【正文】 IFName Status LAM TransportAddress HelloSent/Rcv GE1/0/0 Active DU 350063/349440 GE1/0/1 Active DU 350063/350196 GE3/0/0 Active DU 350063/349366 LAM: Label Advertisement Mode IFName: Interface name 1檢查LDP運(yùn)行狀態(tài),LDP接口數(shù)量、鄰居數(shù)量與規(guī)劃一致,所有鄰居的session狀態(tài)都為Operational。執(zhí)行命令：display mpls ldp peer display mpls ldp session輸出舉例：display mpls ldp peer LDP Peer Information in Public network PeerID TransportAddress DiscoverySource :0 GigabitEthernet1/0/1 :0 GigabitEthernet1/0/0 :0 GigabitEthernet3/0/0 TOTAL: 3 Peer(s) Found.display mpls ldp session LDP Session(s) in Public Network PeerID Status LAM SsnRole SsnAge KASent/Rcv :0 Operational DU Active 020:06:23 116735/116735 :0 Operational DU Passive 020:06:23 116735/116736 :0 Operational DU Passive 020:06:23 116735/116736 TOTAL: 3 session(s) Found. LAM : Label Advertisement Mode SsnAge Unit : DDD:HH:MM1查看FIB表的數(shù)目。執(zhí)行命令：display fib statistics輸出舉例：display fib statisticsRoute Entry Count : 832. 路由器安全檢查檢查Console/ AUX/VTY登錄控制。執(zhí)行命令：display currentconfiguration configuration userinterface輸出舉例：display fib statisticsRoute Entry Count : 832display currentconfiguration configuration userinterfaceuserinterface con 0 idletimeout 5 0userinterface aux 0userinterface vty 0 4 acl 2999 inbound authenticationmode aaa idletimeout 60 0userinterface vty 16 20檢查本地賬戶管理策略。執(zhí)行命令：display currentconfiguration configuration aaa輸出舉例：display currentconfiguration configuration aaaaaa localuser nmgdx password cipher M`Y/RCW57IQCamp。Camp。^8CQ!! localuser nmgdx servicetype telnet localuser nmgdx level 1 localuser nmgtele password cipher 5D1。YM9/I[。Q=^Q`MAF41!! localuser nmgtele servicetype telnet localuser nmgtele level 1 localuser nmgtemp password cipher CE/`RSOQ9/。ZY_G5DK+1!! localuser nmgtemp servicetype telnet localuser nmgtemp level 3 localuser huawei password cipher PTKJ5++[_/Q=^Q`MAF41!! localuser huawei servicetype ftp telnet localuser huawei level 3 authenticationscheme default authenticationscheme nmgnoc authenticationmode local hwtacacs authorizationscheme default authorizationscheme nmgnoc authorizationmode local hwtacacs accountingscheme default accountingscheme nmgnoc accountingmode hwtacacs accounting startfail online domain default authenticationscheme nmgnoc authorizationscheme nmgnoc accountingscheme nmgnoc hwtacacsserver nmgnoc recordingscheme nmgnoc recordingmode hwtacacs nmgnoc system recordingscheme nmgnoc outbound recordingscheme nmgnoc cmd recordingscheme nmgnoc檢查SNMP服務(wù)的相關(guān)屬性，所有的munity字符串要滿足復(fù)雜度要求,對于不需要SNMP RW權(quán)限的設(shè)備，建議關(guān)閉SNMP RW功能,Trap的源地址建議采用loopback 0地址。執(zhí)行命令：display snmp xxx輸出舉例：disp snmpagent munity Community name:ping2 Group name:ping2 Acl:2075 Storagetype: nonVolatile Community name:100wxs9dj Group name:100wxs9dj Acl:2075 Storagetype: nonVolatile 檢查SNMP服務(wù)運(yùn)行狀態(tài)。執(zhí)行命令：display snmpagent statistics輸出舉例：display snmpagent statistics 1251274 Messages delivered to the SNMP entity 0 Messages which were for an unsupported version 86 Messages which used a SNMP munity name not known 0 Messages which represented an illegal operation for the munity supplied 0 or BER errors in the process of decoding 1251422 Messages passed from the SNMP entity 0 SNMP PDUs which had badValue errorstatus 0 SNMP PDUs which had genErr errorstatus 0 SNMP PDUs which had noSuchName errorstatus 0 SNMP PDUs which had tooBig errorstatus 1895555 MIB objects retrieved successfully 0 MIB objects altered successfully 436072 GetRequestPDU accepted and processed 815115 GetNextRequestPDU accepted and processed 1251187 GetResponsePDU accepted and processed 0 SetRequestPDU accepted and processed 235 TrapPDU accepted and processed 0 InformPDU sent 0 InformPDU received with no acknowledgement 0 InformPDU received with acknowledgement檢查設(shè)備部署的acl配置。執(zhí)行命令：dis acl all輸出舉例：dis acl all Total nonempty ACL number is 4 Basic ACL 2075, 3 rulessnmpAcl39。s step is 5 rule 5 permit source rule 10 permit source 0 rule 15 permit source Basic ACL 2999, 8 rulestelnet_managerAcl39。s step is 5 rule 10 permit source rule 20 permit source rule 30 permit source rule 40 permit source rule 45 permit source rule 50 permit source rule 60 permit source rule 100 deny Advanced ACL 3000, 21 rules, matchorder is autoantivirusAcl39。s step is 5 rule 5 deny tcp destinationport eq 4444 rule 10 deny udp destinationport eq 1434 rule 15 deny udp destinationport eq 4444 rule 20 deny tcp destinationport eq 9995 rule 25 deny udp destinationport eq 135 rule 30 deny tcp destinationport eq 135 rule 35 deny tcp destinationport eq 139 rule 40 deny udp destinationport eq netbiosssn rule 45 deny