H3C日常维护手册

合集下载

H3C的基本的维护操作

使用本地用户进行telnet登录的认证
local-user huawei /创建本地帐号“huawei”/ password simple huawei /设置密码为“huawei”/ service-type telnet /设置服务类型为telnet/ level 3 / /设置用户优先级为3/ 3/ user-interface vty 0 4 authentication-mode scheme /设置scheme认证/
使用本地用户进行console登录的认证
local-user huawei /创建本地帐号“huawei”/ password simple huawei /设置密码为“huawei”/ service-type terminal /设置服务类型为terminal/ level 3 /设置用户优先级为3/ user-interface con 0 authentication-mode scheme /设置scheme认证/
查看内存占用率
<H3C>display memory System Available Memory(bytes): 63816192 System Used Memory(bytes): 23793680 Used Rate: 37%
系统管理配置
使用本地用户进行console登录的认证使用本地用户进行telnet登录的认证使用SSH方式登录路由器 SNMP网管的配置
/设置设备位置/ /配置snmp版本允许V1（默认
系统维护与调试配置
系统维护操作系统调试操作
系统维护操作
常见的几种升级方法
1、 FTP方式的升级方法、 2、TFTP方式的升级方法 3、XModem方式的升级方法

H3C设备维护及故障处理指南

H3C设备维护及故障处理指南1.前言在日常网络运维工作中，H3C（华三）设备是企业常用的一种网络设备。

为了确保网络的正常运行，提高网络设备的可靠性和稳定性，及时解决故障是非常重要的。

本指南将介绍H3C设备的维护和故障处理方法。

2.H3C设备维护2.1定期备份设备配置为了防止设备故障或配置丢失导致的网络中断，我们应定期备份设备的配置文件。

可以通过命令行界面或Web界面进行备份，并将文件保存在安全的地方，以备不时之需。

2.2定期升级设备固件H3C公司定期会发布新的设备固件版本，其中包括修复了一些已知的漏洞和故障，并提供了一些新的功能和性能改进。

因此，我们应该及时升级设备的固件，以确保设备的安全性和稳定性。

2.3监控设备的运行状态我们应该使用H3C设备提供的监控工具，如SNMP（Simple Network Management Protocol）或Syslog，来实时监控设备的运行状态。

这样可以及时发现设备的异常行为，并采取相应的措施，预防故障的发生。

3.H3C设备故障处理3.1故障排查与定位当发生网络故障时，应首先进行故障排查与定位。

可以通过以下步骤来进行排查：a.检查设备的各个接口是否正常工作，如链路是否正常、接口是否有异常状态等。

b.检查设备的日志信息，查找可能有关的错误或警告。

c. 对设备所在的网络进行测试，如Ping测试、Traceroute测试等，以确定故障范围和位置。

3.2故障解决方案根据排查与定位的结果a.如果是单一设备的故障，可能需要进行设备重启或问题接口的关闭/开启等操作。

b.如果是局部网络的故障，可能需要对网络中的其他设备进行检查，如交换机、路由器等。

c.如果是全局网络的故障，可能需要考虑网络中的整体拓扑结构，找出可能的单点故障，并进行相应的维修或切换。

3.3故障记录与总结在处理故障的过程中，应及时记录故障的相关信息，包括故障现象、解决过程和方法、影响范围等。

这样可以帮助我们更好地总结故障原因和处理方法，以便于以后的故障处理和维护工作。

H3C UIS R170服务器维护手册

H3C UIS R170 服务器维护指南前言H3C UIS R170 G2 服务器维护指南各章节内容如下：∙第1 章安全。

介绍操作设备时的安全信息、注意事项、静电防护及设备上的安全标识。

∙第2 章R170 G2 部件图解。

介绍R170 G2 的结构部件和系统部件。

∙第3 章上电和下电。

介绍对R170 G2 进行上下电操作的方法。

∙第4 章拆卸和安装R170 G2。

介绍拆卸和安装R170 G2 的方法。

∙第5 章更换部件。

介绍R170 G2 有哪些可更换的部件，以及如何进行部件更换的详细操作步骤。

∙第6 章布线。

介绍R170 G2 部件的内部线缆连接方法。

∙附录。

介绍R170 G2 的帮助信息、产品回收信息及缩略语。

前言部分包含如下内容：∙读者对象∙本书约定∙产品配套资料∙资料获取方式∙技术支持∙资料意见反馈读者对象本手册主要适用于如下工程师：∙网络规划人员∙现场技术支持与维护人员∙负责服务器配置和维护的管理员本书约定1. 格式约定2. 各类标志本书还采用各种醒目标志来表示在操作过程中应该特别注意的地方，这些标志的意义如下：产品配套资料H3C UIS R170 G2 服务器维护指南的配套资料包括如下部分：目录1 安全········································1-11.1 安全信息······································1-11.1.1 运行安全···································1-11.1.2 电气安全···································1-11.1.3 电池安全···································1-11.2 安全注意事项····································1-11.3 静电防护······································1-21.3.1 防止静电释放·································1-21.3.2 防止静电释放的接地方法····························1-21.4 设备标识······································1-32 R170 G2 部件图解··································2-12.1 结构部件······································2-12.2 系统部件······································2-2 3上电和下电·····································3-13.1 上电········································3-13.2 下电········································3-24 拆卸和安装R170 G2 ······································································································ 4-14.1 工具准备······································4-14.2 拆卸R170 G2 ············································································································4-14.3 安装R170 G2 ············································································································4-34.4 连接电源线缆····································4-5 5更换部件······································5-15.1 可更换部件·····································5-15.2 更换安全面板····································5-15.2.1 更换场景···································5-15.2.2 更换安全面板·································5-25.3 更换硬盘······································5-35.3.1 更换场景···································5-35.3.2 准备工作···································5-35.3.3 更换硬盘···································5-45.4 更换机箱盖·····································5-55.4.1 更换场景···································5-55.4.2 更换机箱盖··································5-55.5 更换电源······································5-75.5.1 更换场景···································5-75.5.2 更换电源···································5-7 5.6 更换导风罩····································5-145.6.1 更换场景··································5-145.6.2 更换导风罩·································5-14 5.7 更换Riser卡···································5-165.7.1 更换背景··································5-165.7.2 更换Riser卡·································5-16 5.8 更换PCIe卡····································5-185.8.1 更换背景··································5-185.8.2 更换PCIe卡·································5-18 5.9 更换FLOM网卡··································5-215.9.1 更换背景··································5-215.9.2 更换FLOM网卡·······························5-22 5.10 更换FBWC模块·································5-245.10.1 更换背景·································5-245.10.2 更换FBWC模块······························5-24 5.11 更换智能存储电池································5-265.11.1 更换背景·································5-265.11.2 更换智能存储电池·····························5-26 5.12 更换智能存储电池固定座·····························5-285.12.1 更换背景·································5-285.12.2 更换智能存储电池固定座··························5-28 5.13 更换光驱····································5-295.13.1 更换背景·································5-295.13.2 更换光驱·································5-29 5.14 更换风扇····································5-315.14.1 更换背景·································5-315.14.2 更换风扇·································5-31 5.15 更换DIMM ············································································································ 5-335.15.1 更换背景·································5-335.15.2 更换DIMM···································································································· 5-33 5.16 更换CPU ·············································································································· 5-345.16.1 更换背景·································5-345.16.2 更换CPU ····································································································· 5-35 5.17 更换系统电池··································5-39ii5.17.1 更换背景·································5-395.17.2 更换系统电池·······························5-395.18 更换前面板I/O组件································5-415.18.1 更换背景·································5-415.18.2 更换前面板I/O组件·····························5-415.19 更换主板····································5-425.19.1 更换背景·································5-425.19.2 更换主板·································5-425.20 更换硬盘背板··································5-455.20.1 更换背景·································5-455.20.2 更换硬盘背板·······························5-455.21 更换挂耳····································5-475.21.1 更换背景·································5-475.21.2 更换挂耳·································5-475.22 更换TPM模块··································5-496 布线········································6-16.1 连接阵列控制卡线缆·································6-16.2 连接FBWC模块线缆·································6-26.3 连接智能存储电池线缆································6-36.4 连接风扇线缆····································6-46.5 连接电源模块线缆··································6-46.6 连接光驱线缆····································6-56.7 连接前面板线缆···································6-6iii1安全1.1 安全信息操作服务器之前，请仔细了解以下安全信息。

H3C IPS(ACG)日常维护指导书

H3C IPS/ACG日常维护指导书V1.0杭州华三通信技术有限公司修订记录目录第1章日常维护建议 (6)1.1 IPS/ACG日常维护建议 (6)1.2 IPS/ACG运维建议 (7)第2章维护操作指导 (8)2.1 设备日常维护操作指导 (8)2.2 设备季度维护操作指导 (9)2.3 设备年度维护操作指导 (9)第3章维护记录表格 (10)3.1 H3C IPS/ACG设备日常维护值班日志 (10)3.2 H3C IPS/ACG设备季度维护记录表 (11)3.3 H3C IPS/ACG设备年度维护记录表 (12)3.4 H3C IPS/ACG设备突发问题处理记录表 (13)3.5 硬件更换记录表 (14)3.6 系统参数修改记录表 (15)第4章常见故障处理 (16)4.1 数据日志丢失 (16)4.1.1 问题原因 (16)4.1.2 解决方法 (16)4.2 无法查询DDoS、限速等日志 (16)4.2.1 问题原因 (16)4.2.2 解决方法 (17)4.3 URL过滤功能失效 (17)4.3.1 问题原因 (17)4.3.2 解决方法 (17)4.4 P2P限速/阻断效果不明显 (18)4.4.1 解决方法 (18)4.5 迅雷限速/阻断效果不明显 (20)4.5.1 解决方法 (20)4.6 IPS部署后无攻击日志产生 (21)4.6.1 解决方法 (21)4.7 单用户限速不准，上报系统日志“User num exceed max（16000）” (22)4.7.1 问题描述 (22)4.7.2 解决方法 (22)4.8 流量上了IPS/ACG插卡但是插卡没有识别：没有会话、数据日志等 (22)4.8.1 问题描述 (22)4.8.2 解决方法 (22)4.9 IPS Enhanced插卡MQC方式引流，发现出现环路 (23)4.9.1 解决方法 (23)4.10 S7500E+IPS插卡，S7500E接入网络后，网络异常。

位H3C网络日常操作指导书

XX单位H3C网络日常操作指导书XX银行网络日常操作维护指导书Version 1.0目录一、网络拓扑 (4)二、新增接入交换机配置脚本说明 (5)三、端口绑定配置举例 (9)四、局域网配置 (11)4.1 vlan配置 (11)4.2 链路聚合（二层静态聚合链路、二层动态聚合链路、三层聚合链路）.. 124.3 恢复设备出厂设置 (16)五、IP地址使用统计表与设备配置 (16)项目机密，未经许可，请勿传播第3页, 共17页一、网络拓扑XX银行内部网络采用双核心，H3C S7506E 交换机作为主设备运行Cisco S4506E作为备用核心。

楼层接入交换机采用光纤双链路上行，采用VRRP+MSTP冗余技术，当S7506E交换机项目机密，未经许可，请勿传播第4页, 共17页出现故障业务可以瞬间切换到S4506E，保障业务的稳定运营。

二、新增接入交换机配置脚本说明1、远程登录配置telnet server enable \\开启telnetuser-interface vty 0 4 \\进入远程登录接口0 4user privilege level 3 \\赋予用户管理员权限set authentication password simple h3c\\设置登录密码为h3c2、设备基本配置clock timezone beijing add 08:00:00 项目机密，未经许可，请勿传播第5页, 共17页\\设置系统时区为东8区ntp-service unicast-server 11.130.208.223 \\设置系统时间同步服务器为11.130.208.2233、STP生成树配置stp enable \\开启STPstp bpdu-protection \\开启BPDU保护功能stp pathcost-standard dot1t \\设置STP路径开销的计算标准为dot1t与cisco保持一致y \\输入y同意修改STP使用标准stp region-configuration \\进入STP域配置域名为weifang并且进行激活region-name weifanginstance 1 vlan 1 to 2 5 9 11 to 13instance 2 vlan 3 to 4 6 to 8 10 14 to 16active region-configurationstp config-digest-snooping \\在全局和任一项目机密，未经许可，请勿传播第6页, 共17页个和CISCO交换机相连的端口上使能ConfigurationDigestSnooping功能interface GigabitEthernet1/0/26stp config-digest-snoopingint eth1/0/1 \\开启连接PC电脑端口的防护功能stp edged-port enableint eth1/0/2stp edged-port enable4、创建VLAN配置管理IP项目机密，未经许可，请勿传播第7页, 共17页vlan 2 to 16 \\创建vlan2 到vlan 16undo int vlan 1 \\删除vlan1接口interface Vlan-interface13 \\创建vlan13接口description guanli \\描述ip address 11.28.87.18255.255.255.224\\设备远程管理地址，需要做相应修改ip route-static 0.0.0.0 0.0.0.0 11.28.87.305、配置上联接口interface GigabitEthernet1/0/25 \\连接H3CS7506E端口配置（48口交换机是1/0/51）port link-type trunkundo port trunk permit vlan 1port trunk permit vlan 2 to 16com en fi \\开启光口#interface GigabitEthernet1/0/26 \\连接Cisco s4506E端口配置（48口交换机是1/0/52）项目机密，未经许可，请勿传播第8页, 共17页port link-type trunkundo port trunk permit vlan 1port trunk permit vlan 2 to 16stp config-digest-snooping \\连接cisco交换机必须配置com en fi \\开启光口三、端口绑定配置举例1. 组网需求为了防止小区内有恶意用户盗用Host A的IP地址，需要将Host A的MAC地址和IP地址绑定到Switch A上的Ethernet1/0/1端口。

H3C IX3000存储产品日常维护手册

存储业务系统正常、稳定地运行是我们共同的愿望，为了我们共同的目标，请您根据以下维护建议关注存储运行健康状态。

1、注意保持机房整洁，防尘防潮，保持机房温度处于正常范围之内。

2、不允许在线情况下随意插拔硬盘，对硬盘操作时需遵照《硬盘使用注意事项》进行。

3、请时常关注硬盘故障指示灯状态，如果硬盘黄色故障指示灯常亮，请立即联系H3C工程师处理。

4、请时常关注控制器故障指示灯状态，如果控制器故障指示灯常亮，请立即联系H3C工程师处理。

5、请时常关注DEU故障指示灯状态，如果DEU故障指示灯常亮，请立即联系H3C工程师处理。

6、请时常关注RAID状态，如果RAID处于降级运行状态，请立即联系H3C工程师处理。

7、请经常检查控制器状态，检查控制器电源指示灯，如果电源指示灯为常亮说明控器运行正常，如果电源指示灯闪烁，请立即联系H3C工程师处理。

8、请经常登录neocean neostor服务器，检查事件日志是否有warning和error两种级别的错误信息，如有请立即发给H3C工程师分析。

如下：9、如果要对存储进行关机，请严格按照正常关机流程处理或者联系代理商和H3C工程师支持。

10、如果机房出现异常断电情况，请及时恢复存储供电。

11、对设备硬件进行相关操作时应注意戴好防静电手腕。

h3c日常维护手册(巡检篇)

1 查看系统异常时的处理方式通过执行display system-failure 命令，可查看系统异常时的处理方式。

<Sysname> display system-failureSystem failure handling method: reboot2 查看设备温度命令dis environment3.查看各插板的工作状态命令dis device实例如下图：4.查看风扇运行状态dis fan5.查看日志信息dis trapbuffer（查看系统告警）dis logbuffer （查看系统日志）详细解释入下图：5.显示当前生效的配（部分未生效的配信息不显示）dis cur命令：display current-configuration 描述：display current-configuration命令用来显示以太网交换机当前生效的配置参数。

对于某些正在生效的配置参数，如果与缺省工作参数相同，则不显示。

当用户完成一组配置之后，如果需要验证配置是否正确，则可以执行display current-configuration命令查看当前生效的参数。

对于某些参数，虽然用户已经配置，但如果这些参数对应的功能没有生效，系统不予显示（如单板不在位）；如果save 配置后，将保存当前能显示到的配置。

6.display saved-configuration命令：display saved-configuration描述：display saved-configuration命令用来显示以太网交换机的Flash中配置文件。

如果以太网交换机上电之后不能正常工作，可以执行display saved-configuration命令查看以太网交换机的启动配置。

H3C交换机常用维护方法(精)

使用定义好的用户名
输入密码使用二进制传输
将新版本CMW软件上传
软件升级-CMW升级
上传完毕后，在交换机上查看一下上传的CMW软件的字节数 <H3C>dir 然后比较上传的新版本CMW与电脑A上的软件的字节数是否一样，如果不一样就需要重新上传，如果一样的话，就使用下面的命令来设置下次交换机启动时使用的CMW软件。 <H3C>boot boot-loader XXXX.bin 重启交换机后，则交换机使用的版本为新版本的软件，可以通过 <H3C>dis ver 或者 <H3C>dis boot 来查看当前使用的CMW版本
软件升级-CMW升级
进入交换机后：
交换机的CMW版
[PA_SC_CD_F4_H3628_11]dis ver 本为3.10H3C Comware Platform Software. 1510P12 Comware Software, Version 3.10, Release 1510P12 Copyright (c) 2004-2007 Hangzhou Huawei-3Com Tech. Co., Ltd. All rights reserved. H3C S3600-28P-PWR-EI uptime is 0 week, 0 day, 14 hours, 26 minutes H3C S3600-28P-PWR-EI with 1 MIPS Processor 该交换机为s3600-28P-PWR-EI 64M bytes DRAM 16384K bytes Flash Memory Config Register points to FLASH Hardware Version is REV.B CPLD Version is CPLD 002 Bootrom Version is 319 [Subslot 0] 24 FE Hardware Version is REV.B [Subslot 1] 4 GE Hardware Version is REV.B

H3C UniStor X10000系列存储维护手册

H3C UniStor X10000系列存储维护手册目录1 安全········································1-11.1 安全信息······································1-11.1.1 运行安全···································1-11.1.2 电气安全···································1-11.1.3 电池安全···································1-11.2 安全注意事项····································1-21.3 静电防护······································1-21.3.1 防止静电释放·································1-21.3.2 防止静电释放的接地方法····························1-31.4 设备标识······································1-32 工具········································2-13 X10516/X10529 硬件维护·······························3-13.1 准备工作······································3-13.2 拆卸X10516/X10529 ···································································································3-13.3 可更换部件·····································3-33.4 更换安全面板····································3-43.4.1 更换场景···································3-43.4.2 更换安全面板·································3-43.5 更换硬盘······································3-53.5.1 更换场景···································3-53.5.2 准备工作···································3-53.5.3 更换硬盘···································3-63.6 更换机箱盖·····································3-73.6.1 更换场景···································3-73.6.2 更换机箱盖··································3-83.7 更换电源模块····································3-93.7.1 更换场景···································3-93.7.2 更换电源模块································3-103.8 更换导风罩····································3-133.8.1 更换场景··································3-133.8.2 更换导风罩·································3-133.9 更换Riser卡和PCIe卡·······························3-143.9.1 更换场景··································3-143.9.2 更换Riser卡和PCIe卡·····························3-15 3.10 更换RAID卡···································3-173.10.1 更换场景··································3-173.10.2 更换RAID卡································3-17 3.11 更换超级电容··································3-193.11.1 更换场景··································3-193.11.2 更换超级电容································3-19 3.12 更换网卡····································3-203.12.1 更换场景··································3-203.12.2 更换网卡··································3-20 3.13 更换风扇····································3-223.13.1 更换场景··································3-223.13.2 更换风扇··································3-22 3.14 更换风扇笼···································3-243.14.1 更换场景··································3-243.14.2 更换风扇笼·································3-24 3.15 更换DIMM ············································································································· 3-253.15.1 更换场景··································3-253.15.2 更换DIMM ···································································································· 3-25 3.16 更换CPU··············································································································· 3-273.16.1 更换场景··································3-273.16.2 更换CPU ······································································································ 3-27 3.17 更换系统电池··································3-333.17.1 更换场景··································3-333.17.2 更换系统电池································3-33 3.18 更换主板····································3-353.18.1 更换场景··································3-353.18.2 更换主板··································3-35 3.19 更换硬盘扩展板·································3-373.19.1 更换场景··································3-373.19.2 更换硬盘扩展板·······························3-37 3.20 更换硬盘背板··································3-403.20.1 更换场景··································3-403.20.2 更换硬盘背板································3-40 3.21 更换智能挂耳··································3-443.22 布线······································3-483.22.1 连接硬盘线缆································3-483.22.2 连接后面板串口线缆····························3-513.22.3 连接前面板I/O组件线缆···························3-524 X10326 硬件维护···································4-14.1 准备工作······································4-14.2 拆卸X10326 ··············································································································4-14.3 拉出前部硬盘笼1 ·······································································································4-24.4 可更换部件·····································4-34.5 更换安全面板····································4-44.5.1 更换场景···································4-44.5.2 更换安全面板·································4-44.6 更换硬盘······································4-54.6.1 更换场景···································4-54.6.2 更换硬盘···································4-54.7 更换硬盘假面板···································4-64.7.1 更换场景···································4-64.7.2 更换硬盘假面板································4-64.8 更换电源模块····································4-64.8.1 更换场景···································4-64.8.2 更换电源模块·································4-64.9 更换机箱盖····································4-104.9.1 更换场景··································4-104.9.2 更换机箱盖·································4-104.10 更换导风罩···································4-114.10.1 更换场景··································4-114.10.2 更换导风罩·································4-114.11 更换风扇假面板·································4-124.11.1 更换场景··································4-124.11.2 更换风扇假面板·······························4-124.12 更换风扇笼盖板·································4-134.12.1 更换场景··································4-134.12.2 更换风扇笼盖板·······························4-134.13 更换风扇····································4-144.14 更换DIMM ············································································································· 4-154.14.1 更换场景··································4-154.14.2 更换DIMM ···································································································· 4-15 4.15 更换散热器···································4-164.15.1 更换场景··································4-164.15.2 更换散热器·································4-16 4.16 更换CPU··············································································································· 4-184.16.1 更换场景··································4-184.16.2 更换CPU ······································································································ 4-18 4.17 更换PCIe卡···································4-214.17.1 更换场景··································4-214.17.2 更换PCIe卡································4-22 4.18 更换智能存储电池································4-234.18.1 更换场景··································4-234.18.2 更换智能存储电池·····························4-23 4.19 更换RAID卡···································4-244.19.1 更换场景··································4-244.19.2 更换RAID卡································4-25 4.20 更换Riser卡···································4-264.20.1 更换场景··································4-264.20.2 更换Riser卡································4-26 4.21 更换管理模块··································4-274.21.1 更换场景··································4-274.21.2 更换管理模块································4-27 4.22 更换系统电池··································4-284.22.1 更换场景··································4-284.22.2 更换系统电池································4-28 4.23 更换主板····································4-294.23.1 更换场景··································4-294.23.2 更换主板··································4-29 4.24 更换硬盘背板··································4-324.24.1 更换场景··································4-324.24.2 更换硬盘背板································4-32 4.25 更换线缆管理器·································4-36。

华为H3C日常维护及命令

十四章设备日常维护与常见故障处理
14.1日常维护建议
●路由器设备关系重大，应派受过培训的专人进行日常维护
●保持机房清洁干净，防尘防潮，防止鼠虫进入
●每天检查设备工作状态，指示灯，系统温度等
● 注意检查设备表面温度，检查风扇孔是否堵塞调整电缆和网线一定要慎重，
调整前一定要作标记，以防恢复时线序混乱，造成误接。

对设备硬件进行操作时应带防静电手腕。

● 不得轻易对设备进行复位、改动业务数据
14.2日常维护命令介绍
dis environment 查看系统板卡温度
dis power 查看电源工作状态
dis fan 查看风扇工作状态
dis device 查看设备板卡状态
dis cpu 查看系统CPU
dis mem 查看系统内存
dis logbuffer 查看系统日志
dis trapuffer 查看重大事件日志
14.3日常维护常用诊断工具
ping命令
tracert命令
display命令
reset命令
debug命令
14.4设备故障信息收集方法
display diagnostic-information
14.5故障处理流程与最快方法
客户发现故障立即上报，然后联系维保商进行故障定位，按照工程师帮助提示收集故障信息，维保商工程师进行分析定位，然后维保商向厂家提交备件申请，重大故障走特殊流程，最终维保商工程师携带备件到客户现场进行更换或通过技术手段先恢复业务。

保证7*24服务，业务恢复。

H3C安全产品日常维护指导书有限公开

H3C SecPath系列防火墙（V5）维护指导书（V1.0）杭州华三通信技术有限公司2016-03-29 H3C机密，未经许可不得扩散第1页，共35页修订记录Revision Records2016-03-29 H3C机密，未经许可不得扩散第2页，共35页目录1.日常维护建议总则 (7)1.1.日常维护建议 (7)1.2.维护记录表格和维护操作指导书的使用说明 (8)2.安装操作指导 (9)3.维护操作指导 (10)3.1.H3C S EC P ATH防火墙设备现场巡检 (10)3.2.设备日常维护操作指导 (11)3.3.设备季度维护操作指导 (12)3.4.H3C设备年度维护操作指导 (12)4.入门维护 (13)4.1.基本概念 (13)4.2.产品FAQ (17)5.常见故障处理 (21)5.1.S EC P ATH防火墙故障诊断流程 (21)5.2.H3C S EC P ATH防火墙系统维护 (21)5.3.S EC P ATH防火墙连通性 (22)5.4.N AT故障处理 (22)5.5.攻击防范故障处理 (23)6.常见问题及FAQ (25)6.1.N AT专题篇FAQ (25)6.2.攻击防范篇FAQ (26)6.3.高可靠性篇FAQ (27)7.附录 (29)7.1.维护记录表格 (29)7.2.H3C公司资源和求助途径 (35)2016-03-29 H3C机密，未经许可不得扩散第3页，共35页H3C SecPath系列防火墙维护指导书关键词：SecPath防火墙、维护指导、常见问题、摘要：此文档用于指导日常维护H3C 防火墙产品及解决常见故障参考使用，主要描述用户维护部门周期性（每天、每季、每年）对H3C SecPath系列防火墙设备进行健康性检查的相关事项。

适用对象：本文档适用于H3C SecPath系列防火墙产品的日常操作和维护工程师。

(完整word版)H3C iMC维护手册v1.0

目录1 维护入门......................................................................................................................... 1-11.1 iMC PLAT(平台)基础知识 ............................................................................................ 1-11.1.1 系统角色和操作员分组........................................................................................ 1-11.1.2 iMC PLAT目录结构............................................................................................ 1-21.1.3 iMC PLAT常用文件说明 ..................................................................................... 1-21.1.4 iMC PLAT后台程序日志文件说明 ........................................................................ 1-31.1.5 iMC PLAT 相关数据库说明 ................................................................................. 1-51.1.6 iMC PLAT相关进程说明 .................................................................................... 1-61.2 iMC UAM/EAD/CAMS组件基础知识 ............................................................................. 1-71.2.1 iMC UAM/EAD/CAMS系统角色分类.................................................................... 1-71.2.2 iMC UAM/EAD/CAMS组件目录结构.................................................................... 1-71.2.3 iMC UAM/EAD/CAMS常用文件说明.................................................................... 1-81.2.4 iMC UAM/EAD/CAMS常用日志文件说明 ............................................................. 1-91.2.5 iMC UAM/EAD/CAMS相关数据库说明................................................................ 1-141.2.6 iMC UAM/EAD/CAMS相关进程说明.................................................................. 1-141.3 iNode基础知识........................................................................................................... 1-151.3.1 iNode目录结构 ................................................................................................. 1-151.3.2 iNode常用文件说明........................................................................................... 1-161.3.3 iNode常用日志文件说明 .................................................................................... 1-161.3.4 iNode相关进程说明........................................................................................... 1-181.4 iMC WSM(无线业务管理)组件基础知识 ........................................................................ 1-191.4.1 常用文件说明.................................................................................................... 1-191.4.2 日志文件说明.................................................................................................... 1-191.4.3 数据库说明 ....................................................................................................... 1-211.4.4 iMC WSM进程说明 ........................................................................................... 1-211.5 iMC BIMS（分支网点智能管理系统）基础知识 ............................................................. 1-211.5.1 系统角色和操作员分组....................................................................................... 1-211.5.2 iMC BIMS目录结构........................................................................................... 1-221.5.3 iMC BIMS常用文件说明 .................................................................................... 1-221.5.4 iMC BIMS后台程序日志文件说明 ....................................................................... 1-231.5.5 iMC BIMS 相关数据库说明 ................................................................................ 1-251.5.6 iMC BIMS相关进程说明 .................................................................................... 1-251.6 iMC MVM(MPLS VPN业务管理)组件基础知识.............................................................. 1-261.6.1 常用文件说明.................................................................................................... 1-261.6.2 日志文件说明.................................................................................................... 1-261.6.3 数据库说明 ....................................................................................................... 1-281.6.4 iMC MVM进程说明............................................................................................ 1-281.7 iMC IVM(IPsec VPN业务管理)组件基础知识 ................................................................ 1-291.7.1 常用文件说明.................................................................................................... 1-291.7.2 日志文件说明.................................................................................................... 1-291.7.3 数据库说明 ....................................................................................................... 1-301.7.4 iMC IVM进程说明 ............................................................................................. 1-311.8 iMC NTA/UBA基础知识 .............................................................................................. 1-311.8.1 iMC NTA/UBA目录结构..................................................................................... 1-311.8.2 iMC NTA/UBA常用文件说明 .............................................................................. 1-321.8.3 iMC NTA/UBA后台程序日志文件说明 ................................................................. 1-321.8.4 iMC NTA/UBA 相关数据库说明.......................................................................... 1-331.8.5 iMC NTA/UBA相关进程说明 ............................................................................. 1-331.9 iMC SOM（服务运维管理）基础知识 ........................................................................... 1-341.9.1 iMC SOM组件说明............................................................................................ 1-341.9.2 iMC SOM目录结构............................................................................................ 1-341.9.3 iMC SOM常用文件说明 ..................................................................................... 1-341.9.4 iMC SOM相关数据库说明.................................................................................. 1-341.9.5 iMC SOM相关进程说明 .................................................................................... 1-351.10 iMC QoSM基础知识 ................................................................................................. 1-351.10.1 系统角色和操作员分组..................................................................................... 1-351.10.2 iMC QoSM 目录结构....................................................................................... 1-351.10.3 iMC QoSM 相关数据库说明 ............................................................................. 1-352 iNode ............................................................................................................................. 2-12.1 基本功能..................................................................................................................... 2-12.1.1 防内网外连 ........................................................................................................ 2-13 iMC 服务器例行维护........................................................................................................ 3-13.1 操作系统维护：........................................................................................................... 3-13.1.1 Windows操作系统： .......................................................................................... 3-13.2 数据库维护 ................................................................................................................. 3-33.2.1 安全注意事项：.................................................................................................. 3-33.3 iMC 监控管理代理 ....................................................................................................... 3-34 iMC各组件常用维护方法 .................................................................................................. 4-14.1 iMC PLAT(平台)维护................................................................................................... 4-14.1.1 在新装Windows操作系统中通过IE浏览器无法登录iMC系统，如何解决? ................. 4-14.1.2 平台字符串查询的匹配规则。

H3C设备维护及故障处理指南

MPU(S) 1:
Uptime is 0 weeks,0 days,1 hours,23 minutes
H3C S7503E MPU(S) with 1 BCM1125H Processor
BOARD TYPE:
LSQ1SRP2XB
DRAM:
512M bytes
FLASH:
64M bytes
NVRAM:
<Sysname> display version H3C Comware Platform Software Comware Software, Version 5.20, Release 6606 Copyright (c) 2004-2010 Hangzhou H3C Tech. Co., Ltd. All rights reserved. H3C S7503E uptime is 0 week, 0 day, 6 hours, 57 miB 1 Version:
VER.B
PCB 2 Version:
VER.B
Bootrom Version: 210
CPLD 1 Version:
006
CPLD 2 Version:
006
Release Version: H3C S7503E-6606
Patch Version : None
LPU 2:
Uptime is 0 weeks,0 days,6 hours,55 minutes
H3C S7503E LPU with 1 BCM1122 Processor
BOARD TYPE:
LSQ1GV48SA
DRAM:
512M bytes
FLASH:
0M bytes

H3C交换机基本维护手册

交换机操作手册1、通过交换机Console 口进行本地登录是登录交换机的最基本的方式，也是配置通过其他方式登录交换机的基础。

连接示意图如下：2、把电脑和交换机连接好后，交换机上电开机，然后在电脑上进行如下操作，首先点击开始－>程序－>附件－>通讯－>超级终端打开后出现下面图示，输入名称，可以任意输入。

输入完成点击确定，出现下面界面，连接时使用选择COM口，一般台式机为COM1或COM2，而笔记本经过转接，可能会产生COM3或COM4，也有可能是其他的，你可以在下面的选择项里看到，选择完成后点击确定。

通过上面的选择，现在到了对端口属性进行设置，一般情况下没有进行过修改，默认只要点击还原为默认值就可以了，然后再单击确定。

之后敲回车即可，会出现H3C>提示符，说明已经与交换机连接，可以进行配置了，如果没有可以重启交换机或检查连接是否正确。

2、交换机加电开机显示sarting......************************************************************** ** H3C S5510-24P BOOTROM, Version 142 ** **************************************************************Copyright (c) 2004-2008 Hangzhou H3C Tech. Co., Ltd.Creation date: Mar 12 2008, 11:17:30CPU Clock Speed : 200MHzBUS Clock Speed : 33MHzMemory Size : 128MBThe switch Mac is: 000F-E2B1-BD60Press Ctrl-B to enter Boot Menu... 1 0Auto-booting...Decompress Image.................................................................................................................................................... .............................................................................................................................................................. .............................................................................................................................................................. .............................................................................................................................................................. .............................................................................................................................................................. .........................................................................................................................................................O K!Starting ...****************************************************************************** * Copyright (c) 2004-2008 Hangzhou H3C Tech. Co., Ltd. All rights reserved. ** Without the owner's prior written consent, ** no decompiling or reverse-engineering shall be allowed. ******************************************************************************* It will take a long time to get configuration file, please wait...Startup configuration file does not exist.User interface aux0 is available.//开机自检过程3、现在对交换机参数及配置进行讲解Press ENTER to get started.<H3C>%Apr 26 12:03:53:611 2000 H3C SHELL/4/LOGIN: Console login from aux0<H3C><H3C>sys//进入视图模式System View: return to User View with Ctrl+Z.[H3C][H3C]sysname neiwang//对交换机进行命名[neiwang]dis cu//查看交换机配置#version 5.20, Release 5303#sysname neiwang#domain default enable system#domain systemaccess-limit disablestate activeidle-cut disableself-service-url disableinterface NULL0#interface GigabitEthernet1/0/1 #interface GigabitEthernet1/0/2 #interface GigabitEthernet1/0/3 #interface GigabitEthernet1/0/4 #interface GigabitEthernet1/0/5 #interface GigabitEthernet1/0/6 #interface GigabitEthernet1/0/7 #interface GigabitEthernet1/0/8 #interface GigabitEthernet1/0/9 #interface GigabitEthernet1/0/10 #interface GigabitEthernet1/0/11 #interface GigabitEthernet1/0/12 #interface GigabitEthernet1/0/13 #interface GigabitEthernet1/0/14 #interface GigabitEthernet1/0/15 #interface GigabitEthernet1/0/16 #interface GigabitEthernet1/0/17 #interface GigabitEthernet1/0/18 #interface GigabitEthernet1/0/19 #interface GigabitEthernet1/0/20 #interface GigabitEthernet1/0/21interface GigabitEthernet1/0/22#interface GigabitEthernet1/0/23#interface GigabitEthernet1/0/24#interface GigabitEthernet1/0/25shutdown#interface GigabitEthernet1/0/26shutdown#interface GigabitEthernet1/0/27shutdown#interface GigabitEthernet1/0/28shutdown#user-interface aux 0user-interface vty 0 4#return[neiwang][neiwangvlan 25//创建VLAN[neiwang-vlan25]port GigabitEthernet 1/0/1 to GigabitEthernet 1/0/10//给VLAN批量添加端口[neiwang-vlan25]qu//退出VLAN视图[neiwang]interface vlan 25 //进入VLAN接口视图[neiwang-Vlan-interface25] ip address 192.168.120.1 24 //给VLAN添加IP地址[neiwang-Vlan-interface25]qu//退出VLAn接口视图[neiwang]dis cu//再次查看交换机配置,可以看到多了一个VLAN及这个VLAN的IP地址#version 5.20, Release 5303#sysname neiwang#domain default enable system#vlan 1vlan 25#domain systemaccess-limit disablestate activeidle-cut disableself-service-url disable#interface NULL0#interface Vlan-interface25ip address 192.168.120.1 255.255.255.0 #interface GigabitEthernet1/0/1port access vlan 25#interface GigabitEthernet1/0/2port access vlan 25#interface GigabitEthernet1/0/3port access vlan 25#interface GigabitEthernet1/0/4port access vlan 25#interface GigabitEthernet1/0/5port access vlan 25#interface GigabitEthernet1/0/6port access vlan 25#interface GigabitEthernet1/0/7port access vlan 25#interface GigabitEthernet1/0/8port access vlan 25#interface GigabitEthernet1/0/9port access vlan 25#interface GigabitEthernet1/0/10port access vlan 25#interface GigabitEthernet1/0/11 #interface GigabitEthernet1/0/12 #interface GigabitEthernet1/0/13 #interface GigabitEthernet1/0/14 #interface GigabitEthernet1/0/15 #interface GigabitEthernet1/0/16 #interface GigabitEthernet1/0/17 #interface GigabitEthernet1/0/18 #interface GigabitEthernet1/0/19 #interface GigabitEthernet1/0/20 #interface GigabitEthernet1/0/21 #interface GigabitEthernet1/0/22 #interface GigabitEthernet1/0/23 #interface GigabitEthernet1/0/24 #interface GigabitEthernet1/0/25 shutdown#interface GigabitEthernet1/0/26 shutdown#interface GigabitEthernet1/0/27 shutdown#interface GigabitEthernet1/0/28 shutdown#user-interface aux 0user-interface vty 0 4#return[neiwang]telnet server enable% Start Telnet server//下面是为交换机添加一个新用户操作[neiwang]local-user admin //添加新用户New local user added.[neiwang-luser-admin]pa sin admin //为新用户设置密码[neiwang-luser-admin]service-type telnet level 3 //为新用户设置服务及权限[neiwang-luser-admin]qu//下面为该用户配置telnet服务[neiwang]user-interface vty ?INTEGER<0-4> First user terminal interface number to be configured[neiwang]user-interface vty 0 4 //进入telnet视图模式[neiwang-ui-vty0-4]authentication-mode scheme ? //认证模式设置none Login without checkingpassword Authentication use password of user terminal interfacescheme Authentication use AAA[neiwang-ui-vty0-4]authentication-mode s[neiwang-ui-vty0-4]authentication-mode scheme //设备认证模式为用户名密码[neiwang-ui-vty0-4]qu[neiwang]telnet server enable //开启telnet服务[neiwang]save ?STRING The name of specific file(*.cfg)safely Save current configuration safely<cr>[neiwang]save s[neiwang]save safely //保存交换机设置,以防断电交换机配置丢失[neiwang]save s ?savesftpshutdown-intervalsnmp-agentsshsslstpsuperswitch-modesysname[neiwang]save safelyThe current configuration will be written to the device. Are you sure? [Y/N]:yPlease input the file name(*.cfg)[flash:/startup.cfg](To leave the existing filename unchanged, press the enter key):Validating file. Please wait...Now saving current configuration to the device.Saving configuration flash:/startup.cfg. Please wait... .................Configuration is saved to flash successfully.[neiwang]qu<neiwang>saveThe current configuration will be written to the device. Are you sure? [Y/N]:n<neiwang>sysSystem View: return to User View with Ctrl+Z.[neiwang]DHCP Snooping was enabled.//下面为对VLAN及端口增加删除进行操作[neiwang][neiwang][neiwang]int[neiwang]interface g[neiwang]interface GigabitEthernet 1/0/15 //进入交换机端口模式[neiwang-GigabitEthernet1/0/15]port acc[neiwang-GigabitEthernet1/0/15]port access vlan 25 //单一端口添加到VLAN [neiwang-GigabitEthernet1/0/15]port access vlan 26 //如果VLAN没有创建,提示如下Error: This VLAN does not exist.[neiwang-GigabitEthernet1/0/15]qu[neiwang]vlan 26[neiwang-vlan26][neiwang-GigabitEthernet1/0/15]port access vlan 26[neiwang-GigabitEthernet1/0/15]qu//下面为对单一端口属性进行设置[neiwang]int g 1/0/25[neiwang-GigabitEthernet1/0/25]sp[neiwang-GigabitEthernet1/0/25]speed 1000 //把25号端口强制为1000M [neiwang-GigabitEthernet1/0/25]du[neiwang-GigabitEthernet1/0/25]duplex ful[neiwang-GigabitEthernet1/0/25]duplex full //把25号端口强制为全双工[neiwang-GigabitEthernet1/0/25]port[neiwang-GigabitEthernet1/0/25]port link-t[neiwang-GigabitEthernet1/0/25]port link-type ?access Access link-typehybrid Hybrid VLAN link-typetrunk VLAN Trunk link-type[neiwang-GigabitEthernet1/0/25]port link-type tr[neiwang-GigabitEthernet1/0/25]port link-type trunk //定义该端口为trunk属性<cr>[neiwang-GigabitEthernet1/0/25]port trunk permit all ?^% Unrecognized command found at '^' position.[neiwang-GigabitEthernet1/0/25]port trunk permit all ? //允许所有VLAN通过该端口INTEGER<1-4094> VLAN IDall All the VLANs[neiwang-GigabitEthernet1/0/25]port trunk permit vlan all ?<cr>[neiwang-GigabitEthernet1/0/25]port trunk permit vlan allPlease wait........... Done.<cr>[neiwang-GigabitEthernet1/0/25]undo port link-type //取消该端口属性前面加undo Please wait........... Done.[neiwang-GigabitEthernet1/0/25]sp[neiwang-GigabitEthernet1/0/25]speed ?10 Specify speed of current port 10Mb/s100 Specify speed of current port 100Mb/s1000 Specify speed of current port 1000Mb/sauto Enable port's speed negotiation automatically[neiwang-GigabitEthernet1/0/25]speed au[neiwang-GigabitEthernet1/0/25]speed auto[neiwang-GigabitEthernet1/0/25]du[neiwang-GigabitEthernet1/0/25]duplex au[neiwang-GigabitEthernet1/0/25]duplex auto[neiwang-GigabitEthernet1/0/25]qu[neiwang]dhcp[neiwang]dhcp-snooping ?<cr>[neiwang]dhcp-snoopingDHCP Snooping has already been enabled.[neiwang]int g 1/0/25[neiwang-GigabitEthernet1/0/25]dhcp[neiwang-GigabitEthernet1/0/25]dhcp-snooping ?information Specify Option 82 servicetrust Trusted port[neiwang-GigabitEthernet1/0/25]dhcp-snooping tr[neiwang-GigabitEthernet1/0/25]dhcp-snooping trust ?<cr>[neiwang-GigabitEthernet1/0/25]dhcp-snooping trust[neiwang-GigabitEthernet1/0/25]qu[neiwang]dis valn ?INTEGER<1-4094> VLAN IDall All the VLANsdynamic Dynamic VLAN IDreserved Reserved VLAN IDstatic Static VLAN ID<cr>[neiwang]dis vlan all //查看显示VLAN VLAN ID: 1VLAN Type: staticRoute Interface: not configuredDescription: VLAN 0001Tagged Ports: noneUntagged Ports:GigabitEthernet1/0/11 GigabitEthernet1/0/12 GigabitEthernet1/0/13 GigabitEthernet1/0/14 GigabitEthernet1/0/15 GigabitEthernet1/0/16 GigabitEthernet1/0/17 GigabitEthernet1/0/18 GigabitEthernet1/0/19 GigabitEthernet1/0/20 GigabitEthernet1/0/21 GigabitEthernet1/0/22 GigabitEthernet1/0/23 GigabitEthernet1/0/24 GigabitEthernet1/0/25 GigabitEthernet1/0/26 GigabitEthernet1/0/27 GigabitEthernet1/0/28VLAN ID: 25VLAN Type: staticRoute Interface: configuredIP Address: 192.168.120.1Subnet Mask: 255.255.255.0Description: VLAN 0025Tagged Ports: noneUntagged Ports:GigabitEthernet1/0/1 GigabitEthernet1/0/2 GigabitEthernet1/0/3 GigabitEthernet1/0/4 GigabitEthernet1/0/5 GigabitEthernet1/0/6 GigabitEthernet1/0/7 GigabitEthernet1/0/8 GigabitEthernet1/0/9 GigabitEthernet1/0/10[neiwang]dis vlan all%Apr 26 12:28:45:14 2000 neiwang IFNET/4/LINK UPDOWN:GigabitEthernet1/0/13: link status is DOWN%Apr 26 12:28:46:904 2000 neiwang IFNET/4/LINK UPDOWN:GigabitEthernet1/0/9: link status is UP%Apr 26 12:28:46:914 2000 neiwang IFNET/4/LINK UPDOWN:Vlan-interface25: link status is UP%Apr 26 12:28:46:917 2000 neiwang IFNET/4/UPDOWN:Line protocol on the interface Vlan-interface25 is UPDHCP Snooping has already been enabled.[neiwang]dis arp //三层交换机查看arp列表^% Incomplete command found at '^' position.[neiwang]dis arp ?X.X.X.X Display ARP entry by special IP addressall Display static&dynamic ARP entrydynamic Display dynamic ARP entryinterface Display by Interfacesource-suppression Display ARP source suppressionstatic Display static ARP entrytimer Display ARP timervlan Display by VLANvpn-instance Display ARP entries by VPN name[neiwang]dis arp allType: S-Static D-DynamicIP Address MAC Address VLAN ID Interface Aging Type [neiwang]dis mac-a[neiwang]dis mac-address ? //查看交换机mac地址列表H-H-H MAC addressaging-time Global aging timeblackhole Blackhole entry, without aging, can be added/deleted, saved tothe configuration filecount MAC entries countdynamic Dynamic entry, with aging, can be added/deleted, lost afterresetinterface Choose one interface to displaystatic Static entry, without aging, can be added/deleted, saved to theconfiguration filevlan VLAN<cr>[neiwang]dis mac-addressNo Multicast Mac addresses found.[neiwang]%Apr 26 12:30:36:527 2000 neiwang SHELL/4/LOGIN: admin login from 192.168.120.15%Apr 26 12:31:14:141 2000 neiwang SHELL/4/LOGOUT: admin logout from 192.168.120.15。

H3C无线产品日常维护指南(doc 49页)(正式版)

H3C 无线产品日常维护指导书V3.0杭州华三通信技术有限公司修订记录目录H3C 无线产品日常维护指导书关键词：WLAN、AP、AC、STA、AAA、系统维护摘要：此指导书用于指导H3C 无线产品的日常维护使用，主要描述用户维护部门周期性（每天、每周、每月、每年）对H3C 无线产品进行健康性检查的相关事项。

适用对象：本文档适用于维护H3C 无线产品的工程师缩略语：第1章日常维护建议指导书总则维护范围：日常维护主要涉及的范围是WLAN网元(包括无线网、接入网)以及管理维护系统的监控(包括WLAN网管及IP综合网管)。

维护手段：巡检、优化、处理投诉、保障等1.1 无线产品日常维护建议尊敬的用户：感谢您使用H3C公司的无线产品。

系统运行的正常、稳定是我们共同的愿望，为了我们共同的目标，请您重视以下建议并参照《日常维护建议指导书》进行必要的日常维护。

1、无线设备的使用涉及到多种业务知识，应安排受过专业培训的专人进行日常维护。

2、保持机房清洁干净，防尘防潮，防止虫鼠进入。

3、每天参照《H3C 无线产品日常维护指导书》中内容对设备进行例行检查和测试，并记录检查结果。

4、用于系统管理、设备维护和业务操作的用户名和口令应该严格管理，定期更改，并只向特定相关人员发放。

5、严禁向设备维护终端和WEB客户端主机装入业务无关软件，严禁用设备维护终端和WEB客户端主机玩游戏。

维护终端和WEB客户端主机应该定期杀毒。

6、遇有不明原因告警，请迅速与代理商工程师或者H3C公司服务热线联系（400-8100504/800-8100504）。

7、调整线缆一定要慎重，调整前要作标记，以防误接。

8、对设备硬件进行操作时应戴防静电手腕。

9、对设备进行复位、改动业务数据之前做好备份工作。

10、在对设备版本进行升级前，请详细阅读《版本说明书》中的升级指导，并全面备份相关配置。

WLAN设备运维日常的维护工作内容主要有季度巡检、故障处理、投诉处理、网络整改、通信保障等。

H3C SecPath F5020[5040]防火墙产品日常维护指导书

H3C F50X0产品日常维护指导书V1.0杭州华三通信技术有限公司修订记录目录第1章日常维护建议 (2)1.1 F50X0产品日常维护建议 (2)1维护操作指导 (4)1.1 H3C F50X0设备日常维护操作指导 (4)1.2 H3C F50X0设备季度维护操作指导 (4)1.3 H3C F50X0设备年度维护操作指导 (5)2维护记录表格 (6)2.1 H3C F50X0设备日常维护值班日志 (6)2.2 H3C F50X0设备季度维护记录表 (7)2.3 H3C F50X0设备年度维护记录表 (8)2.4 H3C F50X0设备突发问题处理记录表 (9)2.5 硬件更换记录表 (10)2.6 系统参数修改记录表 (11)3常见故障处理 (12)3.1 ping不通或丢包 (12)3.1.1 故障描述 (12)3.1.2 故障处理步骤 (12)3.2 有NAT转换情况下，ping丢包或不通 (13)3.2.1 故障描述 (13)3.2.2 故障处理步骤 (13)3.3 动态NAT转换故障(以动态nat outbound为例) (15)3.3.1 故障描述 (15)3.3.2 故障处理步骤 (15)3.4 静态NAT444转换故障 (17)3.4.1 故障描述 (17)3.4.2 故障处理步骤 (18)3.5 设备作为出口网关设备割接之后，NAT业务不通，但是接口地址可以ping通 (19)3.5.1 故障描述 (19)3.5.2 故障处理步骤 (19)3.6 IPSec SA可以成功建立，但是IPSec保护的流量不通 (20)3.6.1 故障描述 (20)3.6.2 故障处理步骤（以分析F50X0-2为例） (20)3.7 CPU占用率高 (22)3.7.1 故障描述 (22)3.7.2 故障处理步骤 (23)3.8 内存占用率高 (25)3.8.1 故障描述 (25)3.8.2 故障处理步骤 (25)H3C F50X0产品日常维护指导书摘要：此指导书用于指导H3C F50X0产品的日常维护使用，主要描述用户维护部门周期性（每天、每周、每月、每年）对H3C F50X0产品进行健康性检查的相关事项。

H3C交换机维护文档

H3C交换机日常维护操作方法日常维护中所有的操作都要在[ ]提示符下操作才有效。

一、创建vlan在提示符〔〕模式下，输入vlan 2,就立即创建了vlan2,而且立即生效。

二、删除vlan在刚才执行的vlan 2前，添加undo,即undo vlan 2然后会车，就把刚才创建的vlan 2删除了。

三、添加端口创建完了vlan，就可以把端口添加到相应的vlan里，方法是：先进入vlan，比如vlan 2,就可以看到提示符变成了vlan2提示符了，然后再输入Port interface g1/0/1 to g1/0/2,这样就把1口和2口都添加到vlan 2里了。

如果1口已经在vlan 2里，现在想调整，将1口变成vlan3里的端口我们可以输入：Vlan 3,提示符变成vlan 3了，然后再输入port interface g1/0/1就可以了。

四、添加静态路由如果内网增加了vlan，而且这个段里的机器也要访问外网，需要在交换机里执行：Ip route 0.0.0.0 0.0.0.0 192.168.100.2 (0.0.0.0 0.0.0.0代表任意ip，192.168.100.2是下一跳的ip,即防火墙的内口ip),同样需要在防火墙上向内网做一条反向的静态路由。

五、给vlan增加网关Interface vlan 2//选择vlan2Ip address 192.168.2.1 255.255.255.0//给vlan2添加IP做完了网关，这样vlan里的所有用户只要将网关改成这些对应vlan地址就可以自动路由六、传送单播包缺省在交换机里划分了vlan，交换机就自动的隔离了广播，这样的话，不同vlan里的机器就不能通过访问机器名的方式去访问别的机器，如果还想使用基于机器名的方式访问，需要在交换机下做允许广播包通过的命令。

Interface vlan 3\\进入到要转发广播包的vlan里[h3c-interface-vlan3]udp-helper server 192.168.5.5\\指定允许192.168.5.5的udp广播包过。

H3C无线产品日常维护指导书-chinanet

H3C无线产品日常维护指导书-chinanetH3C 无线产品日常维护指导书第1章无线用户典型问题举例 (3)1.1 用户无线网卡无法搜索到CHINANET (3)1.1.1 服务台预判 (3)1.1.2 局方判断 (4)1.2 用户无法获取IP地址 (5)1.2.1 服务台号预判 (5)1.2.2 局方判断 (5)1.3 用户可以获取IP地址，但无法打开portal认证页面（以IE为例） (5)1.3.1 服务台预判 (5)1.3.2 局方判断 (6)1.4 用户可以获取IP地址，可以打开portal认证页面，无法认证成功 (7)1.4.1 服务台号预判 (7)1.4.2 局方判断 (7)1.5 上网过程中，出现网络速度变慢的问题 (7)1.5.1 服务台预判 (7)1.5.2 局方判断 (7)1.6 上网过程中，出现网络中断的问题 (8)1.6.1 服务台预判 (8)1.6.2 局方判断 (8)第2章无线接入点典型问题举例 (8)2.1 AC+FIT AP模式出现AP无法正常注册情况 (8)2.2 AP处于不停下载版本的状态 (10)2.3 AP链接后出现链路断开分析 (10)2.4 AP短暂掉线 (11)2.5 AP永久性掉线定位 (11)2.6 AC上显示AP不停的进入或者停滞在JoinACK状态 (12)第3章无线控制器典型问题举例 (13)3.1 OAP链接不成功 (13)3.2 无线控制器添加AP后，AP始终无法正常工作 (13)3.3 用户可以获取地址，到网关不通 (14)3.4 AC常用维护命令 (14)第4章BAS典型问题举例 (15)4.1 更改portal服务器 (15)4.2 Bas常用维护命令 (16)第1章无线用户典型问题举例1.1 用户无线网卡无法搜索到CHINANET1.1.1 服务台预判原因：1、确认当地环境存在CHINANET 无线网络覆盖2、用户网卡已经被禁用；打开“网络连接”选中无线网卡将其启用3、用户笔记本电脑无线网卡的硬件开关没有打开；当前很多主流笔记本电脑都有无线网卡的硬件启用开关，或者键上有热键开启无线网卡4、用户开启了无线网卡软件配置客户端；例如用户是Intel网卡、当其开启了Intel配置网卡软件和其它无线网络配置软件，那么可能在Windows无线网络配置栏中显示：此时只能使用网卡自带的配置软件来配置，如果需要使用windows来配置其无线网络需要在网卡中勾选“用Windows配置我的无线网络设置”。

1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。

H3C日常维护手册
（v 20131114）
作者专家支持部审核邰小刚
分类其他子类指导手册
更新时间2013-11-14
关键字H3C日常维护
摘要此手册用于指导驻场工程师日常工作，驻场工程师可以按照每日、每月、每季度工作内容展开工作，此手册仅适用于通用驻场维护，各工程师可根据自身项目特点增加、减少内容。

主要适
用环境
H3C驻场运维工作
版本说明
版本号拟制/修改责任人拟制/修改日期修改内容/理由V20131114 邰小刚2013-11-14 新建
目录
版本说明 (2)
一、网络设备日常维护---日操作 (4)
1、检查CPU使用情况以及进程 (4)
2、察看内存使用情况 (4)
3、显示IP流量统计信息 (4)
4、显示接口当前运行状态和统计信息 (4)
5、查看板卡工作状态 (4)
6、查看无异常告警 (5)
7、检查显示日志缓冲区记录的信息 (5)
8、测试整个网络可达性和连通性 (5)
9、检查并显示到达目标的包路径 (5)
10、显示系统保存的用于启动的配置文件 (5)
11、显示当前配置内容 (5)
显示IP路由表中的信息 (5)
二、网络设备日常维护---月操作 (6)
1、检查设备状态灯是否正常 (6)
2、配置文件的检查核对 (6)
3、标签检查 (6)
4、检查环境状态 (6)
5、配置文件的备份 (6)
6、显示时钟 (7)
三、网络设备日常维护---季度操作 (7)
1、显示系统硬件和软件版本 (7)
2、检查运行的IOS软件信息 (7)
3、设备密码更改 (7)
一、网络设备日常维护---日操作
1、检查CPU使用情况以及进程
#display cpu-usage
检查CPU使用情况
说明：检查cpu 值是否超70%
2、察看内存使用情况
#display memory
察看内存使用情况
说明：内存使用率是否超70%
3、显示IP流量统计信息
#disp ip statistic
显示IP流量信息
说明：
4、显示接口当前运行状态和统计信息
#display interface [type number ]
查看接口的tcp/ip 信息
说明：主要查看packets input、packets output、input errors、output errors 5、查看板卡工作状态
#display device
说明：检查设备板卡运行状态
6、查看无异常告警
# display alarm record all
7、检查显示日志缓冲区记录的信息
#display logbuffer
说明：对日志系统进行审计，查看系统运行状态
8、测试整个网络可达性和连通性
#ping A.B.C.D
说明：可以选取关键的网络地址、服务器地址进行测试，主要关注延时和丢包率。

9、检查并显示到达目标的包路径
#tracert A.B.C.D
说明：可以选取不同网段地址进行跟踪测试，主要经过路由的跳数和延时。

10、显示系统保存的用于启动的配置文件
#display startup
说明：查看保存的配置信息
11、显示当前配置内容
#display current-configuration
说明：查看正在运行的配置信息。

一般用于正在对设备进行配置时显示当前正在运行配置数据12、显示IP路由表中的信息
#display ip routing-table
说明:显示整个IP路由表信息。

主要是和以前的配置信的BaseLine进行比较。

二、网络设备日常维护---月操作
1、检查设备状态灯是否正常
请至少每月查看一次设备的状态灯是否正常（现场）。

2、配置文件的检查核对
说明：对设备配置文将进行检查，并和上次备份的配置文件进行核对
3、标签检查
说明：对设备各个端口的标签进行检查是否完好，或是否有新增的连接端口标签是否完整。

4、检查环境状态
#display environment
说明：显示各个槽位板卡的温度，比较是否超过上限温度，如以下信息：
Board Temperature Lower limit Upper limit
0 38 10 45
2 52 10 50
3 41 10 50
5、配置文件的备份
[Quidway] ftp server enable ；启动FTP 服务器
[Quidway] local-user quidway ；配置本地用户名
[Quidway] local-user quidway service-type ftp ；授权用户可以使用FTP
[Quidway] local-user quidway password simple huawei；配置用户验证密码
[Quidway] local-user quidway ftp-directory flash:/ftp/quidway；配置FTP 用户的授权信息
ftp登录网络设备，通过ftp方式下载备份文件
6、显示时钟
#display clock
说明：检查设备的时间，通常情况下整个网络的所有设备的时间应该是一致的，这有利于日志审计，根据日志排障。

三、网络设备日常维护---季度操作
1、显示系统硬件和软件版本
display version
说明：显示硬件配置、软件版本等信息。

2、检查运行的IOS软件信息
dir flash:/
说明：显示flash 的ios软件版本信息
3、设备密码更改
说明：定期修改enable密码。