思科交换机巡检命令

1、show interface stats：查看交换机所有接口当前接口流量

2、show running-config：查看当前设备配置

3、show version：查看IOS版本信息及设备正常运行时间

4、show clock：查看设备时钟信息

5、show vtp status：查看交换机vtp配置模式

6、show vtp password：查看交换机vtp配置口令

7、show env all：查看设备温度，电源和风扇运转参数及是否报警

8、show inventory：调取设备内部板卡出厂模块型号及序列号

9、show spanning-tree root：查看交换机生成树根位置

10、show cdp neighbors：查看邻接cisco设备基本信息

11、show cdp neighbors detail：查看邻接cisco设备详细信息

12、show interface status：查看交换机接口状态是否存在errordisable接口disable接口

13、show interface summary：查看交换机所有接口当前接口流量

14、show interface |ierrors|FastEthernet|GigabitEthernet：查看接口是否存在大量input或output errors包错误

15、show processes cpu：查看设备cpu负载

16、show processes mem：查看设备mem负载

17、show access-list：查看访问控制列表配置及匹配数据包数量

18、show logging：查看本机内部日志记录情况

19、show ip route：查看路由表

20、show firewall：检查防火墙的工作模式

21、show conn count：检查防火墙并发数

22、show xlate count：检查防火墙nat工作状态 

华为/H3C交换机常用巡检命令

system-view #进入系统视图

user-interface vty 0 4 #vty就是用telnet/ssh远程进入交换机的界面(虚拟界面)

screen-length 0 #指定要在屏幕上显示行数，0默认是没有分页（全部显示）

01 硬件状态、IOS版本信息检查

display clock  #系统时间

display version #查看版本信息，最近一次重新启动的时间

display enviroment #设备温度

display device #单板运行状态

display device manuinfor #查看设备序列号

display power #查看电源状况

display fan  #查看风扇状况

display cpu-usage  #查看cpu最近5S、1m、5m占用率

display cpu history #查看cpu使用记录

display cpu-usage task #查看CPU利用率

display memory  #查看内存大小和占用率

display logbuffer #日志缓冲区

dir flash: #查看flash

dis boot-loader #显示软件映像文件

display arp #查看arp表(目的IP与目的MAC的映射关系)

display mac-address #查看mac地址表（二层转发通过mac地址表）

display ntp status #ntp状态信息

reset counters interface #清除接口统计信息，方便下次巡检查看接口错误包是否增加

display elabel #路由器设备命令—查看电子标签信息（华为）改用display device manuinfo

display ndp #路由器设备命令—华三V5版本支持，现在改用display lldp neighbor-information

display diagnostic-information #故障信息收集

02 系统运行配置状态检查

display interface #接口流量、链路状态

dis current-configuration inter #地址分配

dis current-configuration |include ospf #路由扩散

display ip routing-table #路由信息

display ip interface #显示 vlan 端口统计数据

display saved-configuration #保存配置文件

display logbuffer #日志信息

display port trunk #查看参与 trunk 的端口

03 STP 信息检查

display stp root #查看 stp 根情况

display stp brief #查看 stp 简单信息

display stp abnormal-port #查看是否有非正常端口

display stp region-configuration #生成树区域配置

display lldp neighbor-information #查看链路层邻居发现协议（邻居信息）

display tcp status #路由器设备命令—tcp统计数据

display tcp statistics #交换机设备命令—tcp统计数据

04 vrrp 和端口聚合检查

display vrrp #查看虚拟路由冗余协议

display vrrp statistics #查看主备用状态

display link-aggregation summary #查看链路聚合组的情况

Topic

This article applies to legacy BIG-IP platforms supported by BIG-IP 9.x through 11.1.0. For information about the LED behavior for current platforms supported by current versions, refer to the platform guide for your specific platform.

Note: For information about how to locate F5 product guides, refer to K12453464: Finding product documentation on AskF5.

Legacy platforms

• BIG-IP 1500 (C36)
• BIG-IP 3400 (C62)
• BIG-IP 4100 (D46)
• BIG-IP 6400 (D63)
• BIG-IP 6800 (D68)
• BIG-IP 8400 (D84)
• BIG-IP 8800 (D88) – version 9.4 and later only

LED indicators

Legacy platforms use 4 front-panel LEDs to indicate a system’s status:

• Power
• Status
• Activity
• Alarm

Power LED indicator

The Power LED indicator reports the power status: on (green), off (none), or error (red).

Note: Solid Red Failure indication occurs when there are rapid cycles of power (power-off, power-on, power-off, power-on). This condition can usually be corrected by powering off and waiting 2 minutes before turning the power back on.

Status LED indicator

The Status LED indicator reports the Active or Standby status: Active (green), or Standby (yellow).

Activity LED indicator

The purpose of the Activity LED indicator is to indicate traffic going to the CPU for load balancing or other software processing. It is not intended as a substitute for the individual Activity LEDs present on each network interface.

The Activity LED uses hardware inputs as an indication of load balancing activity. On legacy platforms this is driven by a signal from a PHY on an internal Ethernet interface connecting the switch subsystem to the CPU subsystem. It is possible that the Activity LED flickers even when there are no active links on the network interfaces.

Note: The 8400 platform activity LED illuminates while the system is power cycling, and turns off after the boot process has completed. For more information, refer to: K10161: The Activity LED operation on 8400 platforms.

Alarm LED indicator

A single LED (Alarm) conveys an alert level (warning, error, alert, critical, and emergency). The specific alert condition is communicated by an SNMP trap and a log message. Additionally, the specific alert condition will be indicated on the LCD screen.

Alert level LED behavior

There are 5 alert levels:

Alert conditions

Alerts that affect the behavior of the Alarm LED indicator are defined in the /etc/alertd/alert.conf file. The lcdwarn function of an alert definition defines which alerts will modify the Alarm LED indicator.

As an example, the default alertd process conditions in BIG-IP 9.2 are defined in the following table:

Note: An alert condition is no longer triggered when a node or member has been marked down. For additional information about this functionality, refer to K5486: BIG-IP does not signal an alert condition through the front panel Alarm LED when a node or member is marked down.

This article applies to BIG-IP iSeries hardware platforms.

Description

The LCD panel provides the ability to manage and monitor the unit without attaching a console or network cable. The different sensors that exist in the hardware platform provides information regarding the hardware health of the system by way of messages on the LCD screen. The following tables list messages that can appear on the LCD screen of iSeries platforms.

• PSUx Status sensor messages
• Power Fault sensor messages
• CPU Fault sensor messages
• Filter sensor messages
• LCD Health sensor messages
• Module Presence sensor messages
• Leonardo Daughter Card Absent messages
• FIPS Initialization Status messages
• RAID Disk Failure messages

PSUx Status sensor messages

The PSUx sensor is a discrete sensor based on the Intelligent Platform Management Interface (IPMI) standard sensor type code of 0x8. The sensor indicates various power supply unit (PSU) states.

Power Fault sensor messages

The Power Fault sensor is a discrete sensor indicating that a power fault has occurred.

CPU Fault sensor messages

The CPU Fault sensor is a discrete sensor indicating that a CPU fault has occurred.

Filter sensor messages

The Filter sensor sends an event when the chassis filter needs to be replaced. This is a threshold-based sensor.

LCD Health sensor messages

The LCD Health sensor indicates whether or not the BMC can communicate with the LCD.

Module Presence sensor messages

The Module Presence sensor indicates whether or not a module is present.

Leonardo Daughter Card Absent messages

A single general-purpose input/output (GPIO) on Leonardo indicates that the daughter card is absent.

FIPS Initialization Status messages

The Federal Information Processing Standards (FIPS) Initialization Status sensor tracks the state of the Full Box FIPS Mode initialization for the host application.

RAID Disk Failure messages

The RAID controller on a Dual-SSD system indicates that the member disk is removed from the RAID array.

Topic

You should consider using this procedure under the following condition:

• You want to remotely clear LCD warnings and the Alarm LED.

Prerequisites

You must meet the following prerequisite to use this procedure:

• You have command line access to the BIG-IP system.

Description

In some cases, you may want to remotely clear LCD warnings and the Alarm LED. Performing this action may prevent onsite personnel from discovering and reporting an old warning, or having to teach the onsite personnel how to clear the LCD. You can use the lcdwarn command line utility to control the LCD and the Alarm LED. To display its usage, run the lcdwarn command without any arguments.

Note: Starting in BIG-IP 12.1.0, you can use the tmsh show sys alert lcd command to display the list of alerts sent to the LCD front panel display.

Procedures

• Clearing LCD warnings
• Clearing the Alarm LED

Clearing LCD warnings

Impact of procedure: Performing the following procedure should not have a negative impact on your system.You can use the lcdwarn command to remotely clear the LCD warnings. To do so, use the following command syntax appropriate for your BIG-IP version:

BIG-IP 12.1.5, BIG-IP 13.1.0 and later

lcdwarn -c <level>

In this command syntax, note the following:

• <level> specifies the alert level to be cleared. Acceptable values include [0|1|2|3|4|5] or [warning|error|alert|critical|emergency|information]. The level can be seen under the “Priority” column when you run tmsh show sys alert from the Advanced Shell (bash) or show sys alert from within the tmsh shell:
  
  root@(C3553740-bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos)# show sys alert
  —————————————————————-
  Sys::LCDAlerts
  Slot          Timestamp  Priority         Id         Description
  —————————————————————-
  0     04/22/21 02:21:07      info  0x10c0019  Unit going Active.
  0     04/22/21 01:22:55      info  0x10c0019  Unit going Active.
  0     04/22/21 01:16:28      info  0x10c0019  Unit going Active.
  0     04/22/21 01:16:28      info  0x10c0019  Unit going Active.

For example, to clear LCD warnings with an alert level of 0, type the following command:

lcdwarn -c 0

BIG-IP 13.0.0, BIG-IP 12.1.4 and earlier

lcdwarn -c <level> <slotid>

In this command syntax, note the following:

• <level> specifies the alert level to be cleared. Acceptable values include [0|1|2|3|4|5] or [warning|error|alert|critical|emergency|information].
• <slotid> specifies the slot for which warnings should be cleared. Acceptable values include [0|1|2|3|4|5|6|7|8].Note: In BIG-IP 13.0.0, BIG-IP 12.1.4 and earlier, specifying any slot other than 0 is necessary only on the VIPRION platform. On a VIPRION platform, the slot ID is counted from 1, so blade 2 is 2 in the command line.

For example, to clear LCD warnings with an alert level of 0, type the following command:

lcdwarn -c 0 0

On a VIPRION system, to clear LCD warnings with an alert level of 0 for slot 2, type the following command:

lcdwarn -c 0 2

Clearing the Alarm LED

To clear the Alarm LED, you must clear all LCD warnings at all alert levels (on all slots for VIPRION systems). To do so, perform the following single command appropriate for your BIG-IP platform:

Impact of procedure: Performing the following procedure should not have a negative impact on your system.

• VIPRION platforms
• BIG-IP iSeries platforms
• All other BIG-IP platforms (except for VIPRION platforms and BIG-IP iSeries platforms)

VIPRION platforms

You can clear all LCD warnings at all alert levels on all VIPRION slots using the following single command:

BIG-IP 12.1.5, BIG-IP 13.1.0 and later

for i in 0 1 2 3 4 5; do lcdwarn -c “${i}”; done

BIG-IP 13.0.0, BIG-IP 12.1.4 and earlier

for i in 0 1 2 3 4 5; do for j in 1 2 3 4 5 6 7 8; do lcdwarn -c “${i}” “${j}”; done; done

If you run this command on a VIPRION system that has unpopulated blade slots, the system logs benign error messages to the /var/log/ltm file that appear similar to the following example:

012a0004:4: ledSet error: LopDev: sendLopCmd: Lopd status: 1 packet: action=2 obj_id=3c sub_obj=0 slot_id=2 result=2 len=0 crc=e071 payload= (error code:0x2)

You can safely ignore this message; it does not affect the traffic processing capability of the VIPRION system.

To prevent this error message on a VIPRION system with unpopulated blade slots, adjust the input values for the j variable. For example, on a VIPRION system where only blade slots 1 and 2 are populated, type the following command:

for i in 0 1 2 3 4 5; do for j in 1 2; do lcdwarn -c “${i}” “${j}”; done; done

BIG-IP iSeries platforms

For information about clearing the Alarm LED on BIG-IP iSeries platforms, refer to K24127736: Clear LCD alarms on iSeries device.

All other BIG-IP platforms (except for VIPRION platforms and BIG-IP iSeries platforms)

You can clear all LCD warnings at all alert levels on all other BIG-IP platforms (except for VIPRION platforms) using the following single command:

BIG-IP 12.1.5, BIG-IP 13.1.0 and later

for i in 0 1 2 3 4 5; do lcdwarn -c “${i}”; done

BIG-IP 13.0.0, BIG-IP 12.1.4 and earlier

for i in 0 1 2 3 4 5; do lcdwarn -c “${i}” 0; done

Note: Running this command on legacy BIG-IP platforms that are not equipped with an LCD (such as the 1000, 2400, 5100, and 5110) only clear the Alarm LED.

Topic

When a BIG-IP system transitions from active to standby state or standby to active state, a message is displayed on the LCD display indicating the amount of time that has passed since the state transition occurred.

The BIG-IP system transitioning from standby to active displays a message similar to one of the following examples:

xxS unit going active

xxM unit going active

The BIG-IP system transitioning from active to standby displays a message similar to one of the following examples:

xxS unit going standby

xxM unit going standby

In these messages, S or M indicates the units in which time is measured: S indicates seconds, M indicates minutes. The xx characters represent the number of minutes or seconds the device has been in the current state. For example, a device that transitioned to the active state 15 minutes ago displays the following message:

15M unit going active

Note: These messages may appear on standalone systems or on members of a redundant pair.

Note: To determine the cause of an unexpected state change, examine the system log files.