ÔÚÈÕ³£ÍøÂçÔËά¹ý³ÌÖУ¬µ±Óöµ½¶ª°ü»òÕßת·¢²»Í¨Ê±£¬ÍùÍùÐèÒªÅжϱ¨ÎĶªÔÚʲôµØ·½£¬³ýÁËÓÃtraceroute·¾¶¸ú×Ùµ½Êý¾Ý°üÖÕÖ¹ÔÚ¾ßÌåÉ豸£¨Èç·ÓÉÆ÷£©Ê±£¬ÄǾÍÐèÒª½øÒ»²½ÅжÏ·ÓÉÆ÷Õë¶Ô¸Ã±¨ÎĵÄת·¢Çé¿ö£¬ÊǶªÆúÁË£¿»¹ÊÇ·¢´í½Ó¿ÚÁË£¿ÄÇôÕë¶Ô¹«º£²Ê´¬¡¤6600·ÓÉÆ÷£¬¾Í¿ÉÒÔʹÓÃÁ÷±íÕâÏî¼¼Êõ½øÐÐÅжϡ£
¹«º£²Ê´¬¡¤6600½Ý·ÓÉÆ÷µ±ÅäÖÃÁË NAT¡¢ QOS¡¢ PBR¡¢ ACL µÈÒµÎñʱ£¬ÄÇô¾ÍĬÈÏ¿ªÆôÁË X-flow Á÷±í¹¦ÄÜ¡£¼´µ±Ã¿¸öÊý¾Ý°üµ½´ï»òÕß´©¹ý·ÓÉÆ÷£¬Â·ÓÉÆ÷¸ù¾ÝÕâ¸ö±¨ÎÄµÄ 6 Ôª×é¾ÍÉú²úÁËÒ»ÌõÁ÷»á»°¼Ç¼¡£Í¨¹ýÁ÷±í¼¼Êõ£¬ÎÒÃǾͿÉÒÔÓÃÀ´²é¿´Â·ÓÉÆ÷Õë¶Ô¸Ã±¨ÎĵÄÊÕ·¢Çé¿ö£¨±ÈÈç·ÓÉÆ÷ÓÐûÊÕµ½£¿ÓÐû·¢³ö£¿ÊÕµ½¶àÉÙ£¿·¢³ö¶àÉÙ£¿£©¡£Òò´Ë¿ÉÒÔ×÷ΪͨÐÅÒ쳣ʱµÄ¶¨Î»ÉñÆ÷¡£¿Éͨ¹ý show ip fpm flow À´²é¿´µ±Ç°µÄÁ÷±í¡£Í¨¹ý clear ip fpm flows À´Çå³ýµ±ÏµÄÁ÷£¨¸ß·åÆÚÉ÷Ó㬻áÔì³ÉÒµÎñÉÁ¶Ï£©
ÏÂÃæÎÒÃÇÒÔ192.168.33.39Õâ¸öÔ´IPΪÀý£¬À´¿´¿´Â·ÓÉÆ÷Õë¶Ô¸ÃÊý¾ÝÁ÷µÄÊÕ·¢Çé¿ö°É¡£
ÿ¸öÁ÷»á»°¶¼°üº¬ÈçÏ 9 ¸ö×ֶΣ¬×ֶνâÎö£º
Pr£ºIP ÐÒéºÅ£¬³£¼ûµÄÓÐ ICMP Ϊ 1£»TCP ÊÇ 6£»UDP ÊÇ 17
SrcAddr£º¸ÃÊý¾Ý±¨ÎĵÄÔ´ IP µØÖ·
DstAddr£º¸ÃÊý¾Ý±¨ÎĵÄÄ¿µÄ IP µØÖ·
SrcPort£º¸ÃÊý¾Ý±¨ÎĵÄÔ´¶Ë¿ÚºÅ£¨TCP/UDP ÒÔÍâµÄÐÒéÊÇûÓж˿ںŵģ¬ÄÇôÉ豸ʹÓøÃÐÒéµÄÆäËü×ֶΣ¬×÷Ϊ¶Ë¿ÚºÅʶ±ð¡£Èç ICMP ʹÓñêʶλ¡££©
DstPort£º¸ÃÊý¾Ý±¨ÎĵÄÄ¿µÄ¶Ë¿ÚºÅ
Vrf£º¸ÃÊý¾Ý±¨ÎÄËùÔÚµÄ vrf£¬ ĬÈÏÈ«¾Ö vrf Ϊ 0
SendBytes£º·¢ËÍ×Ö½ÚÊý£¬Ô´ IP ·¢Ë͸øÄ¿µÄ IP µÄ×Ö½ÚÊý
RecvBytes£º½ÓÊÕ×Ö½ÚÊý£¬ Ä¿µÄ IP »Ø¸´¸øÔ´ IP µÄ×Ö½ÚÊý
St£ºÐÒé״̬
ͨ¹ýÒÔÉÏ¿ÉÖªµÀ£¬ÕâÌõÁ÷´ú±íµÄÊÇ£¬Ô´192.168.33.49ÏòÄ¿±ê172.18.10.13·¢ÆðÁËtelnet£¨Ä¿±ê¶Ë¿ÚÊÇ23£©£¬ÇÒÔ´ÏòÄ¿µÄ·¢ËÍÁË1437¸ö×Ö½Ú£¬Ä¿µÄ»Ø°üÁË1923¸ö×Ö½Ú¡£
2¡¢×ª·¢Ãæ×ª·¢£º Êý¾Ý±¨ÎÄÁ÷Á¿ÊÇ´©Ô½Â·ÓÉÆ÷µÄ£¬Ò»°ãÖ¸µÄÊǿͻ§µÄÒµÎñ±¨Îĵȡ£É豸¶ÔÓÚÕâÀ౨ÎIJúÉúµÄÁ÷±í³ÆÖ®Îª×ª·¢ÃæÁ÷±í¡£¶ÔÓÚ¼¯ÖÐʽÉ豸ֱ½ÓÔÚ·ÓÉÆ÷Ö÷¿Ø£¨ruijie#£©Éϲ鿴¶ÔÓ¦µÄÁ÷±í£»¶ÔÓÚ·Ö²¼Ê½É豸£¬±ÈÈçRSR77»ò77XҪͨ¹ý½øÈëÊý¾Ý°üÁ÷Èë¡¢Á÷³öµÄÏß¿¨À´½øÐв鿴¡£
·Ö²¼Ê½É豸¶Ôת·¢ÃæµÄÁ÷±í²é¿´¾ùÒªµÇ¼Ïß¿¨½øÐв鿴£¬ ÒÔ RSR77-X ΪÀý£º
²½Öè 1£ºÊ×ÏÈÈ·¶¨¶ÔÓ¦Ïß¿¨µÄ²ÛλºÅ£¨Ò»°ãÊǽӿڱàºÅµÄǰ 2 룬±ÈÈç½Ó¿ÚÊÇgi1/0/2£¬ÄÇô²ÛλºÅ¾ÍÊÇ1/0£©
ÃüÁî1£ºshow ip fpm statistics
Slot-1/0 : RSR7708-SRCMI-X-RSR77-SIP5-X —>SIP5-X Ïß¿¨µÄÁ÷±íͳ¼Æ
Flow table capacity: 2097152 -→¸ÃÏß¿¨µÄÁ÷±íÊýÄ¿×ÜÈÝÁ¿¡¾¹Ø×¢¡¿
FRQ capacity: 4096 →·ÖƬ¶ÓÁ㤶È
Flow number: 36 →µ±Ç°»îÔ¾µÄÁ÷±í×ÜÁ¿¡¾×¢Òâ²»Òª³¬¹ý×ÜÁ¿¡¿
Nat-flow number: 7 →µ±Ç°»îÔ¾µÄ NAT Á÷×ÜÁ¿¡¾×¢Òâ²»Òª³¬¹ý×ÜÁ¿¡¿
User number: 3 →µ±Ç°Óû§Êý¡¾¹Ø×¢¡¿
Defragment context number: 0
ÃüÁî2£ºshow ip fpm users
ʹÓü¼ÇÉ£º
1)¿Éͨ¹ý¹ÜµÀ·û | ¶ÔÓû§ip½øÐйýÂË£¬²é¿´Ìض¨µÄÓû§Çé¿ö¡£
2)ÔÚ·Ö²¼Ê½É豸£¬±ÈÈçRSR77-XϵÁУ¬ÐèÒªÔÚÏß¿¨ÀïÃæ²é¿´
[LC1/0]#sh ip fpm users
IP-address Active-time(s) Active-Conns Max-Config-Conns
192.13.64.2 147 11 100000
192.168.30.1 1227 3 100000
172.19.1.1 1685 1 100000
172.18.157.32 700747 17 100000
Ip-address £ºÊý¾ÝÁ÷µÄÔ´ ip µØÖ·£¬ ͨ³£Çé¿öÏÂΪÓû§µÄÄÚÍøµØÖ·
Active-timie£º¸ÃÓû§´æÔÚÊý¾ÝÁ÷µÄʱ¼ä
Active-conns£º¸ÃÓû§ ´æÔÚ¶àÉÙÌõ»îÔ¾µÄÁ÷£¬Èç¹û¹ý´ó£¬¿ÉÄÜ´æÔÚÒì³£¹¥»÷
Max-config-conns£ºÅäÖõĸÃÓû§×î´ó»á»°ÏÞÖÆ£¬ ĬÈÏÊÇ 100000£¬ ¿Éͨ¹ý ip session filter ½øÐе÷Õû
ÃüÁî3£ºshow ip fpm users

ÃüÁî4£ºshow ip fpm users x.x.x.x
º¬Ò壺ÏÔÊ¾ÌØ¶¨Ô´IPËùÓеÄÊý¾ÝÁ÷µÄת·¢ÐÅÏ¢
ʹÓó¡¾°£ºµ±ÐèÒª²é¿´µ±Ç°Ä³¸öÌØ¶¨Á÷±íת·¢Çé¿öʱ£¬Ê¹ÓøÃÃüÁî¡£
ʹÓÃÏÞÖÆ£º¸ÃÃüÁîÔÚ¼«¼ò³ö¿Ú°æ±¾²ÅÓÐÖ§³Ö£¬ Ò»°ãÔÚ¶ÔÓ¦Ïß¿¨½øÐв鿴¡£
[LC1/0]#sh ip fpm flows user 192.168.30.1
Pr SrcAddr DstAddr SrcPort DstPort Vrf SendBytes RecvBytes St
17 192.168.30.1 172.18.157.32 64834 1813 0 366618 90096 3
17 192.168.30.1 172.18.157.32 64838 1812 0 387548 95520 3
½âÎö£º192.168.30.1ÓëÈÏÖ¤·þÎñÆ÷µÄÈÏÖ¤£¨¶Ë¿Ú1812£©ºÍ¼Æ·Ñ£¨¶Ë¿Ú1813£©µÄÊý¾ÝÁ÷½»»¥¹ý³Ì¡£
ÃüÁî5£º show ip fpm flow filter pr Ô´ip ÑÚÂë Ä¿µÄip ÑÚÂë
º¬Ò壺²é¿´Õë¶ÔÌØ¶¨Ô´£¬Ìض¨Ä¿±êµÄÊý¾ÝÁ÷µÄת·¢ÐÅÏ¢
ʹÓó¡¾°£ºµ±ÐèÒª²é¿´µ±Ç°Ä³¸öÌØ¶¨Á÷±íת·¢Çé¿öʱ£¬Ê¹ÓøÃÃüÁî¡£

ÉÏͼ´ú±í£¬Ô´172.18.1.128 ¾¹ýNATµØÖ·×ª»»ºóÔ´IPµØÖ·±ä³É110.1.1.12£¬¸ÃtcpÔ´¶Ë¿ÚÊÇ36064£¬Ä¿µÄ¶Ë¿ÚÊÇ23£¬·¢ËÍÁË5467×Ö½Ú£¬½ÓÊÕ9301¸ö×Ö½Ú¡£
ÆäÖÐ0.0.0.0 ´ú±íÈÎÒâ
º¬Ò壺ÏÔʾµ±Ç°Óû§Ìض¨µÄÊý¾Ýת·¢µÄÏêϸÐÅÏ¢£¬²¢ÏÔʾ¶ÔÓ¦µÄÀ´Ô´½Ó¿ÚºÍ·¢Ëͳö¿Ú¡£
ʹÓó¡¾°£ºÔÚ×ö¹ÊÕÏÅŲé»òÕßÒµÎñ²âÊÔµÄʱºò£¬µ±ÐèÒª²é¿´µ±Ç°Ä³¸öÌØ¶¨Á÷±íת·¢´ÓÄĸö½Ó¿Ú½ø³öʱ£¬Ê¹ ÓøÃÃüÁî¡£
ʹÓü¼ÇÉ£ºÕë¶Ô·Ö²¼Ê½É豸£¬Ò»°ãÔÚ¶ÔÓ¦Ïß¿¨½øÐв鿴Êý¾ÝÁ÷µÄת·¢¡£
¾ÙÀý£º
Èç¹ûÒª²é¿´10.20.255.34 ·ÃÎÊ223.5.5.5Õâ¸öÁ÷µÄ½ø³ö½Ó¿Ú¡£
ͨ¹ýÉÏÊö¿ÉÒÔ¿´µ½£¬¸Ã±¨ÎÄÊÇ´Óag2¿Ú½øÈ룬ag4¿Ú·¢³ö¡£
ÈçÓÐÒÉÎÊ»òÏà¹ØÊÛºóÎÊÌâ×Éѯ£¬¿Éµã»÷½øÈëÉÁµçÍÃ×Éѯ