网络运维常用命令
CISCO
查看端口错误信息
show interfaces counters errors
首先查看交换机log
sh log
查看是否有系统关闭端口：
show interfaces status err-disabled
查看及清除端口error信息统计：
show interfaces gigabitEthernet 1/0/11 | include error
clear counters gigabitEthernet 1/0/11
查看G1/0/11下交换机名字/IP：
show cdp neighbors
show cdp neighbors gigabitEthernet 1/0/11 detail
通过MAC找IP/通过IP找MAC
show mac address-table | include xxxx.xxxx.xxx
show arp | include xxxx.xxxx.xxxx
show arp | include 192.168.88.88
H3C排错原理同上
开启网络设备SSH：
H3C
local-user admin class manage
password hash xxxxxxxx
service-type ssh terminal https
authorization-attribute user-role network-admin
line vty 0 63
authentication-mode scheme
user-role network-admin
protocol inbound ssh
cisco
username aaa privilege 1 password 0 bbb
line vty 0 4
login local
#######R2(config)#ip domain-name man.com
R2(config)#crypto key generate rsa
R2(config)#username man secret cisco
R2(config-line)#transport input ssh
R2(config-line)#login local
H3C QOS限速
qos lr inbound cir
qos lr outbound cir
H3C PBR策略路由
[SwitchA] acl number 3101
[SwitchA-acl-adv-3101] rule permit tcp destination-port 80
[SwitchA-acl-adv-3101] quit
# 定义5号节点，指定所有TCP报文的下一跳为1.1.2.2。
[SwitchA] policy-based-route aaa permit node 5
[SwitchA-pbr-aaa-5] if-match acl 3101
[SwitchA-pbr-aaa-5] apply ip-address next-hop 1.1.2.2
[SwitchA-pbr-aaa-5] quit
# 在接口Vlan-interface11上应用接口策略路由，处理此接口接收的报文。
[SwitchA] interface vlan-interface 11
[SwitchA-Vlan-interface11] ip address 10.110.0.10 255.255.255.0
[SwitchA-Vlan-interface11] ip policy-based-route aaa
[SwitchA-Vlan-interface11] quit
cisco 为类似功能为IP SLA，未在生产环境测试.
路由侦测
H3C
ip route-static 123.58.40.250/32 X.X.X.X (联通IP城域网下一跳)
ip route-static 0.0.0.0 0.0.0.0 X.X.X.X preference 80
ip route 0.0.0.0.0 0.0.0.0 A.A.A.A(电信IP城域网出口) track 1
nqa entry admin test
type icmp-echo
destination ip A.A.A.A //电信IP城域网出口
frequency 100
next-hop A.A.A.A
reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only
nqa schedule admin test start-time now lifetime forever
track 1 nqa entry admin test reaction 1
cisco 为类似功能为BFD，未在生产环境测试.
双核心配置
H3C VRRP：
SW1
interface Vlan-interface800
ip address 1.1.1.249 255.255.255.0
vrrp vrid 8 virtual-ip 1.1.1.253
vrrp vrid 8 priority 110
SW2
interface Vlan-interface800
ip address 1.1.1.250 255.255.255.0
vrrp vrid 8 virtual-ip 1.1.1.253
vrrp vrid 8 priority 115
dis vrrp
CISCO HSRP:
sw1
standby 2 ip 1.1.1.250
standby 2 priority 120
standby 2 preempt
sw2
standby 2 ip 1.1.1.250
standby 2 priority 90
standby 2 preempt
show standby
链路聚合
H3C：
interface Bridge-Aggregation 1
port link-type trunk
port trunk permit vlan all
int g1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan all
port link-aggregation group 1
int g1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan all
port link-aggregation group 1
cisco:
3550(config)#interface gigabitethernet 0/1
3550(config-if)#no switchport
3550(config-if)#channel-group 1 mode active
3550(config)#interface gigabitethernet 0/2
3550(config-if)#no switchport
3550(config-if)#channel-group 1 mode active
