定时关闭华为交换机的端口

最新推荐文章于 2024-08-29 19:20:05 发布

c_king_kf

最新推荐文章于 2024-08-29 19:20:05 发布

阅读量4.9k

点赞数

分类专栏：网络运维文章标签：华为网络运维

网络运维专栏收录该内容

2 篇文章 0 订阅

订阅专栏

关于因业务须求，定时关闭交换机的端口的做法    通过对各种资料的查询与对比，我现在知道了两种可以实现在某一特定时间内关闭交换机端口，并在另一时间段打开端口的做法。现我将其做法与大家分享一下。希望大家提出好的意见。（以S8500设备为例）
   一。通过做ACL规则开限开关端口（其时也不叫开开关端口，只是通过规则禁止端口数据的访问）
   time ShiJian 00:00 to 08:00 dai (指定时间段为00：00到08：00)
   再做一个ACL规则。再在ACL下面引用上面的时间，
   最后在端口上，引用这个ACL规则    (这一方法的缺点：步骤太多，必须确定到端口的用户IP，且要单个引用，否则会引起某些端口无法限制。)
   二。通过在电脑里运行BAT文件。直接关闭用户端口或开启用户端口
   其方法如下    1.关闭交换机端口.BAT    echo set sh=WScript.CreateObject("WScript.Shell") >>telnet_tmp.vbs
   echo WScript.Sleep 1000 >> telnet_tmp.vbs                                  （生成临时文件telnet_tmp.vbs并打开TELNET窗口）
   echo sh.SendKeys "open 111.111.111.123" >>telnet_tmp.vbs       （telnet 到 111.111.111.123 交换机）
   echo sh.SendKeys "{ENTER}" >>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs                                  （单步延时1秒）
   echo sh.SendKeys "XXXXX-XXXX{ENTER}" >>telnet_tmp.vbs             （输入登录用户名：XXXXX-XXXX）
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "XXXXX-XXXX{ENTER}">>telnet_tmp.vbs             （输入登录密码：XXXXX-XXXX）
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "sys{ENTER}">>telnet_tmp.vbs                         （进入交换机配置模式）
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "interface ethernet 2/1/1 {ENTER}">>telnet_tmp.vbs          （进入交换机端口）
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "shutdown{ENTER}">>telnet_tmp.vbs                   （shutdown这个交换端口）
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "interface ethernet 2/1/2 {ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "shutdown{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "interface ethernet 2/1/3 {ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "shutdown{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "interface ethernet 2/1/5 {ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "shutdown{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "interface ethernet 2/1/6 {ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "shutdown{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "interface ethernet 2/1/7 {ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "shutdown{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "interface ethernet 2/1/8 {ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "shutdown{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "interface ethernet 2/1/10 {ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "shutdown{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "interface ethernet 2/1/13 {ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "shutdown{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "quit{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "quit{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "quit{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "quit{ENTER}">>telnet_tmp.vbs
   start telnet
   cscript //nologo telnet_tmp.vbs
   del telnet_tmp.vbs    2.开启交换机端口.BAT    echo set sh=WScript.CreateObject("WScript.Shell") >>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "open 111.111.111.123" >>telnet_tmp.vbs
   echo sh.SendKeys "{ENTER}" >>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "XXXXX-XXXX{ENTER}" >>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "XXXXX-XXXX{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "sys{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "interface ethernet 2/1/1 {ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "undo shutdown{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "interface ethernet 2/1/2 {ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "undo shutdown{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "interface ethernet 2/1/3 {ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "undo  shutdown{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "interface ethernet 2/1/5 {ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "undo shutdown{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "interface ethernet 2/1/6 {ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "undo shutdown{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "interface ethernet 2/1/7 {ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "undo shutdown{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "interface ethernet 2/1/8 {ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "undo shutdown{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "interface ethernet 2/1/10 {ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "undo shutdown{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "interface ethernet 2/1/13 {ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "undo shutdown{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "quit{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "quit{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "quit{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "{ENTER}">>telnet_tmp.vbs
   echo WScript.Sleep 1000 >>telnet_tmp.vbs
   echo sh.SendKeys "quit{ENTER}">>telnet_tmp.vbs
   start telnet
   cscript //nologo telnet_tmp.vbs
   del telnet_tmp.vbs 将这两个文件放在一台可以直接TELNET交换机的电脑上，然后在运行这台电脑的任务计划，将这两个文件引入，并指定相关的时间段。（这样就OK了）
（此方法的优点：可以一次性解决关闭端口的问题，设置完成后，无须人为干预，定时准确，关闭端口彻底。100%阻断用户上网）
（此方法的缺点：对管理员编程要求高。特别是会BAT编程，其次，必须要有一台可直接TELNET交换机的电脑，且必须开机。）
更多：http://www.killtest.cn/H3COthersCertification/