標籤：ops 命令 auto ssis mode 管理員 log har aaa
OmniSwitch查看日誌的命令是：格式：show log swlog [timestamp start_time [end_time]]show log swlog timestamp 05/21/2015 11:30 05/21/2015 12:30 發現私自添加路由器導致DHCP分發確認路由器IP，查到MAC，交換器搜尋到MAC對應的連接埠，關閉此連接埠搜尋此路由器位置，掌握其管理員賬戶和密碼，關閉DHCP功能。 show configuration snapshotshow vlan rules 添加網管交換器，MAC地址綁定0網段，ARP綁定 aaa authentication default local #開啟所有服務，預設是關需要console進去設定aaa authentication http local #開啟http服務，預設是關需要console進去設定aaa authentication telnet local #開啟telnet服務，預設是關需要console進去設定aaa authentication ftp local #開啟ftp服務，預設是關需要console進去設定 ip interface "vlan 1" address 10.6.0.143 mask 255.255.255.0 vlan 1 ifindex 1 vlan port mobile 2/38 bpdu ignore enable MAC地址綁定 arp 10.6.0.136 00:e0:b1:d8:16:19 vlan no port mobile 1/21vlan 100 port default 1/21mac-address-table permanent 00:1b:82:ff:03:e5 1/21 100no mac-address-table permanent 00:1b:82:ff:03:e5 1/21 100
policy condition c1 source vlan 1000 destination ip 10.6.0.0 mask 255.255.0.0policy condition c2 source vlan 101 destination ip 10.6.0.100policy condition c3 source vlan 1010 destination ip 10.6.0.0 mask 255.255.0.0policy condition c4 source vlan 20 destination ip 10.6.100.0 mask 255.255.255.0policy condition c5 source vlan 1020 destination ip 10.6.0.0 mask 255.255.0.0policy condition c6 source vlan 30 destination ip 10.6.100.0 mask 255.255.255.0policy action a1 disposition droppolicy action a2 maximum bandwidth 128Kpolicy action a3 disposition denypolicy action flowshape maximum bandwidth 128Kpolicy rule r1 condition c1 action a1policy rule r2 condition c3 action a1policy rule r3 condition c4 action a3policy rule r4 condition c2 action a3policy rule r5 condition c5 action a1policy rule r6 condition c6 action a3qos apply
policy condition source1 source ip 10.6.1.253 mask 255.255.255.255policy condition dest1 destination ip 10.6.1.253 mask 255.255.255.255policy action No disposition denypolicy action Yes disposition acceptpolicy rule permitRule precedence 300 condition source1 action Yes reflexivepolicy rule denyRule condition dest1 action Noqos apply
只允許pc訪問指定的pcqos enablepolicy condition iptest source ip 10.6.4.226policy condition iptest2 source ip 10.6.4.226 destination ip 10.6.4.51 mask 255.255.255.255policy action NO disposition denypolicy action YES disposition acceptpolicy rule r1 precedence 100 condition iptest action NO-> policy rule r2 precedence 200 condition iptest2 action YES-> qos apply -> no policy rule r1-> no policy rule r2-> no policy condition iptest-> no policy condition iptest2 policy condition host42 source ip 10.6.100.42-> no policy condition host42-> policy condition host42 source ip 10.6.100.42 destination ip 10.6.100.0 mask 255.255.254.0-> policy rule tmpno42 precedence 200 condition host42 action a1-> qos applypolicy condition host10 source ip 10.6.100.42 destination ip 10.6.1.0 mask 255.255.255.0-> policy rule no10 precedence 200 condition host10 action a1-> qos apply -> no policy rule no10-> no policy rule tmpno42-> qos apply
policy condition ip1010 source ip 192.168.11.0 mask 255.255.255.0 destination ip 10.6.0.98 mask 255.255.255.255
policy action a4 disposition accept
policy rule r2 condition ip1010 action a4
policy condition c3 source vlan 1010 destination ip 10.6.0.0 mask 255.255.0.0
policy rule r11 condition c3 action a1
no policy rule r2
no policy rule r11
no policy action a4
no policy action YESqos apply
DHCP延遲最終解決ip helper forward delay 0 查看直連裝置的MAC地址 arp -a snmp -> user public password public read-write all no auth -> snmp station 10.6.0.71 162 "public" v1 enable snmpwalk -c public -v 2c 10.6.0.133 snmp community map "public" user "admin" on snmp community map mode off snmp security no security aaa authentication snmp "local" snmp station 10.6.0.71 162 "public" v1 enable snmp authentication trap enable user password-size min 5 snmp trap absorption enable snmp trap to webview enable ip helper no address 10.6.0.84 vlan 40 ip helper no address 10.6.0.84 vlan 1020 ip helper no address 10.6.0.73 vlan 10 ip helper no address 10.6.0.73 vlan 20 ip helper no address 10.6.0.73 vlan 30 ip helper no address 10.6.0.73 vlan 101 ip helper no address 10.6.0.73 vlan 1000 ip helper no address 10.6.0.73 vlan 1010 ip helper no address 10.6.0.73 vlan 1020 設定時區、時制、時間、日期、主機名稱、標書等：***************************************************system timezone pstsystem timezone zp8 (中國)system daylight savings time enablesystem time 18:35:00system date 06/27/2002system contact "JSmith X477 [email protected]"system name "Engineering Switch 3"system location "NMS Lab--NE Corner Rack"********************************************************* 重新啟動：***********************************************************reload working no rollback-timeout（立即重新啟動）reload primary in 3:03（定時重新啟動主模組）reload primary at 20:00 june 30（定時重新啟動主模組）reload primary cancel (取消重新啟動主模組)reload secondary (重新啟動備管理模組)reload cancel（取消重新啟動）************************************************************ 儲存配置：************************************************************copy running-config working or write memory（儲存到主模組記憶體）copy working certified(儲存到備設定檔)copy certified working（恢複設定檔）copy flash-synchro（把設定檔同步到備管理模組）************************************************************* VLAN配置：************************************************************* vlan port mobile 2/38 bpdu ignore enablevlan 10 建立vlan 10vlan 10 name bangonglou 給為vlan 10取名vlan 10 router ip 172.16.32.1 mask 255.255.255.0 給vlan配Router ipvlan 10 prot default 1/1 1/1連接埠分配到vlan 10 vlan 10 port default 2/32vlan 2 802.1q 8/1 8/1連接埠打上vlan 2的802.1q tagvlan 2 no port default 3/1-5 從vlan 2 刪除3/1-5的ip interface "vlan-1" address 192.168.0.254 mask 255.255.255.0 vlan 1 給vlan1配置route ip************************************************************* 常用維護命令：*************************************************************show micrcode 查看軟體資訊show running-directory 查看交換器運行模式show configuration snapshot all 查看所有配置show history parameters 查看history參數show history 查看曆史資訊show vlan 查看vlan資訊show chassis 查看交換器機箱資訊 MACshow module 查看模組資訊show ni 查看ni資訊show cmm 查看管理模組資訊show system 查看系統資訊show seesion configshow dnsshow ntp server statusshow ntp client server-listshow ntp clientshow reloadshow reload statusshow usershow hardware info*********************************************************** 檔案操作命令：********************************************************** rm *.imginstall *.img cdpwdlscpmkdirrmvimovechmoddeletefreespacefscknewfs***************************************************************** ACL配置：****************************************************************只允許192.168.10.0/24網段可以訪問任意，而192.168.10.0/24不讓任意網路訪問：-> policy condition source1 source ip 192.168.10.0 mask 255.255.255.0-> policy condition dest1 destination ip 192.168.10.0 mask 255.255.255.0-> policy action No disposition deny-> policy action Yes disposition accept-> policy rule permitRule precedence 300 condition source1 action Yes reflexive-> policy rule denyRule condition dest1 action No-> qos apply****************************************************************** Avlan配置：**************************************************************** system name os6600 vlan 1 router ip 192.168.1.1 vlan 2 router ip 192.168.2.1 vlan 2 enable vlan 2 authentication enable vlan port mobile 8/3 vlan port 8/3 authentication enable aaa radius-server “rad1” host 192.168.1.254 key switch auth-port 1812 acct-port 1813 aaa authentication vlan single-mode “rad1” aaa accounting vlan rad1 ip helpr address 192.168.1.254 aaa avlan default dhcp 192.168.1.1 ip helper avlan only avlan auth-ip 3 10.10.2.80 no aaa radius-server rad1 aaa vlan no no aaa authentication vlan no aaa accounting******************************************************** SLB配置：*******************************************************ip slb admin enableip slb cluster zbslb vip 192.168.0.234ip slb server ip 192.168.0.236 cluster zbslbip slb server ip 192.168.0.237 cluster zbslbip slb probe zbslb_probe1 pingip slb cluster zbslb probe zbslb_probe1ip slb server ip 192.168.0.236 cluster zbslb probe zbslb_probe1ip slb server ip 192.168.0.237 cluster zbslb probe zbslb_probe1********************************************************** dhcp relay配置**********************************************************ip udp relayip helper address 192.168.1.1ip helper no address 192.168.1.1 (deletes one address)ip helper no address (delete all address)ip helper address 192.168.3.1 vlan 3ip helper address 192.168.4.1 192.168.4.2 vlan 4ip helper forward delay 15 (set forward delay timer for the bootip/dhcp relay)1-65535ip helper maximum hops 3 (set the maximum hop count value)1-16show ip helperip helper boot-up enable dhcpip helper boot-up enable bootpshow ip helper statsshow ip udp relay serviceshow ip udp relay statisticsshow ip udp relay destination**********************************************************
-> interfaces 1/1 duplex ?
^
HALF FULL AUTO
(Interface Command Set)
-> interfaces 1/23 speed 100
-> interfaces 1/23 speed auto-> interfaces 1/23 speed 100
來自為知筆記(Wiz)
阿爾卡特交換器常用命令
