0.PFA常见命令
1 帮助文件
学会使用command line help文件
经常用到,如忘了iprtetbl、ipcfgtbl、sysmg等命令的使用参数,都可以去查(举例)
2. 路由添加删除命令
查看路由命令:
iprtetbl或者iprtetbl:网段
需要注意问
:
1) 原来添加了某条路由,后来发现这条路由不见了,原因是此路由定义的接口出现问题(一般是down了),应检查接口状态,排除故障。
2) 定义某接口后,会自动产生一条接口IP地址段的路由,当接口出现故障时,此路由也会丢掉。(如定义接口IP地址为10.19.74.2/30,会自动产生10.19.74.0/30的路由)
3) 添加完路由后,需要重启才能生效。
4) 有时发现路由怎么加也加不上,其可能的原因是网段/掩码错误、接口索引错误(ix)、接口DOWN。
3. 接口IP地址定义
以太网接口IP地址定义
pmcfg:11 type=6
(以太网卡插在SLOT1上,所以11;type=6
示以太网)
ethadmsap:110 alias=LAN_ETH1 (alias
ipcfgtbl:10.15.0.1 prt=1,alias=LAN_ETH1,mask=255.255.254.0,mtu=1500,proto=1
(此处的alias必须等于ethadmsap中的alias)看帮助文件
E1接口IP地址定义(PPP)
bzcx950a>pmcfg:41 type=32
bzcx950a>dsx1cfg:7 linetype=1,linecod=3,sigmode=1
bzcx950a>dsx1xcfg:7 trunk=2,portst=2,lbo=12,backupclk=3
bzcx950a>dsx1xvalue:7 rowst=2,type=3,bopalias="E1port4"
bzcx950a>dsx1frac:[7.1,7.2,7.3,7.4,7.5,7.6,7.7,7.8,7.9,7.10,7.11,7.12] value=7
bzcx950a>dsx1frac:[7.13,7.14,7.15,7.16,7.17,7.18,7.19,7.20,7.21,7.22] value=7
bzcx950a>dsx1frac:[7.23,7.24,7.25,7.26,7.27,7.28,7.29,7.30,7.31] value=7
bzcx950a>bopadmsap:410 alias=E1port4
bzcx950a>mplsap:2 link=E1port4,linkusap=1,alias="PppPort14",magnum = 1
mpusap:1 alias=Mlppp,mrru=1524
ipcfgtbl:10.19.74.178 prt=5,alias=Mlppp,mask=255.255.255.252,peer=10.19.74.177,
mtu=1500,proto=1
E1接口IP地址定义(MLPPP)
#################### MLPPP link 1 to Cisco SETUP ######################
# E1 port to Cisco 7513 Link1
# CPU 1,Slot 8
pmcfg:81 type=32
dsx1cfg:15 linetype=1,linecod=3,sigmode=1
dsx1xcfg:15 trunk=2,portst=2,lbo=12,backupclk=3
dsx1xvalue:2 rowst=2,type=3,bopalias="E1port18"
dsx1frac:[15.1,15.2,15.3,15.4,15.5,15.6,15.7,15.8,15.9,15.10,15.11,15.12] value=2
dsx1frac:[15.13,15.14,15.15,15.16,15.17,15.18,15.19,15.20,15.21,15.22] value=2
dsx1frac:[15.23,15.24,15.25,15.26,15.27,15.28,15.29,15.30,15.31] value=2
bopadmsap:810 alias=E1port18
mplsap:1 link=E1port18,linkusap=1,alias="PppPort18",magnum = 1
#################### MLPPP link 2 to Cisco SETUP ######################
# E1 port to Cisco 7513 Link2
# CPU 1,Slot 7
pmcfg:71 type=32
dsx1cfg:13 linetype=1,linecod=3,sigmode=1
dsx1xcfg:13 trunk=2,portst=2,lbo=12,backupclk=3
dsx1xvalue:3 rowst=2,type=3,bopalias="E1port17"
dsx1frac:[13.1,13.2,13.3,13.4,13.5,13.6,13.7,13.8,13.9,13.10,13.11,13.12] value=3
dsx1frac:[13.13,13.14,13.15,13.16,13.17,13.18,13.19,13.20,13.21,13.22] value=3
dsx1frac:[13.23,13.24,13.25,13.26,13.27,13.28,13.29,13.30,13.31] value=3
bopadmsap:710 alias=E1port17
mplsap:2 link=E1port17,linkusap=1,alias="PppPort17",magnum = 1
mpusap:1 alias=Mlppp,mrru=1524
ipcfgtbl:10.19.74.2 prt=2,alias=Mlppp,mask=255.255.255.252,peer=10.19.74.1,mtu=1500,proto=1
接口IP地址查看
ipcfgtbl
4. PING命令
ipping:1 addr=10.19.64.129,num=10
ipping:1 send=2
ipping:1
5. IP地址与MAC地址对应关系
ipattbl命令,查看IP地址对应的MAC地址,在查找局域网故障时非常有用。
(某个网元IOG无法PING通,查看数据正确,如何判断是路由器、HUB还是网元TCP/IP口故障??在连接网元的路由器使用ipattbl命令,看看能否得到网元的MAC地址,或者看是否有多个IP地址一个MAC地址情况。发生过多次此类故障。)1)局域网内某些地址通,某些地址不通,检查ARP表;2)判断网卡、IOG网口是否故障。
JICX2000A>ipattbl
[1.10.16.130.3] ix = 1 paddr = 0x080020e4b2ec naddr = 10.16.130.3 type = 3
ICX2000A>n
[1.10.16.130.136] ix = 1 paddr = 0x00b06460f681
naddr = 10.16.130.136 type = 3
JICX2000A>n
[1.10.16.131.19] ix = 1 paddr = PxLeOq naddr = 10.16.131.19
type = 3
JICX2000A>n
[1.10.16.131.31] ix = 1 paddr = 0x00010228e6c8
naddr = 10.16.131.31 type = 3
(PFA路由器用starp)
6. IP地址过滤命令
fltiptbl(具体格式参考help文件)
fltiptbl:1 parm=2,dst=10.1.0.0, dmask=255.255.0.0,ipport=4,nbmaport=20
fltiptbl:2 parm=2,dst=10.19.104.0, dmask=255.255.254.0,ipport=4,nbmaport=20
fltiptbl:3 parm=2,dst=10.19.72.0, dmask=255.255.254.0,ipport=4,nbmaport=20
fltiptbl:4 parm=2,dst=10.19.64.0, dmask=255.255.254.0,ipport=4,nbmaport=20
fltiptbl:5 parm=2,dst=10.19.76.0, dmask=255.255.254.0,ipport=4,nbmaport=20
fltiptbl:6 parm=1,ipport=4,nbmaport=20
(如何理解,实例看HELP)
所有地市CX2000A CPU1或者CX950A有此设置(济南是CX2000B),目的使仅让到省中心地址到CISCO7513广域NBMA接口。
这里有个缺陷,设置允许10.19.64.0/23到省公司,但10.19.66.0/24、10.19.78.0/29就无法到达。因此一旦各地到CISCO7513的直连PPP断掉后,通过缺省路由(GW10.19.76.161)到省公司时,中兴监控就无法联通了(因为10.19.66.0/24地址给FILTER掉了)
(这个问题是需要修改的,请大家注意)
其他省公司网段也要注意(10.19.78.1/29)
此命令也可用于保护IOG TCP/IP地址免受外来IP地址攻击。
7. 端口状态检查
DIM卡(2M端口卡的bopoprsap正常状态)prtstate = 1 clkstate = 2 dcdstate = 2 dtrstate = 3 rtsstate = 3 ctsstate = 2 dsrstate = 2 drsstate = 3
使用bopoprsap、lbdmsap、x25sap命令,具体格式参见上文以及帮助文件。
在处理传输问题时,在将电路环回后,用bopoprsap:sap cntlstats=1命令清除统计counter,然后通过bopoprsap命令检查txfrm和rxfrm,两者相等则证明传输无问题;若不相等,则传输有问题。
JNCX2000A>bopoprsap:810
[810] sap = 810 alias = E1port18 protocol = 1 clksrc = 2
speed = 2048000 duplex = 2 fsize = 2048 encod = 1 idle = 1
preamb = 0 dtrtmr = 0 txwin = 20 dmode = 3 lpb = 1 sgnlsmp = 5
dcddtrsmp = 3 ctsrtssmp = 3 dsrdrssmp = 3 tmllsmp = 3
rirlsmp = 3 stattmr = 2 carractn = 2 gen = 1 genframes = 1
gensize = 128 genhdr = 1 bandw = 0 actspeed = 0 codeset = 0
parity = 0 ss7tmr = 1000 prttrp = 1 clktrp = 1 prttype = 2
prtiftype = 1 prtstate = 1 clkstate = 2 dcdstate = 2
dtrstate = 3 rtsstate = 3 ctsstate = 2 dsrstate = 2 drsstate = 3
tmstate = 2 llstate = 3 ristate = 2 rlstate = 3 txfrm = 29423913
rxfrm = 37063572 llpbfrm = 0 txbps = 16120 rxbps = 4072
txbpsmax = 2052256 rxbpsmax = 2048536 txfps = 33 rxfps = 8
txfpsmax = 437 rxfpsmax = 549 txundfrm = 0 txctslst = 0
txbaddsc = 0 txrstdsc = 0 txcdsc = 0 txwindsc = 0 txlpbdsc = 0
rxcrcfrm = 1 rxabrfrm = 0 rxnibfrm = 1 rxlngfrm = 0 rxovrfrm = 0
rxcddrop = 0 rxbaddsc = 1 rxbusy = 0 prtchg = 1 clkchg = 0
dcdchg = 0 dtrchg = 0 rtschg = 0 ctschg = 0 dsrchg = 0
drschg = 0 tmchg = 0 llchg = 0 richg = 0 rlchg = 0 prtrsts = 0
generr = 0
看线路质量(rxcrcfrm = 1 rxabrfrm = 0 rxnibfrm = 1 rxlngfrm = 0 rxovrfrm = 0)
硬件缓存故障(rxbusy = 0)
bopoprsap用于查看物理层状态(以太网卡以外硬件)
ethoprsap用于查看以太网物理、链路层状态
YTCX2000A>ethoprsap
[110] sap = 110 alias = LAN_ETH1 cnctr = 1 gen = 1
genframes = 1 gensize = 512 lpb = 1 duplex = 1 critbw = 0
lnkstate = 1 inframes = 67912954 inoctets = 2441673525
inerrors = 0 indiscards = 0 inbsy = 0 outframes = 63019575
outoctets = 4093398325 outerrors = 2 outdiscards = 0 outcslost = 0
genrrr = 0 inbufferr = 0 inbpeerr = 0 outbufferr = 0
outrtryerr = 0 bwdiscards = 0 tmr = 0 avgtxkbps = 0
txkbpsmax = 0 avgrxkbps = 0 rxkbpsmax = 0 lnktrp = 1 (看帮助解释)
ifdesc =
YTCX2000A>n
[910] sap = 910 alias = PRIMARY_BUS cnctr = 1 gen = 1
genframes = 1 gensize = 512 lpb = 1 duplex = 1 critbw = 0
lnkstate = 1 inframes = 94454100 inoctets = 3417446244
inerrors = 0 indiscards = 0 inbsy = 0 outframes = 93244727
outoctets = 770609382 outerrors = 3 outdiscards = 0 outcslost = 0
genrrr = 0 inbufferr = 0 inbpeerr = 0 outbufferr = 0
outrtryerr = 0 bwdiscards = 0 tmr = 0 avgtxkbps = 0
txkbpsmax = 0 avgrxkbps = 0 rxkbpsmax = 0 lnktrp = 1
ifdesc =
YTCX2000A>n
[920] sap = 920 alias = SECONDARY_BUS cnctr = 1 gen = 1
genframes = 1 gensize = 512 lpb = 1 duplex = 1 critbw = 0
lnkstate = 2 inframes = 0 inoctets = 0 inerrors = 0
indiscards = 0 inbsy = 0 outframes = 0 outoctets = 0
outerrors = 3042209 outdiscards = 0 outcslost = 0 genrrr = 0
inbufferr = 0 inbpeerr = 0 outbufferr = 0 outrtryerr = 0
bwdiscards = 0 tmr = 0 avgtxkbps = 0 txkbpsmax = 0 avgrxkbps = 0
rxkbpsmax = 0 lnktrp = 1 ifdesc =
lbdmsap命令看X25 Layer2的状态
JNCX2000A>n
[13] msap = 13 rowst = 2 alias = LbdmSap13 link = OSSHSI
laptype = 1 logiftype = 2 arblogic = 2 lapdprot = 1 lapbprot = 1
macwin = 7 txqu = 16 txql = 8 contmr = 30 t202 = 20 n202 = 3
teichktmr = 0 t201 = 20 lowtei = 64 kpl1up = 2 hlstate = 3
fcstate = 1 outstfrms = 0 frmsdisc = 0 actvdlsaps = 0
txifrms = 23497067 rxifrms = 11548626 txrrfrms = 74278
rxrrfrms = 680211 txrnrfrms = 0 rxrnrfrms = 333 txrejfrms = 0
rxrejfrms = 43 txsabmfrms = 3 rxsabmfrms = 3 txdiscfrms = 0
rxdiscfrms = 5 txuafrms = 5 rxuafrms = 3 txdmfrms = 3
rxdmfrms = 0 txfrmrfrms = 0 rxfrmrfrms = 0 txuifrms = 0
rxuifrms = 0 txxidfrms = 0 rxxidfrms = 0 rxinvfrms = 0
rxinvdiscs = 0 sabmerrs = 0 frmrerrs = 0
x25sap看X25 Layer3的状态
NCX2000A>n
[13.0] sap = 13 ces = 0 rowst = 2 type = 1 alias = X25Port13
link = LbdmSap13 iftype = 2 lnktype = 1 rq = 0 rtedir = 1
wcrting = 1 wcrtingmsk = 0 inedit = 0 outedit = 0 actv = 1
billtmr = 0 modulo = 1 rxpktsz = 10 txpktsz = 10 rxwinsz = 7
txwinsz = 7 rxthrcl = 13 txthrcl = 13 rxwinthrs = 7 lcnalloc = 1
lpvclcn = 0 hpvclcn = 0 liclcn = 0 hiclcn = 0 ltclcn = 1
htclcn = 200 loclcn = 0 hoclcn = 0 contmr = 5 disctmr = 60
rsttmr = 180 caltmr = 200 restmr = 180 clrtmr = 180 inactmr = 0
fctmr = 10 wintmr = 60 cldaddrins = 2 clgaddrins = 2 pktretx = 1
inbarr = 1 outbarr = 1 flcneg = 1 thrcneg = 1 fstsel = 1
fstselacc = 1 revchrgacc = 1 locchrgprev = 1 chrginfo = 1
callred = 1 permtored = 1 redaddr = undefined nui = 1
clgaddrval = 1 srcaddr = undefined rteudf = 1 rtesubaddr = 1
rtecae = 1 rteaddrlen = 0 trnsdelay = 1 tdelay = 0 cuginacc = 1
cugoutacc = 1 prefcugidx = 0 lnkstate = 2 fcstate = 1
mpusap以及mplsap查看PPP层信息
JNCX2000A>mpusap
[1] usap = 1 rowst = 2 alias = Mlppp1 epd = JiNan bwthres = 85
mrru = 1500 seqfldcomp = 2 bacp = 2 txwin = 20 gen = 1
genlsap = 0 gensize = 32 genfrm = 1 gendly = 50 genpri = 1
mlpm = 1 state = 3 nbppplink = 2 locmrru = 1500 remmrru = 1524
remseqfldcmp = 2 locseqfldcmp = 2 nbppplinkup = 2 mlpstate = 1
genstate = 3 bapstate = 3 frstate = 3 ipstate = 1 locepd = JiNan
remepd = Cisco7513 bytestx = 1422744709 bytesrx = 1592512513
JNCX2000A>mplsap
[1] lsap = 1 rowst = 2 alias = PppPort17 link = E1port17
dial = 0 mru = 1500 acc = FFFFFFFF maxcfg = 10 maxterm = 2
maxfail = 10 rstime = 3 protfldcomp = 2 acfldcomp = 2 magnum = 1
lctr = 1 state = 3 physnetstate = 1 virtnetstate = 3 baddr = 0
ctrlerr = 0 long = 0 fcs = 0 locmru = 1500 remmru = 1500
remaccm = FFFFFFFF locaccm = FFFFFFFF remprotcmp = 2
locprotcmp = 2 remaccmp = 2 locaccmp = 2 bytestx = 3239061849
bytesrx = 3209305667 linkusap = 1
JNCX2000A>n
[2] lsap = 2 rowst = 2 alias = PppPort18 link = E1port18
dial = 0 mru = 1500 acc = FFFFFFFF maxcfg = 10 maxterm = 2
maxfail = 10 rstime = 3 protfldcomp = 2 acfldcomp = 2 magnum = 1
lctr = 1 state = 3 physnetstate = 1 virtnetstate = 3 baddr = 0
ctrlerr = 0 long = 0 fcs = 0 locmru = 1500 remmru = 1500
remaccm = FFFFFFFF locaccm = FFFFFFFF remprotcmp = 2
locprotcmp = 2 remaccmp = 2 locaccmp = 2 bytestx = 3239150933
bytesrx = 3209220402 linkusap = 1
另外当IP over PPP时,PPP层的状态检查使用命令mpusap以及mplsap
mpusap的nbppplinkup表示活动的PPP链路数目,nbppplink表示定义的PPP链路数目(如果=2,则是捆绑2条链路的MLPPP),state=3表示状态正常。(若nbppplink与nbppplinkup不相等,则有问题)。mplsap的virtnetstate = 3,physnetstate = 1表示状态正常。
8、配置备份与输入方法
PFA路由器:相关命令为NACDI、NACDP、NACCS、NACCP、NACCR
Memotec路由器
在路由器数据更新时(或者检查发现custom.txt与实际配置不一时),需要更新CUSTOM.txt文件,更新方法:
● custom.txt 文件是存在Flash中的用户脚本文件,作为数据备份,当Saved config缺失的时候,可以用来加载系统。所以应该及时更新,更新方法目前只能通过手动方法。
● 当Saved config与custom.txt不一致时,首先用命令sysmgt config=5 把当前custom.txt文件显示出来并保存成一个文本文件(例如ZBCX2000Acpu1.txt),按照实际配置修改后保存,再把当前的custom.txt文件用命令sysmgt config=4 删除。
更新后如何传到路由器上
通过cxaccess程序,有2种方法可以传回路由器中:
● 通过路由器的Console口――选定TransferSend file菜单发送,进入choose file 窗口时,本地文件窗口内是更新过的文本文件(例如ZBCX2000Acpu1.txt),而remote file path/name一定要为大写的CUSTOM.TXT
● 通过路由器的以太网口――前提是使用cxaccess的device连接路由器,选择菜单TransferSend file,进入File Transfer- TFTP设置 窗口,如上的选择本地及路由器内的文件,再发送。
文件传送完成后,使用命令sysmgt config=5进一步确认。
紧急情况下,如何启用custom.txt。
有2种方法可以载入custom.txt文件到系统active config中
● 输入命令sysmgt config=3 删除当前配置(saved config), 再输入命令sysmgt restart=3 ,或者重新关电/加电,启动路由器。由于Saved config的缺失,系统会用custom.txt加载。
● 重启路由器时,通过console口,当系统加载出现以下信息时:
Startup will continue in 2 seconds, you may enter
to force factory defaults
to force custom defaults
to access diagnostic menu
快速按下Ctrl和B键,强迫系统调用custom.txt脚本文件。
9 发现无法通过OSS连接网元(这里OSS对菏泽而言就是CX2000)
1) 判断是否能够ping通OSS,
若无法ping通OSS,说明是IP连接问题,参见情况2
若能够ping通OSS,原因一般是OSS与网元之间X25问题,则
2) 使用命令osparam查看bufsfree参数值,正常情况下应该在3000左右,如果降到2000以下,甚至1000、几百时,可以判断为内存不足原因导致。记录时间、原因以及bufsfree值。(路由器软件升级到4.0后,正常的bufsfree在8000左右)
3) 若osparam查看参数正常,检查X25连接状态。
注:一般此时原因是IP流量过大,影响X25呼叫的建立。此时,应该及时检查IP流量过大的原因(多数因为是病毒),具体方法是使用安装sniffer的电脑监测每个HUB上或者二层交换机上的流量情况,可以发现异常流量。需要注意的是,二层交换机无法看到所有端口流量,需要进行镜像。(还可以使用IP仪表)