2022年Juniper路由器维护手册v. .pdf

Juniper路由器系统维护手册Version 1.0 Juniper公司2010 年 3 月目录名师资料总结-精品资料欢迎下载-名师精心整理-第 1 页，共 24 页 -Juniper 路由器系统维护手册第 2 页 共 24 页1.维护巡检表.32.系统基本维护.32.1.启动时间.32.2.设备温度.32.3.系统性能.52.4.日志分析.92.5.端口状态.112.6.文件系统管理.183.常见故障处理.183.1.端口无法 UP.183.2.网络不通.183.3.网络丢包.183.4.VRRP 异常.184.备份和恢复.184.1.配置备份.184.2.配置恢复.214.3.密码恢复.234.4.软件升级.235.系统除尘.235.1.配置备份.235.2.关闭系统.235.3.设备下架除尘.245.4.设备上架.245.5.主机加电.24名师资料总结-精品资料欢迎下载-名师精心整理-第 2 页，共 24 页 -Juniper 路由器系统维护手册第 3 页 共 24 页1.维护巡检表每天或者定期对路由器进行检查的检查表2.系统基本维护2.1.启动时间通过查看系统的启动时间，可以知道路由器是否重启过。zteGDGZ-PB-WAP15-GRE01 show system uptime Current time:2007-11-27 09:30:18 CST System booted:2007-11-06 23:24:25 CST(2w6d 10:05 ago)Protocols started:2007-11-06 23:24:49 CST(2w6d 10:05 ago)Last configured:2007-11-22 17:30:49 CST(4d 15:59 ago)by zte 9:30AM up 20 days,10:06,2 users,load averages:0.11,0.03,0.01 2.2.设备温度通过查看系统感应器的状态，可以知道设备是否运行在一个合理的温度环境下。下面命令输出中“Absent”表示没有安装该硬件。如果状态显示OK 则正常。zteGDGZ-PB-WAP15-GRE01 show chassis environment Class Item Status Measurement Temp PEM 0 OK PEM 1 OK Routing Engine 0 OK 35 degrees C/95 degrees F Routing Engine 1 Absent CB 0 Intake OK 30 degrees C/86 degrees F CB 0 Exhaust A OK 32 degrees C/89 degrees F CB 0 Exhaust B OK 31 degrees C/87 degrees F CB 1 Intake Absent CB 1 Exhaust A Absent 名师资料总结-精品资料欢迎下载-名师精心整理-第 3 页，共 24 页 -Juniper 路由器系统维护手册第 4 页 共 24 页CB 1 Exhaust B Absent FEB 2 Intake OK 28 degrees C/82 degrees F FEB 2 Exhaust A OK 30 degrees C/86 degrees F FEB 2 Exhaust B OK 33 degrees C/91 degrees F FPC 2 Exhaust A OK 30 degrees C/86 degrees F FPC 2 Exhaust B OK 30 degrees C/86 degrees F Fans Front Top Tray Fan 1 OK Spinning at normal speed Front Top Tray Fan 2 OK Spinning at normal speed Front Top Tray Fan 3 OK Spinning at normal speed Front Top Tray Fan 4 OK Spinning at normal speed Front Top Tray Fan 5 OK Spinning at normal speed Front Top Tray Fan 6 OK Spinning at normal speed Front Top Tray Fan 7 OK Spinning at normal speed Front Top Tray Fan 8 OK Spinning at normal speed Front Bottom Tray Fan 1 OK Spinning at normal speed Front Bottom Tray Fan 2 OK Spinning at normal speed Front Bottom Tray Fan 3 OK Spinning at normal speed Front Bottom Tray Fan 4 OK Spinning at normal speed Front Bottom Tray Fan 5 OK Spinning at normal speed Front Bottom Tray Fan 6 OK Spinning at normal speed Front Bottom Tray Fan 7 OK Spinning at normal speed Front Bottom Tray Fan 8 OK Spinning at normal speed Rear Top Tray Fan 1 OK Spinning at normal speed Rear Top Tray Fan 2 OK Spinning at normal speed Rear Top Tray Fan 3 OK Spinning at normal speed Rear Top Tray Fan 4 OK Spinning at normal speed Rear Top Tray Fan 5 OK Spinning at normal speed Rear Top Tray Fan 6 OK Spinning at normal speed Rear Top Tray Fan 7 OK Spinning at normal speed Rear Top Tray Fan 8 OK Spinning at normal speed 名师资料总结-精品资料欢迎下载-名师精心整理-第 4 页，共 24 页 -Juniper 路由器系统维护手册第 5 页 共 24 页Rear Bottom Tray Fan 1 OK Spinning at normal speed Rear Bottom Tray Fan 2 OK Spinning at normal speed Rear Bottom Tray Fan 3 OK Spinning at normal speed Rear Bottom Tray Fan 4 OK Spinning at normal speed Rear Bottom Tray Fan 5 OK Spinning at normal speed Rear Bottom Tray Fan 6 OK Spinning at normal speed Rear Bottom Tray Fan 7 OK Spinning at normal speed Rear Bottom Tray Fan 8 OK Spinning at normal speed zteGDGZ-PB-WAP15-GRE01 2.3.系统性能通过查看路由引擎的内存和CPU 使用率，可以知道系统是否处于正常状态。M 系列路由器的内存使用率不应该超过50%，CPU 使用率不应该超过50%J 系列路由器的内存使用率会比较高，但是通常不会超过90%，CPU 使用率也不会超过70%【注意】下面显示CPU 是 idle(空闲)百分比zteGDGZ-PB-WAP15-GRE01 show chassis routing-engine Routing Engine status:Slot 0:Current state Master Election priority Master(default)Temperature 35 degrees C/95 degrees F CPU temperature 31 degrees C/87 degrees F DRAM 2048 MB Memory utilization 12 percent CPU utilization:User 0 percent Background 0 percent Kernel 2 percent 名师资料总结-精品资料欢迎下载-名师精心整理-第 5 页，共 24 页 -Juniper 路由器系统维护手册第 6 页 共 24 页Interrupt 0 percent Idle 98 percent Model RE-A-1000 Serial ID 1000718861 Start time 2007-11-06 23:24:25 CST Uptime 20 days,10 hours,13 minutes,34 seconds Load averages:1 minute 5 minute 15 minute 0.00 0.00 0.00 zteGDGZ-PB-WAP15-GRE01 如果发现系统的CPU 使用率比较高，那么可以适用 show system processes extensive 来查看具体是哪个进程在占用CPU 比较多。rootGDGZ-PB-WAP15-GRE01 show system processes extensivelast pid:24769;load averages:0.01,0.01,0.00 up 20+10:18:53 09:42:48 71 processes:2 running,69 sleeping Mem:105M Active,51M Inact,60M Wired,106M Cache,69M Buf,1685M Free Swap:2048M Total,2048M Free PID USERNAME PRI NICE SIZE RES STATE TIME WCPU CPU COMMAND 3220 root 2 0 21244K 7352K select 558:49 0.98%0.98%chassisd 24744 root 2 0 10644K 5956K select 0:00 8.00%0.39%cli 24745 root 2 0 14868K 9356K select 0:00 3.00%0.15%mgd 3034 root 2 0 2184K 1644K select 0:13 0.05%0.05%eventd 3241 root 2 0 3112K 2548K select 14:28 0.00%0.00%vrrpd 名师资料总结-精品资料欢迎下载-名师精心整理-第 6 页，共 24 页 -Juniper 路由器系统维护手册第 7 页 共 24 页3239 root 2 0 3140K 1752K select 2:57 0.00%0.00%l2ald 3222 root 2 0 2740K 1064K select 2:35 0.00%0.00%craftd 3260 root 2 0 3212K 2664K select 1:27 0.00%0.00%dcd 3221 root 2 0 1996K 1432K select 0:47 0.00%0.00%alarmd 3256 root 2 0 1972K 1100K select 0:42 0.00%0.00%irsd 3238 root 2 0 9416K 8504K kqread 0:34 0.00%0.00%rpd 9 root 18 0 0K 0K syncer 0:22 0.00%0.00%syncer 3255 root 2 0 2216K 1620K select 0:14 0.00%0.00%lfmd 3259 root 2 0 3828K 3400K select 0:13 0.00%0.00%snmpd 3250 root 2 0 2904K 1552K select 0:07 0.00%0.00%bfdd 3258 root 2 0 2940K 2444K select 0:06 0.00%0.00%pfed 3237 root 2 0 4040K 3500K select 0:05 0.00%0.00%mib2d 3246 root 2 0 2428K 1784K select 0:04 0.00%0.00%ppmd 15 root-18 0 0K 0K psleep 0:03 0.00%0.00%vmuncachedaemo 8 root-2 0 0K 0K vlruwt 0:03 0.00%0.00%vnlru 3257 root 2 0 2364K 1920K select 0:03 0.00%0.00%dfwd 3229 root 2 0 1228K 724K select 0:02 0.00%0.00%smartd 3217 root 2 0 1020K 452K select 0:02 0.00%0.00%watchdog 7 root-18 0 0K 0K psleep 0:02 0.00%0.00%bufdaemon 3223 root 2 0 14788K 8744K select 0:02 0.00%0.00%mgd 3233 root 2 0 1992K 1428K select 0:01 0.00%0.00%lacpd 3092 root 10 0 1156K 772K nanslp 0:01 0.00%0.00%cron 3269 root 2 0 0K 0K peer_s 0:01 0.00%0.00%peer proxy 3226 root 2 0 1024K 440K sbwait 0:01 0.00%0.00%tnp.sntpd 3225 root 2 0 1308K 928K select 0:01 0.00%0.00%inetd 3018 root 2 0 1096K 580K select 0:01 0.00%0.00%usbd 5 root-18 0 0K 0K psleep 0:01 0.00%0.00%pagedaemon 117 root 10 0 2051M 35448K mfsidl 0:01 0.00%0.00%newfs 3268 root 2 0 0K 0K peer_s 0:01 0.00%0.00%peer proxy 名师资料总结-精品资料欢迎下载-名师精心整理-第 7 页，共 24 页 -Juniper 路由器系统维护手册第 8 页 共 24 页24617 root 2 0 16372K 9528K sbwait 0:00 0.00%0.00%mgd 24616 zte 2 0 10640K 6012K select 0:00 0.00%0.00%cli 124 root 10 0 2051M 36012K mfsidl 0:00 0.00%0.00%newfs 24614 root 2 0 1392K 976K select 0:00 0.00%0.00%telnetd 3252 root 2 0 1992K 1484K select 0:00 0.00%0.00%rdd 24612 zte 2 0 10648K 6012K select 0:00 0.00%0.00%cli 24769 root 28 0 21768K 1024K RUN 0:00 0.00%0.00%top 1 root 10 0 936K 692K wait 0:00 0.00%0.00%init 3244 root 2 0 3308K 2612K select 0:00 0.00%0.00%rmopd 24610 root 2 0 1392K 976K select 0:00 0.00%0.00%telnetd 3 root 10 0 0K 0K usbevt 0:00 0.00%0.00%usb0 24613 root 28 0 14868K 9572K RUN 0:00 0.00%0.00%mgd 3240 root 2-15 2940K 2324K select 0:00 0.00%0.00%apsd 11 root 2 0 0K 0K pfeacc 0:00 0.00%0.00%if_pfe_listen 3242 root 2 15 3580K 3012K select 0:00 0.00%0.00%sampled 3245 root 2 0 3408K 2892K select 0:00 0.00%0.00%cosd 3249 root 2 0 2088K 1536K select 0:00 0.00%0.00%fsad 3218 root 2 0 1152K 760K select 0:00 0.00%0.00%tnetd 3251 root 2 0 3556K 3044K select 0:00 0.00%0.00%l2tpd 3253 root 2 0 2216K 1660K select 0:00 0.00%0.00%pppd 3247 root 2 0 2228K 1648K select 0:00 0.00%0.00%lmpd 3254 root 2 0 5820K 4576K select 0:00 0.00%0.00%dfcd 3248 root 2 0 1312K 712K select 0:00 0.00%0.00%rtspd 3243 root 2 0 2856K 2120K select 0:00 0.00%0.00%ilmid 24611 root 10 0 1344K 904K wait 0:00 0.00%0.00%login 24615 root 10 0 1344K 904K wait 0:00 0.00%0.00%login 3234 root 3 0 1108K 616K ttyin 0:00 0.00%0.00%getty 24740 root 10 0 1480K 940K wait 0:00 0.00%0.00%sh 0 root-18 0 0K 0K sched 0:00 0.00%0.00%swapper 13 root 2 0 0K 0K picacc 0:00 0.00%0.00%if_pic_listen 名师资料总结-精品资料欢迎下载-名师精心整理-第 8 页，共 24 页 -Juniper 路由器系统维护手册第 9 页 共 24 页12 root 2 0 0K 0K scs_ho 0:00 0.00%0.00%scs_housekeepi 14 root 2 0 0K 0K cb-pol 0:00 0.00%0.00%cb_poll 10 root 29 0 0K 0K sleep 0:00 0.00%0.00%netdaemon 6 root 18 0 0K 0K psleep 0:00 0.00%0.00%vmdaemon 16 root 2 0 0K 0K dump_r 0:00 0.00%0.00%kern_dump_proc 4 root 10 0 0K 0K usbtsk 0:00 0.00%0.00%usbtask 2 root 10 0 0K 0K tqthr 0:00 0.00%0.00%taskqueue rootGDGZ-PB-WAP15-GRE01 如果无法判断CPU 和内存使用率过高的原因，那么请将request support information|no-more命令结果发送给Juniper售后支持中心，由juniper 售后工程师来进行分析。2.4.日志分析show chassis alarms和 show system alarms命令可以查看系统的当前告警信息。下面信息是 M 系列的，表明路由器的网管MGT 接口没有接网线，此告警可以忽略。zteGDGZ-PB-WAP15-GRE01 show chassis alarms 1 alarms currently active Alarm time Class Description 2007-11-06 23:24:55 CST Major Host 0 fxp0:Ethernet Link Down zteGDGZ-PB-WAP15-GRE01 对于 J 路由器系列，如果出现下面的信息，表明系统没有配置紧急挽救配置(J 系列提供了一个 config 按钮，如果配置了紧急挽救配置，那么在配置丢失之后可以通过按config 按钮将保存的紧急挽救配置重新加载到系统中，具体配置方法请参考后面的配置备份部分)。1 alarms currently active 名师资料总结-精品资料欢迎下载-名师精心整理-第 9 页，共 24 页 -Juniper 路由器系统维护手册第 10 页 共 24 页Alarm time Class Description 2007-11-25 13:14:51 CST Minor Rescue configuration is not set 处理查看系统的告警，还可以通过查看系统的日志来发现路由器是否有异常情况。Juniper路由器的默认系统日志文件是messages，可以适用 show log messages 来查看系统信息：zteGDGZ-PB-WAP15-GRE01 show log messages Nov 18 09:00:00 GDGZ-PB-WAP15-GRE01 newsyslog22362:logfile turned over due to size1024K Nov 18 09:00:01 GDGZ-PB-WAP15-GRE01 ftpd22359:FTP LOGIN FAILED FROM 203.72.8.12 Nov 18 09:00:01 GDGZ-PB-WAP15-GRE01 ftpd22359:FTP LOGIN FAILED FROM 203.72.8.12,adm Nov 18 09:00:05 GDGZ-PB-WAP15-GRE01 ftpd22359:FTP LOGIN FAILED FROM 203.72.8.12 Nov 18 09:00:05 GDGZ-PB-WAP15-GRE01 ftpd22359:FTP LOGIN FAILED FROM 203.72.8.12,adm Nov 18 09:00:10 GDGZ-PB-WAP15-GRE01 ftpd22359:FTP LOGIN FAILED FROM 203.72.8.12 Nov 18 09:00:10 GDGZ-PB-WAP15-GRE01 ftpd22359:FTP LOGIN FAILED FROM 203.72.8.12,adm Nov 18 09:00:10 GDGZ-PB-WAP15-GRE01 ftpd22359:repeated login failures from 203.72.8.12 Nov 18 09:00:10 GDGZ-PB-WAP15-GRE01 ftpd22364:FTP LOGIN FAILED FROM 203.72.8.12 Nov 18 09:00:10 GDGZ-PB-WAP15-GRE01 ftpd22364:FTP LOGIN FAILED FROM 203.72.8.12,adm Nov 18 09:00:11 GDGZ-PB-WAP15-GRE01 ftpd22364:FTP LOGIN FAILED FROM 203.72.8.12 Nov 18 09:00:11 GDGZ-PB-WAP15-GRE01 ftpd22364:FTP LOGIN FAILED FROM 203.72.8.12,adm Nov 18 09:00:14 GDGZ-PB-WAP15-GRE01 ftpd22364:FTP LOGIN FAILED FROM 203.72.8.12 Nov 18 09:00:14 GDGZ-PB-WAP15-GRE01 ftpd22364:FTP LOGIN FAILED FROM 203.72.8.12,adm Nov 18 09:00:17 GDGZ-PB-WAP15-GRE01 ftpd22364:FTP LOGIN FAILED FROM 203.72.8.12 Nov 18 09:00:17 GDGZ-PB-WAP15-GRE01 ftpd22364:FTP LOGIN FAILED FROM 203.72.8.12,adm Nov 18 09:00:21 GDGZ-PB-WAP15-GRE01 ftpd22364:FTP LOGIN FAILED FROM 203.72.8.12另外，Juniper路由器还可以单独定义各个日志文件，比如vrrp 可以的 log 文件可以设置为 vrrp.log，使用 show log vrrp.log 可以查看关于 vrrp 的 log 信息，而 ospf 的 log 信息可以记录在 ospf.log，使用 show log ospf.log 可以查看关于 OSPF的 log 信息。名师资料总结-精品资料欢迎下载-名师精心整理-第 10 页，共 24 页 -Juniper 路由器系统维护手册第 11 页 共 24 页2.5.端口状态在配置了两个路由器进行双冗余的情况下，单台路由器的端口down 掉可能不会影响业务，因此需要定期检查端口的状态。下面 show interfaces terse 命令显示端口有Admin 和 Link两个状态，Admin 是管理状态(默认情况是打开的，set interfaces ge-2/0/0 disable 可以关闭端口)。Link 状态是表示端口是否接了线并且收到信号，只有两个状态都是up 的时候端口工作才正常。在项目中我们要求GE 端口配置非协商模式，如果交换机和路由器的工作模式不匹配(一边是自动协商，另外一边是非协商)，那么在路由器重启之后可能端口会因为无法协商起来而down 掉，在这种情况下需要将端口设置成另外一种模式(如果原来是自动协商就改成非协商，如果原来是非协商就改成自动协商)。zteGDGZ-PB-WAP15-GRE01 show interfaces terse Interface Admin Link Proto Local Remote ge-2/0/0 up up ge-2/0/0.0 up up inet 10.0.0.130/25 10.0.0.131/25 ge-2/0/1 up up ge-2/0/1.0 up up inet 211.139.146.103/27 211.139.146.104/27 ge-2/0/2 up down ge-2/0/3 up down gr-2/1/0 up up gr-2/1/0.0 up up inet 211.139.146.104/27 ip-2/1/0 up up lt-2/1/0 up up mt-2/1/0 up up pd-2/1/0 up up pe-2/1/0 up up vt-2/1/0 up up 名师资料总结-精品资料欢迎下载-名师精心整理-第 11 页，共 24 页 -Juniper 路由器系统维护手册第 12 页 共 24 页dsc up up em0 up up em0.0 up up inet 10.0.0.4/8 inet6 fe80:200:ff:fe00:4/64 fec0:a:0:0:4/64 tnp 4 em1 up down em1.0 up down inet 10.0.0.4/8 inet6 fe80:200:1ff:fe00:4/64 fec0:a:0:0:4/64 tnp 4 fxp0 up down gre up up ipip up up lo0 up up lo0.16385 up up inet inet6 fe80:2a0:a5ff:fe5e:7c0c lsi up up mtun up up pimd up up pime up up tap up up zteGDGZ-PB-WAP15-GRE01 在确保端口状态正常之后，可以使用 show interfaces ge-x/x/x extensive来查看端口数据包信息，包括是否有收到包和发出去包，是否收到有错误包。其中需要重点查看的是inputerror和 output error 是否有增长，如果出现快速增长的话表明链路不正常。zteGDGZ-PB-WAP15-GRE01 show interfaces ge-2/0/0 extensive 名师资料总结-精品资料欢迎下载-名师精心整理-第 12 页，共 24 页 -Juniper 路由器系统维护手册第 13 页 共 24 页Physical interface:ge-2/0/0,Enabled,Physical link is Up Interface index:128,SNMP ifIndex:25,Generation:129 Description:TO-CMNET-SW01-FW Link-level type:Ethernet,MTU:1514,Speed:1000mbps,Loopback:Disabled,Source filtering:Disabled,Flow control:Enabled,Auto-negotiation:Disabled,Remote fault:Online Device flags:Present Running Interface flags:SNMP-Traps Internal:0 x4000 Link flags:None CoS queues:8 supported,8 maximum usable queues Hold-times:Up 0 ms,Down 0 ms Current address:00:1b:c0:90:93:fc,Hardware address:00:1b:c0:90:93:fc Last flapped:2007-11-12 14:23:20 CST(2w0d 20:16 ago)Statistics last cleared:Never Traffic statistics:Input bytes:34639932634 3384 bps Output bytes:857547787 6392 bps Input packets:861084301 8 pps Output packets:12835449 11 pps IPv6 transit statistics:Input bytes:0 Output bytes:0 Input packets:0 Output packets:0 Input errors:Errors:0,Drops:0,Framing errors:0,Runts:0,Policed discards:0,L3 incompletes:0,L2 channel errors:0,L2 mismatch timeouts:0,FIFO errors:0,Resource errors:0 Output errors:Carrier transitions:3,Errors:0,Drops:0,Collisions:0,Aged packets:0,FIFO 名师资料总结-精品资料欢迎下载-名师精心整理-第 13 页，共 24 页 -Juniper 路由器系统维护手册第 14 页 共 24 页errors:0,HS link CRC errors:0,MTU errors:0,Resource errors:0 Egress queues:8 supported,4 in use Queue counters:Queued packets Transmitted packets Dropped packets 0 best-effort 70970 70970 0 1 expedited-fo 0 0 0 2 assured-forw 0 0 0 3 network-cont 12764451 12764451 0 Active alarms:None Active defects:None MAC statistics:Receive Transmit Total octets 55135640187 601821850 Total packets 860801722 12829529 Unicast packets 73575 67046 Broadcast packets 7943905 3873 Multicast packets 852784242 12758610 CRC/Align errors 0 0 FIFO errors 0 0 MAC control frames 0 0 MAC pause frames 0 0 Oversized frames 0 Jabber frames 0 Fragment frames 0 VLAN tagged frames 0 Code violations 0 Filter statistics:名师资料总结-精品资料欢迎下载-名师精心整理-第 14 页，共 24 页 -Juniper 路由器系统维护手册第 15 页 共 24 页Input packet count 862089785 Input packet rejects 1005469 Input DA rejects 1005469 Input SA rejects 0 Output packet count 12835446 Output packet pad count 11787 Output packet error count 0 CAM destination filters:3,CAM source filters:0 Autonegotiation information:Negotiation status:Incomplete Packet Forwarding Engine configuration:Destination slot:2 Direction:Output CoS transmit queue Bandwidth Buffer Priority Limit%bps%usec 0 best-effort 95 950000000 95 0 low none 3 network-control 5 50000000 5 0 low none Logical interface ge-2/0/0.0(Index 65)(SNMP ifIndex 36)(Generation 131)Flags:SNMP-Traps Encapsulation:ENET2 Traffic statistics:Input bytes:34639933055 Output bytes:1495768037 Input packets:861084309 Output packets:12835449 IPv6 trans