《juniper维护手册.ppt》由会员分享，可在线阅读，更多相关《juniper维护手册.ppt（33页珍藏版）》请在三一办公上搜索。
1、Maintenance for Juniper Router,Observe the LED on panelThe debug commands in common usedSome basic debug methodsSome suggestion about inspect,LED Status,Interfaces LED,Routing-engine LED,normal/in used,fault,Alarms LED,The debug commands in common used,1Check the temperature thresholds：show chassis
2、temperature-thresholds Fan speed Yellow alarm Red alarmItem Normal High Normal Bad fan Normal Bad fanChassis default 48 54 65 55 75 65Routing Engine 55 65 85 85 100 100Acquiescently,the temperature of routing-engine no higher than 65,the temperature of chassis no high than 54.go beyond the threshold
3、 would triggeralarms.,2Check the system alarm message：show chassis alarms 1 alarms currently activeAlarm time Class Description2007-09-19 09:05:39 UTC Major Host 0 fxp0:Ethernet Link Downthis command shows all type of error over the system.For example,the link failure/temperature over high/hardware
4、down could been logged by system.this is a important tools when inspect the state of device.,3Check the system temperature and components status：show chassis environment Class Item Status MeasurementPower Power Supply 0 OK Power Supply 1 OK Power Supply 2 Absent Power Supply 3 Absent Temp Intake OK
5、23 degrees C/73 degrees F FPC 0 OK 25 degrees C/77 degrees F FPC 1 OK 25 degrees C/77 degrees F Lower Power Supplies OK 24 degrees C/75 degrees F Upper Power Supplies OK 24 degrees C/75 degrees F Upper Power Supplies OK 24 degrees C/75 degrees F CFEB Intake OK 25 degrees C/77 degrees F CFEB Exhaust
6、OK 33 degrees C/91 degrees F Routing Engine 0 OK 25 degrees C/77 degrees F Routing Engine 1 Absent,3Display the system temperature and components status(cont):Fans Fan Tray 0 Absent Fan Tray 1 Fan 1 OK Spinning at normal speed Fan Tray 1 Fan 2 OK Spinning at normal speed Fan Tray 1 Fan 3 OK Spinning
7、 at normal speed Fan Tray 1 Fan 4 OK Spinning at normal speed Fan Tray 1 Fan 5 OK Spinning at normal speed Fan Tray 1 Fan 6 OK Spinning at normal speed Fan Tray 1 Fan 7 OK Spinning at normal speed Fan Tray 1 Fan 8 OK Spinning at normal speedThe command display the state of chassis components.For ins
8、tance,Power Supply 0 is the power locate at slot 1,Power Supply 1 is the power locate at slot 2.Anyway,the state of device should display“OK”.If the slot is empty,display“Absent”.,4Check the CPU utilization per cent：show system processes summary last pid:68788;load averages:0.01,0.01,0.00 up 38+23:4
9、6:24 04:04:1761 processes:1 running,60 sleepingMem:50M Active,48M Inact,28M Wired,66M Cache,35M Buf,54M FreeSwap:512M Total,512M Free PID USERNAME PRI NICE SIZE RES STATE TIME WCPU CPU COMMAND 3027 root 2 0 20888K 6820K select 32.2H 2.39%2.39%chassisd 3152 root 2 0 11320K 10176K kqread 380:11 0.10%0
10、.10%rpd68788 root 31 0 21756K 1024K RUN 0:00 0.00%0.00%topthe CPU utilization must less than 60%。,5Check the routing-engine status：show chassis routing-engineRouting Engine status:Temperature 26 degrees C/78 degrees F CPU temperature 23 degrees C/73 degrees F DRAM 256 MB Memory utilization 85 percen
11、t CPU utilization:User 1 percent Background 0 percent Kernel 5 percent Interrupt 0 percent Idle 94 percent Model RE-5.0 Serial ID 1000552145 Start time 2007-10-09 13:45:35 HKT Uptime 16 days,21 hours,37 minutes,59 seconds Load averages:1 minute 5 minute 15 minute 0.20 0.07 0.02,6.Check the interface
12、s status:show interfaces terse Interface Admin Link Proto Local Remotege-0/0/0 up up iso ge-0/2/0 up up fe-0/3/0 down downfe-0/3/1 down downfe-0/3/2 down downfe-0/3/3 down downge-1/0/0 up up iso ge-1/2/0 up up dsc up up fxp0 up downfxp1 up up.,7Check the interfaces option detailedly:show interfaces
13、XXX extensive Physical interface:ge-0/0/0,Enabled,Physical link is Up Interface index:137,SNMP ifIndex:47,Generation:138 Link-level type:Ethernet,MTU:1514,Speed:1000mbps,Loopback:Disabled,Source filtering:Disabled,Flow control:Enabled,Auto-negotiation:Disabled,Remote fault:Online Device flags:Presen
14、t Running Interface flags:SNMP-Traps Internal:0 x4000 Link flags:None CoS queues:4 supported,4 maximum usable queues Hold-times:Up 0 ms,Down 0 ms Current address:00:19:e2:82:c4:00,Hardware address:00:19:e2:82:c4:00 Last flapped:2007-10-26 05:06:29 UTC(6d 02:23 ago)Statistics last cleared:Never Traff
15、ic statistics:Input bytes:569375423 992 bps Output bytes:1300071681 1264 bps Input packets:5872788 1 pps Output packets:3221728 2 pps,Input errors:Errors:0,Drops:0,Framing errors:0,Runts:0,Policed discards:0,L3 incompletes:0,L2 channel errors:0,L2 mismatch timeouts:0,FIFO errors:0,Resource errors:0
16、Output errors:Carrier transitions:27,Errors:0,Drops:0,Collisions:0,Aged packets:0,FIFO errors:0,HS link CRC errors:0,MTU errors:0,Resource errors:0 Egress queues:4 supported,8 in use Queue counters:Queued packets Transmitted packets Dropped packets 0 best-effort 646832 646832 0 1 expedited-fo 0 0 0
17、2 assured-forw 0 0 0 3 network-cont 2574886 2574886 0 Active alarms:None Active defects:None MAC statistics:Receive Transmit Total octets 664152745 1237200077 Total packets 5871551 3221727 Unicast packets 4671168 643690 Broadcast packets 1786 3159 Multicast packets 1198597 2574878 CRC/Align errors 0
18、 0 FIFO errors 0 0 MAC control frames 0 0,MAC pause frames 0 0 Oversized frames 0 Jabber frames 0 Fragment frames 0 VLAN tagged frames 0 Code violations 0 Filter statistics:Input packet count 5872789 Input packet rejects 0 Input DA rejects 0 Input SA rejects 0 Output packet count 3221727 Output pack
19、et pad count 212546 Output packet error count 0 CAM destination filters:5,CAM source filters:0 Autonegotiation information:Negotiation status:Incomplete Packet Forwarding Engine configuration:Destination slot:0 Direction:Output CoS transmit queue Bandwidth Buffer Priority Limit%bps%usec 0 best-effor
20、t 95 950000000 95 0 low none 3 network-control 5 50000000 5 0 low none,Logical interface ge-0/0/0.0(Index 68)(SNMP ifIndex 57)(Generation 136)Description:TO-GZQHD-PS-ChinaMobile_CMnet01-M320 Flags:SNMP-Traps Encapsulation:ENET2 Traffic statistics:Input bytes:569375311 Output bytes:1280755413 Input p
21、ackets:5872787 Output packets:3221728 Local statistics:Input bytes:289499712 Output bytes:1280572961 Input packets:1679334 Output packets:3219378 Transit statistics:Input bytes:279875599 192 bps Output bytes:182452 0 bps Input packets:4193453 1 pps Output packets:2350 0 pps Protocol inet,MTU:1500,Ge
22、neration:147,Route table:0 Flags:None Filters:Input:111,Output:111 Addresses,Flags:Is-Preferred Is-Primary Destination:211.136.0.232/30,Local:211.136.0.233,Broadcast:211.136.0.235,Generation:150 Protocol iso,MTU:1497,Generation:148,Route table:0 Flags:None You should notice the output mark by red fo
23、nt.,8Check the VRRP status：show vrrp Interface State Group VR state Timer Type Addressfe-1/3/1.21 up 21 master A 0.922 lcl 10.0.4.6 vip 10.0.4.5“master”display in VR state column points the router running as master router,“backup”display in VR state column points the router backup for the master rou
24、ter.If any link fail in master router,the VR state column of master router will display“down”.A switch by systemwould happen between master/backup router.,9.Password recovery:,1.Reboot the system by“request system reboot”2.When the CLI display the booting message，press any key expect“Enter”and then
25、enter into the single user mode：Hit Enter to boot immediately,or any other key for command prompt.Booting kernel in 9 seconds.ok boot s/*type”boot s”when display the upper prompt*/3.Enter full pathname of shell or recovery for root password recovery or RETURN for/bin/sh:recovery/*type”recovery”when
26、display the upper prompt*/,NOTE:Once in the CLI,you will need to enter configuration mode usingNOTE:the configure command to make any required changes.For example,NOTE:to reset the root password,type:NOTE:configureNOTE:set system root-authentication plain-text-passwordNOTE:(enter the new password wh
27、en asked)NOTE:commitNOTE:exitNOTE:exitNOTE:When you exit the CLI,you will be asked if you want to rebootNOTE:the systemStarting CLI.root4.Enter the configure mode,change the root password and type“commit”to save.,1.About CPU extortionate utilization：Execute“show system processes summary”command some
28、 times between busyness and non busyness time，and make sure the phenomena exist whether the system process for large data flows.If the phenomena exist all the same in non busyness,use“request support information”command to collect the system information and contact the system engineer or JTAC.If the
29、 phenomena exist in busyness only,please consider upgrade the device capability.,Some basic debug methods,2.The temperature of device too high：Use“show chassis environment”command to check the fan status.If the fan tray is broken，contact the system engineer or JTAC,exchange the blooey components.,3.
30、Ports unconventionality or VRRP status transform:Check the primary router whether connect exactly,examine the interfaces LED status.Type”show interface terse”on primary router,affirm the interfaces state both“link up”and“admin up”.If link state display“down”,check the link was cut out whether or not
31、.Check the abut against device etc.Contact the system engineer or JTAC,exchange the blooey components.,Every day:Examine the temperature&humidityExamine the power equipmentExamine the network equipmentEvery week:Backup the maintenance recordEvery mouth:Device cleanBackup the configure file.Check the
32、 system reboot time.,Some suggestion about inspect,file copy show system uptime Current time:2007-11-01 07:37:42 UTCSystem booted:2007-09-17 04:18:23 UTC(6w3d 03:19 ago)Protocols started:2007-09-17 04:19:03 UTC(6w3d 03:18 ago)Last configured:2007-10-29 10:15:44 UTC(2d 21:21 ago)by root 7:37AM up 45
33、days,3:19,2 users,load averages:0.03,0.03,0.00Change the password every two mouth.Every half of years:Ark clean(Feb&Aug).,Some suggestion about inspect,Maintenance for Juniper Netscreen,Observe the LED on the panelThe debug commands in common used,Observe the LED on the panel,Green light:link up but
34、 no data transitGreen light&flash:link up and data transitingRed:link down,STATUS:Green:System runs normally;Orange:System booting;Red:System boot failed.POWER:Green:Power supply runs normally;Red:Power supply fault.ALARM:Green:None alarms exist;Red:Device detect some alarms.HA:Green:the device in N
35、SRP master status;Orange:the device in NSRP backup status;Red:HA link down or not synchronization;Crush out:NSRP not configure.,1Check the basic information on firewall：SSG520(B)-get systemProduct Name:SSG-520,Control Number:00000000Hardware Version:0000(0)-(00),FPGA checksum:00000000,VLAN1 IP(0.0.0
36、.0),Type:Firewall+VPNFeature:AV-KCompiled by build_master at:Thu Feb 8 04:35:19 PST 2007File Name:ssg500.5.4.0r3a.0,Checksum:5a513aa0,Total Memory:1024MBDate 06/21/2008 15:10:56,Daylight Saving Time enabledThe Network Time Protocol is DisabledUp 5230 hours 58 minutes 37 seconds Since 16Nov2007:15:12
37、:19Total Device Resets:0System in NAT/route mode.,The debug commands in common used,Use interface IP,Config Port:80User Name:zteInterface ethernet0/0(VSI):description ethernet0/0 number 0,if_info 0,if_index 0,mode route link inactive,phy-link up/full-duplex vsys Root,zone Trust,vr trust-vr,vsd 0 dhc
38、p client disabled PPPoE disabled admin mtu 0,operating mtu 1500,default mtu 1500 route-deny disable bandwidth:physical 100000kbps,configured egress gbw 0kbps mbw 0kbps configured ingress mbw 0kbps,current bw 0kbps total allocated gbw 0kbps,1Check the basic information on firewall：(cont),2Check the l
39、og and alarms：SSG520(B)-get event level emergency(alert/critical/error)Date Time Module Level Type Description2008-06-23 22:17:00 system warn 00515 Admin user zte has logged on via Telnet from 100.81.24.157:11272008-06-23 21:43:09 system warn 00515 Admin user zte has logged on via Telnet from 100.81
40、.24.157:11142008-06-23 21:43:02 system warn 00515 Login attempt to system by admin netscreen via Telnet from 100.81.24.157:1114 has failedNote:This command show us the log for level 0-3(the highest is emergency,etc)alarms messages.,The debug commands in common used,3Check the interfaces status：SSG52
41、0(M)-get interface A-Active,I-Inactive,U-Up,D-Down,R-Ready Interfaces in vsys Root:Name IP Address Zone MAC VLAN State VSD Note:The interfaces state of master device would be display“U”,The interfaces status of backup device would be display“I”.,The debug commands in common used,4Check the CPU utili
42、zation per cent：SSG520(M)-get performance cpuAverage System Utilization:2%Last 1 minute:2%,Last 5 minutes:2%,Last 15 minutes:2%Note:No more than 50%!,The debug commands in common used,5Check the memory utilization per cent：SSG520(M)-get memory Memory:allocated 62977360,left 663283264,frag 96Note:No
43、more than 90%.6Check the sessions amount：SSG520(M)-get session infoalloc 245/max 64064,alloc failed 0,mcast alloc 0,di alloc failed 0total reserved 0,free sessions in shared pool 63819Note:No more than 50%.,The debug commands in common used,7Check the NSRP master/backup status：SSG520(M)-get nsrp vsd
44、 allVSD group info:init hold time:5heartbeat lost threshold:3heartbeat interval:1000(ms)master always exist:disabledgroup priority preempt holddown inelig master PB other members 0 100 no 3 no myself 4408448 total number of vsd groups:1Total iteration=16610418,time=3247494099,max=678661,min=1824,ave
45、rage=195vsd group id:0,member count:2,master:4409856member information:-group unit_id state prio flag rto_peer hb miss holddown-0 4408448 primary backup 120 0 0 0 0 0 0 4409856 master 100 0 0 0 0 0,The debug commands in common used,8Password recovery(restore to default setting)：Use the“get system”co
46、mmand and write down the serial number;Login the device by user name/password:SN/SN;Restore the backup configure file from tftp server;Save the configure file.Notice:If you run the password recovery,all configure command on the device would be lost!,The debug commands in common used,More information in the juniper web site:,Q&A,
