,Trap的源地址建議采用loopback 0地址。Camp。執(zhí)行命令：display mpls ldp peer display mpls ldp session輸出舉例：display mpls ldp peer LDP Peer Information in Public network PeerID TransportAddress DiscoverySource :0 GigabitEthernet1/0/1 :0 GigabitEthernet1/0/0 :0 GigabitEthernet3/0/0 TOTAL: 3 Peer(s) Found.display mpls ldp session LDP Session(s) in Public Network PeerID Status LAM SsnRole SsnAge KASent/Rcv :0 Operational DU Active 020:06:23 116735/116735 :0 Operational DU Passive 020:06:23 116735/116736 :0 Operational DU Passive 020:06:23 116735/116736 TOTAL: 3 session(s) Found. LAM : Label Advertisement Mode SsnAge Unit : DDD:HH:MM1查看FIB表的數(shù)目。s neighbors Router ID: Address: State: Full Mode:Nbr is Master Priority: 1 DR: None BDR: None MTU: 0 Dead timer due in 33 sec Neighbor is up for 486:22:15 Authentication Sequence: [ 0 ] Neighbors Area interface (GigabitEthernet3/0/0)39。執(zhí)行命令：display bgp vpnv4 all peer輸出舉例：display bgp vpnv4 all peer BGP local router ID : Local AS number : 17923 Total number of peers : 2 Peers in established state : 2 Peer V AS MsgRcvd MsgSent OutQ Up/Down State PrefRcv 4 17923 221581 32411 0 0486h06m Established 85 4 17923 34033 37224 0 0486h06m Established 85檢查MPIBGP路由。執(zhí)行命令：display currentconfiguration configuration ospf輸出舉例： display currentconfiguration configuration ospfospf 1 silentinterface LoopBack0 silentinterface GigabitEthernet1/0/ silentinterface GigabitEthernet1/0/ silentinterface GigabitEthernet1/0/ silentinterface GigabitEthernet1/0/ silentinterface GigabitEthernet1/0/ silentinterface GigabitEthernet3/0/ silentinterface GigabitEthernet3/0/ silentinterface GigabitEthernet3/0/ silentinterface GigabitEthernet3/0/ silentinterface GigabitEthernet3/0/ silentinterface GigabitEthernet1/0/ sile