【正文】 s step is 5 rule 10 permit source rule 20 permit source rule 30 permit source rule 40 permit source rule 45 permit source rule 50 permit source rule 60 permit source rule 100 deny Advanced ACL 3000, 21 rules, matchorder is autoantivirusAcl39。執(zhí)行命令：display snmp xxx輸出舉例：disp snmpagent munity Community name:ping2 Group name:ping2 Acl:2075 Storagetype: nonVolatile Community name:100wxs9dj Group name:100wxs9dj Acl:2075 Storagetype: nonVolatile 檢查SNMP服務運行狀態(tài)。^8CQ!! localuser nmgdx servicetype telnet localuser nmgdx level 1 localuser nmgtele password cipher 5D1。執(zhí)行命令：display fib statistics輸出舉例：display fib statisticsRoute Entry Count : 832. 路由器安全檢查檢查Console/ AUX/VTY登錄控制。s neighbors Router ID: Address: State: Full Mode:Nbr is Master Priority: 1 DR: None BDR: None MTU: 0 Dead timer due in 36 sec Neighbor is up for 486:22:15 Authentication Sequence: [ 0 ] Neighbors Area interface (GigabitEthernet1/0/1)39。執(zhí)行命令：display bgp vpnv4 vpninstance xx routingtable輸出舉例：disp bgp vpnv4 vpninstance CTVPN3200000JiaoHuanJiGuanLi routingtable Total Number of Routes: 173 BGP Local router ID is Status codes: * valid, best, d damped, h history, i internal, s suppressed, S Stale Origin : i IGP, e EGP, ? inplete Network NextHop MED LocPrf PrefVal Path/Ogn *i * i 1 100 0 ? *i * i 1 100 0 ? *i * i 1 100 0 ? *i * i 1 100 0 ? *i * i 1 100 0 ? *i * i 1 100 0 ? *i * i 1 100 0 ? 檢查ISIS運行狀態(tài)。執(zhí)行命令：display currentconfiguration configuration isis輸出舉例： display currentconfiguration configuration isisisis 1 islevel level2 coststyle wide networkentity importroute direct routepolicy 1 importroute ospf 1 cost 50 routepolicy importisis 檢查BGP運行狀態(tài), 所有規(guī)劃使用的鄰居狀態(tài)為Established。 Format is PKTFMT_ETHNT_2, Hardware address is 001882d78fafThe Vendor PN is MXPD243SPort BW: 1G, Transceiver max BW: 1G, Transceiver Mode: SingleModeWaveLength: 1310nm, Transmission Distance: 10kmRx Power: , Tx Power: Loopback:none, fullduplex mode, negotiation: disable, Pause Flowcontrol:Receive Enable and Send EnableLast physical up time : 20090721 17:38:27Last physical down time : 20090721 17:38:22Statistics last cleared:never Last 300 seconds input rate: 23080816 bits/sec, 5961 packets/sec Last 300 seconds output rate: 59897368 bits/sec, 8564 packets/sec Input: 3995497323749 bytes, 8685833902 packets Output: 9886463139965 bytes, 11691092463 packets Input: Unicast: 8685044151 packets, Multicast: 780926 packets Broadcast: 8825 packets, JumboOctets: 0 packets CRC: 0 packets, Symbol: 0 packets Overrun: 0 packets InRangeLength: 0 packets LongPacket: 0 packets, Jabber: 0 packets, Alignment: 0 packets Fragment: 0 packets, Undersized Frame: 0 packets RxPause: 0 packets Output: Unicast: 11690293669 packets, Multicast: 798774 packets Broadcast: 20 packets, JumboOctets: 0 packets Lost: 0 packets, Overflow: 0 packets, Underrun: 0 packets TxPause: 0 packets Unknown Vlan: 0 packets. 路由協(xié)議運行情況檢查設備Router id，Router id應該配置為設備LoopBack 0的ip地址。執(zhí)行命令：display fan輸出舉例:[]display fanSlotid : 19Present : YESRegistered: YESStatus : MANUALFanSpeed : [No.]Speed [1]100% [2]100% [3]100% [4]100% [5]100% [6]100% [7]100% [8]100% [9]100%. 接口運行情況檢查端口的狀態(tài)，系統(tǒng)中沒有使用的接口狀態(tài)為shutdown狀態(tài)，避免出現(xiàn)鏈路振蕩。執(zhí)行命令：display cpuusage輸出舉例：[]display cpuusageCPU Usage Stat. Cycle: 60 (Second)CPU Usage : 9% Max: 42%CPU Usage Stat. Time : 20090810 00:10:53CPU Usage Stat. Tick : 0xafcc(CPU Tick High) 0x4f7a3aea(CPU Tick Low)Actual Stat. Cycle : 0x0(CPU Tick High) 0x78421329(CPU Tick Low)TaskName CPU Runtime(CPU Tick High/CPU Tick Low)BUFM 0% 0/ 1ea377VIDL 91% 0/6dc699f6TICK 0% 0/ 5daee0 Ecm 0% 0/ b128dIPCR 0% 0/ f2e67 VPR 0% 0/ 1ed5a3 VPS 0% 0/ eeb50 ARQ 0% 0/ 422aacRTMR 0% 0/ 76e39dIPCQ 0% 0/ 48ac3f VP 0% 0/ 1dfRPCQ 0% 0/ 36bc7VMON 0% 0/ 788cSTND 0% 0/ 3dd2ec CFA 0% 0/ 40155INFO 0% 0/ 6bf9 LCS 0% 0/ 328 RPR 0% 0/ 3d8a4f……查看主控板內存占有率。執(zhí)行命令：display device輸出舉例：[]dis deviceNE40E39。執(zhí)行命令：display currentconfiguration輸出略。[]dis debugging[]查看系統(tǒng)時間，時間設置應與北京時間一致（）。鄂爾多斯電信城域網(wǎng)2臺核心路由器NE80E強制下發(fā)OSPF默認路由，用于引導城域網(wǎng)內部流量至NE80E設備；2. NE80E/NE40E常用維護命令. 基本運行情況及管理性檢查 查看設備軟件版本，VRP軟件版本是華為公司正式發(fā)布的版本或者已申請的受控版本（試驗局除外）。另外省公司還專門設置兩臺C7206和C12410路由器做為DCN業(yè)務的VPN RR路由反射器，與省內所有承載DCN業(yè)務的PE路由器建立MPIBGP鄰居關系，反射省內DCN業(yè)務的VPN路由（兩臺DCN VPN RR地址：、）。2臺NE80E設備分別以1*GE鏈路連接鄂爾多斯CN2網(wǎng)絡2臺PE設備，承載國際差異化業(yè)務；兩臺NE40E設備以2*GE鏈路分別雙上行至2臺NE80E設備，2條GE鏈路以負載分擔方式承載城域網(wǎng)流量，其中東勝2臺NE40E設備兼做城域網(wǎng)內部的ASBR設備，以1*GE鏈路分別上行至CN2網(wǎng)絡2臺PE設備形成口字型組網(wǎng)，承載VPN業(yè)務；IDC服務器通過E1000防火墻雙上行至出口NE80E設備；中心局、民聯(lián)B區(qū)、郵政機房、宏銀機房、地稅機房、人防辦、創(chuàng)業(yè)大廈、