常见的命令
（1）get system
netscreenisg2000-> get system
Product Name: NetScreen-2000
Serial Number: XXXXXXXX, Control Number: 00000000
Hardware Version: 3010(0)-(04), FPGA checksum: 00000000, VLAN1 IP (0.0.0.0)
Software Version: 6.0.0r4.0, Type: Firewall+VPN
OS Loader Version: 1.1.5
Compiled by build_master at: Fri Jan 11 14:27:42 PST 2008
Base Mac: 001b.c06a.1080
File Name: default (nsISG2000.6.0.0r4.0), Checksum: 1e5d880f
, Total Memory: 2048MB
Date 06/04/2009 08:28:24, Daylight Saving Time disabled
The Network Time Protocol is Disabled
Up 805 hours 29 minutes 18 seconds Since 01May2009:18:59:06
Total Device Resets: 0
(2) get interface
netscreenisg2000-> get interface
A - Active, I - Inactive, U - Up, D - Down, R - Ready
Interfaces in vsys Root:
Name IP Address Zone MAC VLAN State VSD
mgt 172.16.70.1/24 MGT 001b.c06a.1080 - D -
eth1/1 192.168.19.33/28 Trust 0010.dbff.c070 - U 0
eth1/2 192.168.19.65/28 Trust 0010.dbff.c080 - U 0
eth1/3 192.168.19.49/28 Trust 0010.dbff.c090 -
(3) get arp
netscreenisg2000-> get arp
usage: 9/8192 miss: 0
always-on-dest: disabled
-----------------------------------------------------------------------------------------
IP Mac VR/Interface State Age Retry PakQue Sess_cnt
-----------------------------------------------------------------------------------------
192.168.19.161 002255e5c490 trust-vr/eth1/4 VLD 762 0 0 1373
192.168.19.46 000fe265a846 trust-vr/eth1/1 VLD 1167 0 0 56
192.168.19.62 00127fa7e351 trust-vr/eth1/3 VLD 761 0 0 395
192.168.19.30 00000c07ac02 trust-vr/red1 VLD 964 0 0
(4)get mip
netscreenisg2000-> get mip
Total MIPs under Root configured:78 Max:20000.
--------------------------------------------------------------------------------
Map IP Host IP Interface VRouter
--------------------------------------------------------------------------------
219.14.172.6/32 192.168.4.3 ethernet1/5 trust-vr
219.14.172.7/32 192.168.2.80 ethernet1/5 trust-vr
219.14.172.71/32 192.168.12.23 ethernet1/5 trust-vr
219.14.172.72/32 192.168.2.101 ethernet1/5 trust-vr
(5)get vip
netscreeisg2000-> get vip
Virtual IP Interface Port Service Server/Port
219.23.178.10 ethernet3/3 9080 9080 192.168.4.5/9080(OK)
219.23.17.10 ethernet3/3 22 SSH 192.168.4.145/22(OK)
(6)get memory
netscreenisg2000-> get mem
Memory: allocated 600969616, left 1164828224, frag 108, fail 0
(7)get performance cpu |detail
netscreenisg2000-> get performance cpu
Average System Utilization: 1%
Last 1 minute: 2%, Last 5 minutes: 2%, Last 15 minutes: 2%
netscreenisg2000-> get performance cpu detail
Average System Utilization: 1%
Last 60 seconds:
59: 2 58: 2 57: 2 56: 2 55: 2 54: 2
53: 2 52: 2 51: 2 50: 2 49: 2 48: 2
47: 2 46: 2 45: 2 44: 2 43: 2 42: 2
41: 2 40: 2 39: 2 38: 2 37: 2 36: 2
35: 2 34: 2 33: 2 32: 2 31: 2 30: 2
29: 2 28: 2 27: 3 26: 2 25: 2 24: 2
23: 2 22: 2 21: 2 20: 2 19: 2 18: 2
17: 2 16: 2 15: 2 14: 2 13: 2 12: 2
11: 2 10: 2 9: 2 8: 2 7: 2 6: 2
5: 2 4: 2 3: 2 2: 2 1: 2 0: 2
(8)get session
netscreenisg2000-> get session
alloc 9005/max 524288, alloc failed 0, mcast alloc 0, di alloc failed 0
total reserved 0, free sessions in shared pool 515283
slot 2: hw0 alloc 8630/max 1048575
id 476549/s0*,vsys 0,flag 08200400/0000/0003,policy 64,time 180, dip 2 module 0
if 10(nspflag 800801):192.168.37.8/1730->60.2.237.157/80,6,002255e5c490,sess token 4,vlan 0,tun 0,vsd 0,route 56,wsf 0
(9)get event
netscreenisg2000-> get event
Total event entries = 39771
Date Time Module Level Type Description
2009-06-04 08:31:22 system crit 00436 Large ICMP packet! From 210.51.16.51
to 219.23.17.9, proto 1 (zone
Untrust, int ethernet3/3). Occurred 1
times.
2009-06-04 08:30:56 system crit 00436 Large ICMP packet! From 210.51.16.51
to 219.23.17.9, proto 1 (zone
Untrust, int ethernet3/3). Occurred 1
times.
阅读(6949) | 评论(0) | 转发(0) |
