·À»ðǽά»¤ÊÖ²á
? show ha group config //²é¿´HA group ÅäÖÃ״̬ £¬È·ÈÏHA groupÏà¹ØÅäÖá£
? show ha group 0 //ͨ¹ý²é¿´HA group 0 ״̬ £¬È·È϶ԶË״̬ÊÇ·ñÕý³£¡£
? show ha cluster //²éHA´ØÅäÖÃÐÅÏ¢¡£
? show ha sync state config //²é¿´HAÅäÖÃͬ²½×´Ì¬¡£ ? no ha cluster //¹Ø±ÕHAÅäÖá£
2.3.4. ÄÚÍøÓû§¶ª°üµÄ´¦Àí
? È·ÈÏÓû§µ½µ½Íø¹ØÊÇ·ñ¶ª°ü£¬Èç¹ûÄÚÍøÍø¹Ø¶ª°üÇë¼ì²éÄÚÍø½»»»¡¢Â·ÓÉÎÊÌâ¡£
? È·Èϵ½ÄÚÍø²»¶ª°ü£¬µ½ÍâÍøÍø¹Ø¶ª°ü£¬Çë¼ì²é´Ó·À»ðǽÉϵ½ÍâÍøÍø¹ØÊÇ·ñÓжª°ü£¬Èç¹û¶ª°üÇëÁªÏµÏß·¹©Ó¦É̼ì²éÁ´Â·ÖÊÁ¿¡£ ? È·ÈÏ´Ó·À»ðǽÉϵ½ÍâÍøÍø¹Ø²»¶ª°ü£¬Çë¼ì²é·À»ðǽcpuÊÇ·ñºÜ¸ß£¬Èç¹ûcpu¸ßÇë¸ù¾Ýcpu¸ßµÄ´¦Àí·½·¨²Ù×÷¡£
? È·ÈÏcpu²»¸ß£¬Ç뿪Æô½Ó¿Ú´ø¿íͳ¼Æ¼¯£¬²é¿´½Ó¿Ú´ø¿íÊÇ·ñÕ¼Âú£¬Èç¹û´ø¿íÕ¼Âú£¬Ç뿼ÂÇͨ¹ýÅäÖÃqos¹¦ÄܶÔÁ÷Á¿×ö¿ØÖÆ¡£
2.3.5. Ä¿µÄNAT²»ÉúЧµÄ´¦Àí
? ¼ì²é·þÎñÆ÷±¾Éí¶Ë¿ÚÊÇ·ñ¿ªÆô¡£
? ¼ì²éÊÇ·ñÓдÓÍâµ½ÄڵIJßÂÔÊÇ·ñÓзÅÐУ¬Ô´µØַΪany Ä¿µÄµØַΪӳÉäºóµÄ¹«ÍøµØÖ·¡£
·À»ðǽά»¤ÊÖ²á
? ¼ì²éÄÚÍø·þÎñÆ÷Íø¹ØÅäÖÃÊÇ·ñÕýÈ·
2.3.6. É豸ÎÞ·¨¹ÜÀíµÄ´¦Àí
? É豸²»ÄÜͨ¹ýijЩpcʵÏÖ¹ÜÀí£¬ÔÒò£º
? ²é¿´É豸ʱºòÅäÖÃÓпÉÐÅÈÎÖ÷»ú£¬²¢ÇҸõØÖ·ÊÇ·ñÔÚ¿ÉÐÅÈÎÖ÷»úÁбíÖС£
webÏÂλÖãºÏµÍ³-É豸¹ÜÀí-¿ÉÐÅÈÎÖ÷»ú
cliÏÂÃüÁshow admin host ? Ìí¼Ó¿ÉÐÅÈÎÖ÷»ú¼°È¨ÏÞ·½·¨£º
webÏÂλÖãºÏµÍ³-É豸¹ÜÀí-¿ÉÐÅÈÎÖ÷»ú-н¨
cliÏÂÃüÁSA(config)# admin host A.B.C.D/M any
2.4. ²ßÂÔÅäÖÃÓëÓÅ»¯(policy)
·À»ðǽ²ßÂÔÓÅ»¯Óëµ÷ÕûÊÇÍøÂçά»¤¹¤×÷µÄÖØÒªÄÚÈÝ£¬²ßÂÔÊÇ·ñÓÅ»¯½«¶ÔÉ豸ÔËÐÐÐÔÄܲúÉúÏÔÖøÓ°Ïì¡£¿¼Âǵ½ÆóÒµÖÐÒµÎñÁ÷Ïò¸´ÔÓ¡¢ÒµÎñÖÖÀàÍùÍù±È½Ï¶à£¬Òò´Ë½¨ÒéÔÚÉèÖòßÂÔʱ¾¡Á¿±£Ö¤Í³Ò»¹æ»®ÒÔÌá¸ßÉèÖÃЧÂÊ£¬Ìá¸ß¿É¶ÁÐÔ£¬½µµÍά»¤ÄѶȡ£
2.4.1. ²ßÂÔÅäÖÃÓëά»¤
? ¼ò»¯µÄ²ßÂÔ±í²»½ö±ãÓÚά»¤£¬¶øÇÒÓÐÖúÓÚ¿ìËÙÆ¥Åä¡£¾¡Á¿±£³Ö²ßÂÔ±í¼ò½àºÍ¼ò¶Ì£¬¹æÔòÔ½¶àÔ½ÈÝÒ×·¸´íÎó¡£Í¨¹ý¶¨ÒåµØÖ·×éºÍ·þÎñ×é¿ÉÒÔ½«¶à¸öµ¥Ò»²ßÂԺϲ¢µ½Ò»Ìõ×éºÏ²ßÂÔÖС£
·À»ðǽά»¤ÊÖ²á
? ·À»ðǽ°´´ÓÉÏÖÁÏÂ˳ÐòËÑË÷²ßÂÔ±í½øÐвßÂÔÆ¥Å䣬²ßÂÔ˳Ðò¶ÔÁ¬½Ó½¨Á¢ËٶȻáÓÐÓ°Ï죬½¨Ò齫Á÷Á¿´óµÄÓ¦ÓúÍÑÓʱÃô¸ÐÓ¦Ó÷ÅÓÚ²ßÂÔ±íµÄ¶¥²¿£¬½«½ÏΪÌØÊâµÄ²ßÂÔ¶¨Î»ÔÚ²»Ì«ÌØÊâµÄ²ßÂÔÉÏÃæ¡£
? ·À»ðǽ¹ÜÀí´æÔÚ¶à¸ö¹ÜÀíÔ±Çé¿ö,ƽʱ·À»ðǽ²ßÂÔ¿ÉÄܳöÏÖÖظ´µþ¼ÓÇé¿ö,µ¼Ö²ßÂÔÊý¹ý¶à,ʱ¼äÒ»³¤»áºÄ¾¡·À»ðǽ²ßÂÔ×ÊÔ´,ΪÁ˸üºÃ²ßÂÔÊý¹ý¶à¶øÇÒ´æÔÚÖظ´Çé¿ö,²ÉÓòßÂÔ¹æÔòÆ¥Åä´ÎÊýͳ¼Æ¹¦ÄÜÔÚ¹Û²ìһЩûÓÐÆ¥ÅäÁ÷Á¿µÄ²ßÂÔ²¢½øÐÐÈ·ÈϺóɾ³ý.
show policy hit-count {id id | [from src-zone] [to dst-zone] top {10 | 20 | 50}}
? id id ¨C ÏÔʾָ¶¨ID ¹æÔòµÄÆ¥Åä´ÎÊýͳ¼ÆÐÅÏ¢¡£
? from src-zone ¨C ÏÔʾԴ°²È«ÓòΪָ¶¨ÓòµÄ¹æÔòµÄÆ¥Åä´ÎÊýͳ¼ÆÐÅÏ¢ ? to dst-zone ¨C ÏÔʾĿ±ê°²È«ÓòΪָ¶¨ÓòµÄ¹æÔòµÄÆ¥Åä´ÎÊýͳ¼ÆÐÅÏ¢¡£ ? top {10 | 20 | 50} ¨C ÏÔʾƥÅä´ÎÊýλÓÚÇ°10¡¢20 »òÕß50 ¼ÆÐÅÏ¢¡£
2.5. ¹ÊÕÏ´¦Àí¹¤¾ß 2.5.1. ϵͳÕï¶Ï¹¤¾ß
°²È«Íø¹ØÖ§³ÖÍøÂçÁ¬½Ó²âÊÔ¹¤¾ßPing ºÍTraceroute£¬µ±ÍøÂç³öÏÖÎÊÌâʱ£¬Óû§¿ÉÒÔÓÃÕâЩ¹¤¾ß¶ÔÍøÂç½øÐвâÊÔ£¬²éÕÒ¹ÊÕÏÔÒò¡£°²È«Íø¹Øͬʱ¾ßÓе÷ÊÔ¹¦ÄÜ£¬¹©Óû§²éÔÄÓë·ÖÎö¡£
·À»ðǽά»¤ÊÖ²á
? Ping ÃüÁîÖ÷ÒªÓÃÓÚ¼ì²éÍøÂçÁ¬½Ó״̬ÒÔ¼°Ö÷»úÊÇ·ñ¿É´ï¡£ ping {ip-address | hostname} [count number] [size number] [source ip-address] [timeout time]
? Traceroute ÓÃÓÚ²âÊÔÊý¾Ý°ü´Ó·¢ËÍÖ÷»úµ½Ä¿µÄµØËù¾¹ýµÄÍø¹Ø¡£ËüÖ÷ÒªÓÃÓÚ¼ì²éÍøÂçÁ¬½ÓÊÇ·ñ¿É´ï£¬ÒÔ¼°·ÖÎöÍøÂçʲôµØ·½·¢ÉúÁ˹ÊÕÏ¡£
traceroute {ip-address | hostname} [numberic] [port port-number] [probe probe-number] [timeout time] [ttl [min-ttl] [max-ttl]] [source interface] [use-icmp]
2.5.2. debugÕï¶ÏÓëÅÅ´í
? DEBUGÊý¾ÝÁ÷»ù±¾²½Öè
1¡¢¹Ø±ÕdebugÐÅÏ¢Êä³öµ½console no logging debug to console 2¡¢ÉèÖÃdebug¹ýÂËÆ÷
debug dp filter {src-ip | src-port | proto | dst-ip | dst-port} 3¡¢¿ªÆôdebug¹¦ÄÜ debug dp basic
4¡¢Çå³ý»º´ædebugÈÕÖ¾ÐÅÏ¢ clear logging debug 5¡¢·¢ÆðÊý¾ÝÁ÷·ÃÎÊ 6¡¢²é¿´debugÈÕÖ¾ÐÅÏ¢