VistageraldosmecanismoskeepalivenoCiscoIOSndiceIntroduoInformaesdeApoioMecanismosdokeepalivedeinterfaceInterfacesdeEthernetInterfacesseriaisManutenesdeatividadedeHDLCManutenesdeatividadedePPPInterfacesdotúnelGREKeepalivescriptoKeepalivesdeIKEKeepalivesNATIntroduoEstedocumentodescreveosváriosmecanismoskeepalivenodoCiscoIOS.
InformaesdeApoioOsmensagensdekeepalivesoenviadosporumdispositivoderedeatravésdeumexameoudeunscircuitosvirtuaisafiminformaraindaumoutrodispositivoderedeesseocircuitoentreelesfunes.
ParaqueoKeepalivestrabalhehádoisfatoresessenciais:Ointervalokeepaliveéoperíododetempoentrecadamensagemdekeepalivequeéenviadoporumdispositivoderede.
Istoésempreconfigurável.
qAsnovastentativasdokeepalivesoonúmerodevezesqueodispositivocontinuaaenviarapacoteskeepalivesemrespostaantesqueoestadoestejamudadoa"parabaixo".
ParaalgunstiposdeKeepalivesistoéconfigurável,quandoparaoutrohouverumvalorpadroquenopossasermudado.
qMecanismosdokeepalivedeinterfaceInterfacesdeEthernetEmmeiosdetransmissotaiscomoumEthernet,oKeepalivesélevementeoriginal.
DesdequehámuitospossíveisvizinhosnosEthernet,okeepalivenoestáprojetadodeterminarseotrajetoaqualquerumvizinhoespecíficonofioestádisponível.
Projeta-sesomentecertificar-sedosistemalocaltenhaoacessodeleituraegravaoaofiodosEthernetpróprio.
OroteadorproduzumpacotedeEthernetcomsecomooendereoMACdeorigemededestinoeumcódigotipodeEthernetespecialde0x9000.
OhardwaredeEthernetenviaestepacotenofiodosEtherneteentorecebeimediatamenteestapartetraseiradopacoteoutravez.
IstoverificaohardwaredeemissoedereceponoadaptadordoEtherneteaintegridadebásicadofio.
InterfacesseriaisAsinterfacesserialpodemtertiposdiferentesdeencapsulamentosecadatipodeencapsulamentodeterminaotipodoKeepalivesqueseráusado.
InscrevaocomandokeepalivenomododeconfiguraodainterfaceafimajustarafrequênciaemqueumroteadorenviapacotesECHOREQaseupar:Afimrestaurarosistemaaointervalokeepalivedopadrodossegundos10,inscrevaocomandokeepalivecomnenhumapalavra-chave.
qAfimdesabilitaroKeepalives,inscrevaocomandodisabledokeepalive.
qNota:keepaliveOcomandoaplica-seàsinterfacesserialqueusamolinkdedadosdenívelelevadoContol(HDLC)ouoencapsulamentoPPP.
NoseaplicaàsinterfacesserialqueusamoEncapsulamentoframerelay.
Nota:ParaoPPPeostiposdoencapsulamentodeHDLC,umkeepalivedezerodesabilitaoKeepaliveseérelatadonocomandoshowrunning-configoutputcomoodesabilitaodokeepalive.
ManutenesdeatividadedeHDLCUmoutromecanismokeepaliveconhecidoémanutenesdeatividadeserialparaoHDLC.
AsmanutenesdeatividadeserialsoenviadasparaafrenteeparatrásentredoisRoteadoreseoKeepalivessoreconhecidos.
Comousodosnúmerosdesequênciaseguircadakeepalive,cadadispositivopodeconfirmarseéparHDLCrecebeuokeepalivequeenviou.
ParaoencapsulamentodeHDLC,trêsKeepalivesignoradosfazemcomquearelaosejaderrubada.
PermitaocomandodebugserialinterfaceparaumaconexodeHDLCafimpermitirqueousuárioveroKeepalivesqueégeradoeenviado:SampleOutput:17:21:09.
685:Serial0/0:HDLCmyseq0,mineseen0*,yourseen1,lineupAsmanutenesdeatividadedeHDLCcontêmtrêspartesafimdeterminá-lotrabalham:O"myseq"queénossopróprionúmerodeincremento.
qO"mineseen"queérealmenteumreconhecimentodooutrolado(incrementado)quedizqueesperaestenúmerodenós.
q"Yourseen"queénossoreconhecimentoaooutrolado.
qNota:Quandoadiferenanosvaloresnoscamposdomyseqedomineseenexcedetrêsnoroteador2,alinhavaiparabaixoearelaoérestaurada.
DesdequeasmanutenesdeatividadedeHDLCsotipoKeepalivesECHOREQ,afrequênciadekeepaliveéimportanteerecomenda-sequecombinamacimaexatamenteemambososlados.
Seostemporizadoressoforadasincronizao,osnúmerosdesequênciacomeamsairdaordem.
Porexemplo,sevocêajustaumladoaossegundos10eooutroa25segundos,aindapermitiráarelaopermaneaacimaenquantoadiferenanafrequêncianoésuficienteparafazercomqueosnúmerosdesequênciaestejamporumadiferenadetrês.
ComoumailustraodecomoasmanutenesdeatividadedeHDLCtrabalham,oroteador1eoroteador2soconectadosdiretamenteatravésdoSerial0/0edoSerial2/0respectivamente.
AfimilustrarcomooKeepalivesfalhadoHDCLéusadoparaseguirosestadosdarelao,oSerial0/0seráfechadonoroteador1.
Roteador1Router1#showinterfacesserial0/0/0Serial0/0/0isup,lineprotocolisup(connected)HardwareisHD64570Internetaddressis10.
0.
0.
1/8MTU1500bytes,BW64Kbit,DLY20000usec,rely255/255,load1/255EncapsulationHDLC,loopbacknotset,keepaliveset(10sec)[outputisomited]17:21:09.
685:Serial0/0:HDLCmyseq0,mineseen0*,yourseen1,lineup17:21:19.
725:Serial0/0:HDLCmyseq1,mineseen1*,yourseen2,lineup17:21:29.
753:Serial0/0:HDLCmyseq2,mineseen2*,yourseen3,lineup17:21:39.
773:Serial0/0:HDLCmyseq3,mineseen3*,yourseen4,lineup17:21:49.
805:Serial0/0:HDLCmyseq4,mineseen4*,yourseen5,lineup17:21:59.
837:Serial0/0:HDLCmyseq5,mineseen5*,yourseen6,lineup17:22:09.
865:Serial0/0:HDLCmyseq6,mineseen6*,yourseen7,lineup17:22:19.
905:Serial0/0:HDLCmyseq7,mineseen7*,yourseen8,lineup17:22:29.
945:Serial0/0:HDLCmyseq8,mineseen8*,yourseen9,lineupRouter1(config-if)#shut17:22:39.
965:Serial0/0:HDLCmyseq9,mineseen9*,yourseen10,lineup17:22:42.
225:%LINK-5-CHANGED:InterfaceSerial0/0,changedstatetoadministrativelydown17:22:43.
245:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial0/0,changedstatetodownRoteador2Router2#showinterfacesserial0/0/0Serial0/0/0isup,lineprotocolisup(connected)HardwareisHD64570Internetaddressis10.
0.
0.
2/8MTU1500bytes,BW64Kbit,DLY20000usec,rely255/255,load1/255EncapsulationHDLC,loopbacknotset,keepaliveset(10sec)[outputisomited]17:21:04.
929:Serial2/0:HDLCmyseq0,mineseen0,yourseen0,lineup17:21:14.
941:Serial2/0:HDLCmyseq1,mineseen1*,yourseen1,lineup17:21:24.
961:Serial2/0:HDLCmyseq2,mineseen2*,yourseen2,lineup17:21:34.
981:Serial2/0:HDLCmyseq3,mineseen3*,yourseen3,lineup17:21:45.
001:Serial2/0:HDLCmyseq4,mineseen4*,yourseen4,lineup17:21:55.
021:Serial2/0:HDLCmyseq5,mineseen5*,yourseen5,lineup17:22:05.
041:Serial2/0:HDLCmyseq6,mineseen6*,yourseen6,lineup17:22:15.
061:Serial2/0:HDLCmyseq7,mineseen7*,yourseen7,lineup17:22:25.
081:Serial2/0:HDLCmyseq8,mineseen8*,yourseen8,lineup17:22:35.
101:Serial2/0:HDLCmyseq9,mineseen9*,yourseen9,lineup17:22:45.
113:Serial2/0:HDLCmyseq10,mineseen10*,yourseen10,lineup17:22:55.
133:Serial2/0:HDLCmyseq11,mineseen10,yourseen10,lineup17:23:05.
153:HD(0):Resetfrom0x20375817:23:05.
153:HD(0):AssertingDTR17:23:05.
153:HD(0):AssertingDTRandRTS17:23:05.
153:Serial2/0:HDLCmyseq12,mineseen10,yourseen10,lineup17:23:15.
173:HD(0):Resetfrom0x20375817:23:15.
173:HD(0):AssertingDTR17:23:15.
173:HD(0):AssertingDTRandRTS17:23:15.
173:Serial2/0:HDLCmyseq13,mineseen10,yourseen10,linedown17:23:16.
201:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial2/0,changedstatetodownRouter2#17:23:25.
193:Serial2/0:HDLCmyseq14,mineseen10,yourseen10,linedownManutenesdeatividadedePPPAsmanutenesdeatividadedePPPsoumpoucodiferentesdasmanutenesdeatividadedeHDLC.
AocontráriodoHDLC,asmanutenesdeatividadedePPPsomaiscomosibilos.
Osambososladospodemsibilar-seemseulazer.
OmovimentonegociadoapropriadoéresponderSEMPREaeste"sibilo".
AssimparamanutenesdeatividadedePPP,afrequênciaouovalordetemporizadorsosomentelocalmenterelevanteenotêmnenhumimpactonooutrolado.
MesmoseumladodesligaoKeepalives,aindaRESPONDER2aquelasrequisiesdeecodoladoquetemumtemporizadordekeepalive.
Contudo,nuncainiciaráalgumadoseuspróprios.
PermitaocomandodebugppppacketparaumaconexoPPPafimpermitirqueousuárioverasmanutenesdeatividadedePPPquesoenviadas:Router2#showinterfacesserial0/0/0Serial0/0/0isup,lineprotocolisup(connected)HardwareisHD64570Internetaddressis10.
0.
0.
2/8MTU1500bytes,BW64Kbit,DLY20000usec,rely255/255,load1/255EncapsulationHDLC,loopbacknotset,keepaliveset(10sec)[outputisomited]17:21:04.
929:Serial2/0:HDLCmyseq0,mineseen0,yourseen0,lineup17:21:14.
941:Serial2/0:HDLCmyseq1,mineseen1*,yourseen1,lineup17:21:24.
961:Serial2/0:HDLCmyseq2,mineseen2*,yourseen2,lineup17:21:34.
981:Serial2/0:HDLCmyseq3,mineseen3*,yourseen3,lineup17:21:45.
001:Serial2/0:HDLCmyseq4,mineseen4*,yourseen4,lineup17:21:55.
021:Serial2/0:HDLCmyseq5,mineseen5*,yourseen5,lineup17:22:05.
041:Serial2/0:HDLCmyseq6,mineseen6*,yourseen6,lineup17:22:15.
061:Serial2/0:HDLCmyseq7,mineseen7*,yourseen7,lineup17:22:25.
081:Serial2/0:HDLCmyseq8,mineseen8*,yourseen8,lineup17:22:35.
101:Serial2/0:HDLCmyseq9,mineseen9*,yourseen9,lineup17:22:45.
113:Serial2/0:HDLCmyseq10,mineseen10*,yourseen10,lineup17:22:55.
133:Serial2/0:HDLCmyseq11,mineseen10,yourseen10,lineup17:23:05.
153:HD(0):Resetfrom0x20375817:23:05.
153:HD(0):AssertingDTR17:23:05.
153:HD(0):AssertingDTRandRTS17:23:05.
153:Serial2/0:HDLCmyseq12,mineseen10,yourseen10,lineup17:23:15.
173:HD(0):Resetfrom0x20375817:23:15.
173:HD(0):AssertingDTR17:23:15.
173:HD(0):AssertingDTRandRTS17:23:15.
173:Serial2/0:HDLCmyseq13,mineseen10,yourseen10,linedown17:23:16.
201:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial2/0,changedstatetodownRouter2#17:23:25.
193:Serial2/0:HDLCmyseq14,mineseen10,yourseen10,linedownerespostasquesorecebidas:Router2#showinterfacesserial0/0/0Serial0/0/0isup,lineprotocolisup(connected)HardwareisHD64570Internetaddressis10.
0.
0.
2/8MTU1500bytes,BW64Kbit,DLY20000usec,rely255/255,load1/255EncapsulationHDLC,loopbacknotset,keepaliveset(10sec)[outputisomited]17:21:04.
929:Serial2/0:HDLCmyseq0,mineseen0,yourseen0,lineup17:21:14.
941:Serial2/0:HDLCmyseq1,mineseen1*,yourseen1,lineup17:21:24.
961:Serial2/0:HDLCmyseq2,mineseen2*,yourseen2,lineup17:21:34.
981:Serial2/0:HDLCmyseq3,mineseen3*,yourseen3,lineup17:21:45.
001:Serial2/0:HDLCmyseq4,mineseen4*,yourseen4,lineup17:21:55.
021:Serial2/0:HDLCmyseq5,mineseen5*,yourseen5,lineup17:22:05.
041:Serial2/0:HDLCmyseq6,mineseen6*,yourseen6,lineup17:22:15.
061:Serial2/0:HDLCmyseq7,mineseen7*,yourseen7,lineup17:22:25.
081:Serial2/0:HDLCmyseq8,mineseen8*,yourseen8,lineup17:22:35.
101:Serial2/0:HDLCmyseq9,mineseen9*,yourseen9,lineup17:22:45.
113:Serial2/0:HDLCmyseq10,mineseen10*,yourseen10,lineup17:22:55.
133:Serial2/0:HDLCmyseq11,mineseen10,yourseen10,lineup17:23:05.
153:HD(0):Resetfrom0x20375817:23:05.
153:HD(0):AssertingDTR17:23:05.
153:HD(0):AssertingDTRandRTS17:23:05.
153:Serial2/0:HDLCmyseq12,mineseen10,yourseen10,lineup17:23:15.
173:HD(0):Resetfrom0x20375817:23:15.
173:HD(0):AssertingDTR17:23:15.
173:HD(0):AssertingDTRandRTS17:23:15.
173:Serial2/0:HDLCmyseq13,mineseen10,yourseen10,linedown17:23:16.
201:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial2/0,changedstatetodownRouter2#17:23:25.
193:Serial2/0:HDLCmyseq14,mineseen10,yourseen10,linedownAsmanutenesdeatividadedePPPcontêmtrêspartes:NúmerodeID-usadoparaidentificaraqueoECHOREQoparresponde.
qTipokeepalive-OECHOREQéKeepalivesenviadopelodispositivodeorigemeoqECHOREPérespostasenviadaspelopar.
Númerosmágicos-asnotificaesincluemosnúmerosmágicosdoserveredoclienteremoto.
OparvalidaonúmeromágiconopacotederequisiodeecoLCP,etransmiteopacotederespostadeecocorrespondenteLCPquecontémonúmeromágiconegociadopeloroteador.
qParaoencapsulamentoPPP,cincoKeepalivesignoradosfazemcomquearelaosejaderrubadaInterfacesdotúnelGREOmecanismokeepalivedotúnelGREélevementediferentedoqueparaEthernetouinterfacesserial.
DáacapacidadeparaqueumladoorigineerecebapacoteskeepaliveaedeumroteadorremotomesmoseoroteadorremotonoapoiamanutenesdeatividadedeGRE.
DesdequeoGREéummecanismodetunelamentodopacoteparaescavarumtúneloIPdentrodoIP,umpacotedotúnelIPGREpodeserconstruídodentrodeumoutropacotedotúnelIPGRE.
ParamanutenesdeatividadedeGRE,asPRE-construesdoremetenteopacotedarespostadekeepalivedentrodopacotederequisiodokeepaliveoriginaldemodoqueasnecessidadesdaextremidaderemotasomentedefazerodesencapsulamentoGREpadrodocabealhoIPexteriorGREeenviamentoopacoteGREinternoIP.
Estemecanismofazcomquearespostadekeepaliveenvieparaforaainterfacefísicaumpoucodoqueainterfacedetúnel.
ParamaisdetalhesaotrabalhardoKeepalivesdotúnelGRE,vejacomoasmanutenesdeatividadedeGREtrabalham.
KeepalivescriptoKeepalivesdeIKEOKeepalivesdoInternetKeyExchange(IKE)éummecanismousadoparadeterminarseumparVPNpodeascendenteereceberotráfegocriptografado.
OKeepalivescriptoseparadoéexigidoalémdoquekeepalivesdeinterfaceporqueosparesVPNgeralmentesoconectadosnuncadevoltaàpartetraseira,assimqueoskeepalivesdeinterfacenofornecembastanteinformaosobreoestadodoparVPN.
EmdispositivosIOSCisco,oskeepalivesdeIKEsopermitidospelousodeummétodoproprietáriochamadooDeadPeerDetection(DPD).
AfimpermitirqueogatewayenvieDPDaopar,incorporeestecomandoaomododeconfiguraoglobal:cryptoisakmpkeepaliveseconds[retry-seconds][periodic|on-demand]AfimdesabilitaroKeepalives,use"no"oformuláriodestecomando.
Paraobtermaisinformaessobredoquecadapalavra-chavenestecomandofaz,vejaokeepalivecriptodoisakmp.
Paramaisgranularidade,oKeepalivespodeigualmenteserconfiguradosoboperfilISAKMP.
Paramaisdetalhes,vejao[CiscoIOSIPsec]davistageraldoperfilISAKMP.
KeepalivesNATEmcasodasencenaesondeumparVPNestáatrásdeumNetworkAddressTranslation(NAT),NAT-Traversaléusadoparaacriptografia.
Contudo,duranteperíodosociososépossívelqueaentradaNATnodispositivoascendentepdecronometrarparafora.
IstopodecausarproblemasquandovocêtrazacimaotúneleoNATnoébidirecional.
OKeepalivesNATépermitidoafimmanterotraodinmicoNATvivoduranteumaconexoentredoispares.
OKeepalivesNATépacotesdeUDPcomumpayloadunencrypteddeumbyte.
EmboraaaplicaoatualDPDsejasimilaraoKeepalivesNAT,háumapequenadiferena-oDPDestáusadoparadetectarostatusdepeerquandooKeepalivesNATforenviadoseaentidadedoIPsecnoenviounemrecebeuopacoteemumperíododetempoespecificado.
Ointervaloválidoestáentre5a3600segundos.
Dica:SeoKeepalivesNATestápermitido(atravésdocomandokeepalivenatdoisamkpcripto),osusuáriosdevemassegurar-sedequeovalorinativosejamaiscurtodoqueotempodeexpiraodomapeamentoNATde20segundos.
Paraobtermaisinformaessobredestacaracterística,vejaatransparênciadeNATdoIPsec.
Digital-VM商家目前也在凑热闹的发布六月份的活动,他们家的机房蛮多的有提供8个数据中心,包括日本、洛杉矶、新加坡等。这次六月份的促销活动全场VPS主机六折优惠。Digital-VM商家还是有一点点特点的,有提供1Gbps和10Gbps带宽的VPS主机,如果有需要大带宽的VPS主机可以看看。第一、商家优惠码优惠码:June40全场主机六折优惠,不过仅可以月付、季付。第二、商家VPS主机套餐1...
现在宝塔面板真的是越来越过分了,删除文件、删除数据库、删除站点等操作都需要做计算题!我今天升级到7.7版本,发现删除数据库竟然还加了几秒的延时等待,也无法跳过!宝塔的老板该不会是小学数学老师吧,那么喜欢让我们做计算题!因此我写了个js用于去除各种计算题以及延时等待,同时还去除了软件列表页面的bt企业版广告。只需要执行以下命令即可一键完成!复制以下命令在SSH界面执行:Layout_file="/w...
BuyVM测评,BuyVM怎么样?BuyVM好不好?BuyVM,2010年成立的国外老牌稳定商家,Frantech Solutions旗下,主要提供基于KVM的VPS服务器,数据中心有拉斯维加斯、纽约、卢森堡,付费可选强大的DDOS防护(月付3美金),特色是1Gbps不限流量,稳定商家,而且卢森堡不限版权。1G或以上内存可以安装Windows 2012 64bit,无需任何费用,所有型号包括免费的...
ios6 1 3为你推荐
office2016激活密钥Office 2016预览版怎么激活,序列号密钥激活易pc华硕的易PC怎么样,能流畅运行的游戏大概是什么水平的?伪装微信地理位置伪装微信地理位置 朋友圈显示地理位置怎么改郭彩妮台灣有什麽新的電視劇?站长故事爱迪生发明东西的故事什么是电子邮件 什么是电子邮件吴晓波频道买粉吴晓波频道学习卡资费?微信如何建群微信怎么建立群百度手写百度如何手写:ps抠图技巧请教PS抠图技巧!!!
域名申请 美国域名注册 过期备案域名查询 域名备案信息查询 域名停靠一青草视频 网易域名邮箱 duniu 狗爹 z.com paypal认证 evssl证书 英文站群 gtt 能外链的相册 最漂亮的qq空间 独享主机 网页提速 广州虚拟主机 脚本大全 湖南铁通 更多