网络构建评分标准(600)
要求:使用下面指令查看其运行状态,并使用FSCapture截图软件进行截图,将输入结果的截图插入到文档中。
职业素养(25)
截图文档整洁规范,根据题目要求进行截图。 | 10 |
文档简洁,截图清晰有序即可得满分。 | |
整理赛位,工具、设备归位,保持赛后整洁有序。 | 10 |
赛后保持工位整洁有序。 | |
遵守赛项记录,听从裁判安排。 | 5 |
遵守记录,未有异常事宜。 |
基础配置(25)
S4设备查看snmp配置状态信息 锐捷:S4#show snmp host 华三:[S4]display current-configuration | include snmp | 5 |
S4#show snmp host Notification host(domain): Notification host: 192.1.100.100 udp-port: 162 type: trap user: Test@123 security model: v2 [S4]display current-configuration | include snmp undo resource-monitor output syslog snmp-notification netconf-event snmp-agent snmp-agent community read Test@123 snmp-agent community write Test@123 snmp-agent sys-info version v2c snmp-agent target-host trap address udp-domain 192.1.100.100 params securityname Test@123 v2c snmp-agent trap enable | 状态信息中包含: Trap主机IP地址为192.1.100.100 读写的Community为:Test@123 (显示为加密字符串也是正确的) Snmp版本为v2 |
R1设备查看路由表条目 锐捷:R1#show ip route | exclude local host 华三:[R1]display ip routing-table | include GE | 15 |
R1#show ip route | exclude local host Gateway of last resort is no set C 12.1.1.0/29 is directly connected, GigabitEthernet 0/1 C 13.1.1.0/29 is directly connected, GigabitEthernet 0/2 C 17.1.1.0/29 is directly connected, GigabitEthernet 0/3 C 21.1.1.0/29 is directly connected, GigabitEthernet 0/1.21 [R1]display ip routing-table | include GE 12.1.1.0/29 Direct 0 0 12.1.1.1 GE0/1 12.1.1.7/32 Direct 0 0 12.1.1.1 GE0/1 13.1.1.0/29 Direct 0 0 13.1.1.1 GE0/2 13.1.1.7/32 Direct 0 0 13.1.1.1 GE0/2 17.1.1.0/29 Direct 0 0 17.1.1.1 GE0/0 17.1.1.7/32 Direct 0 0 17.1.1.1 GE0/0 21.1.1.0/29 Direct 0 0 21.1.1.1 GE0/1.21 21.1.1.7/32 Direct 0 0 21.1.1.1 GE0/1.21 | 只有4条直连路由,分别为: 12.1.1.0/29 13.1.1.0/29 17.1.1.0/29 21.1.1.0/29 4条路由全正确情况,若出现静态路由或OSPF路由减10分。 |
S4设备查看远程SSH登录信息 锐捷:S4#show ssh 华三:<S4>dis ssh server session | 5 |
S1#show ssh Connection Version Encryption Hmac Conmpress State Username 0 2.0 aes128-ctr hmac-sha2-256 none Session started admin <S4>dis ssh server session UserPid SessID Ver Encrypt State Retries Serv Username 2329 0 2.0 aes128-ctr Established 1 Stelnet admin | 有表项: 登陆用户为admin |
有线网络配置(250)
S3设备查看21口接口Trunk修剪信息 锐捷:S3#show interfaces switchport | include 30 华三:[S3]display port trunk | 5 |
S3#show interfaces switchport | include 30 GigabitEthernet 0/21 enabled TRUNK 1 30 Disabled 10,20,30 [S3]display port trunk Interface PVID VLAN Passing GE1/0/21 1 10, 20, 30 | Trunk接口允许通过的VLAN包含:10 20 30 |
S4设备查看生成树环路自动恢复时间配置信息 锐捷:S4#show run interface gigabitEthernet 0/1 | include errdisable 华三:<S4>display current-configuration | include shutdown-interval | 5 |
S4#show run interface gigabitEthernet 0/1 | include errdisable errdisable recovery interval 200 <S4>dis current-configuration | include shutdown-interval shutdown-interval 200 | 阻断恢复时间200s |
S5设备查看聚合接口状态信息 锐捷:S5#show interfaces aggregatePort 1 | include Lacp Status 华三:[S5]display link-aggregation verbose | 5 |
S5#show interfaces aggregatePort 1 | include Lacp Status GigabitEthernet 0/1 Link Status: Up Lacp Status: bndl GigabitEthernet 0/2 Link Status: Up Lacp Status: bndl [S5]display link-aggregation verbose Local: Port Status Priority Index Oper-Key Flag GE1/0/1(R) S 32768 1 1 {ACDEF} GE1/0/2 S 32768 2 1 {ACDEF} Remote: Actor Priority Index Oper-Key SystemID Flag GE1/0/1 32768 1 2 0x8000, 4873-9739-f220 {ACDEF} GE1/0/2 32768 2 2 0x8000, 4873-9739-f220 {ACDEF} | 聚合口的成员端口信息包含: GigabitEthernet 0/1 GigabitEthernet 0/2 |
R2设备查看mpls ldp邻居建立信息 锐捷:R2#show mpls ldp neighbor | include TCP connection 华三:<R2>dis mpls ldp peer | 10 |
R2#show mpls ldp neighbor | include TCP connection TCP connection: 10.0.0.2.646 - 10.0.0.22.1031 TCP connection: 10.0.0.1.646 - 10.0.0.22.1032 <R2>dis mpls ldp peer Total number of peers: 1 Peer LDP ID State Role GR MD5 KA Sent/Rcvd 10.0.0.1:0 Operational Active Off Off 1103/1103 10.0.0.2:0 Operational Active Off Off 1103/1103 | 有两个邻居信息,分别为: 10.0.0.1 10.0.0.2 |
R2设备查看bgp vpnv4邻居建立状态信息 锐捷:R2#show bgp vpnv4 unicast all summary | begin Neighbor 华三:<R2>dis bgp peer vpnv4 | 10 |
R2#show bgp vpnv4 unicast all summary | begin Neighbor Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 10.0.0.1 4 100 108 134 2 0 0 01:37:52 12 10.0.0.2 4 100 108 135 2 0 0 01:37:52 12 Total number of neighbors 2 <R2>dis bgp peer vpnv4 BGP local router ID: 10.0.0.22 Local AS number: 100 Total number of peers: 2 Peers in established state: 2 * - Dynamically created peer ^ - Peer created through link-local address Peer AS MsgRcvd MsgSent OutQ PrefRcv Up/Down State 10.0.0.1 100 315 343 0 11 04:37:32 Established 10.0.0.2 100 299 351 0 6 04:37:31 Established | 有两个邻居信息,分别为: 10.0.0.1 10.0.0.2 |
R2设备查看L2TP隧道建立状态信息 锐捷:R2#show vpdn tunnel 华三:[R2]display l2tp tunnel | 20 |
R2#show vpdn tunnel L2TP Tunnel Information Total tunnels 2 LocID RemID Remote Name State Remote Address Port Sessions L2TP Class/VPDN Group 1 1 GW2 est 17.1.1.3 1701 1 1 2 1 GW1 est 17.1.1.2 1701 1 1 [R2]display l2tp tunnel LocalTID RemoteTID State Sessions RemoteAddress RemotePort RemoteName 57689 19569 Established 1 17.1.1.2 1701 GW1 57690 19570 Established 1 17.1.1.3 1701 GW2 | 有两个隧道,隧道远端地址分别为: 17.1.1.2 17.1.1.3 |
R2设备查看ipsec感兴趣流协商创建信息 锐捷:R2#show crypto ipsec sa | include remote 华三:[R2]display ipsec sa brief | 15 |
R2#show crypto ipsec sa | include remote remote ident (addr/mask/prot/port): (17.1.1.3/0.0.0.0/0/0)) remote ident (addr/mask/prot/port): (13.1.1.2/0.0.0.0/0/0)) remote ident (addr/mask/prot/port): (17.1.1.2/0.0.0.0/0/0)) [R2]display ipsec sa brief ----------------------------------------------------------------------------- Interface/Global Dst Address SPI Protocol Status ----------------------------------------------------------------------------- GE0/0 13.1.1.2 2635765533 ESP Active GE0/0 17.1.1.3 3121768960 ESP Active GE0/0 17.1.1.2 3121768968 ESP Active | 3个ipsec的感兴趣流中的远端地址分别为: 17.1.1.2 17.1.1.3 13.1.1.2 |
R2设备查看vrf BG路由表中10.1.20.0/24的路由状态信息 锐捷:R2#show ip route vrf BG | include 10.1.20.0 华三:[R2]display ip routing-table vpn-instance BG | include 10.1.20.0 | 5 |
R2#show ip route vrf BG | include 10.1.20.0 B 10.1.20.0/24 [200/2] via 10.0.0.1, 01:05:51 [R2]display ip routing-table vpn-instance BG | include 10.1.20.0 10.1.20.0/24 BGP 255 3 10.0.0.1 GE0/1 | 存在10.1.20.0/24的路由条目,下一跳为10.0.0.1,路由类型为BGP路由 |
R2设备查看vrf BG路由表中10.2.20.0/24的路由状态信息 锐捷:R2#show ip route vrf BG | include 10.2.20.0 华三:[R2]display ip routing-table vpn-instance BG | include 10.2.20.0 | 5 |
R2#show ip route vrf BG | include 10.2.20.0 B 10.2.20.0/24 [200/2] via 10.0.0.2, 01:06:02 [R2]display ip routing-table vpn-instance BG | include 10.2.20.0 10.2.20.0/24 BGP 255 3 10.0.0.2 GE0/2 | 存在10.2.20.0/24的路由条目,下一跳为10.0.0.2,路由类型为BGP路由 |
R2设备查看vrf BG路由表中10.3.1.12/32的路由状态信息 锐捷:R2#show ip route vrf BG | include 10.3.1.12 华三:[R2]display ip routing-table vpn-instance BG | include 10.3.1.12 | 10 |
R2#show ip route vrf BG | include 10.3.1.12 B 10.3.1.12/32 [20/23] via 172.17.0.3, 01:05:44 [R2]display ip routing-table vpn-instance BG | include 10.3.1.12 10.3.1.12/32 BGP 130 1566 172.17.0.3 Tun0 | 存在10.3.1.12/32的路由条目,下一跳为172.17.0.3,路由类型为BGP路由 |
R2设备查看vrf GL路由表中10.4.10.0/24的路由状态信息 锐捷:R2#show ip route vrf GL | include 10.4.10.0 华三:<R2>display ip routing-table vpn-instance GL | include 10.4.10.0 | 10 |
R2#show ip route vrf GL | include 10.4.10.0 B 10.4.10.0/24 [20/2] via 172.16.0.3, 01:22:03 [R2]display ip routing-table vpn-instance GL | include 10.4.10.0 10.4.10.0/24 BGP 130 1566 172.16.0.3 | 存在10.4.10.0/24的路由条目,下一跳为172.16.0.3,路由类型为BGP路由 |
R2设备查看vrf GL路由表中10.4.11.0的路由状态信息 锐捷:R2#show ip route vrf GL | include 10.4.11.0 华三:<R2>display ip routing-table vpn-instance GL | include 10.4.11.0 | 10 |
R2#show ip route vrf GL | include 10.4.11.0 B 10.4.11.0/24 [20/2] via 172.16.0.4, 01:23:02 <R2>display ip routing-table vpn-instance GL | include 10.4.11.0 10.4.11.0/24 BGP 130 1566 172.16.0.4 | 存在10.4.11.0/24的路由条目,下一跳为172.16.0.4,路由类型为BGP路由 |
R2设备查看ipv6路由表中ospf路由条目信息 锐捷:R2#show ipv6 route | include OI 华三:[R2]display ipv6 routing-table | include O_INTER | 10 |
R2#show ipv6 route | include OI O - OSPF intra area, OI - OSPF inter area, OE1 - OSPF external type 1, OE2 - OSPF external type 2 OI 2001:10:1:4::/64 [110/2] via FE80::EEB9:70FF:FEB4:4DB, GigabitEthernet 0/1 OI 2001:10:1:40::/64 [110/3] via FE80::EEB9:70FF:FEB4:4DB, GigabitEthernet 0/1 OI 2001:10:2:4::/64 [110/2] via FE80::EEB9:70FF:FEB4:4DE, GigabitEthernet 0/2 OI 2001:10:2:40::/64 [110/3] via FE80::EEB9:70FF:FEB4:4DE, GigabitEthernet 0/2 [R2]display ipv6 routing-table | include O_INTER Destination: 2001:10:1:4::/64 Protocol : O_INTER Destination: 2001:10:1:40::/64 Protocol : O_INTER Destination: 2001:10:2:4::/64 Protocol : O_INTER Destination: 2001:10:2:40::/64 Protocol : O_INTER | 包含以下4条OSPF路由,分别为: 2001:10:1:4::/64 2001:10:1:40::/64 2001:10:2:4::/64 2001:10:2:40::/64 |
S3设备查看vrf BG下源地址10.1.20.254到目的地址20.0.0.1的沿途路径及跳数。 | 10 |
1 10.1.2.1 6 msec 8 msec 8 msec 2 21.1.1.2 1 msec 1 msec 2 msec 3 20.0.0.1 1 msec <1 msec | 可到达目的端- 关键路径中有10.1.2.1 |
S3设备查看vrf GL下源地址10.1.30.254到目的地址10.3.1.12的沿途路径及跳数。 | 10 |
1 10.1.3.1 12 msec 10 msec 9 msec 2 172.17.0.2 1 msec 1 msec 1 msec 3 172.17.0.3 2 msec 2 msec 4 10.3.0.2 7 msec 8 msec 6 msec 5 10.3.1.12 2 msec 1 msec 1 msec | 沿途跳数顺序一致,分别为: 10.1.3.1 172.17.0.2 172.17.0.3 10.3.0.2 10.3.1.12或10.3.0.9 |
S3设备查看vrf SC下源地址10.1.10.254到目的地址10.4.30.1的沿途路径及跳数。 | 5 |
1 10.1.1.1 4 msec 9 msec 8 msec 2 172.16.0.2 1 msec 1 msec 4 msec 3 172.16.0.3 1 msec 1 msec 2 msec 4 10.4.30.1 3 msec 2 msec 3 msec | 沿途跳数顺序一致,分别为: 10.1.1.1 172.16.0.2 172.16.0.3 10.4.30.1 |
S3设备查看vrf SC下源地址10.1.10.254到目的地址10.4.11.254的沿途路径及跳数。 | 10 |
1 10.1.1.1 11 msec 9 msec 10 msec 2 172.16.0.2 1 msec 1 msec 1 msec 3 172.16.0.4 5 msec 3 msec 2 msec 4 10.4.11.254 22 msec 1 msec 1 msec | 沿途跳数顺序一致,分别为: 10.1.1.1 172.16.0.2 172.16.0.4 10.4.11.254-此跳可省略 |
S4设备查看源地址2001:10:2:40::254到目的地址2001:21:1::2的沿途路径及跳数 | 20 |
1 2001:10:2:4::1 12 msec 10 msec 9 msec 2 * * * 3 2001:21:1::2 3 msec 5 msec 3 msec | 沿途跳数顺序一致,分别为: 2001:10:2:4::1 2001:21:1::2 |
S6设备查看到目的地址10.3.1.12的沿途路径及跳数 | 10 |
1 10.4.30.254 1 msec 3 msec 1 msec 2 172.16.0.2 <1 msec 1 msec 2 msec 3 172.17.0.3 6 msec 2 msec 1 msec 4 10.3.0.2 13 msec 3 msec 9 msec 5 10.3.1.12 2 msec 1 msec 1 msec | 沿途跳数顺序一致,分别为: 10.4.30.254 172.16.0.2 172.17.0.3 10.3.0.2 10.3.1.12或10.3.0.9 |
S6设备查看到目的地址10.1.10.254的沿途路径及跳数 | 5 |
1 10.4.30.254 1 msec 3 msec 2 msec 2 * * * 3 10.1.4.1 10 msec 9 msec 14 msec 4 10.1.10.254 5 msec 5 msec 2 msec | 可到达目的端 关键路径中有10.4.30.254 第二跳经过隧道接口,可以为*。 |
S6设备查看到目的地址10.1.30.254的沿途路径及跳数 | 5 |
1 10.4.30.254 1 msec 1 msec 2 msec 2 * * * 3 10.1.4.3 7 msec 9 msec 10 msec 4 10.1.30.254 2 msec 3 msec 2 msec | 可到达目的端 关键路径中有10.4.30.254 第二跳经过隧道接口,可以为*。 |
S6设备查看到目的地址10.2.10.254的沿途路径及跳数 | 5 |
1 10.4.30.254 1 msec 1 msec 1 msec 2 * * * 3 10.2.4.1 7 msec 9 msec 9 msec 4 10.2.10.254 4 msec 4 msec 3 msec | 可到达目的端 关键路径中有10.4.30.254 第二跳经过隧道接口,可以为*。 |
S6设备查看到目的地址10.2.30.254的沿途路径及跳数 | 5 |
1 10.4.30.254 1 msec 1 msec 1 msec 2 * * * 3 10.2.4.3 6 msec 9 msec 9 msec 4 10.2.30.254 2 msec 3 msec 3 msec | 可到达目的端 关键路径中有10.4.30.254 第二跳经过隧道接口,可以为*。 |
S6设备查看到目的地址20.0.0.1的沿途路径及跳数 | 5 |
1 10.4.30.254 1 msec <1 msec <1 msec 2 20.0.0.1 <1 msec <1 msec <1 msec | 沿途跳数顺序一致,分别为: 10.4.30.254 20.0.0.1或17.1.1.1 每跳地址完全相同 |
R2设备查看ipv6 nat转换表项信息(在S4设备上使用源地址2001:10:2:40::254 ping目标地址2001:21:1::2后截图) | 40 |
有ipv6地址转换表项且转换表项中包含IPv4源地址、IPv4目标地址、IPv6源地址、IPv6目的地址。 | IPv6 NAT转换表项中包含: IPv4源地址:12.1.1.x(10分) IPv4目标地址:30.0.0.1(10分) IPv6源地址:2001:10:1:40::254(10分) IPv6目的地址:2001:21:1::2(10分) |
无线网络配置(100)
AC设备查看无线控制器虚拟化后的状态信息 锐捷:VAC#show virtual-ac 华三:<VAC> display irf | 10 | ||||||||||||||||||||||||||||||
VAC#show virtual-ac Device_id Domain_id Priority Position Status Role Conn_swid Description ------------- ------------- ------------- ------------- ------------- ------------- ------------- ------------------------------------------------------ 1(1) 1(1) 150(150) LOCAL OK ACTIVE 1(1) AC-1 2(2) 1(1) 120(120) REMOTE OK STANDBY 1(1) AC-2 <VAC>display irf Member ID Role Priority CPU MAC Description *+1 Master 32 74d6-cb1b-ffb0 AC-1 2 Standby 1 74d6-cb1c-0090 AC-2 | AC-1为主设备(ACTIVE或Master) AC-2为备设备(STANDBY) | ||||||||||||||||||||||||||||||
AC设备查看三个AP通过隧道关联到AC后的主机名,IP地址等状态信息 锐捷:VAC#show ap-config summary 华三:<VAC>display wlan ap all | 10 | ||||||||||||||||||||||||||||||
VAC#show ap-config summary Online AP number: 3 Offline AP number: 0 AP Name IP Address Mac Address Radio Radio Up/Off time State ---------------------------------------- --------------- -------------- ------------------- ------------------- ------------- ----- AP1 10.1.30.1 300d.9e86.5ca2 1 E 0 1 20 2 E 0 149 100 0:00:03:51 Run AP2 10.2.30.1 300d.9e86.3bca 1 E 0 6 20 2 E 0 153 100 0:04:55:03 Run AP3 10.4.20.1 300d.9e86.37f2 1 E 0 11 20 2 E 0 157 100 0:04:54:54 Run <VAC>display wlan ap all Total number of APs: 3 Total number of connected APs: 3 ...... AP name APID State Model Serial ID AP1 1 R/M WA6320-SI 219801A2N18234E0044K AP2 2 R/M WA6320-SI 219801A2N18234E004DL AP3 3 R/M WA6320-SI 219801A2N18234E0044G | 体现AP主机名为AP1、AP2、AP3 所有AP关联AC的状态均为Run或R/M。 | ||||||||||||||||||||||||||||||
AC设备查看user1关联BJ_SC_DOT1X_XX认证成功后的状态信息 锐捷:VAC#show dot1x summary 华三:<VAC>display dot1x connection | 10 | ||||||||||||||||||||||||||||||
VAC#show dot1x summary ID Username MAC Interface VLAN Auth-State Backend-state Port-Status User-Type Time --------- ------------------------------ -------------- --------- ---- --------------- ------------- ----------- --------- ----------------- 5 user1 4c1d.9677.83b4 wlan 1 10 Authenticated Idle Authed static 0days 0h 1m30s <VAC>display dot1x connection Total connections: 1 User MAC address : 1c1b-b575-6e44 AP name : AP1 Radio ID : 1 SSID : BJ_SC_DOT1X_XX BSSID : 1496-2d0c-4de0 Username : 802.1x Anonymous username : N/A Authentication domain : 802.1x IPv4 address : 10.1.10.1 Authentication method : CHAP Initial VLAN : 10 Authorization VLAN : 10 | 有认证表项: 认证VLAN为10 | ||||||||||||||||||||||||||||||
AC设备查看user2关联BJ_BG_WEB_XX认证成功后的状态信息 锐捷:VAC#show dot1x summary (无线终端连接BJ_BG_WEB_XX,使用user2认证成功后截图) 华三:<VAC>dis portal user all | 10 | ||||||||||||||||||||||||||||||
VAC#show web-auth user all Current user num: 1, Online 1 Address Online Time Limit Time used Status Name --------------------------------------- ------- -------------- -------------- --------------- --------- 10.1.20.1 On 0d 00:00:00 0d 00:00:24 Active user2 <VAC>dis portal user all Total portal users: 1 Username: portal AP name: AP1 Radio ID: 2 SSID: BJ_BG_WEB_XX Portal server: portal State: Online VPN instance: N/A MAC IP VLAN Interface f89e-9430-af6b 10.1.20.1 20 WLAN-BSS1/0/4 | 有认证表项: 认证地址为10.x.20.x(x不需匹配) 认证状态为On或Online | ||||||||||||||||||||||||||||||
AC设备查看user11关联GZ_SC_DOT1X_XX,认证成功后的状态信息 锐捷:VAC#show dot1x summary (无线终端连接GZ_SC1_DOT1X_XX,使用user11认证成功后截图) 华三:VAC>display dot1x connection | 10 | ||||||||||||||||||||||||||||||
VAC#show dot1x summary ID Username MAC Interface VLAN Auth-State Backend-state Port-Status User-Type Time --------- ------------------------------ -------------- --------- ---- --------------- ------------- ----------- --------- ----------------- 6 user11 4c1d.9677.83b4 wlan 3 10 Authenticated Idle Authed static 0days 0h 4m 4s <VAC>display dot1x connection Total connections: 1 User MAC address : 1c1b-b575-6e44 AP name : AP3 Radio ID : 1 SSID : GZ_SC_DOT1X_XX BSSID : 1496-2d0c-4de2 Username : 802.1x Anonymous username : N/A Authentication domain : 802.1x IPv4 address : 10.4.10.1 Authentication method : CHAP Initial VLAN : 10 Authorization VLAN : 10 | 有认证表项: 认证VLAN为10 | ||||||||||||||||||||||||||||||
AC设备查看user12关联GZ_SC_WEB_XX,认证成功后的状态信息 锐捷:VAC#show web-auth user all 华三:<VAC>dis portal user all | 10 | ||||||||||||||||||||||||||||||
VAC#show web-auth user all Current user num: 1, Online 1 Address Online Time Limit Time used Status Name --------------------------------------- ------- -------------- -------------- --------------- --------- 10.4.11.1 On 0d 00:00:00 0d 00:00:13 Active user12 <VAC>dis portal user all Total portal users: 1 Username: portal AP name: AP3 Radio ID: 2 SSID: GZ_SC_WEB_XX Portal server: portal State: Online VPN instance: N/A MAC IP VLAN Interface f89e-9430-af6b 10.4.11.1 11 WLAN-BSS1/0/4 | 有认证表项: 认证地址为10.4.11.x(x不需匹配) 认证状态为On或Online | ||||||||||||||||||||||||||||||
AC设备查看无线用户限速的相关配置信息 锐捷:VAC#show run | include per-user-limit 华三:<VAC>dis current-configuration configuration wlan-st | include outbound | 5 | ||||||||||||||||||||||||||||||
VAC#show run | include per-user-limit wlan-based per-user-limit down-streams average-data-rate 800 burst-data-rate 1600 <VAC>dis current-configuration configuration wlan-st | include outbound client-rate-limit outbound mode static cir 1000 cbs 1600 | |||||||||||||||||||||||||||||||
查看AP限制关联用户数相关配置 锐捷:VAC#show ap-config running AP1 | include sta-limit 华三:<VAC>display current-configuration configuration wlan-ap | include max-count | 5 | ||||||||||||||||||||||||||||||
VAC#show ap-config running AP1 | include sta-limit sta-limit 25 ...... <VAC>display current-configuration configuration wlan-ap | include max-count client max-count 25 ...... | |||||||||||||||||||||||||||||||
使用viso绘制无线地勘平面图并进行AP点位规划后截图。 | 15 | ||||||||||||||||||||||||||||||
| 1.101、102、103、104、产品展厅、大厅规划AP型号为放装AP1。(5分) 2.105-108规划AP型号为墙面AP3。(5分) 3.AP命名中包含型号与位置。(2分) 4.所有AP信道规划为149,153,157,161,165中的一个,且相邻AP间信道不重叠。(3分) | ||||||||||||||||||||||||||||||
截取无线热图相关信息 | 5 | ||||||||||||||||||||||||||||||
| 101-108、产品展厅、大厅、走廊重点区域全覆盖。 | ||||||||||||||||||||||||||||||
输出无线设备清单和价格 | 10 | ||||||||||||||||||||||||||||||
| 完全匹配 |
出口网络配置(80)
GW1设备查看路由表中10.3.1.12的状态信息 锐捷:show ip route ospf | include 10.3.1.12 华三:display ip routing-table protocol ospf | include 10.3.1.12 | 15 |
GW1#show ip route ospf | include 10.3.1.12 OE 1 10.3.1.12/32 [110/24] via 172.16.0.2, 04:18:22, Virtual-ppp 1 [GW1]display ip routing-table protocol ospf | include 10.3.1.12 10.3.1.12/32 O_ASE1 150 1565 172.16.0.2 Virtual-ppp | 存在10.3.1.12/32的路由条目 下一跳为172.16.0.2 |
GW1设备查看nat转换表项信息(无线终端连接GZ_SC_DOT1X_XX后ping 20.0.0.1连通截图) 锐捷:show ip nat translations | include icmp 华三:dis nat session brief | include ICMP | 15 |
GW1#show ip nat translations | include icmp icmp 17.1.1.2:1 10.4.10.1:1 20.0.0.1 20.0.0.1 [GW1]dis nat session brief | include ICMP ICMP 10.4.10.1/1 20.0.0.1/2048 17.1.1.2/0 | 存在10.4.10.x到20.0.0.1 icmp转化表项:10.4.10.x转化为17.1.1.2 |
GW1设备查看VRRP协议处于备份状态的网关信息 | 10 |
GW1#show vrrp brief | include Backup Running this command may take some time, please wait or press "Ctrl+C" to break. Gi0/2.11 11 100 3.60 - P Backup 10.4.11.253 10.4.11.253 [GW1]dis vrrp | include Backup Gi1/0/1.11 11 Backup 100 100 Not supported 10.4.11.253 | VRRP状态为Backup 主网关地址为10.4.11.253。 |
GW2设备查看路由表10.3.1.12路由状态信息 锐捷:show ip route ospf | include 10.3.1.12 华三:display ip routing-table protocol ospf | include 10.3.1.12 | 15 |
GW2#show ip route ospf | include 10.3.1.12 OE 1 10.3.1.12/32 [110/24] via 172.16.0.2, 04:06:21, Virtual-ppp 1 [GW2]display ip routing-table protocol ospf | include 10.3.1.12 10.3.1.12/32 O_ASE1 150 1565 172.16.0.2 Virtual-ppp | 存在10.3.1.12/32的路由条目 下一跳为172.16.0.2 |
GW2查看nat转换表项信息(无线终端连接GZ_SC_WEB_XX 后ping 20.0.0.1连通截图) 锐捷:show ip nat translations | include icmp 华三:dis nat session brief | include ICMP | 15 |
GW2#show ip nat translations | include icmp icmp 17.1.1.3:1 10.4.11.1:1 20.0.0.1 20.0.0.1 [GW2]dis nat session brief | include ICMP ICMP 10.4.11.1/1 20.0.0.1/2048 17.1.1.3/0 | 存在10.4.11.x到20.0.0.1 icmp转化表项:10.4.11.x转化为17.1.1.3 |
GW1设备查看黑名单状态信息 锐捷:GW1#show url-class user-cfg | include url 华三:[GW1]display current-configuration configuration url-filter-policy | 10 |
GW1#show url-class user-cfg | include url url-class:un_audit_class url-class:forbidClass url: exam.com [GW1]display current-configuration configuration url-filter-policy url-filter policy web default-action drop add blacklist 1 host text 40.1.0.9 uri text http://www.exam.com | 存在exam.com的网址信息 |
网络运维配置(40)
截取运维平台中网络拓扑图信息 | 20 |
拓扑查看中可查看全网14台网络设备、设备链路链接及链路流量信息。 | 北京区域共5台设备(5分) 上海区域共3台设备(3分) 广州区域共4台设备(4分) 公网区域共1台设备(1分) 拓扑间链路完整(4分) 拓扑线路流量信息(3分) |
截取三条互联网重点监测链路配置及状态信息,状态指标不少于10项。 | 10 |
链路状态指标不少于10项。 | 每项指标1分。 |
截取自定义监控大屏Chinaskills_network信息 | 10 |
自定义监控大屏中可显示网络拓扑、CPU使用率、内存使用率、链路运行状态、采集器Server状态、最新告警信息、告警级别统计各项指标。 | 拓扑图(1分) CPU使用(2分) 内存呈现(2分) 链路运行(2分) 告警级别(1分) 最新告警(1分) 采集器(1分) 其中CPU、内存、链路运行状态需要有具体数据,为空不得分。 |
SDN网络配置(80)
S6设备查看默认禁止所有流量通过的流表信息 | 10 |
存在匹配流量为all或any,匹配行为为[]或Drop的流表; 流表不需指定入接口与出接口。 S6#show of flowtable | include acts=[] {table="0", duration_sec="8002", priority="500", flags ="0x0",idle_timeout="0", hard_timeout="0", cookie="0x17674549c70000", packet_count="86962", byte_count="8096034". match=oxm{all match} instructions=[apply{acts=[]}]} <S6>dis openflow instance 1 flow-table Instance 1 flow table information: Table 0 information: Table type: Extensibility, flow entry count: 8, total flow entry count: 8 MissRule flow entry information: cookie: 0x2b0000000000000b, priority: 0, hard time: 0, idle time: 0, flags: none, byte count: 521123, packet count: 4913 Create time: 00:00:41 01/01/2013, Last modified time: 02:16:55 01/01/2013 Match information: any Instruction information: Write actions: Drop | 匹配流量为all或any(5分) 匹配后行为为[]或Drop(5分) |
S6设备查看dhcp报文放通流表信息 | 15 |
存在以太网类型为0x800,IP协议号为17,UDP目的端口为67的流表; 存在以太网类型为0x800,IP协议号为17,UDP目的端口为68的流表; 流表不需指定入接口与出接口。 | 以太网类型:0x800(5分) IP协议号:17(5分) UDP目的端口:67或68(5分) |
S6设备查看ARP报文放通流表信息 | 10 |
存在以太网类型为0x806的流表; 流表不需指定入接口与出接口。 S6#show of flowtable | include 806 {table="0", duration_sec="6503", priority="600", flags ="0x0",idle_timeout="0", hard_timeout="0", cookie="0x17674b59684000", packet_count="13324", byte_count="853032". match=oxm{eth_type="0x806"} instructions=[apply{acts=[output{port="normal"}]}]} | 以太网类型:0x806 |
S6设备查看10.0.0.0/8网段的流表信息 | 5 |
存在以太网类型为0x800,IP源地址为10.0.0.0/8,IP目的地址为10.4.0.0/16的流表; 存在以太网类型为0x800,IP源地址为10.4.0.0/16,IP目的地址为10.0.0.0/8的流表; 流表不需指定入接口与出接口。 | 流表1(3分) 流表2(2分) |
S6设备查看192.1.100.0/24的流表信息 | 5 |
存在以太网类型为0x800,IP源地址为192.1.100.0/24,IP目的地址为10.4.0.0/16的流表; 存在以太网类型为0x800,IP源地址为10.4.0.0/16,IP目的地址为192.1.100.0/24的流表; 流表不需指定入接口与出接口。 | 流表1(3分) 流表2(2分) |
S6设备查看194.1.100.0/24的流表信息 | 5 |
存在以太网类型为0x800,IP源地址为194.1.100.0/24,IP目的地址为10.4.0.0/16的流表; 存在以太网类型为0x800,IP源地址为10.4.0.0/16,IP目的地址为194.1.100.0/24的流表; 流表不需指定入接口与出接口。 | 流表1(3分) 流表2(2分) |
S6设备查看20.0.0.1/32的流表信息 | 5 |
存在以太网类型为0x800,IP源地址为20.0.0.1/32,IP目的地址为10.4.0.0/16的流表; 存在以太网类型为0x800,IP源地址为10.4.0.0/16,IP目的地址为20.0.0.1/32的流表; 流表不需指定入接口与出接口。 | 流表1(3分) 流表2(2分) |
S6设备查看VRRP相关流表信息 | 20 |
存在以太网类型为0x800,IP协议为112的流表; 流表不需指定入接口与出接口。 | 以太网类型:0x800(5分) IP协议号:112(15分) |