《juniper维护手册PPT演示文稿.ppt》由会员分享，可在线阅读，更多相关《juniper维护手册PPT演示文稿.ppt（33页珍藏版）》请在三一文库上搜索。
1、Maintenance for Juniper Router,Observe the LED on panel The debug commands in common used Some basic debug methods Some suggestion about inspect,LED Status,Interfaces LED,Routing-engine LED,normal/in used,fault,Alarms LED,The debug commands in common used,1Check the temperature thresholds： show chas
2、sis temperature-thresholds Fan speed Yellow alarm Red alarm Item Normal High Normal Bad fan Normal Bad fan Chassis default 48 54 65 55 75 65 Routing Engine 55 65 85 85 100 100 Acquiescently ,the temperature of routing-engine no higher than 65,the temperature of chassis no high than 54. go beyond the
3、 threshold would trigger alarms.,2Check the system alarm message： show chassis alarms 1 alarms currently active Alarm time Class Description 2007-09-19 09:05:39 UTC Major Host 0 fxp0: Ethernet Link Down this command shows all type of error over the system. For example, the link failure/ temperature
4、over high/hardware down could been logged by system. this is a important tools when inspect the state of device.,3Check the system temperature and components status： show chassis environment Class Item Status Measurement Power Power Supply 0 OK Power Supply 1 OK Power Supply 2 Absent Power Supply 3
5、Absent Temp Intake OK 23 degrees C / 73 degrees F FPC 0 OK 25 degrees C / 77 degrees F FPC 1 OK 25 degrees C / 77 degrees F Lower Power Supplies OK 24 degrees C / 75 degrees F Upper Power Supplies OK 24 degrees C / 75 degrees F Upper Power Supplies OK 24 degrees C / 75 degrees F CFEB Intake OK 25 de
6、grees C / 77 degrees F CFEB Exhaust OK 33 degrees C / 91 degrees F Routing Engine 0 OK 25 degrees C / 77 degrees F Routing Engine 1 Absent,3Display the system temperature and components status(cont): Fans Fan Tray 0 Absent Fan Tray 1 Fan 1 OK Spinning at normal speed Fan Tray 1 Fan 2 OK Spinning at
7、normal speed Fan Tray 1 Fan 3 OK Spinning at normal speed Fan Tray 1 Fan 4 OK Spinning at normal speed Fan Tray 1 Fan 5 OK Spinning at normal speed Fan Tray 1 Fan 6 OK Spinning at normal speed Fan Tray 1 Fan 7 OK Spinning at normal speed Fan Tray 1 Fan 8 OK Spinning at normal speed The command displ
8、ay the state of chassis components. For instance, Power Supply 0 is the power locate at slot 1, Power Supply 1 is the power locate at slot 2. Anyway, the state of device should display “OK”. If the slot is empty, display “Absent”.,4Check the CPU utilization per cent： show system processes summary la
9、st pid: 68788; load averages: 0.01, 0.01, 0.00 up 38+23:46:24 04:04:17 61 processes: 1 running, 60 sleeping Mem: 50M Active, 48M Inact, 28M Wired, 66M Cache, 35M Buf, 54M Free Swap: 512M Total, 512M Free PID USERNAME PRI NICE SIZE RES STATE TIME WCPU CPU COMMAND 3027 root 2 0 20888K 6820K select 32.
10、2H 2.39% 2.39% chassisd 3152 root 2 0 11320K 10176K kqread 380:11 0.10% 0.10% rpd 68788 root 31 0 21756K 1024K RUN 0:00 0.00% 0.00% top the CPU utilization must less than 60%。,5Check the routing-engine status： show chassis routing-engine Routing Engine status: Temperature 26 degrees C / 78 degrees F
11、 CPU temperature 23 degrees C / 73 degrees F DRAM 256 MB Memory utilization 85 percent CPU utilization: User 1 percent Background 0 percent Kernel 5 percent Interrupt 0 percent Idle 94 percent Model RE-5.0 Serial ID 1000552145 Start time 2007-10-09 13:45:35 HKT Uptime 16 days, 21 hours, 37 minutes,
12、59 seconds Load averages: 1 minute 5 minute 15 minute 0.20 0.07 0.02,6.Check the interfaces status: show interfaces terse Interface Admin Link Proto Local Remote ge-0/0/0 up up ge-0/0/0.0 up up inet 21.16.0.33/30 iso ge-0/2/0 up up ge-0/2/0.0 up up inet 21.16.0.41/30 fe-0/3/0 down down fe-0/3/1 down
13、 down fe-0/3/2 down down fe-0/3/3 down down ge-1/0/0 up up ge-1/0/0.0 up up inet 21.16.0.237/30 iso ge-1/2/0 up up ge-1/2/0.0 up up inet 21.16.0.245/30 dsc up up fxp0 up down fxp0.0 up down inet 172.16.1.1/24 fxp1 up up .,7Check the interfaces option detailedly : show interfaces XXX extensive Physic
14、al interface: ge-0/0/0, Enabled, Physical link is Up Interface index: 137, SNMP ifIndex: 47, Generation: 138 Link-level type: Ethernet, MTU: 1514, Speed: 1000mbps, Loopback: Disabled, Source filtering: Disabled, Flow control: Enabled, Auto-negotiation: Disabled, Remote fault: Online Device flags : P
15、resent Running Interface flags: SNMP-Traps Internal: 0 x4000 Link flags : None CoS queues : 4 supported, 4 maximum usable queues Hold-times : Up 0 ms, Down 0 ms Current address: 00:19:e2:82:c4:00, Hardware address: 00:19:e2:82:c4:00 Last flapped : 2007-10-26 05:06:29 UTC (6d 02:23 ago) Statistics la
16、st cleared: Never Traffic statistics: Input bytes : 569375423 992 bps Output bytes : 1300071681 1264 bps Input packets: 5872788 1 pps Output packets: 3221728 2 pps,Input errors: Errors: 0, Drops: 0, Framing errors: 0, Runts: 0, Policed discards: 0, L3 incompletes: 0, L2 channel errors: 0, L2 mismatc
17、h timeouts: 0, FIFO errors: 0, Resource errors: 0 Output errors: Carrier transitions: 27, Errors: 0, Drops: 0, Collisions: 0, Aged packets: 0, FIFO errors: 0, HS link CRC errors: 0, MTU errors: 0, Resource errors: 0 Egress queues: 4 supported, 8 in use Queue counters: Queued packets Transmitted pack
18、ets Dropped packets 0 best-effort 646832 646832 0 1 expedited-fo 0 0 0 2 assured-forw 0 0 0 3 network-cont 2574886 2574886 0 Active alarms : None Active defects : None MAC statistics: Receive Transmit Total octets 664152745 1237200077 Total packets 5871551 3221727 Unicast packets 4671168 643690 Broa
19、dcast packets 1786 3159 Multicast packets 1198597 2574878 CRC/Align errors 0 0 FIFO errors 0 0 MAC control frames 0 0,MAC pause frames 0 0 Oversized frames 0 Jabber frames 0 Fragment frames 0 VLAN tagged frames 0 Code violations 0 Filter statistics: Input packet count 5872789 Input packet rejects 0
20、Input DA rejects 0 Input SA rejects 0 Output packet count 3221727 Output packet pad count 212546 Output packet error count 0 CAM destination filters: 5, CAM source filters: 0 Autonegotiation information: Negotiation status: Incomplete Packet Forwarding Engine configuration: Destination slot: 0 Direc
21、tion : Output CoS transmit queue Bandwidth Buffer Priority Limit % bps % usec 0 best-effort 95 950000000 95 0 low none 3 network-control 5 50000000 5 0 low none,Logical interface ge-0/0/0.0 (Index 68) (SNMP ifIndex 57) (Generation 136) Description: TO-GZQHD-PS-ChinaMobile_CMnet01-M320 Flags: SNMP-Tr
22、aps Encapsulation: ENET2 Traffic statistics: Input bytes : 569375311 Output bytes : 1280755413 Input packets: 5872787 Output packets: 3221728 Local statistics: Input bytes : 289499712 Output bytes : 1280572961 Input packets: 1679334 Output packets: 3219378 Transit statistics: Input bytes : 279875599
23、 192 bps Output bytes : 182452 0 bps Input packets: 4193453 1 pps Output packets: 2350 0 pps Protocol inet, MTU: 1500, Generation: 147, Route table: 0 Flags: None Filters: Input: 111, Output: 111 Addresses, Flags: Is-Preferred Is-Primary Destination: 211.136.0.232/30, Local: 211.136.0.233, Broadcast
24、: 211.136.0.235, Generation: 150 Protocol iso, MTU: 1497, Generation: 148, Route table: 0 Flags: None You should notice the output mark by red font.,8Check the VRRP status： show vrrp Interface State Group VR state Timer Type Address fe-1/3/1.21 up 21 master A 0.922 lcl 10.0.4.6 vip 10.0.4.5 “master”
25、 display in VR state column points the router running as master router, “backup” display in VR state column points the router backup for the master router. If any link fail in master router, the VR state column of master router will display “down”. A switch by system would happen between master/back
26、up router.,9.Password recovery:,1.Reboot the system by “request system reboot” 2.When the CLI display the booting message，press any key expect “Enter” and then enter into the single user mode： Hit Enter to boot immediately, or any other key for command prompt. Booting kernel in 9 seconds. ok boot s
27、/* type ”boot s” when display the upper prompt */ 3. Enter full pathname of shell or recovery for root password recovery or RETURN for /bin/sh: recovery /* type ”recovery” when display the upper prompt */,NOTE: Once in the CLI, you will need to enter configuration mode using NOTE: the configure comm
28、and to make any required changes. For example, NOTE: to reset the root password, type: NOTE: configure NOTE: set system root-authentication plain-text-password NOTE: (enter the new password when asked) NOTE: commit NOTE: exit NOTE: exit NOTE: When you exit the CLI, you will be asked if you want to r
29、eboot NOTE: the system Starting CLI . root 4.Enter the configure mode, change the root password and type “commit” to save.,1.About CPU extortionate utilization ： Execute “show system processes summary” command some times between busyness and non busyness time，and make sure the phenomena exist whethe
30、r the system process for large data flows. If the phenomena exist all the same in non busyness ,use “request support information” command to collect the system information and contact the system engineer or JTAC. If the phenomena exist in busyness only , please consider upgrade the device capability
31、.,Some basic debug methods,2.The temperature of device too high： Use “show chassis environment” command to check the fan status. If the fan tray is broken，contact the system engineer or JTAC, exchange the blooey components.,3.Ports unconventionality or VRRP status transform: Check the primary router
32、 whether connect exactly, examine the interfaces LED status. Type ”show interface terse” on primary router, affirm the interfaces state both “link up” and “admin up”. If link state display “down”, check the link was cut out whether or not. Check the abut against device etc. Contact the system engine
33、er or JTAC, exchange the blooey components.,Every day: Examine the temperature Orange: System booting; Red: System boot failed. POWER: Green : Power supply runs normally; Red: Power supply fault. ALARM: Green : None alarms exist; Red: Device detect some alarms . HA: Green: the device in NSRP master
34、status; Orange: the device in NSRP backup status; Red: HA link down or not synchronization; Crush out: NSRP not configure.,1Check the basic information on firewall： SSG520(B)- get system Product Name: SSG-520 Serial Number: 0156062007000181, Control Number: 00000000 Hardware Version: 0000(0)-(00), F
35、PGA checksum: 00000000, VLAN1 IP (0.0.0.0) Software Version: 5.4.0r3a.0, Type: Firewall+VPN Feature: AV-K Compiled by build_master at: Thu Feb 8 04:35:19 PST 2007 Base Mac: 0019.e243.4900 File Name: ssg500.5.4.0r3a.0, Checksum: 5a513aa0 , Total Memory: 1024MB Date 06/21/2008 15:10:56, Daylight Savin
36、g Time enabled The Network Time Protocol is Disabled Up 5230 hours 58 minutes 37 seconds Since 16Nov2007:15:12:19 Total Device Resets: 0 System in NAT/route mode.,The debug commands in common used,Use interface IP, Config Port: 80 User Name: zte Interface ethernet0/0(VSI): description ethernet0/0 nu
37、mber 0, if_info 0, if_index 0, mode route link inactive, phy-link up/full-duplex vsys Root, zone Trust, vr trust-vr, vsd 0 dhcp client disabled PPPoE disabled admin mtu 0, operating mtu 1500, default mtu 1500 *ip 10.81.20.126/25 mac 0010.dbff.2000 manage ip 10.81.20.41, mac 0019.e243.4900 route-deny
38、 disable bandwidth: physical 100000kbps, configured egress gbw 0kbps mbw 0kbps configured ingress mbw 0kbps, current bw 0kbps total allocated gbw 0kbps ,1Check the basic information on firewall：(cont),2Check the log and alarms： SSG520(B)- get event level emergency (alert/critical/error) Date Time Mo
39、dule Level Type Description 2008-06-23 22:17:00 system warn 00515 Admin user zte has logged on via Telnet from 100.81.24.157:1127 2008-06-23 21:43:09 system warn 00515 Admin user zte has logged on via Telnet from 100.81.24.157:1114 2008-06-23 21:43:02 system warn 00515 Login attempt to system by adm
40、in netscreen via Telnet from 100.81.24.157: 1114 has failed Note: This command show us the log for level 0-3(the highest is emergency, etc) alarms messages.,The debug commands in common used,3Check the interfaces status： SSG520(M)- get interface A - Active, I - Inactive, U - Up, D - Down, R - Ready
41、Interfaces in vsys Root: Name IP Address Zone MAC VLAN State VSD eth0/0 10.81.25.126/25 Trust 0010.dbff.2000 - U 0 eth0/1 0.0.0.0/0 HA 0019.e243.4a05 - U - eth0/2 10.81.25.131/29 Untrust 0010.dbff.2060 - U 0 eth0/3 0.0.0.0/0 HA 0019.e243.4a07 - U - vlan1 0.0.0.0/0 VLAN 0010.dbff.20f0 1 D 0 null 0.0.
42、0.0/0 Null N/A - U 0 Note: The interfaces state of master device would be display “U”, The interfaces status of backup device would be display “I”.,The debug commands in common used,4Check the CPU utilization per cent ： SSG520(M)- get performance cpu Average System Utilization: 2% Last 1 minute: 2%,
43、 Last 5 minutes: 2%, Last 15 minutes: 2% Note: No more than 50%!,The debug commands in common used,5Check the memory utilization per cent ： SSG520(M)- get memory Memory: allocated 62977360, left 663283264, frag 96 Note: No more than 90%. 6Check the sessions amount： SSG520(M)- get session info alloc
44、245/max 64064, alloc failed 0, mcast alloc 0, di alloc failed 0 total reserved 0, free sessions in shared pool 63819 Note: No more than 50%.,The debug commands in common used,7Check the NSRP master/backup status ： SSG520(M)- get nsrp vsd all VSD group info: init hold time: 5 heartbeat lost threshold
45、: 3 heartbeat interval: 1000(ms) master always exist: disabled group priority preempt holddown inelig master PB other members 0 100 no 3 no myself 4408448 total number of vsd groups: 1 Total iteration=16610418,time=3247494099,max=678661,min=1824,average=195 vsd group id: 0, member count: 2, master: 4409856 member information: - group unit_id state prio flag rto_peer hb miss holddown - 0 4408448 primary backup 120 0 0 0 0 0 0 4409856 master 100 0 0 0 0 0,The debug commands in common used,8Password recovery(restore to default setting)： Use the “get system”