Radware LinkProof 巡检文档

1.1 命令行维护命令

以下全是命令行下面的常用维护命令，可以通过Console/Telenet/SSH来执行。

1.1.1 查看接口地址

LP-Master#net ip

IP Interface Parameters

IP Address Network Mask If Number VlanTag 61.1.1.10 255.255.255.0 1 0 192.168.1.10 255.255.255.0 8 0 210.1.1.10 255.255.255.0 2 0

1.1.2 查看路由表

LP-Master#net route table

Routing Table

Destination Network Mask Next Hop Interface Type Address Index

0.0.0.0 0.0.0.0 61.1.1.1 1 remote 61.1.1.0 255.255.255.0 0.0.0.0 1 local 192.168.1.0 255.255.255.0 0.0.0.0 8 local 210.1.1.0 255.255.255.0 0.0.0.0 2 local

1.1.3 查看CPU

LinkProof#sys os cpu

Device Resource Utilization RS Resource Utilization : 0 RE Resource Utilization : 0

Last 5 sec. Average Utilization : 0

2017-01-12

第1页, 共7页

Last 60 sec. Average Utilization : 0

Master Utilization : 0

如果有一项值超过90,就需要引起注意

1.1.4 查看端口流量

此命令用来查看各端口的当前流量详细信息。

ODS-Master#sys last-sec-inf-stats

Ports statistics for the last second

Port Index InBound InBound OutBound OutBound Megabytes Packets Megabytes Packets G-1 0 0 0 1 G-2 0 0 0 1 G-3 0 0 0 0 G-4 0 0 0 0 G-5 0 0 0 0 G-6 0 0 0 0 G-7 0 0 0 0 G-8 0 0 0 0 G-9 0 0 0 0 G-10 0 0 0 0 G-11 0 0 0 0 G-12 0 0 0 0 XG-1 0 0 0 0 XG-2 0 0 0 0 XG-3 0 0 0 0 XG-4 0 0 0 0 MNG-1 0 0 0 0 MNG-2 0 0 0 0

2017-01-12

第2页, 共7页

1.1.5 查看设备流量

此命令用来查看当前设备的总流量信息。

ODS-Master#sys last-sec-total-input

Total Input in all ports in the last second: 1030

1.1.6 查看设备温度(仅限ODS)

这条命令可以显示当前设备CPU的温度。正常值在70摄氏度以下，超过73摄氏度，系统会自动关机，请检查通风状态。

LinkProof#sys hardware temperature-show

Sensor number: 0 - Status: normal, Temperature: 53 Sensor number: 1 - Status: normal, Temperature: 52

1.1.7 查看链路的连接用户数

可以查看每台Router的进出流量，连接用户数等信息。

LP-Master#lp servers extended-table

RS NextHopRouter Table

IPaddress Name Mac addr AdminSt OperSt MacSt 210. 1. 1. 1 ALL /CNC 00124414d3fc Enable Active Found 61. 1. 1. 1 ALL /TEL 000911dcb6cc Enable Active Found 61. 1. 1. 1 CT /Telecom 000911dcb6cc Enable Active Found

IPaddress Type Frms Kbits/s Wght OpMode UsrsNo ConLimit port

210. 1. 1. 1 NxtHopR 46894 168248 2 Regular 28261 0 2 61. 1. 1. 1 NxtHopR 23232 98989 1 Regular 12323 0 1 61. 1. 1. 1 NxtHopR 0 0 1 Regular 0 0 1

2017-01-12

第3页, 共7页

IPaddress Kb/s Limit In Limit Out Limit In Rate Out Rate

210. 1. 1. 1 0 0 0 113210 54184 61. 1. 1. 1 0 0 0 32132 11233 61. 1. 1. 1 0 0 0 0 0

IPaddress Total Load In Load Out Load In/Out Per Farm (Kbits) (Kbits) (Kbits)

210. 1. 1. 1 29751163 2211741 27539421 0% 0% 61. 1. 1. 1 24334324 234234 27834874 0% 0% 61. 1. 1. 1 0 0 0 0% 0%

1.1.8 查看LinkProof的会话表

LinkProof#lp client table

Client Table Total Number of Entries : 38702

Source Addr Dest Addr SPort DPort Protocol Flow

218. 75. 79. 33 58. 67.136.125 6000 2967 TCP anyflow

Farm Name Server Name Idx Action/PortNum Type Ext Id NHR CT2 1 Send T/F Farm Reg 260339

Source Addr Dest Addr SPort DPort Protocol Flow 124. 15. 94. 46 117. 81. 51.185 1911 5670 TCP anyflow

Farm Name Server Name Idx Action/PortNum Type Ext Id NHR CT2 1 Send T/F Farm DN 203763

LinkProof#lp client table-summary

Client Table

2017-01-12

第4页, 共7页

Num of Entries : 38285

Source Addr Dest Addr SrcP DstP Farms sequence

0 1 2 3 4 5 6 124. 15. 65. 50 117. 79. 68. 61 46644 4074 Rtr 220.113.236.111 119.147. 12.198 1032 8000 Rtr 211.162. 62.166 117.136. 19.162 0 0 Rtr 220.113.234.194 119.147. 18. 89 1076 443 Rtr 124. 15. 71.117 120. 15.125. 65 1146 1098 Rtr 124. 15. 64.113 122. 84. 10. 20 2475 18985 Rtr 220.113.232.158 119.129. 61.158 20056 24107 Rtr 172. 16.253.237 118.239. 50.103 49695 4167 Rtr 124. 15. 96.181 116.254.155.198 43573 38028 Rtr

注意观察客户表的大小, 不要超过太大值. 一般情况下, 几千条是正常的.这个表的大小与Farm中设置的老化时间有很大关系, 老化时间越短, 表也就越小.

lp client table命令带有丰富的参数功能，我们可以直接过滤出想看的内容。 client table CLI command, which allow you to filter existing client entries and display only relevant entries: ? -ip—print only entries with given IP address. ? -fl—print only entries with given flow name. ? -fn—print only entries with given farm name. ? -sn—print only entries with given server name. ? -vl—print only entries with forwarding type bridging. ? -ap—print only entries with given application port. ? -db—print only entries with delayed-bind information. ? -ed—print only entries with edge farm information. ? -mapped—print entries including mapped information.

? -ptr—print only entries with given packet translation type (VIP, Dynamic NAT, VPN, and so on)

2017-01-12

第5页, 共7页

本文来源：https://www.bwwdw.com/article/v1uh.html