網(wǎng)絡(luò)系統(tǒng)建設(shè)與運(yùn)維(初級)-實(shí)驗 第6章 網(wǎng)絡(luò)系統(tǒng)基礎(chǔ)運(yùn)維

1.以太網(wǎng)接口配置項目背景您是公司的網(wǎng)絡(luò)管理員?，F(xiàn)在公司購買了兩臺華為的S5700系列的交換機(jī)，為了提高交換機(jī)之間鏈路帶寬以及可靠性，您需要在交換機(jī)上配置鏈路聚合功能。項目目的通過本項目可以掌握如下知識點(diǎn)和技能點(diǎn)。掌握接口速率的配置方法掌握使用手動模式配置鏈路聚合的方法掌握使用靜態(tài)LACP模式配置鏈路聚合的方法掌握在靜態(tài)LACP模式下配置接口優(yōu)先級的方法項目拓?fù)湟蕴W(wǎng)接口配置項目規(guī)劃本項目的主要任務(wù)是掌握基于端口劃分VLAN的基本配置。項目前期準(zhǔn)備工作準(zhǔn)備console配置電纜。搭建配置環(huán)境。項目任務(wù)以太網(wǎng)接口基礎(chǔ)配置。手動模式的鏈路聚合LACP模式的鏈路聚合項目實(shí)施項目準(zhǔn)備工作準(zhǔn)備console配置電纜。搭建配置環(huán)境。項目任務(wù)以太網(wǎng)交換機(jī)基礎(chǔ)配置華為交換機(jī)接口默認(rèn)開啟了自協(xié)商功能。在本任務(wù)中，需要手動配置S1與S2上G0/0/9和G0/0/10接口的速率。首先修改交換機(jī)的設(shè)備名稱，然后查看S1上G0/0/9和G0/0/10接口的詳細(xì)信息。<Quidway>system-view[Quidway]sysnameS1[S1]displayinterfaceGigabitEthernet0/0/9GigabitEthernet0/0/9currentstate:UPLineprotocolcurrentstate:UPDescription:SwitchPort,Link-type:trunk(negotiated),PVID:1,TPID:8100(Hex),TheMaximumFrameLengthis9216IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressisd0d0-4ba6-aab0Currentsystemtime:2016-11-2314:18:37PortMode:COMMONCOPPERSpeed:1000,Loopback:NONEDuplex:FULL,Negotiation:ENABLEMdi:AUTO,Flow-control:DISABLELast300secondsinputrate256bits/sec,0packets/secLast300secondsoutputrate912bits/sec,0packets/secInputpeakrate13976bits/sec,Recordtime:2016-11-2214:59:12Outputpeakrate13976bits/sec,Recordtime:2016-11-2214:59:12Input:8802packets,1242101bytesUnicast:854,Multicast:7017Broadcast:931,Jumbo:0Discard:0,Pause:0Frames:0TotalError:0CRC:0,Giants:0Jabbers:0,Fragments:0Runts:0,DropEvents:0Alignments:0,Symbols:0Ignoreds:0Output:53495packets,7626413bytesUnicast:231,Multicast:49564Broadcast:3700,Jumbo:0Discard:0,Pause:0TotalError:0Collisions:0,ExcessiveCollisions:0LateCollisions:0,Deferreds:0BuffersPurged:0Inputbandwidthutilizationthreshold:80.00%Outputbandwidthutilizationthreshold:80.00%Inputbandwidthutilization:0%Outputbandwidthutilization:0%[S1]displayinterfaceGigabitEthernet0/0/10GigabitEthernet0/0/10currentstate:UPLineprotocolcurrentstate:UPDescription:SwitchPort,Link-type:trunk(negotiated),PVID:1,TPID:8100(Hex),TheMaximumFrameLengthis9216IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressisd0d0-4ba6-aab0Currentsystemtime:2016-11-2314:22:22PortMode:COMMONCOPPERSpeed:1000,Loopback:NONEDuplex:FULL,Negotiation:ENABLEMdi:AUTO,Flow-control:DISABLELast300secondsinputrate72bits/sec,0packets/secLast300secondsoutputrate1024bits/sec,0packets/secInputpeakrate14032bits/sec,Recordtime:2016-11-2214:59:12Outputpeakrate14032bits/sec,Recordtime:2016-11-2214:59:12Input:7025packets,786010bytesUnicast:0,Multicast:7025Broadcast:0,Jumbo:0Discard:0,Pause:0Frames:0TotalError:0CRC:0,Giants:0Jabbers: 0,Fragments:0Runts:0,DropEvents:0Alignments:0,Symbols:0Ignoreds:0Output:54507packets,7979793bytesUnicast:150,Multicast:49709Broadcast:4648,Jumbo:0Discard:0,Pause:0TotalError:0Collisions:0,ExcessiveCollisions:0LateCollisions:0,Deferreds:0BuffersPurged:0Inputbandwidthutilizationthreshold:80.00%Outputbandwidthutilizationthreshold:80.00%Inputbandwidthutilization:0%Outputbandwidthutilization:0%在修改接口的速率之前應(yīng)先關(guān)閉接口的自協(xié)商功能，然后將S1上的G0/0/9和G0/0/10接口的速率配置為100Mbit/s。[S1]interfaceGigabitEthernet0/0/9[S1-GigabitEthernet0/0/9]undonegotiationauto[S1-GigabitEthernet0/0/9]speed100[S1-GigabitEthernet0/0/9]quit[S1]interfaceGigabitEthernet0/0/10[S1-GigabitEthernet0/0/10]undonegotiationauto[S1-GigabitEthernet0/0/10]speed100同樣的方法將S2上的G0/0/9和G0/0/10接口的速率配置為100Mbit/s。<Quidway>system-view[Quidway]sysnameS2[S2]interfaceGigabitEthernet0/0/9[S2-GigabitEthernet0/0/9]undonegotiationauto[S2-GigabitEthernet0/0/9]speed100[S2-GigabitEthernet0/0/9]quit[S2]interfaceGigabitEthernet0/0/10[S2-GigabitEthernet0/0/10]undonegotiationauto[S2-GigabitEthernet0/0/10]speed100驗證S1上的G0/0/9和G0/0/10接口的速率已配置成功。[S1]displayinterfaceGigabitEthernet0/0/9GigabitEthernet0/0/9currentstate:UPLineprotocolcurrentstate:UPDescription:SwitchPort,Link-type:trunk(negotiated),PVID:1,TPID:8100(Hex),TheMaximumFrameLengthis9216IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressisd0d0-4ba6-aab0Currentsystemtime:2016-11-2314:29:45PortMode:COMMONCOPPERSpeed:100,Loopback:NONEDuplex:FULL,Negotiation:DISABLEMdi:AUTO,Flow-control:DISABLE……outputomit……[S1]displayinterfaceGigabitEthernet0/0/10GigabitEthernet0/0/10currentstate:UPLineprotocolcurrentstate:UPDescription:SwitchPort,Link-type:trunk(negotiated),PVID:1,TPID:8100(Hex),TheMaximumFrameLengthis9216IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressisd0d0-4ba6-aab0Currentsystemtime:2016-11-2314:32:53PortMode:COMMONCOPPERSpeed:100,Loopback:NONEDuplex:FULL,Negotiation:DISABLEMdi:AUTO,Flow-control:DISABLE……outputomit……配置手動模式的鏈路聚合在S1和S2上創(chuàng)建Eth-Trunk1，然后將G0/0/9和G0/0/10接口加入Eth-Trunk1（注意：將接口加入Eth-Trunk前需確認(rèn)成員接口下沒有任何配置）。[S1]interfaceEth-Trunk1[S1-Eth-Trunk1]quit[S1]interfaceGigabitEthernet0/0/9[S1-GigabitEthernet0/0/9]eth-trunk1[S1-GigabitEthernet0/0/9]quit[S1]interfaceGigabitEthernet0/0/10[S1-GigabitEthernet0/0/10]eth-trunk1[S2]interfaceEth-Trunk1[S2-Eth-Trunk1]quit[S2]interfaceGigabitEthernet0/0/9[S2-GigabitEthernet0/0/9]eth-trunk1[S2-GigabitEthernet0/0/9]quit[S2]interfaceGigabitEthernet0/0/10[S2-GigabitEthernet0/0/10]eth-trunk1驗證Eth-Trunk的配置結(jié)果。[S1]displayeth-trunk1Eth-Trunk1'sstateinformationis:WorkingMode:NORMALHasharithmetic:AccordingtoSIP-XOR-DIPLeastActive-linknumber:1MaxBandwidth-affected-linknumber:8Operatestatus:upNumberOfUpPortInTrunk:2PortNameStatusWeightGigabitEthernet0/0/9Up1GigabitEthernet0/0/10Up1[S2]displayeth-trunk1Eth-Trunk1'sstateinformationis:WorkingMode:NORMALHasharithmetic:AccordingtoSIP-XOR-DIPLeastActive-linknumber:1MaxBandwidth-affected-linknumber:8Operatestatus:upNumberOfUpPortInTrunk:2PortNameStatusWeightGigabitEthernet0/0/9Up1GigabitEthernet0/0/10Up1回顯信息中黃色陰影標(biāo)注的部分表明Eth-Trunk工作正常，成員接口都已正確加入。配置靜態(tài)LACP模式的鏈路聚合刪除S1和S2上的G0/0/9和G0/0/10接口下的配置。[S1]interfaceGigabitEthernet0/0/9[S1-GigabitEthernet0/0/9]undoeth-trunk[S1-GigabitEthernet0/0/9]quit[S1]interfaceGigabitEthernet0/0/10[S1-GigabitEthernet0/0/10]undoeth-trunk[S2]interfaceGigabitEthernet0/0/9[S2-GigabitEthernet0/0/9]undoeth-trunk[S2-GigabitEthernet0/0/9]quit[S2]interfaceGigabitEthernet0/0/10[S2-GigabitEthernet0/0/10]undoeth-trunk創(chuàng)建Eth-Trunk1并配置該Eth-Trunk為靜態(tài)LACP模式。然后將G0/0/9和G0/0/10接口加入Eth-Trunk1。[S1]interfaceEth-Trunk1[S1-Eth-Trunk1]modelacp[S1-Eth-Trunk1]quit[S1]interfaceGigabitEthernet0/0/9[S1-GigabitEthernet0/0/9]eth-trunk1[S1-GigabitEthernet0/0/9]quit[S1]interfaceGigabitEthernet0/0/10[S1-GigabitEthernet0/0/10]eth-trunk1[S2]interfaceEth-Trunk1[S2-Eth-Trunk1]modelacp[S2-Eth-Trunk1]quit[S2]interfaceGigabitEthernet0/0/9[S2-GigabitEthernet0/0/9]eth-trunk1[S2-GigabitEthernet0/0/9]quit[S2]interfaceGigabitEthernet0/0/10[S2-GigabitEthernet0/0/10]eth-trunk1查看交換機(jī)上Eth-Trunk的信息，查看鏈路是否協(xié)商成功。[S1]displayeth-trunkEth-Trunk1'sstateinformationis:Local:LAGID:1WorkingMode:LACPPreemptDelay:DisabledHasharithmetic:AccordingtoSIP-XOR-DIPSystemPriority:32768SystemID:d0d0-4ba6-aab0LeastActive-linknumber:1MaxActive-linknumber:8Operatestatus:upNumberOfUpPortInTrunk:2ActorPortNameStatusPortTypePortPriPortNoPortKeyPortStateWeightGigabitEthernet0/0/9Selected1GE327681289101111001GigabitEthernet0/0/10Selected1GE327682289101111001Partner:ActorPortNameSysPriSystemIDPortPriPortNoPortKeyPortStateGigabitEthernet0/0/932768d0d0-4ba6-ac2032768128910111100GigabitEthernet0/0/1032768d0d0-4ba6-ac2032768228910111100在S1上配置LACP的系統(tǒng)優(yōu)先級為100，使其成為LACP主動端。[S1]lacppriority100配置接口的優(yōu)先級確定活動鏈路。[S1]interfaceGigabitEthernet0/0/9[S1-GigabitEthernet0/0/9]lacppriority100[S1-GigabitEthernet0/0/9]quit[S1]interfaceGigabitEthernet0/0/10[S1-GigabitEthernet0/0/10]lacppriority100驗證Eth-Trunk的配置結(jié)果。[S1]displayeth-trunk1Eth-Trunk1'sstateinformationis:Local:LAGID:1WorkingMode:LACPPreemptDelay:DisabledHasharithmetic:AccordingtoSIP-XOR-DIPSystemPriority:100SystemID:d0d0-4ba6-aab0LeastActive-linknumber:1MaxActive-linknumber:8Operatestatus:upNumberOfUpPortInTrunk:2ActorPortNameStatusPortTypePortPriPortNoPortKeyPortStateWeightGigabitEthernet0/0/9Selected1GE1001289101111001GigabitEthernet0/0/10Selected1GE1002289101111001Partner:ActorPortNameSysPriSystemIDPortPriPortNoPortKeyPortStateGigabitEthernet0/0/932768d0d0-4ba6-ac2032768128910111100GigabitEthernet0/0/1032768d0d0-4ba6-ac2032768228910111100[S2]displayeth-trunk1Eth-Trunk1'sstateinformationis:Local:LAGID:1WorkingMode:LACPPreemptDelay:DisabledHasharithmetic:AccordingtoSIP-XOR-DIPSystemPriority:32768SystemID:d0d0-4ba6-ac20LeastActive-linknumber:1MaxActive-linknumber:8Operatestatus:upNumberOfUpPortInTrunk:2ActorPortNameStatusPortTypePortPriPortNoPortKeyPortStateWeightGigabitEthernet0/0/9Selected1GE327681289101111001GigabitEthernet0/0/10Selected1GE327682289101111001Partner:ActorPortNameSysPriSystemIDPortPriPortNoPortKeyPortStateGigabitEthernet0/0/9100d0d0-4ba6-aab0100128910111100GigabitEthernet0/0/10100d0d0-4ba6-aab0100228910111100配置文件[S1]displaycurrent-configuration#!SoftwareVersionV200R008C00SPC500sysnameS1#lacppriority100#interfaceEth-Trunk1modelacp#interfaceGigabitEthernet0/0/9eth-trunk1lacppriority100undonegotiationautospeed100#interfaceGigabitEthernet0/0/10eth-trunk1lacppriority100undonegotiationautospeed100#return[S2]displaycurrent-configuration#!SoftwareVersionV200R008C00SPC500sysnameS2#interfaceEth-Trunk1modelacp#interfaceGigabitEthernet0/0/9eth-trunk1undonegotiationautospeed100#interfaceGigabitEthernet0/0/10eth-trunk1undonegotiationautospeed100#return

2.FTP服務(wù)器搭建及資源備份項目背景您是公司的網(wǎng)絡(luò)管理員，在維護(hù)過程中，需要在公司網(wǎng)絡(luò)中配置FTP業(yè)務(wù)，便于網(wǎng)絡(luò)設(shè)備與計算機(jī)之間進(jìn)行文件傳輸。您可以把一臺路由器配置為FTP服務(wù)器，計算機(jī)可以通過TCP連接路由器上的FTP服務(wù)器并傳輸文件；也可以在計算機(jī)上架設(shè)FTP服務(wù)器，路由器等網(wǎng)絡(luò)設(shè)備通過TCP連接計算機(jī)上的FTP服務(wù)器并傳輸文件。項目目的通過本項目可以掌握如下知識點(diǎn)和技能點(diǎn)。理解建立FTP連接的過程掌握FTP服務(wù)器參數(shù)的配置掌握客戶端與FTP服務(wù)器傳輸文件的方法掌握FTP方式實(shí)現(xiàn)電子標(biāo)簽的備份。掌握FTP方式實(shí)現(xiàn)配置文件的備份掌握FTP方式備份診斷信息項目拓?fù)鋱D1FTP備份拓?fù)漤椖恳?guī)劃本項目的主要任務(wù)是搭建FTP服務(wù)器并進(jìn)行FTP文件傳輸，實(shí)現(xiàn)電子標(biāo)簽、配置文件等網(wǎng)絡(luò)資源的備份。項目前期準(zhǔn)備工作Console配置電纜。搭建登錄環(huán)境。項目任務(wù)步驟一、路由器配置FTP服務(wù)器步驟二、維護(hù)終端上連接路由器的FTP服務(wù)器，并完成電子標(biāo)簽、配置文件的備份。步驟三、維護(hù)終端上配置FTP服務(wù)器。步驟四：路由器連接維護(hù)終端的FTP服務(wù)器，并完成電子標(biāo)簽、配置文件的備份。項目實(shí)施項目準(zhǔn)備工作Console配置電纜。搭建登錄環(huán)境。項目任務(wù)路由器上配置IP地址，并配置FTP服務(wù)。路由器R1配置IP地址<R1>system-view[R1]interfaceGigabitEthernet0/0/0[R1-GigabitEthernet0/0/0]ipadd24驗證路由器與維護(hù)終端的連通性。[R1]ping1PING1:56databytes,pressCTRL_CtobreakReplyfrom1:bytes=56Sequence=1ttl=128time=40msReplyfrom1:bytes=56Sequence=2ttl=128time=10msReplyfrom1:bytes=56Sequence=3ttl=128time=10msReplyfrom1:bytes=56Sequence=4ttl=128time=10msReplyfrom1:bytes=56Sequence=5ttl=128time=10ms1pingstatistics5packet(s)transmitted5packet(s)received0.00%packetlossround-tripmin/avg/max=10/16/40ms路由器R1配置FTP服務(wù)器（FTP用戶名huawei、密碼為huawei123）[R1]ftpserverenable[R1]setdefaultftp-directoryflash:/[R1]aaa[R1-aaa]local-userhuaweipasswordcipherhuawei123[R1-aaa]local-userhuaweiservice-typeftp[R1-aaa]local-userhuaweiprivilegelevel15[R1-aaa]local-userhuaweiftp-directoryflash:配置完成后，可以看到R1為FTP服務(wù)器，默認(rèn)情況下監(jiān)聽TCP21號端口。[R1]displayftp-serverFTPserverisrunningMaxusernumber5Usercount0Timeoutvalue(inminute)30Listeningport21Aclnumber0FTPserver'ssourceaddress備份電子標(biāo)簽、配置文件路由器R1上備份電子標(biāo)簽到本地存儲設(shè)備（建議文件名：設(shè)備名+elabel+日期），并執(zhí)行[dir]命令確認(rèn)備份文件，下文的回顯信息中黃色填充字體表明備份成功。<R1>backupelabelR1_elabel_bak0429Itisexecuting,pleasewait...Backupelabelsuccessfully!<R1>dirDirectoryofflash:/IdxAttrSize(Byte)DateTime(LMT)FileName0drw--Apr29202002:54:10dhcp1-rw-121,802May26201409:20:58portalpage.zip2-rw-5,470Apr29202003:06:18r1_elabel_bak04293-rw-2,263Apr29202002:54:03statemach.efs4-rw-828,482May26201409:20:58sslvpn.zip5-rw-205Apr29202003:05:12private-data.txt6-rw-558Apr29202003:05:11vrpcfg.zip路由器R1上保存配置文件（建議文件名：設(shè)備名+cfg+日期），并執(zhí)行[dir]命令確認(rèn)備份文件，下文的回顯信息中黃色填充字體表明備份成功。<R1>saver1_cfg_bak0429.zipAreyousuretosavetheconfigurationtor1_cfg_bak0429.zip?(y/n)[n]:yItwilltakeseveralminutestosaveconfigurationfile,pleasewaitConfigurationfilehadbeensavedsuccessfullyNote:Theconfigurationfilewilltakeeffectafterbeingactivated<R1>dirDirectoryofflash:/IdxAttrSize(Byte)DateTime(LMT)FileName0drw--Apr29202002:54:10dhcp1-rw-671Apr29202003:09:55r1_cfg_bak0429.zip2-rw-121,802May26201409:20:58portalpage.zip3-rw-5,470Apr29202003:06:18r1_elabel_bak04294-rw-2,263Apr29202002:54:03statemach.efs5-rw-828,482May26201409:20:58sslvpn.zip6-rw-205Apr29202003:05:12private-data.txt7-rw-558Apr29202003:05:11vrpcfg.zip1,090,732KBtotal(784,444KBfree)路由器R1上一鍵獲取診斷信息并輸出到txt文件（建議文件名：設(shè)備名+diagnostic+日期），并執(zhí)行[dir]命令確認(rèn)備份文件，下文的回顯信息中黃色填充字體表明備份成功。<R1>displaydiagnostic-information?STRING<5-64>Nameofthefilestoreddiagnosticinformation(Defaultdirectoryisflash:/,thepostfixofthefilenamemustbe.txt)<cr>PleasepressENTERtoexecutecommand<R1>displaydiagnostic-informationR1_diagnostic_0429.txtThisoperationwilltakeseveralminutes,pleasewaitInfo:Thediagnosticinformationwassavedtothedevicesuccessfully.<R1>dirDirectoryofflash:/IdxAttrSize(Byte)DateTime(LMT)FileName0drw--Apr29202013:23:00dhcp1-rw-121,802May26201409:20:58portalpage.zip2-rw-147,456Apr29202013:26:31r1_diagnostic_0429.txt3-rw-2,263Apr29202013:22:55statemach.efs4-rw-828,482May26201409:20:58sslvpn.zip5-rw-655Apr29202013:22:53vrpcfg.zip1,090,732KBtotal(784,312KBfree)<R1>維護(hù)終端登錄登錄R1的FTP服務(wù)器，并備份電子標(biāo)簽、配置文件1）登錄FTP，建議登錄前先把本地路徑切換到準(zhǔn)備保存設(shè)備文件的文件夾（假定為e:\backup）C:\>e:E:\>cdbackupE:\backup>ftp連接到。220FTPserviceready.530PleaseloginwithUSERandPASS.用戶(:(none)):huawei331Passwordrequiredforhuawei.密碼:230Userloggedin.2)切換傳輸模式為二進(jìn)制模式ftp>binary200TypesettoI.3）執(zhí)行【get】命令下載電子標(biāo)簽文件、配置文件以及設(shè)備診斷信息。ftp>getr1_elabel_bak0429200Portcommandokay.150OpeningBINARYmodedataconnectionforr1_elabel_bak0429.226Transfercomplete.ftp:收到5470字節(jié)，用時0.01秒547.00千字節(jié)/秒。ftp>getr1_cfg_bak0429.zip200Portcommandokay.150OpeningBINARYmodedataconnectionforr1_cfg_bak0429.zip.226Transfercomplete.ftp:收到671字節(jié)，用時0.00秒574000.00千字節(jié)/秒。ftp>getr1_diagnostic_0429.txt200Portcommandokay.150OpeningASCIImodedataconnectionforr1_diagnostic_0429.txt.226Transfercomplete.ftp:收到147456字節(jié)，用時0.34秒427.41千字節(jié)/秒。ftp>維護(hù)終端上配置FTP服務(wù)器按“控制面板—程序和功能”打開程序管理界面，并選擇“啟用和關(guān)閉windows功能”。圖2Windows開啟IIS功能在彈出的windows功能選擇界面，選擇安裝IIS中的FTP和Web管理工具圖3Windows開啟FTP服務(wù)按“控制面板—管理工具—服務(wù)”，開啟“Microsoftftpservice”服務(wù)。圖4開始FTP服務(wù)按“控制面板—管理工具--InternetInformationServices(IIS)管理器”打開IIS管理器。圖5打開IIS管理器IIS管理中，在左側(cè)的導(dǎo)航樹中選擇“網(wǎng)站”，按鼠標(biāo)右鍵，選擇“添加FTP站點(diǎn)”，可彈出如下發(fā)布界面。圖6開始架設(shè)FTP設(shè)置FTP根目錄、站點(diǎn)IP地址、用戶及權(quán)限，然后點(diǎn)擊“完成”。圖7FTP站點(diǎn)名稱、根目錄設(shè)置圖8FTP站點(diǎn)IP地址設(shè)置圖9FTP用戶權(quán)限設(shè)置R1路由器登錄維護(hù)終端的FTP服務(wù)器，并備份電子標(biāo)簽、配置文件R1登錄維護(hù)終端的FTP（假定使用匿名用戶）<R1>ftp1Trying1...PressCTRL+KtoabortConnectedto1.220MicrosoftFTPServiceUser(1:(none)):anonymous331Anonymousaccessallowed,sendidentity(e-mailname)aspassword.Enterpassword:230Userloggedin.切換為二進(jìn)制模式，執(zhí)行【put】命令備份配置文件，并退出FTP連接。[R1-ftp]binary200TypesettoI.[R1-ftp]putR1_cfg_bak0429.zip200Portcommandsuccessful.150OpeningBINARYmodedataconnectionforfiletransfer.226TransfercompleteFTP:671byte(s)sentin0.101second(s)8.38Kbyte(s)/sec.[R1-ftp]bye221Goodbye.備份電子標(biāo)簽（匿名用戶，密碼可任意）<R1>backupelabelftp1R1_elabel_bak0429anonymous1Itisexecuting,pleasewait...Backupelabelsuccessfully!配置文件[R1]displaycurrent-configuration[V200R003C00]#sysnameR1ftpserverenablesetdefaultftp-directoryflash:/##aaaauthentication-schemedefaultauthorization-schemedefaultaccounting-schemedefaultdomaindefaultdomaindefault_adminlocal-useradminpasswordcipher%$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$local-useradminservice-typehttplocal-userhuaweipasswordcipher%$%$yekSYgaYvK~$(D%&!\G3,k`J%$%$local-userhuaweiprivilegelevel15local-userhuaweiftp-directoryflash:local-userhuaweiservice-typeftp##interfaceGigabitEthernet0/0/0ipaddress#return2.FTP服務(wù)器搭建及資源備份項目背景您是公司的網(wǎng)絡(luò)管理員，為了讓設(shè)備更好的支持各種性能，需要不定期的檢查設(shè)備的軟件版本和補(bǔ)丁信息，當(dāng)華為公司發(fā)布更新的軟件版本和系統(tǒng)補(bǔ)丁時，需要對設(shè)備進(jìn)行軟件和補(bǔ)丁的升級。項目目的通過本項目可以掌握如下知識點(diǎn)和技能點(diǎn)。掌握FTP服務(wù)器搭建。掌握命令行方式升級軟件掌握命令行方式補(bǔ)丁管理。掌握Web方式軟件升級和補(bǔ)丁管理。項目拓?fù)鋱D1軟件升級和補(bǔ)丁管理拓?fù)漤椖恳?guī)劃本項目的主要任務(wù)掌握系統(tǒng)軟件升級和補(bǔ)丁管理的操作過程。本實(shí)驗文檔以AR2220為例，其他設(shè)備操作過程類似，讀者可結(jié)合參考本實(shí)驗手冊和華為產(chǎn)品手冊自行完成。項目前期準(zhǔn)備工作準(zhǔn)備升級工具（終端，串口線，網(wǎng)線等）。準(zhǔn)備新版本系統(tǒng)軟件及補(bǔ)丁。項目任務(wù)校驗軟件及補(bǔ)丁的完整性。檢查當(dāng)前設(shè)備是否符合升級前要求。命令行方式進(jìn)行軟件升級和補(bǔ)丁管理。Web網(wǎng)管方式進(jìn)行軟件升級和補(bǔ)丁管理。項目實(shí)施項目準(zhǔn)備工作準(zhǔn)備升級工具（終端，串口線，網(wǎng)線等）。準(zhǔn)備新版本系統(tǒng)軟件及補(bǔ)丁。1）執(zhí)行displaydevice命令查看對應(yīng)產(chǎn)品名稱，如不清楚請聯(lián)系技術(shù)工程師獲取幫助。2）執(zhí)行displaystartup和displayversion命令查看當(dāng)前設(shè)備運(yùn)行軟件和補(bǔ)丁版本。3）登錄\o""/enterprise網(wǎng)站，下載新版本的系統(tǒng)軟件和補(bǔ)丁，下載時注意同時下載軟件和補(bǔ)丁所對應(yīng)的數(shù)字簽名。4）登錄華為網(wǎng)站下載數(shù)字簽名標(biāo)準(zhǔn)驗證工具PGPverify。下載鏈接如下：/enterprise/zh/tool/software-digital-signature-openpgp-validation-tool-TL1000000054，項目任務(wù)校驗軟件及補(bǔ)丁的完整性。1）打開PGPVerify軟件，選擇軟件中附帶的公鑰文件，如圖2所示。圖2.校驗軟件選擇公鑰文件2）校驗系統(tǒng)軟件的完整性。單擊“SingleVerify”，選擇系統(tǒng)軟件的數(shù)字簽名文件。圖3.校驗系統(tǒng)軟件完整性3）校驗補(bǔ)丁文件的完整性。單擊“SingleVerify”，選擇補(bǔ)丁文件的數(shù)字簽名文件。圖4.校驗補(bǔ)丁文件的完整性檢查當(dāng)前設(shè)備是否符合升級前要求。1）查詢當(dāng)前軟件版本信息。用戶視圖下，使用displayversion命令查看設(shè)備正在運(yùn)行的系統(tǒng)軟件的版本，將當(dāng)前軟件版本與新版本系統(tǒng)軟件進(jìn)行比較，確認(rèn)當(dāng)前版本是否需要進(jìn)行升級。<R1>displayversionHuaweiVersatileRoutingPlatformSoftwareVRP(R)software,Version5.120(AR2200V200R003C01SPC900)Copyright(C)2011-2013HUAWEITECHCO.,LTDHuaweiAR2220Routeruptimeis0week,0day,2hours,4minutesBKP0versioninformation:1.PCBVersion:AR01BAK2AVER.A2.IfSupportingPoE:No3.BoardType:AR22204.MPUSlotQuantity:15.LPUSlotQuantity:6MPU0(Master):uptimeis0week,0day,2hours,4minutesSDRAMMemorySize:2048MbytesFlashMemorySize:16MbytesNVRAMMemorySize:512KbytesSDCard1MemorySize:1914MbytesMPUversioninformation:1.PCBVersion:AR01SRU2AVER.B2.MABVersion:03.BoardType:AR22204.CPLD0Version:1045.BootROMVersion:654LPU1:uptimeis0week,0day,2hours,4minutesSDRAMMemorySize:96KbytesFlashMemorySize:384KbytesLPUversioninformation:1.PCBVersion:AR01SEG1CAVER.B2.MABVersion:03.BoardType:2FE4.BootROMVersion:cbLPU2:uptimeis0week,0day,2hours,4minutesSDRAMMemorySize:96KbytesFlashMemorySize:384KbytesLPUversioninformation:1.PCBVersion:AR01SEG1CAVER.B2.MABVersion:03.BoardType:2FE4.BootROMVersion:cbLPU3:uptimeis0week,0day,2hours,3minutesSDRAMMemorySize:256MbytesFlashMemorySize:16MbytesLPUversioninformation:1.PCBVersion:AR01SDSA2AVER.C2.MABVersion:03.BoardType:2SA4.BootROMVersion:305LPU4:uptimeis0week,0day,2hours,3minutesSDRAMMemorySize:256MbytesFlashMemorySize:16MbytesLPUversioninformation:1.PCBVersion:AR01SDSA2AVER.C2.MABVersion:03.BoardType:1SA4.BootROMVersion:3052）查詢當(dāng)前使用的系統(tǒng)文件信息。在用戶視圖下，使用displaystartup命令查看當(dāng)前使用系統(tǒng)文件，請您將文件名稱記錄下來，以便后續(xù)對這些文件進(jìn)行備份。<R1>displaystartupMainBoard:Startupsystemsoftware:sd1:/ar2220-v200r003c01spc900.ccNextstartupsystemsoftware:sd1:/ar2220-v200r003c01spc900.ccBackupsystemsoftwarefornextstartup:nullStartupsaved-configurationfile:sd1:/vrpcfg.zipNextstartupsaved-configurationfile:sd1:/vrpcfg.zipStartuplicensefile:nullNextstartuplicensefile:nullStartuppatchpackage:sd1:/ar2220-v200r003sph006.patNextstartuppatchpackage:sd1:/ar2220-v200r003sph006.patStartupvoice-files:nullNextstartupvoice-files:null3）檢查設(shè)備運(yùn)行狀態(tài)。用戶視圖下，使用displaydevice命令查看設(shè)備主控板和業(yè)務(wù)板工作狀態(tài)，確認(rèn)主控板和業(yè)務(wù)板工作正常。<R1>displaydeviceAR2220'sDevicestatus:SlotSubTypeOnlinePowerRegisterAlarmPrimary----------------------------------------1-2FEPresentPowerOnRegisteredNormalNA2-2FEPresentPowerOnRegisteredNormalNA3-2SAPresentPowerOnRegisteredNormalNA4-1SAPresentPowerOnRegisteredNormalNA0-AR2220PresentPowerOnRegisteredNormalMaster7-PWR150APresentPowerOnRegisteredNormalNA4）檢查Flash/SD卡中的剩余空間。在用戶視圖執(zhí)行dir命令，查看Flash/SD卡中的剩余空間，確認(rèn)Flash/SD卡中有足夠的剩余空間容納待升級版本的系統(tǒng)軟件。命令行方式進(jìn)行軟件升級和補(bǔ)丁管理（本實(shí)驗采用FTP方式，路由器作為FTP服務(wù)器）。1）路由器架設(shè)FTP服務(wù)器。FTP用戶為“ftpuser”，密碼“huawei123”，用戶級別level3，根目錄為“sd1：”。[R1]ftpserverenable[R1]setdefaultftp-directorysd1:/[R1]aaa[R1-aaa]local-userftpuserpasswordcipherhuawei123[R1-aaa]local-userftpuserservice-typeftp[R1-aaa]local-userftpuserprivilegelevel15[R1-aaa]local-userftpuserftp-directorysd1:2）下載有新版本系統(tǒng)軟件和補(bǔ)丁的維護(hù)終端登錄FTP服務(wù)器，并上傳系統(tǒng)軟件和補(bǔ)丁文件。注意FTP上傳時請務(wù)必選擇二進(jìn)制模式，如下文紅色字體部分所示。C:\Users\軟件和補(bǔ)丁>ftp連接到。220FTPserviceready.530PleaseloginwithUSERandPASS.用戶(:(none)):ftpuser331Passwordrequiredforftpuser.密碼:230Userloggedin.ftp>binaryftp>putAR2220-V200R009C00SPC500.zip200Portcommandokay.150OpeningBINARYmodedataconnectionforAR2220-V200R009C00SPC500.zip.226Transfercomplete.ftp:發(fā)送157082321字節(jié)，用時468.11秒335.56千字節(jié)/秒。ftp>putAR2220-V200R009SPH027.pat200Portcommandokay.150OpeningASCIImodedataconnectionforAR2220-V200R009SPH027.pat.226Transfercomplete.ftp:發(fā)送7438976字節(jié)，用時22.72秒327.42千字節(jié)/秒。上傳完成后，可在路由器R1上執(zhí)行dir命令，確認(rèn)文件傳輸是否已完成。<R1>dirDirectoryofsd1:/IdxAttrSize(Byte)DateTime(LMT)FileName0-rw-94,689,536Aug23201303:38:36ar2220-v200r003c01spc900.cc1-rw-286,620Dec29201313:24:52sacrule.dat2-rw-512,000May08202014:44:20mon_file.txt3-rw-478,848Dec29201309:14:20ar2220-v200r003sph006.pat4drw--Oct17201709:01:22logfile5-rw-943May08202015:02:58vrpcfg.zip6-rw-415May08202015:02:58private-data.txt7-rw-247,936Oct16201912:19:30mon_lpu_file.txt8-rw-889May13201917:07:32vrpcfg_old.zip9-rw-7,438,976May08202016:41:46ar2220-v200r009sph027.pat10-rw-157,082,321May08202015:37:42ar2220-v200r009c00spc500.zip1,960,944KBtotal(1,700,468KBfree)3）備份設(shè)備中的重要文件。登錄設(shè)備FTP服務(wù)器，使用get命令，將設(shè)備的舊系統(tǒng)軟件，補(bǔ)丁，配置文件等進(jìn)行備份。4）設(shè)置系統(tǒng)軟件和加載補(bǔ)丁。設(shè)置系統(tǒng)軟件。1）解壓系統(tǒng)軟件。<R1>unzipsd1:/ar2220-v200r009c00spc500.zipsd1:/ar2220-v200R009c00spc500.cc2）設(shè)置系統(tǒng)軟件。<R1>startupsystem-softwaresd1:/ar2220-v200R009c00spc500.ccThisoperationwilltakeseveralminutes,pleasewaitInfo:Succeededinsettingthefileforbootingsystem加載補(bǔ)丁。<R1>startuppatchsd1:/ar2220-v200r009sph027.patThisoperationwilltakeseveralminutes,pleasewaitInfo:Succeededinsettingthefileforbootingsystem使用displaystartup命令查看下次啟動所用的系統(tǒng)軟件是否為新加載的系統(tǒng)軟件。<R1>displaystartupMainBoard:Startupsystemsoftware:sd1:/ar2220-v200r003c01spc900.ccNextstartupsystemsoftware:sd1:/ar2220-v200r009c00spc500.ccBackupsystemsoftwarefornextstartup:nullStartupsaved-configurationfile:sd1:/vrpcfg.zipNextstartupsaved-configurationfile:sd1:/vrpcfg.zipStartuplicensefile:nullNextstartuplicensefile:nullStartuppatchpackage:sd1:/ar2220-v200r003sph006.patNextstartuppatchpackage:sd1:/ar2220-v200r009sph027.patStart