【正文】 s step is 5 rule 5 deny tcp destinationport eq 4444 rule 10 deny udp destinationport eq 1434 rule 15 deny udp destinationport eq 4444 rule 20 deny tcp destinationport eq 9995 rule 25 deny udp destinationport eq 135 rule 30 deny tcp destinationport eq 135 rule 35 deny tcp destinationport eq 139 rule 40 deny udp destinationport eq netbiosssn rule 45 deny 。s step is 5 rule 5 permit source rule 10 permit source 0 rule 15 permit source Basic ACL 2999, 8 rulestelnet_managerAcl39。執(zhí)行命令：display snmpagent statistics輸出舉例：display snmpagent statistics 1251274 Messages delivered to the SNMP entity 0 Messages which were for an unsupported version 86 Messages which used a SNMP munity name not known 0 Messages which represented an illegal operation for the munity supplied 0 or BER errors in the process of decoding 1251422 Messages passed from the SNMP entity 0 SNMP PDUs which had badValue errorstatus 0 SNMP PDUs which had genErr errorstatus 0 SNMP PDUs which had noSuchName errorstatus 0 SNMP PDUs which had tooBig errorstatus 1895555 MIB objects retrieved successfully 0 MIB objects altered successfully 436072 GetRequestPDU accepted and processed 815115 GetNextRequestPDU accepted and processed 1251187 GetResponsePDU accepted and processed 0 SetRequestPDU accepted and processed 235 TrapPDU accepted and processed 0 InformPDU sent 0 InformPDU received with no acknowledgement 0 InformPDU received with acknowledgement檢查設(shè)備部署的acl配置。ZY_G5DK+1!! localuser nmgtemp servicetype telnet localuser nmgtemp level 3 localuser huawei password cipher PTKJ5++[_/Q=^Q`MAF41!! localuser huawei servicetype ftp telnet localuser huawei level 3 authenticationscheme default authenticationscheme nmgnoc authenticationmode local hwtacacs authorizationscheme default authorizationscheme nmgnoc authorizationmode local hwtacacs accountingscheme default accountingscheme nmgnoc accountingmode hwtacacs accounting startfail online domain default authenticationscheme nmgnoc authorizationscheme nmgnoc accountingscheme nmgnoc hwtacacsserver nmgnoc recordingscheme nmgnoc recordingmode hwtacacs nmgnoc system recordingscheme nmgnoc outbound recordingscheme nmgnoc cmd recordingscheme nmgnoc檢查SNMP服務(wù)的相關(guān)屬性，所有的munity字符串要滿足復(fù)雜度要求,對于不需要SNMP RW權(quán)限的設(shè)備，建議關(guān)閉SNMP RW功能,Trap的源地址建議采用loopback 0地址。YM9/I[。Camp。執(zhí)行命令：display currentconfiguration configuration userinterface輸出舉例：display fib statisticsRoute Entry Count : 832display currentconfiguration configuration userinterfaceuserinterface con 0 idletimeout 5 0userinterface aux 0userinterface vty 0 4 acl 2999 inbound authenticationmode aaa idletimeout 60 0userinterface vty 16 20檢查本地賬戶管理策略。執(zhí)行命令：display mpls ldp peer display mpls ldp session輸出舉例：display mpls ldp peer LDP Peer Information in Public network PeerID TransportAddress DiscoverySource :0 GigabitEthernet1/0/1 :0 GigabitEthernet1/0/0 :0 GigabitEthernet3/0/0 TOTAL: 3 Peer(s) Found.display mpls ldp session LDP Session(s) in Public Network PeerID Status LAM SsnRole SsnAge KASent/Rcv :0 Operational DU Active 020:06:23 116735/116735 :0 Operational DU Passive 020:06:23 116735/116736 :0 Operational DU Passive 020:06:23 116735/116736 TOTAL: 3 session(s) Found. LAM : Label Advertisement Mode SsnAge Unit : DDD:HH:MM1查看FIB表的數(shù)目。s neighbors Router ID: Address: State: Full Mode:Nbr is Slave Priority: 1 DR: None BDR: None MTU: 0 Dead timer due in 30 sec Neighbor is up for 486:22:15 Authentication Sequence: [ 0 ] 1檢查MPLS運(yùn)行狀態(tài),所有期望支持MPLS的接口狀態(tài)為Active。s neighbors Router ID: Address: State: Full Mode:Nbr is Master Priority: 1 DR: None BDR: None MTU: 0 Dead timer due in 33 sec Neighbor is up for 486:22:15 Authentication Sequence: [ 0 ] Neighbors Area interface (GigabitEthernet3/0/0)39。執(zhí)行命令：display isis interfacedisplay isis peer輸出舉例：display isis interface Interface information for ISIS(1) Interface Id MTU Type DIS Loop0 001 Up Down 1500 L2 GE4/0/2 002 Up Down 1545 L2 No Pos2/0/0 003 Up Down 4470 L2 Pos6/0/0 004 Up Down 4470 L2 dis isis peer Peer information for ISIS(1) System Id Interface Circuit Id State HoldTime Type PRI GE4/0/2 Up 8s L2 64 Pos2/0/0 003 Up 19s L2 Pos6/0/0 004 Up 29s L2 Total Peer(s): 3 檢查OSPF運(yùn)行狀態(tài)。執(zhí)行命令：display bgp vpnv4 all peer輸出舉例：display bgp vpnv4 all peer BGP local router ID : Local AS number : 17923 Total number of peers : 2 Peers in established state : 2 Peer