網點路由器切換實施詳細步驟

精選優(yōu)質文檔-----傾情為你奉上精選優(yōu)質文檔-----傾情為你奉上專心---專注---專業(yè)專心---專注---專業(yè)精選優(yōu)質文檔-----傾情為你奉上專心---專注---專業(yè)網點路由器上線操作步驟準備工作切換網點信息收集網點名稱：武侯永豐紅牌樓分理處網點地址：紅牌樓二街61-63號網點Fastethernet0接口IP：10.36.251.46子網掩碼：255.255.255.252網點Fastethernet1接口IP：30.1.36.202子網掩碼：255.255.255.0網點對應的中心端7609路由器接口：G1/0/1.342網點對應的中心端7609路由器接口IP：10.36.251.45網點對應的二類網IP：30.1.36.8VPN備份IP地址：10.2.239.4到達網點后詢問網點農商行員工該網點機構號，告知中心端實施人員后方可開始實施。所有網點切換前提前準備網點相關資料網點部分第一步.一類網線路連通性測試筆記本配置網點Fastethernet0接口IP，ping網點對應的中心端路由器接口IP打開命令提示符，執(zhí)行ping10.36.251.45–t如果ping不通，立刻聯(lián)系中心實施人員。第二步.二類網線路連通性測試筆記本配置網點Fastethernet1接口IP，ping網點對應的二類網IP打開命令提示符，執(zhí)行ping30.1.36.8–t，如下圖：如果ping不通，立刻聯(lián)系中心實施人員。第三步.保存網點設備配置（此步驟非常重要）通過Consloe線纜登錄網點路由執(zhí)行配置保存操作。（登錄路由器后，直接輸入wr，然后輸入yes，回車）CD_NJ_65_hpl_2816#wrAreyousuretooverwrite/flash/startup(Yes|No)?yesBuildingConfiguration...doneWritetostartupfile...OKCD_NJ_65_hpl_2816#CRT上記錄會話，保存、備份現(xiàn)有配置CD_NJ_65_hpl_2816#showrun通過Consloe線纜登錄網點華為交換機執(zhí)行配置保存操作。（登錄交換機后輸入save）該步驟完成后，在向網點人員確認可以中斷網絡后，給中心端實施人員打電話通知中心端做配置更改。該步驟非常重要?。。?！第四步.網點線路切換上圖為邁普2816路由器接口圖：接口描述：左起第一個接口：con/aux，此接口為Consloe接口，用于配置路由器使用。左起第二個接口：fastethernet0，此接口用于連接電信的MSTPRJ45網線。左起第三個接口：fastethernet1，此接口用于連接網點的華為交換機。左邊24個接口：網點局域網交換機機。實施過程中線纜連接分為三步：將fastethernet0與電信MSTP設備連接將fastethernet1與華為交換機設備連接對電信設備、華為交換機到邁普2816路由器的線路進行打標（考慮標簽機）VPN備份鏈路—華為xx端口華為xx端口—VPN備份鏈路第五步.網點線路質量測試（同時查看接口是否為雙工）通過Consloe登錄網點路由器，更改Fastethernet0接口和Fastethernet1接口IP地址，執(zhí)行鏈路檢測操作修改接口IP地址腳本文件：測試MSTP線路質量CD_NJ_65_hpl_2816#pingProtocol[ip]:TargetIPaddressorhostname:10.36.251.45Repeatcount[5]:1000Datagramsize[76]:1500Timeoutinseconds[2]:Extendedcommands[no]:yesSourceaddressorinterface:f0Typeofservice[0]:SetDFbitinIPheader?[no]:Validatereplydata?[no]:Datapattern[abcd]:Loose,Strict,Record,Timestamp,Verbose[none]:Sweeprangeofsizes[no]:Presskey(ctrl+shift+6)interruptit.Sending1000,1500-byteICMPEchosto10.36.251.45,timeoutis2seconds:!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!Successrateis100%(1000/1000).Round-tripmin/avg/max=16/17/66ms.CD_NJ_65_hpl_2816#CD_NJ_65_hpl_2816#pingProtocol[ip]:TargetIPaddressorhostname:30.1.36.8Repeatcount[5]:1000Datagramsize[76]:1500Timeoutinseconds[2]:Extendedcommands[no]:yesSourceaddressorinterface:f1Typeofservice[0]:SetDFbitinIPheader?[no]:Validatereplydata?[no]:Datapattern[abcd]:Loose,Strict,Record,Timestamp,Verbose[none]:Sweeprangeofsizes[no]:Presskey(ctrl+shift+6)interruptit.Sending1000,1500-byteICMPEchosto30.1.36.8,timeoutis2seconds:!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!Successrateis99%(999/1000).Round-tripmin/avg/max=0/0/16ms.CD_NJ_65_hpl_2816#查看接口雙工查看Fastethernet0接口狀態(tài)：showinterfaceFastethernet0CD_NJ_65_hpl_2816#shintf0fastethernet0:lineprotocolisupFlags:(0xc)BROADCASTMULTICASTARPRUNNINGType:ETHERNET_CSMACDDescription:For_MSTP()Internetaddress:10.36.251.46/30Broadcastaddress:10.36.251.47Queuestrategy:FIFO,Outputqueue:0/256(current/maxpackets)(0)Metric:0,MTU:1500,BW:Kbps,DLY:100usec,VRF:globalReliability255/255,Txload1/255,Rxload1/255Ethernetaddressis0001.7ab4.a2c65minutesinputrate0bits/sec,0packets/sec5minutesoutputrate1000bits/sec,1packets/secpacketsreceived;packetssent4multicastpacketsreceived36142multicastpacketssent1inputerrors;0outputerrors0collisions;0droppedUnknownprotocol0Rate:100Mbit/sDuplex:duplexfull（看這里，如果是halfduplex則需要更改端口雙工狀態(tài)）Txlatecollision72,Txretransmitlimit0,Txunderrun0Txcarriersense0,Rxlengthviolation0Rxnotaligned0,RxCRCerror0,Rxoverrun0Rxtoosmall0,Rxallocmbuffail0CD_NJ_65_hpl_2816#CD_NJ_65_hpl_2816#shinterfacef1fastethernet1:lineprotocolisupFlags:(0xc)BROADCASTMULTICASTARPRUNNINGType:ETHERNET_CSMACDDescription:To-VPN-PortInternetaddress:30.1.36.202/24Broadcastaddress:30.1.36.255Queuestrategy:FIFO,Outputqueue:0/256(current/maxpackets)(0)Metric:0,MTU:1500,BW:Kbps,DLY:100usec,VRF:globalReliability255/255,Txload1/255,Rxload1/255Ethernetaddressis0001.7ab4.a2c75minutesinputrate0bits/sec,0packets/sec5minutesoutputrate0bits/sec,0packets/secpacketsreceived;packetssent86172multicastpacketsreceived462multicastpacketssent4577inputerrors;0outputerrors0collisions;0droppedUnknownprotocolspeed100M,duplexfull（看這里）receiveframe,unicasts,88541broadcasts,multicasts0runts,0giants,0throttles0inputerror,0CRC,0overrun,0ignoredoutputframe,unicasts,14broadcasts,0multicasts0outputerror,0collisions,0interfaceresets,0underrun0babbles,0latecollision,0deferred0lostcarrier,0nocarrier,0excessivecollisonCD_NJ_65_hpl_2816#第六步.網點路由器配置刪除執(zhí)行網點路由器現(xiàn)有配置刪除操作，粘帖腳本第七步.網點路由器配置添加執(zhí)行網點路由新配置粘帖操作（記得加入策略路由應用到loopback2的配置，還需要配置telnet的策略，還有針對卡巴斯基不能通過二類網的策略）查看路由器路由表：CD_NJ_65_hpl_2816#shiprouteCodes:C-connected,S-static,R-RIP,O-OSPF,OE-OSPFExternal,M-ManagementD-Redirect,E-IRMP,EX-IRMPexternal,o-SNSP,B-BGP,i-ISISGatewayoflastresortis30.1.36.8tonetwork0.0.0.0S0.0.0.0/0[1/100]via30.1.36.8,21:00:44,fastethernet1S10.0.5.0/24[1/100]via10.36.251.45,19:35:13,fastethernet0S10.0.6.0/24[1/100]via10.36.251.45,19:35:13,fastethernet0S10.0.26.0/24[1/100]via10.36.251.45,19:35:13,fastethernet0S10.0.41.0/24[1/100]via10.36.251.45,19:35:13,fastethernet0S10.0.55.0/24[1/100]via10.36.251.45,19:35:13,fastethernet0S10.0.66.0/24[1/100]via10.36.251.45,19:35:13,fastethernet0C10.36.65.0/25isdirectlyconnected,24:59:12,switchethernet0C10.36.251.44/30isdirectlyconnected,19:35:13,fastethernet0C30.1.36.0/24isdirectlyconnected,21:00:44,fastethernet1C127.0.0.0/8isdirectlyconnected,24:59:41,lo0C10.36.253.202/32isdirectlyconnected,24:59:22,loopback2C10.36.255.202/32isdirectlyconnected,24:59:22,loopback1第八步.比對路由器生效配置和腳本文件路由器上執(zhí)行showrun，查看配置和腳本是否一致第九步.網絡測試及業(yè)務測試（注意trace去掉10.0.66.1）序號操作內容(主線路)操作結果(正常、異常)簽字確認備注1ping10.0.5.12ping10.0.6.13ping10.0.26.14ping10.0.41.15ping10.0.55.16ping10.0.66.11切換完成后測試步驟一，ping測試：CD_NJ_65_hpl_2816#pingProtocol[ip]:TargetIPaddressorhostname:10.0.5.1Repeatcount[5]:100Datagramsize[76]:1500Timeoutinseconds[2]:Extendedcommands[no]:yesSourceaddressorinterface:sw0Typeofservice[0]:SetDFbitinIPheader?[no]:Validatereplydata?[no]:Datapattern[abcd]:Loose,Strict,Record,Timestamp,Verbose[none]:Sweeprangeofsizes[no]:Presskey(ctrl+shift+6)interruptit.Sending100,1500-byteICMPEchosto10.0.5.1,timeoutis2seconds:!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!Successrateis100%(100/100).Round-tripmin/avg/max=0/2/16ms.CD_NJ_65_hpl_2816#上述標紅部分為手動輸入，此操作為ping10.0.5.1，其余服務器地址在上表，測試過程應依次進行測試。步驟二，traceroute測試：CD_NJ_65_hpl_2816#tracerouteProtocol[ip]:TargetIPaddressorhostname:10.0.5.1Sourceaddressorinterface:sw0Timeoutinseconds[3]:Probecount[3]:MinimumTimetoLive[1]:MaximumTimetoLive[30]:PortNumber[33434]:Loose,Strict,Record,Timestamp,Verbose[none]:Typeescapesequencetoabort.Tracingtherouteto10.0.5.1,minttl=1,maxttl=30.110.36.251.450ms16ms0ms210.1.1.2420ms0ms16ms310.1.1.2460ms0ms0ms410.0.5.10ms16ms0msCD_NJ_65_hpl_2816#步驟三，業(yè)務測試整個測試過程要網點營業(yè)人員配合測試內容：綜合業(yè)務系統(tǒng)業(yè)務，代理訪問反洗錢、反假幣、聯(lián)網核查，以及卡巴斯基服務器升級2斷開Fastethernet0接口，模擬MSTP鏈路中斷測試CD_NJ_65_hpl_2816#pingProtocol[ip]:TargetIPaddressorhostname:10.0.5.1Repeatcount[5]:100Datagramsize[76]:1500Timeoutinseconds[2]:Extendedcommands[no]:yesSourceaddressorinterface:sw0Typeofservice[0]:SetDFbitinIPheader?[no]:Validatereplydata?[no]:Datapattern[abcd]:Loose,Strict,Record,Timestamp,Verbose[none]:Sweeprangeofsizes[no]:Presskey(ctrl+shift+6)interruptit.Sending100,1500-byteICMPEchosto10.0.5.1,timeoutis2seconds:!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!Successrateis100%(100/100).Round-tripmin/avg/max=0/2/16ms.CD_NJ_65_hpl_2816#上述標紅部分為手動輸入，此操作為ping10.0.5.1，其余服務器地址在上表，測試過程應依次進行測試。查看VPN建立狀態(tài)CD_NJ_65_hpl_2816#showcryptoikesalocaladdrpeeraddrpeer-identitynegotiation-statesa-id30.1.36.20210.2.239.410.2.239.4STATE_QUICK_I2162830.1.36.20210.2.239.410.2.239.4STATE_QUICK_I2162730.1.36.20210.2.239.410.2.239.4STATE_QUICK_I2162630.1.36.20210.2.239.410.2.239.4STATE_QUICK_I2162530.1.36.20210.2.239.410.2.239.4STATE_QUICK_I2162430.1.36.20210.2.239.410.2.239.4STATE_QUICK_I2162330.1.36.20210.2.239.410.2.239.4STATE_QUICK_I2157330.1.36.20210.2.239.410.2.239.4STATE_MAIN_I41567CD_NJ_65_hpl_2816#3恢復Fastethernet0接口，模擬MSTP恢復測試CD_NJ_65_hpl_2816#pingProtocol[ip]:TargetIPaddressorhostname:10.0.5.1Repeatcount[5]:100Datagramsize[76]:1500Timeoutinseconds[2]:Extendedcommands[no]:yesSourceaddressorinterface:sw0Typeofservice[0]:SetDFbitinIPheader?[no]:Validatereplydata?[no]:Datapattern[abcd]:Loose,Strict,Record,Timestamp,Verbose[none]:Sweeprangeofsizes[no]:Presskey(ctrl+shift+6)interruptit.Sending100,1500-byteICMPEchosto10.0.5.1,timeoutis2seconds:!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!Successrateis100%(100/100).Round-tripmin/avg/max=0/2/16ms.CD_NJ_65_hpl_2816#上述標紅部分為手動輸入，此操作為ping10.0.5.1，其余服務器地址在上表，測試過程應依次進行測試。4通知中心端實施人員斷開7609對應接口，模擬中心端故障CD_NJ_65_hpl_2816#pingProtocol[ip]:TargetIPaddressorhostname:10.0.5.1Repeatcount[5]:100Datagramsize[76]:1500Timeoutinseconds[2]:Extendedcommands[no]:yesSourceaddressorinterface:sw0Typeofservice[0]:SetDFbitinIPheader?[no]:Validatereplydata?[no]:Datapattern[abcd]:Loose,Strict,Record,Timestamp,Verbose[none]:Sweeprangeofsizes[no]:Presskey(ctrl+shift+6)interruptit.Sending100,1500-byteICMPEchosto10.0.5.1,timeoutis2seconds:!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!Successrateis100%(100/100).Round-tripmin/avg/max=0/2/16ms.CD_NJ_65_hpl_2816#上述標紅部分為手動輸入，此操作為ping10.0.5.1，其余服務器地址在上表，測試過程應依次進行測試。5中心端7609對應接口恢復后，進行最后一次測試CD_NJ_65_hpl_2816#pingProtocol[ip]:TargetIPaddressorhostname:10.0.5.1Repeatcount[5]:100Datagramsize[76]:1500Timeoutinseconds[2]:Extendedcommands[no]:yesSourceaddressorinterface:sw0Typeofservice[0]:SetDFbitinIPheader?[no]:Validatereplydata?[no]:Datapattern[abcd]:Loose,Strict,Record,Timestamp,Verbose[none]:Sweeprangeofsizes[no]:Presskey(ctrl+shift+6)interruptit.Sending100,1500-byteICMPEchosto10.0.5.1,timeoutis2seconds:!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!Successrateis100%(100/100).Round-tripmin/avg/max=0/2/16ms.CD_NJ_65_hpl_2816#上述標紅部分為手動輸入，此操作為ping10.0.5.1，其余服務器地址在上表，測試過程應依次進行測試。中心端部分第一步.核心路由器配置在C