fancourier_HQ#ping vrf VPN 10.0.22.251 sou 10.255.255.1 size 1500 re 1000 --Afiseaza toate interfetele sw2847_mw_acc_falticeni>sh int desc sw9069_mw_acc_teiu>sh int desc Fa0/23 down down
sw9069-98_mw_acc
--Verificare daca site-ul invata MAC de la client: IPNPE_9383>sh arp | i ip wan IPNPE_5270>sh ip arp vrf V6063:CNPR | i 192.168.181.154 Internet 192.168.181.154 41 0004.dd0c.6fb3 ARPA Vlan1109 sw4049_fo_acc_posta_vitan>sh mac add dyn int fa 0/17 sau #sh mac-address-table dynamic sw505_fo_acc_viilor>sh mac address-table int fa0/4 --Verificare trafic router site -> client (internet) sw3795_mw_acc_chitila#sh int fa0/23 | i rate sh policy-map interface Gi1/1/3.171143 | i rate --Verifici daca face trafic (comanda data de pe router client) IREM_Servicii_Moinesti#sh logging | i FastEthernet4 IREM_Servicii_Moinesti#sh int fastEthernet 4 Intertoy_Depozit_Chiajna#sh int fa0/0 | i Desc|30 sec Intertoy_Depozit_Chiajna#sh log | i rtr sh int f4 | i rate --Port frw ip nat inside source static t 192.168.0.5 80 81.12.154.226 80 extendable ip nat inside source static udp 192.168.0.5 80 81.12.154.226 80 extendable ip nat inside source static t 192.168.0.5 8080 81.12.154.226 8080 extendable ip nat inside source static udp 192.168.0.5 8080 81.12.154.226 8080 extendable
-PORT FORWARD -sh running-config | i nat -[root@casa_noastra_1161955 /tmp]# iptables -L | grep 192.168.1.5 ACCEPT ACCEPT ACCEPT ACCEPT
t -- anywhere udp -- anywhere t -- anywhere udp -- anywhere
192.168.1.5 192.168.1.5 192.168.1.5 192.168.1.5
t dpt:380 udp dpt:380 t dpt:18200 udp dpt:18200
--Ping cu sursa 067032_SEWS_Brad#ping 74.125.39.99 source vlan1 --Verifici daca i se aloca IP-uri prin DH -
sh ip dh bin
--Verificare producator hw dupa MAC http://www.coffer.com/mac_find/?string=00%3A07%3A0e
OFFICE LINK: 1.Pentru verificare: "show voice voice-port pri all |communication" trebuie sa fie 0 pe ambele PRI; 2.Comanda care trebuie data in momentul in care nu sunt call-uri este: show voice debug voip-session full. --Ping in vrf de pe OneAccess Sintaxa comenzii ping: ping ip ip destinatie ip sursa -l size -n numarul de pachete vrf vrf >ping ip 172.22.128.5 172.22.128.6 -l 1500 -n 300 Pt NET ping 8.8.8.8 192.168.2.1 -l 1000 -n 200 vrf INTERNET
UPTIME ONE ACCESS -sh system status
-DH: -sh running-config | i dh PORT FORW: Koket_SRL_9026_25_Vaslui>sh running-config | i nat ip nat per-host max-session 10000 ip nat translation max-sessions 10000 ip nat inside overload ip nat static-napt t 10.1.1.110 3389 46.97.17.46 3389 ip nat static-napt udp 10.1.1.110 3389 46.97.17.46 3389 ip nat static-napt t 10.1.1.110 80 46.97.17.46 80 ip nat static-napt udp 10.1.1.110 80 46.97.17.46 80 Koket_SRL_9026_25_Vaslui>sh ip int brief Interface IP-Address OK? Status Protocol Loopback 0 127.0.0.1 YES up up Null 0
YES up up FastEthernet 0/0
YES up up FastEthernet 0/1
NO istratively down down FastEthernet 0/2
NO istratively down down FastEthernet 0/3
NO istratively down down FastEthernet 1/0
YES up up FastEthernet 1/0.1 46.97.17.46 YES up up FastEthernet 1/0.3 172.22.199.118 YES up up Bvi 1 10.1.1.1 YES up up Koket_SRL_9026_25_Vaslui>conf t Koket_SRL_9026_25_Vaslui(configure)>int fa 1/0.1 Koket_SRL_9026_25_Vaslui(config-if)>ip nat static static static-ip static-napt Koket_SRL_9026_25_Vaslui(config-if)>ip nat static-napt t 10.1.1.5 37777 46.97.17.46 37777 Koket_SRL_9026_25_Vaslui(config-if)>ip nat static-napt t 10.1.1.30 47777 46.97.17.46 47777 Koket_SRL_9026_25_Vaslui(config-if)>end Koket_SRL_9026_25_Vaslui>sh running-config | i nat ip nat per-host max-session 10000 ip nat translation max-sessions 10000 ip nat inside overload ip nat static-napt t 10.1.1.110 3389 46.97.17.46 3389 ip nat static-napt udp 10.1.1.110 3389 46.97.17.46 3389 ip nat static-napt t 10.1.1.110 80 46.97.17.46 80 ip nat static-napt udp 10.1.1.110 80 46.97.17.46 80
ip nat static-napt t 10.1.1.5 37777 46.97.17.46 37777 ip nat static-napt t 10.1.1.30 47777 46.97.17.46 47777 Koket_SRL_9026_25_Vaslui>write mem Building configuration... [OK] E_sorla_ct_hq#sh ip nat tra | i 192.168.1.222:8088 E_sorla_ct_hq(config)#do sh run | s nat Pentru E: ip nat inside source static t 10.1.1.100 80 81.12.166.38 80 extendable Afisare rutare si protocoale sh run | s ip route sh ip route <protocol de rutare=bgp,rip,eigrp,ospf, etc>
QoS -sh ip cache flow Egress- Bandwidth Ingress- Bandwidth QOS-ul este pentru a filtra traficul cu o anumita prioritate traficul de voce de ex sa mearga blana, ca la ala nu iti permiti sa ai pierderi. Ex: voip,ssh E processor: Energonuclear#sh process u hist SNMP -snmpwalk -c cnxmon -v1 81.12.203.254