网络设备常用排障命令——思科

思科路由器A9K常用命令

#查看历史的操作，执行的什么命令（后面跟last或者数字，你？就能看到提升）
    show configuration commit changes ?

#ip mac 绑定，arp绑定
    arp -s 192.168.1.2 00-23-34-f4-de-09

#查看接口地址
    show ip inter br

#A9K查看mac表
    show l2vpn forwarding bridge-domain mac-address hardware egress location 0/1/CPU0 | in  0025.0025

#路由查看
    #查看静态路由
    show run router static
    show route 1.1.1.1
    show bgp 1.1.1.1

    #查看bgp路由为什么优选，（注意没有优选原因的情况，可能写了acl策略啥的）
    show bgp 123.123.123.123 bestpath-compare

    #查看路由策略
    show rpl route-policy ？
    show rpl route-policy BGP_From_CN2_DIA_2.0

#查看bgp对等体
    show bgp summary

#查看向某个bgp 对等体是否发布了23.234.5的路由
    show bgp neighbor 203.14.184.1 advertised-routes | include 23.234.5

#查看静态路由配置
    show running-config router static

#查看l2vpn配置
    show running-config l2vpn

#查看某个acl应用在哪些接口
    show access-lists acl_To-YD-FW35 usage pfilter location all 

#使用某个vrf进行网络ping测试
    ping vrf weixiao1 8.8.8.8 source 207.2.182.12

#查看某个acl应用在某个接口
RP/0/RSP1/CPU0:USLA-C411-A9K-1#show access-lists acl_To-YD-FW35 usage pfilter location all 
Tue Jan 22 02:00:35.839 PST
Interface : TenGigE0/3/0/1 
    Input Common-ACL : N/A  ACL : acl_To-YD-FW35  
    Output ACL : N/A

思科路由器BGP排障场景一：BGP会话中断，查看原因

RP/0/RSP1/CPU0:USLA-cisco#show bgp neighbors 192.168.60.2 detail 
Thu Mar 19 18:54:53.689 PDT

BGP neighbor is 192.168.60.2
 Remote AS 65413, local AS 123123, external link
 Remote router ID 192.168.60.2
  BGP state = Established, up for 00:32:41
  NSR State: NSR Ready
  Last read 00:00:29, Last read before reset 00:46:34
  Hold time is 90, keepalive interval is 30 seconds
  Configured hold time: 180, keepalive: 60, min acceptable hold time: 3
  Last write 00:00:05, attempted 19, written 19
  Second last write 00:00:35, attempted 19, written 19
  Last write before reset 00:46:43, attempted 19, written 19
  Second last write before reset 00:47:13, attempted 19, written 19
  Last write pulse rcvd  Mar 19 18:54:48.458 last full not set pulse count 12310294
  Last write pulse rcvd before reset 00:46:42
  Socket not armed for io, armed for read, armed for write
  Last write thread event before reset 00:46:34, second last 00:46:34
  Last KA expiry before reset 00:46:43, second last 00:47:13
  Last KA error before reset 00:00:00, KA not sent 00:00:00
  Last KA start before reset 00:46:43, second last 00:47:13
  Precedence: internet
  Non-stop routing is enabled
  Entered Neighbor NSR TCP mode:
    TCP Initial Sync :              Mar 19 18:22:12.354
    TCP Initial Sync Phase Two :    Mar 19 18:22:13.358
    TCP Initial Sync Done :         Mar 19 18:22:14.361
  Graceful restart is enabled
  Restart time is 120 seconds
  Stale path timeout time is 360 seconds
  Enforcing first AS is enabled
  Multi-protocol capability received
  Neighbor capabilities:            Adv         Rcvd
    Route refresh:                  Yes         Yes
    4-byte AS:                      Yes         Yes
    Address family IPv4 Unicast:    Yes         Yes
  Message stats:
    InQ depth: 0, OutQ depth: 0
                    Last_Sent               Sent  Last_Rcvd               Rcvd
    Open:           Mar 19 18:22:12.353      204  Mar 19 18:22:12.353        3
    Notification:   ---                        8  Mar 19 18:08:19.468        2
    Update:         Mar 19 18:22:18.163     7686  Mar 19 18:54:24.348 217807718
    Keepalive:      Mar 19 18:54:48.255  2547197  Mar 19 18:54:24.145  4561409
    Route_Refresh:  Apr 20 06:34:41.842        3  ---                        0
    Total:                               2552095                      222369145
  Minimum time between advertisement runs is 30 secs

 For Address Family: IPv4 Unicast
  BGP neighbor version 2664818702
  Update group: 0.7 Filter-group: 0.5  No Refresh request being processed
  NEXT_HOP is always this router
  Community attribute sent to this neighbor
  AF-dependent capabilities:
    Graceful Restart capability advertised
      Local restart time is 120, RIB purge time is 600 seconds
      Maximum stalepath time is 360 seconds
  Route refresh request: received 0, sent 34
  Policy for incoming advertisements is BGP_From_IDC_2.0
  Policy for outgoing advertisements is BGP_To_IDC_2.0
  788206 accepted prefixes, 2906 are bestpaths
  Cumulative no. of prefixes denied: 0. 
  Prefix advertised 246, suppressed 0, withdrawn 0
  Maximum prefixes allowed 1048576
  Threshold for warning message 75%, restart interval 0 min
  An EoR was not received during read-only mode
  Last ack version 2664818702, Last synced ack version 2664818699
  Outstanding version objects: current 0, max 4
  Additional-paths operation: None

  Connections established 10; dropped 9
  Local host: 192.168.60.1, Local port: 179, IF Handle: 0x00000000
  Foreign host: 192.168.60.2, Foreign port: 33052
  Last reset 00:33:15, due to Peer closing down the session     #上次重置原因：对端关闭了会话
  Peer reset reason: Remote closed the session (Connection timed out)
  Time since last notification sent to neighbor: 3y19w
  Error Code: hold time expired     #错误代码，保持时间已过期
  Notification data sent:
    None
  Time since last notification received from neighbor: 00:46:34
  Error Code: out of resource       #这是错误代码，说资源不足
  Notification data received:
    None
  External BGP neighbor may be up to 255 hops away.

思科如何踢出登陆账户