¹«º£²Ê´¬¡¤6600(ÖйúÓÎ)¹Ù·½ÍøÕ¾


µã»÷ÏÂÔØ¡¶ÍòÕ×Ô°ÇøÒÔÌ«²Ê¹âÑо¿±¨¸æ¡·£¬½âËøÍòÕ×Ô°ÇøÍøÂ罨ÉèÖ¸ÄÏ
Á¢¼´ÏÂÔØ
ÎÞ¸Ð×¼Èë ÈËÎïͳ¹Ü Ø­ RG-SAM+5.X ÐÂÒ»´ú¸ßУAIÈÏ֤ƽ̨·¢²¼
Ô¤Ô¼Ö±²¥
²úÆ·
< ·µ»ØÖ÷²Ëµ¥
²úÆ·ÖÐÐÄ
²úÆ·
ºÏ×÷»ï°é
·µ»ØÖ÷²Ëµ¥
Ñ¡ÔñÇøÓò/ÓïÑÔ

Á÷±íx-flows£º¿´Çå·ÓÉÆ÷Êý¾ÝÁ÷ת·¢ÕæÃæÄ¿

·¢²¼Ê±¼ä£º2024-06-12
µã»÷Á¿£º756

ÔÚÈÕ³£ÍøÂçÔËά¹ý³ÌÖУ¬µ±Óöµ½¶ª°ü»òÕßת·¢²»Í¨Ê±£¬ÍùÍùÐèÒªÅжϱ¨ÎĶªÔÚʲôµØ·½£¬³ýÁËÓÃtraceroute·¾¶¸ú×Ùµ½Êý¾Ý°üÖÕÖ¹ÔÚ¾ßÌåÉ豸£¨Èç·ÓÉÆ÷£©Ê±£¬ÄǾÍÐèÒª½øÒ»²½ÅжÏ·ÓÉÆ÷Õë¶Ô¸Ã±¨ÎĵÄת·¢Çé¿ö£¬ÊǶªÆúÁË£¿»¹ÊÇ·¢´í½Ó¿ÚÁË£¿ÄÇôÕë¶Ô¹«º£²Ê´¬¡¤6600·ÓÉÆ÷£¬¾Í¿ÉÒÔʹÓÃÁ÷±íÕâÏî¼¼Êõ½øÐÐÅжϡ£

Ò»¡¢Á÷±í¼ò½é

    ¹«º£²Ê´¬¡¤6600½Ý·ÓÉÆ÷µ±ÅäÖÃÁË NAT¡¢ QOS¡¢ PBR¡¢ ACL µÈÒµÎñʱ£¬ÄÇô¾ÍĬÈÏ¿ªÆôÁË X-flow Á÷±í¹¦ÄÜ¡£¼´µ±Ã¿¸öÊý¾Ý°üµ½´ï»òÕß´©¹ý·ÓÉÆ÷£¬Â·ÓÉÆ÷¸ù¾ÝÕâ¸ö±¨ÎÄµÄ 6 Ôª×é¾ÍÉú²úÁËÒ»ÌõÁ÷»á»°¼Ç¼¡£Í¨¹ýÁ÷±í¼¼Êõ£¬ÎÒÃǾͿÉÒÔÓÃÀ´²é¿´Â·ÓÉÆ÷Õë¶Ô¸Ã±¨ÎĵÄÊÕ·¢Çé¿ö£¨±ÈÈç·ÓÉÆ÷ÓÐûÊÕµ½£¿ÓÐû·¢³ö£¿ÊÕµ½¶àÉÙ£¿·¢³ö¶àÉÙ£¿£©¡£Òò´Ë¿ÉÒÔ×÷ΪͨÐÅÒ쳣ʱµÄ¶¨Î»ÉñÆ÷¡£¿Éͨ¹ý show ip fpm flow À´²é¿´µ±Ç°µÄÁ÷±í¡£Í¨¹ý clear ip fpm flows À´Çå³ýµ±ÏµÄÁ÷£¨¸ß·åÆÚÉ÷Ó㬻áÔì³ÉÒµÎñÉÁ¶Ï£©

   ÏÂÃæÎÒÃÇÒÔ192.168.33.39Õâ¸öÔ´IPΪÀý£¬À´¿´¿´Â·ÓÉÆ÷Õë¶Ô¸ÃÊý¾ÝÁ÷µÄÊÕ·¢Çé¿ö°É¡£

ÿ¸öÁ÷»á»°¶¼°üº¬ÈçÏ 9 ¸ö×ֶΣ¬×ֶνâÎö£º
    
Pr£ºIP ЭÒéºÅ£¬³£¼ûµÄÓÐ ICMP Ϊ 1£»TCP ÊÇ 6£»UDP ÊÇ 17
    SrcAddr£º¸ÃÊý¾Ý±¨ÎĵÄÔ´ IP µØÖ·
    DstAddr£º¸ÃÊý¾Ý±¨ÎĵÄÄ¿µÄ IP µØÖ·
    SrcPort£º¸ÃÊý¾Ý±¨ÎĵÄÔ´¶Ë¿ÚºÅ£¨TCP/UDP ÒÔÍâµÄЭÒéÊÇûÓж˿ںŵÄ£¬ÄÇôÉ豸ʹÓøÃЭÒéµÄÆäËü×ֶΣ¬×÷Ϊ¶Ë¿ÚºÅʶ±ð¡£Èç ICMP ʹÓñêʶλ¡££©
    DstPort£º¸ÃÊý¾Ý±¨ÎĵÄÄ¿µÄ¶Ë¿ÚºÅ
    Vrf£º¸ÃÊý¾Ý±¨ÎÄËùÔÚµÄ vrf£¬ ĬÈÏÈ«¾Ö vrf Ϊ 0
    SendBytes£º·¢ËÍ×Ö½ÚÊý£¬Ô´ IP ·¢Ë͸øÄ¿µÄ IP µÄ×Ö½ÚÊý
    RecvBytes£º½ÓÊÕ×Ö½ÚÊý£¬ Ä¿µÄ IP »Ø¸´¸øÔ´ IP µÄ×Ö½ÚÊý
    St£ºÐ­Òé״̬

    Í¨¹ýÒÔÉÏ¿ÉÖªµÀ£¬ÕâÌõÁ÷´ú±íµÄÊÇ£¬Ô´192.168.33.49ÏòÄ¿±ê172.18.10.13·¢ÆðÁËtelnet£¨Ä¿±ê¶Ë¿ÚÊÇ23£©£¬ÇÒÔ´ÏòÄ¿µÄ·¢ËÍÁË1437¸ö×Ö½Ú£¬Ä¿µÄ»Ø°üÁË1923¸ö×Ö½Ú¡£

¶þ¡¢¿ØÖÆÃæÁ÷ºÍת·¢ÃæÁ÷µÄ²é¿´·½·¨
    ¸ù¾ÝÉ豸¶ÔÊý¾ÝÁ÷µÄת·¢ÀàÐÍ£¬¿ÉÒÔ·ÖΪ¿ØÖÆÃæ×ª·¢ºÍת·¢Ãæ×ª·¢¡£

    1¡¢¿ØÖÆÃæ×ª·¢£ºÊý¾Ý±¨ÎÄʼ·¢»òÕßÖÕÖ¹µ½Â·ÓÉÆ÷µÄ£¬Ò»°ãÖ¸µÄЭÒéÀà¡¢ ¹ÜÀíÀ౨ÎĵÈ¡£É豸¶ÔÓÚÕâÀ౨ÎIJúÉúµÄÁ÷±í³ÆÖ®Îª¿ØÖÆÃæÁ÷±í¡£¶ÔÓÚ¼¯ÖÐʽºÍ·Ö²¼Ê½É豸¶¼ÊÇÔÚ·ÓÉÆ÷Ö÷¿Ø£¨ruijie#£©Éϲ鿴¶ÔÓ¦µÄÁ÷±í£¬²»ÓýøÈëµ½¶ÔÓ¦Ïß¿¨²é¿´¡£

    2¡¢×ª·¢Ãæ×ª·¢£º Êý¾Ý±¨ÎÄÁ÷Á¿ÊÇ´©Ô½Â·ÓÉÆ÷µÄ£¬Ò»°ãÖ¸µÄÊǿͻ§µÄÒµÎñ±¨ÎĵÈ¡£É豸¶ÔÓÚÕâÀ౨ÎIJúÉúµÄÁ÷±í³ÆÖ®Îª×ª·¢ÃæÁ÷±í¡£¶ÔÓÚ¼¯ÖÐʽÉ豸ֱ½ÓÔÚ·ÓÉÆ÷Ö÷¿Ø£¨ruijie#£©Éϲ鿴¶ÔÓ¦µÄÁ÷±í£»¶ÔÓÚ·Ö²¼Ê½É豸£¬±ÈÈçRSR77»ò77XҪͨ¹ý½øÈëÊý¾Ý°üÁ÷Èë¡¢Á÷³öµÄÏß¿¨À´½øÐв鿴¡£

ͼƬ
    ·Ö²¼Ê½É豸¶Ôת·¢ÃæµÄÁ÷±í²é¿´¾ùÒªµÇ¼Ïß¿¨½øÐв鿴£¬ ÒÔ RSR77-X ΪÀý£º

    ²½Öè 1£ºÊ×ÏÈÈ·¶¨¶ÔÓ¦Ïß¿¨µÄ²ÛλºÅ£¨Ò»°ãÊǽӿڱàºÅµÄǰ 2 Î»£¬±ÈÈç½Ó¿ÚÊÇgi1/0/2£¬ÄÇô²ÛλºÅ¾ÍÊÇ1/0£©
ͼƬ

    ²½Öè 2£º ½øÈëÏß¿¨£¬ÒÔRSR77-XΪÀý£¬¸÷Ïß¿¨½øÈëµÄ·½Ê½ÈçÏ£º
    1¡¢ ¶ÔÓÚSIP1 ÔØ°æ´îÅäµÄ FNM ºÍ DFNM ×ÓÏß¿¨£¬ ͳһµÇ¼¸Ã×Ó¿¨ËùÔڵIJÛλ±àºÅ£¬

    RSR7708X#vtty 3/1
    [LC3/1]>en
    [LC3/1]#sh ip fpm flow
    2¡¢¶ÔÓÚËùÓеĠSIP2 ÔذåÉϵÄÏß¿¨£¬ ÔòͳһµÇ¼µ½ SIP2 ÔØ°åËùÔڵIJÛλºÅ£º
    RSR7708X#vtty 2/0
    [LC2/0]>en
    [LC2/0]#sh ip fpm flow
    3¡¢¶ÔÓÚËùÓÐµÄ SIP5-X ÔØ°åÉϵÄÏß¿¨£¬ ÔòͳһµÇ¼µ½ SIP5-X ÔØ°åËùÔڵIJÛλºÅ£º
    RSR7708X#vtty 4/0
    [LC4/0]>en
    [LC4/0]#sh ip fpm flow
    4¡¢¶Ô ÓÚ ËùÓÐµÄ Ã» ÓÐ SIP1 ÔØ °å µÄ DFNM Ïß ¿¨ £¬Ôò Ö±½ÓµÇ¼¸Ã¿¨µÄ ²Û λ ±à ºÅ £¬ ±È Èç 1/0 µÄDFNM-32GT/16SFP Ïß¿¨
     RSR7708X#vtty 1/0
     [LC1/0]>en
     [LC1/0]#sh ip fpm flow
    Í˳öÏß¿¨µ½Ö÷¿ØµÄ²Ù×÷·½·¨Îª£º°´¼üÅÌµÄ CTRL+X×éºÏ

Èý¡¢³£¼ûÁ÷±íÃüÁîµÄʹÓÃ˵Ã÷

   ÃüÁî1£ºshow ip fpm statistics

    º¬Ò壺 ²é¿´É豸»òÕßÏß¿¨Á÷±í×ÜÊý£¬»òÕßÕ¼ÓÃ×ÜÊýµÄͳ¼Æ
    ʹÓó¡¾°£ºµ±ÐèÒª²é¿´µ±Ç°É豸»òÕßÏß¿¨µÄÁ÷±íÕ¼ÓÃÊýÁ¿Çé¿öʱ£¬Ê¹ÓøÃÃüÁî¡£
       RSR7708X#show ip fpm statistics
        Flow table capacity: 57344 →Ö÷¿ØµÄÁ÷±íÊýÄ¿×ÜÈÝÁ¿
        FRQ capacity: 1024
        Flow number: 38
        Nat-flow number: 0
        User number: 9
        Defragment context number: 0
        Defragment packet number: 0
        Event count: 0

        Slot-1/0 : RSR7708-SRCMI-X-RSR77-SIP5-X —>SIP5-X Ïß¿¨µÄÁ÷±íͳ¼Æ

        Flow table capacity: 2097152 -→¸ÃÏß¿¨µÄÁ÷±íÊýÄ¿×ÜÈÝÁ¿¡¾¹Ø×¢¡¿

        FRQ capacity: 4096 →·ÖƬ¶ÓÁ㤶È

        Flow number: 36 →µ±Ç°»îÔ¾µÄÁ÷±í×ÜÁ¿¡¾×¢Òâ²»Òª³¬¹ý×ÜÁ¿¡¿

        Nat-flow number: 7 →µ±Ç°»îÔ¾µÄ NAT Á÷×ÜÁ¿¡¾×¢Òâ²»Òª³¬¹ý×ÜÁ¿¡¿

        User number: 3 →µ±Ç°Óû§Êý¡¾¹Ø×¢¡¿

        Defragment context number: 0

        Defragment packet number: 0
        Event count: 3720 →Á÷ʼþͳ¼Æ

   ÃüÁî2£ºshow ip fpm users

    º¬Ò壺ͳ¼Æµ±Ç°Óû§µÄÁ÷»á»°Á¬½ÓÊýºÍÕë¶Ô¸ÃipµÄ×î´óÁ÷ÏÞÖÆÊý
    Ê¹Óó¡¾°£ºµ±ÐèÒª²é¿´µ±Ç°Óû§ÓжàÉÙÌõÁ÷ºÍ×î´óÅäÖõÄÁ÷»á»°ÊýÁ¿Ê±Ê¹Óà  

    Ê¹Óü¼ÇÉ£º

        1)¿Éͨ¹ý¹ÜµÀ·û | ¶ÔÓû§ip½øÐйýÂË£¬²é¿´Ìض¨µÄÓû§Çé¿ö¡£    

        2)ÔÚ·Ö²¼Ê½É豸£¬±ÈÈçRSR77-XϵÁУ¬ÐèÒªÔÚÏß¿¨ÀïÃæ²é¿´

    ¾ÙÀý£º    

    [LC1/0]#sh ip fpm users

        IP-address   Active-time(s)  Active-Conns Max-Config-Conns

        192.13.64.2         147            11                    100000

        192.168.30.1       1227            3                    100000

        172.19.1.1            1685           1                    100000

        172.18.157.32      700747      17                   100000

    Ip-address £ºÊý¾ÝÁ÷µÄÔ´ ip µØÖ·£¬ ͨ³£Çé¿öÏÂΪÓû§µÄÄÚÍøµØÖ·

    Active-timie£º¸ÃÓû§´æÔÚÊý¾ÝÁ÷µÄʱ¼ä

    Active-conns£º¸ÃÓû§ ´æÔÚ¶àÉÙÌõ»îÔ¾µÄÁ÷£¬Èç¹û¹ý´ó£¬¿ÉÄÜ´æÔÚÒì³£¹¥»÷

    Max-config-conns£ºÅäÖõĸÃÓû§×î´ó»á»°ÏÞÖÆ£¬ ĬÈÏÊÇ 100000£¬ ¿Éͨ¹ý ip session filter ½øÐе÷Õû

   ÃüÁî3£ºshow ip fpm users

    º¬Ò壺²é¿´µ±Ç°É豸ËùÓеÄÊý¾ÝÁ÷±íµÄת·¢Çé¿ö¡£
    Ê¹Óó¡¾°£ºµ±ÐèÒª²é¿´È«²¿Êý¾ÝÁ÷µÄת·¢Çé¿öÏ»áʹÓøÃÃüÁî¡£
    Ê¹Óü¼ÇÉ£º
        1¡¢¿Éͨ¹ý¹ÜµÀ·û | ¶Ôµ¥¸ö ip »òÕ߶˿ںŽøÐйýÂË£¬²é¿´Ìض¨µÄÓû§Çé¿ö¡£
        2¡¢ÔÚ·Ö²¼Ê½É豸£¬ÐèÒªÔÚÏß¿¨ÀïÃæ²é¿´£¬ ±ÈÈç RSR77X
   
 Ê¹ÓÃÏÞÖÆ£ºÔÚ¼«¼ò³ö¿Ú½â¾ö¹«º£²Ê´¬¡¤6600¹ÙÍø°æ±¾ÖУ¬¶Ô¹ÜµÀ·û²Ù×÷½øÐÐÁËÏÞÖÆ£¬Ê¹Óà show ip fpm flows users .x.x.xÃüÁî½øÐдúÌæ
    ¾ÙÀý£º
 

   ÃüÁî4£ºshow ip fpm users x.x.x.x

    º¬Ò壺ÏÔÊ¾ÌØ¶¨Ô´IPËùÓеÄÊý¾ÝÁ÷µÄת·¢ÐÅÏ¢
    Ê¹Óó¡¾°£ºµ±ÐèÒª²é¿´µ±Ç°Ä³¸öÌØ¶¨Á÷±íת·¢Çé¿öʱ£¬Ê¹ÓøÃÃüÁî¡£
    Ê¹ÓÃÏÞÖÆ£º¸ÃÃüÁîÔÚ¼«¼ò³ö¿Ú°æ±¾²ÅÓÐÖ§³Ö£¬ Ò»°ãÔÚ¶ÔÓ¦Ïß¿¨½øÐв鿴¡£
[LC1/0]#sh ip fpm flows user 192.168.30.1
Pr  SrcAddr        DstAddr        SrcPort   DstPort Vrf   SendBytes RecvBytes St
17 192.168.30.1 172.18.157.32 64834    
1813      0       366618    90096      3
17 192.168.30.1 172.18.157.32 64838    
1812      0        387548    95520     3

    ½âÎö£º192.168.30.1ÓëÈÏÖ¤·þÎñÆ÷µÄÈÏÖ¤£¨¶Ë¿Ú1812£©ºÍ¼Æ·Ñ£¨¶Ë¿Ú1813£©µÄÊý¾ÝÁ÷½»»¥¹ý³Ì¡£

   ÃüÁî5£º show ip fpm flow filter pr Ô´ip ÑÚÂë Ä¿µÄip ÑÚÂë

    º¬Ò壺²é¿´Õë¶ÔÌØ¶¨Ô´£¬Ìض¨Ä¿±êµÄÊý¾ÝÁ÷µÄת·¢ÐÅÏ¢
    Ê¹Óó¡¾°£ºµ±ÐèÒª²é¿´µ±Ç°Ä³¸öÌØ¶¨Á÷±íת·¢Çé¿öʱ£¬Ê¹ÓøÃÃüÁî¡£

    ÃüÁîÓï·¨£ºshow ip fpm flow filter ip ЭÒéºÅ  Ô´µØÖ· ÑÚÂë Ä¿µÄµØÖ· ÑÚÂë
        ³£¼ûЭÒéºÅ£ºicmp =1£»tcp=6£»udp=17
   ¾ÙÀý£º
Òª²é¿´Ô´ipÊÇ172.18.1.128·ÃÎÊ172.18.17.16µÄTCPÊý¾ÝÁ÷¡£

ÉÏͼ´ú±í£¬Ô´172.18.1.128 ¾­¹ýNATµØÖ·×ª»»ºóÔ´IPµØÖ·±ä³É110.1.1.12£¬¸ÃtcpÔ´¶Ë¿ÚÊÇ36064£¬Ä¿µÄ¶Ë¿ÚÊÇ23£¬·¢ËÍÁË5467×Ö½Ú£¬½ÓÊÕ9301¸ö×Ö½Ú¡£

ÆäËû³£¼û×éºÏ¼¼ÇÉ£º
1£©²é¿´ÈÎÒâÔ´µ½Ä³¸öµØÖ·±ÈÈç192.168.1.1µÄudpÁ÷
 Show ip fpm flows filter 17 0.0.0.0 0.0.0.0 192.168.1.1 255.255.255.255

ÆäÖÐ0.0.0.0 ´ú±íÈÎÒâ

    ÃüÁî6£º show ip fpm flow filter pr Ô´ip ÑÚÂë Ä¿µÄip ÑÚÂë detail 

     º¬Ò壺ÏÔʾµ±Ç°Óû§Ìض¨µÄÊý¾Ýת·¢µÄÏêϸÐÅÏ¢£¬²¢ÏÔʾ¶ÔÓ¦µÄÀ´Ô´½Ó¿ÚºÍ·¢Ëͳö¿Ú¡£

     Ê¹Óó¡¾°£ºÔÚ×ö¹ÊÕÏÅŲé»òÕßÒµÎñ²âÊÔµÄʱºò£¬µ±ÐèÒª²é¿´µ±Ç°Ä³¸öÌØ¶¨Á÷±íת·¢´ÓÄĸö½Ó¿Ú½ø³öʱ£¬Ê¹ ÓøÃÃüÁî¡£ 

     Ê¹Óü¼ÇÉ£ºÕë¶Ô·Ö²¼Ê½É豸£¬Ò»°ãÔÚ¶ÔÓ¦Ïß¿¨½øÐв鿴Êý¾ÝÁ÷µÄת·¢¡£

     ¾ÙÀý£º

     Èç¹ûÒª²é¿´10.20.255.34 ·ÃÎÊ223.5.5.5Õâ¸öÁ÷µÄ½ø³ö½Ó¿Ú¡£
ͼƬ
ͼƬ

ͨ¹ýÉÏÊö¿ÉÒÔ¿´µ½£¬¸Ã±¨ÎÄÊÇ´Óag2¿Ú½øÈ룬ag4¿Ú·¢³ö¡£

ÈçÓÐÒÉÎÊ»òÏà¹ØÊÛºóÎÊÌâ×Éѯ£¬¿Éµã»÷½øÈëÉÁµçÍÃ×Éѯ

·µ»Ø¶¥²¿

ÊÕÆð
ÎĵµAIÖúÊÖ
ÎĵµÆÀ¼Û
¸Ã×ÊÁÏÊÇ·ñ½â¾öÁËÄúµÄÎÊÌ⣿
Äú¶Ôµ±Ç°Ò³ÃæµÄÂúÒâ¶ÈÈçºÎ£¿
²»Õ¦µÎ
·Ç³£ºÃ
ÄúÂúÒâµÄÔ­ÒòÊÇ£¨¶àÑ¡£©£¿
Äú¶ÔÎĵµÊÇ·ñ»¹ÓÐÆäËüµÄÎÊÌâ»ò½¨Ò飿
Ϊ¾¡¿ì½â¾öÎÊÌ⣬ÇëÄúÁôÏÂÁªÏµ·½Ê½Òﱋȯ¸´
ÓÊÏä
ÊÖ»úºÅ
¸ÐлÄúµÄ·´À¡£¡
ÇëÑ¡Ôñ·þÎñÏîÄ¿
¹Ø±Õ×Éѯҳ
ÊÛǰ×Éѯ ÊÛǰ×Éѯ
ÊÛǰ×Éѯ
ÊÛºó·þÎñ ÊÛºó·þÎñ
ÊÛºó·þÎñ
Òâ¼û·´À¡ Òâ¼û·´À¡
Òâ¼û·´À¡
¸ü¶àÁªÏµ·½Ê½
¡¾ÍøÕ¾µØÍ¼¡¿¡¾sitemap¡¿