網路打雜工

HA (Highly Available)定義

Bingla — Thu, 19 Aug 2010 01:20:11 +0000

99% available – 87 hours or 3.5 days of downtime per year
99.9% available – 8.76 hours of downtime per year
99.99% available – 52 minutes of downtime per year
99.999% available – 5 minutes of downtime per year

JNCIA-EX Note

Bingla — Tue, 01 Jun 2010 15:59:23 +0000

從中記錄

Units
Junon OS
All physical interface have logical interfaces called units
interface {
vlan {
unit 2 { 代表VLAN2
description Printers;
family inet{
address 192.168.2.2/24;
}
}
unit 3 { 代表VLAN3
description Phones;
family inet{
address 192.168.3.2/24;
}
}

set interface ge-0/0/0 disable #shutdown interface
delete interface ge-0/0/0 disable #no shutdown interface

run shot inter ge-0/0/3 extensive | find Auton

#edit interface ge-0/0/4 ether-options
#set speed 100m
#set link-mode full-duplex
#commit
#set inter ge-0/0/4 ether-options no-auto-negotiation #no autonegotiation

LACP
JunOS
#set chassis aggregated-device ethernet device-count 1
#set interface ge-0/0/5 ether-options 802.3ad ae0
#set interface ge-0/0/6 ether-options 802.3ad ae0
#set interface ae0 unit 0 family ethernet-switching port-mode trunk
#set interface ae0 aggregated-ether-options lacp active

IOS
interface Port-chiannel1
switchport trunk encapsulation dot1q
switchport mode trunk
!
inter Giga0/5
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 1 mode active
!
inter Giga0/6
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 1 mode active

VLAN
#edit vlans
#set example \\ 設定一個example 名稱的vlan
#set example vlan-id 100 \\ 給它tag 100
#run show vlans \\ 看所有VLAN
加入 interface
[edit vlans]
#set example interface ge-0/0/7.0 \\將 ge-0/0/07.0 加入 vlan example

[edit vlans]
#top edit interface

[edit interfaces]
#set ge-0/0/7 unit 0 family ethernet -switching

[edit interfaces]
#set ge-0/0/8 unit 0 family ethernet-switching vlan members 100

[edit interfaces]
#set ge-0/0/9 unit 0 family ethernet-switching vlan members example

#run show vlans example detail
VLAN: example, 802.1Q tag:100 admin state: Enable
Numbr of interfaces: 3 (Active = 3)
Untagged interface: ge-0/0/7.0*, ge-0/0/08.0*, ge-0/0/09.0*

可以用數個方法去指定port到vlan裡, 或數個vlan tag 進 trunk port
1.config the interface under the [edit vlans] hierarchy
2.config vlan membership under the [edit inter interface-name unit 0 family ethernet-switching] hierarchy either by:
a. Using the VLAN ID
b. Using the VLAN name

#run show vlans phones detail \\看 phones 這個vlan的detail ( in/out ,ip,member)
#show phones \\ phones 的config

進度 5的 configuring Access Ports

JunOS 筆記

Bingla — Tue, 25 May 2010 14:06:21 +0000

show interfaces descriptions
show interface terse
show interface fe-2/0/1 brief
show interface fe-2/0/1
show interface fe-2/0/1 detail
show interface fe-2/0/1 extensive

firewall family inet
filter sample-filter {
term block-bad-subnet {
from {
source-address {
192.168.0.0/24 except;
0.0.0.0/0;
}
}
then accept;
}
}

可以使用 annotate 方式加以註解

tcp Port deny
IOS
access-list 100 deny tcp deny 192.168.0.1 0.0.255.0 range 22 23
access-list 100 premit ip any any

JunOS
filter protect-routers {
term block-cli-access {
from {
destination-address {
192.168.0.1/255.255.0.255;
}
protocol tcp;
destination-port [ ssh telnet ];
}
then {
reject;
}
}
term allow-others {
then accept;
}
}

VMware ESXi CD BOOT

Bingla — Tue, 25 May 2010 14:03:41 +0000

第一次下載免費的ESXi 的cd
開機後出現
The system has found a problem on your mechine and cannot continue.
Unsupported BIOS setting (CPUID is limited). Disable ‘limit CPUID value’ or ‘Support legacy/NT4 OS’ in BIOS

Cisco AUX connect to another Router Console port

Bingla — Fri, 05 Mar 2010 14:45:22 +0000

line aux 0
transport input all
stopbits 1
speed 9600
databit 8

htaccess

Bingla — Tue, 09 Jun 2009 06:33:37 +0000

在apache 裡若要在登入作認證,只要在http.conf 裡的目錄下將
AllowOverride None
改成
AllowOverride All 即可

當然 .htaccess 要加上去的

BGP default router

Bingla — Wed, 13 May 2009 15:10:04 +0000

放default router 給 neighbor 的方法
其實有很多種,但自己試過的如下
(config-router)#neighbor X.X.X.X default-originate

跟neighbor 說你的default router 在我這裡
就算自己沒有default router也不會影響

Cisco IPB Image

Bingla — Thu, 16 Apr 2009 14:55:05 +0000

IPB Image 是什麼意思呢?
是 IP Basic 的意思,也就是要買 ip base 的 IOS

Mrtg on Freebsd6.4 error

Bingla — Mon, 13 Apr 2009 17:26:35 +0000

新的FreeBSD6.4 上面要跑mrtg,用ports安裝後,該裝的都裝了,還是有問題,Google後找到http://olympic-yancey.blogspot.com/2008/08/mrtgsnmputilpm.html他的文章有提到,因為勾選了SNMPv3的關係,故取消後再make reinstall後即可,再找一台來裝一下,用重新安裝SNMPv3的方式來解決看看

Open Solaris 10 手動加網卡

Bingla — Fri, 06 Mar 2009 07:24:31 +0000

ifconfig ge0 plumb #ge0 為網卡代號
可以到http://www.sun.com/bigadmin/hcl/data/os/
查看網卡代號

自己作過二台灌好Solaris 10後,再上網卡+IP 的過程,參考資料為
TCP/IP Address + Router or Gateway + 主機名稱 + DNS IP + Domain 設定

1.先找到solaris 10可以支援的網卡,像我是用 Inter pro 100/1000 MT 代號為e1000g,於是用 ifconfig e1000g0 plumb方式去讓它在ifconfig -a 下出現
2.參考以上連結文章內,作以下動作
a.確認 /etc/nodename 的內容為 bingsun (灌系統時所設定的機器名稱)

b.加入 /etc/hostname.e1000g0 的檔,內容填入 bingsun

c.改寫 /etc/inet/hosts 加入
204.204.204.204(tab鍵) bingsun(tab鍵) loghost

d.Solaris 10也要改 /etc/inet/ipnodes 裡的
204.204.204.204(tab鍵) bingsun(tab鍵) loghost

e.加入 netmask 於 /etc/inet/netmask
204.204.204.0(tab鍵) 255.255.255.0

f.設定 default gateway 於 /etc/defaultrouter
204.204.204.254

g.設定 DNS server ip , /etc/resolv.conf ,沒有的話手動建一個
nameserver(tab鍵) 168.95.1.1

h.更改 /etc/nsswitch.conf 的設定
#cd /etc
#mv nsswitch.conf nsswitch.conf.bk
#cp nsswitch.dns nsswitch.conf

i. 重新啟動 Solaris 即可驗收結果,當然網路線要插
#sync;sync;reboot