VistageraldosmecanismoskeepalivenoCiscoIOSndiceIntroduoInformaesdeApoioMecanismosdokeepalivedeinterfaceInterfacesdeEthernetInterfacesseriaisManutenesdeatividadedeHDLCManutenesdeatividadedePPPInterfacesdotúnelGREKeepalivescriptoKeepalivesdeIKEKeepalivesNATIntroduoEstedocumentodescreveosváriosmecanismoskeepalivenodoCiscoIOS.
InformaesdeApoioOsmensagensdekeepalivesoenviadosporumdispositivoderedeatravésdeumexameoudeunscircuitosvirtuaisafiminformaraindaumoutrodispositivoderedeesseocircuitoentreelesfunes.
ParaqueoKeepalivestrabalhehádoisfatoresessenciais:Ointervalokeepaliveéoperíododetempoentrecadamensagemdekeepalivequeéenviadoporumdispositivoderede.
Istoésempreconfigurável.
qAsnovastentativasdokeepalivesoonúmerodevezesqueodispositivocontinuaaenviarapacoteskeepalivesemrespostaantesqueoestadoestejamudadoa"parabaixo".
ParaalgunstiposdeKeepalivesistoéconfigurável,quandoparaoutrohouverumvalorpadroquenopossasermudado.
qMecanismosdokeepalivedeinterfaceInterfacesdeEthernetEmmeiosdetransmissotaiscomoumEthernet,oKeepalivesélevementeoriginal.
DesdequehámuitospossíveisvizinhosnosEthernet,okeepalivenoestáprojetadodeterminarseotrajetoaqualquerumvizinhoespecíficonofioestádisponível.
Projeta-sesomentecertificar-sedosistemalocaltenhaoacessodeleituraegravaoaofiodosEthernetpróprio.
OroteadorproduzumpacotedeEthernetcomsecomooendereoMACdeorigemededestinoeumcódigotipodeEthernetespecialde0x9000.
OhardwaredeEthernetenviaestepacotenofiodosEtherneteentorecebeimediatamenteestapartetraseiradopacoteoutravez.
IstoverificaohardwaredeemissoedereceponoadaptadordoEtherneteaintegridadebásicadofio.
InterfacesseriaisAsinterfacesserialpodemtertiposdiferentesdeencapsulamentosecadatipodeencapsulamentodeterminaotipodoKeepalivesqueseráusado.
InscrevaocomandokeepalivenomododeconfiguraodainterfaceafimajustarafrequênciaemqueumroteadorenviapacotesECHOREQaseupar:Afimrestaurarosistemaaointervalokeepalivedopadrodossegundos10,inscrevaocomandokeepalivecomnenhumapalavra-chave.
qAfimdesabilitaroKeepalives,inscrevaocomandodisabledokeepalive.
qNota:keepaliveOcomandoaplica-seàsinterfacesserialqueusamolinkdedadosdenívelelevadoContol(HDLC)ouoencapsulamentoPPP.
NoseaplicaàsinterfacesserialqueusamoEncapsulamentoframerelay.
Nota:ParaoPPPeostiposdoencapsulamentodeHDLC,umkeepalivedezerodesabilitaoKeepaliveseérelatadonocomandoshowrunning-configoutputcomoodesabilitaodokeepalive.
ManutenesdeatividadedeHDLCUmoutromecanismokeepaliveconhecidoémanutenesdeatividadeserialparaoHDLC.
AsmanutenesdeatividadeserialsoenviadasparaafrenteeparatrásentredoisRoteadoreseoKeepalivessoreconhecidos.
Comousodosnúmerosdesequênciaseguircadakeepalive,cadadispositivopodeconfirmarseéparHDLCrecebeuokeepalivequeenviou.
ParaoencapsulamentodeHDLC,trêsKeepalivesignoradosfazemcomquearelaosejaderrubada.
PermitaocomandodebugserialinterfaceparaumaconexodeHDLCafimpermitirqueousuárioveroKeepalivesqueégeradoeenviado:SampleOutput:17:21:09.
685:Serial0/0:HDLCmyseq0,mineseen0*,yourseen1,lineupAsmanutenesdeatividadedeHDLCcontêmtrêspartesafimdeterminá-lotrabalham:O"myseq"queénossopróprionúmerodeincremento.
qO"mineseen"queérealmenteumreconhecimentodooutrolado(incrementado)quedizqueesperaestenúmerodenós.
q"Yourseen"queénossoreconhecimentoaooutrolado.
qNota:Quandoadiferenanosvaloresnoscamposdomyseqedomineseenexcedetrêsnoroteador2,alinhavaiparabaixoearelaoérestaurada.
DesdequeasmanutenesdeatividadedeHDLCsotipoKeepalivesECHOREQ,afrequênciadekeepaliveéimportanteerecomenda-sequecombinamacimaexatamenteemambososlados.
Seostemporizadoressoforadasincronizao,osnúmerosdesequênciacomeamsairdaordem.
Porexemplo,sevocêajustaumladoaossegundos10eooutroa25segundos,aindapermitiráarelaopermaneaacimaenquantoadiferenanafrequêncianoésuficienteparafazercomqueosnúmerosdesequênciaestejamporumadiferenadetrês.
ComoumailustraodecomoasmanutenesdeatividadedeHDLCtrabalham,oroteador1eoroteador2soconectadosdiretamenteatravésdoSerial0/0edoSerial2/0respectivamente.
AfimilustrarcomooKeepalivesfalhadoHDCLéusadoparaseguirosestadosdarelao,oSerial0/0seráfechadonoroteador1.
Roteador1Router1#showinterfacesserial0/0/0Serial0/0/0isup,lineprotocolisup(connected)HardwareisHD64570Internetaddressis10.
0.
0.
1/8MTU1500bytes,BW64Kbit,DLY20000usec,rely255/255,load1/255EncapsulationHDLC,loopbacknotset,keepaliveset(10sec)[outputisomited]17:21:09.
685:Serial0/0:HDLCmyseq0,mineseen0*,yourseen1,lineup17:21:19.
725:Serial0/0:HDLCmyseq1,mineseen1*,yourseen2,lineup17:21:29.
753:Serial0/0:HDLCmyseq2,mineseen2*,yourseen3,lineup17:21:39.
773:Serial0/0:HDLCmyseq3,mineseen3*,yourseen4,lineup17:21:49.
805:Serial0/0:HDLCmyseq4,mineseen4*,yourseen5,lineup17:21:59.
837:Serial0/0:HDLCmyseq5,mineseen5*,yourseen6,lineup17:22:09.
865:Serial0/0:HDLCmyseq6,mineseen6*,yourseen7,lineup17:22:19.
905:Serial0/0:HDLCmyseq7,mineseen7*,yourseen8,lineup17:22:29.
945:Serial0/0:HDLCmyseq8,mineseen8*,yourseen9,lineupRouter1(config-if)#shut17:22:39.
965:Serial0/0:HDLCmyseq9,mineseen9*,yourseen10,lineup17:22:42.
225:%LINK-5-CHANGED:InterfaceSerial0/0,changedstatetoadministrativelydown17:22:43.
245:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial0/0,changedstatetodownRoteador2Router2#showinterfacesserial0/0/0Serial0/0/0isup,lineprotocolisup(connected)HardwareisHD64570Internetaddressis10.
0.
0.
2/8MTU1500bytes,BW64Kbit,DLY20000usec,rely255/255,load1/255EncapsulationHDLC,loopbacknotset,keepaliveset(10sec)[outputisomited]17:21:04.
929:Serial2/0:HDLCmyseq0,mineseen0,yourseen0,lineup17:21:14.
941:Serial2/0:HDLCmyseq1,mineseen1*,yourseen1,lineup17:21:24.
961:Serial2/0:HDLCmyseq2,mineseen2*,yourseen2,lineup17:21:34.
981:Serial2/0:HDLCmyseq3,mineseen3*,yourseen3,lineup17:21:45.
001:Serial2/0:HDLCmyseq4,mineseen4*,yourseen4,lineup17:21:55.
021:Serial2/0:HDLCmyseq5,mineseen5*,yourseen5,lineup17:22:05.
041:Serial2/0:HDLCmyseq6,mineseen6*,yourseen6,lineup17:22:15.
061:Serial2/0:HDLCmyseq7,mineseen7*,yourseen7,lineup17:22:25.
081:Serial2/0:HDLCmyseq8,mineseen8*,yourseen8,lineup17:22:35.
101:Serial2/0:HDLCmyseq9,mineseen9*,yourseen9,lineup17:22:45.
113:Serial2/0:HDLCmyseq10,mineseen10*,yourseen10,lineup17:22:55.
133:Serial2/0:HDLCmyseq11,mineseen10,yourseen10,lineup17:23:05.
153:HD(0):Resetfrom0x20375817:23:05.
153:HD(0):AssertingDTR17:23:05.
153:HD(0):AssertingDTRandRTS17:23:05.
153:Serial2/0:HDLCmyseq12,mineseen10,yourseen10,lineup17:23:15.
173:HD(0):Resetfrom0x20375817:23:15.
173:HD(0):AssertingDTR17:23:15.
173:HD(0):AssertingDTRandRTS17:23:15.
173:Serial2/0:HDLCmyseq13,mineseen10,yourseen10,linedown17:23:16.
201:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial2/0,changedstatetodownRouter2#17:23:25.
193:Serial2/0:HDLCmyseq14,mineseen10,yourseen10,linedownManutenesdeatividadedePPPAsmanutenesdeatividadedePPPsoumpoucodiferentesdasmanutenesdeatividadedeHDLC.
AocontráriodoHDLC,asmanutenesdeatividadedePPPsomaiscomosibilos.
Osambososladospodemsibilar-seemseulazer.
OmovimentonegociadoapropriadoéresponderSEMPREaeste"sibilo".
AssimparamanutenesdeatividadedePPP,afrequênciaouovalordetemporizadorsosomentelocalmenterelevanteenotêmnenhumimpactonooutrolado.
MesmoseumladodesligaoKeepalives,aindaRESPONDER2aquelasrequisiesdeecodoladoquetemumtemporizadordekeepalive.
Contudo,nuncainiciaráalgumadoseuspróprios.
PermitaocomandodebugppppacketparaumaconexoPPPafimpermitirqueousuárioverasmanutenesdeatividadedePPPquesoenviadas:Router2#showinterfacesserial0/0/0Serial0/0/0isup,lineprotocolisup(connected)HardwareisHD64570Internetaddressis10.
0.
0.
2/8MTU1500bytes,BW64Kbit,DLY20000usec,rely255/255,load1/255EncapsulationHDLC,loopbacknotset,keepaliveset(10sec)[outputisomited]17:21:04.
929:Serial2/0:HDLCmyseq0,mineseen0,yourseen0,lineup17:21:14.
941:Serial2/0:HDLCmyseq1,mineseen1*,yourseen1,lineup17:21:24.
961:Serial2/0:HDLCmyseq2,mineseen2*,yourseen2,lineup17:21:34.
981:Serial2/0:HDLCmyseq3,mineseen3*,yourseen3,lineup17:21:45.
001:Serial2/0:HDLCmyseq4,mineseen4*,yourseen4,lineup17:21:55.
021:Serial2/0:HDLCmyseq5,mineseen5*,yourseen5,lineup17:22:05.
041:Serial2/0:HDLCmyseq6,mineseen6*,yourseen6,lineup17:22:15.
061:Serial2/0:HDLCmyseq7,mineseen7*,yourseen7,lineup17:22:25.
081:Serial2/0:HDLCmyseq8,mineseen8*,yourseen8,lineup17:22:35.
101:Serial2/0:HDLCmyseq9,mineseen9*,yourseen9,lineup17:22:45.
113:Serial2/0:HDLCmyseq10,mineseen10*,yourseen10,lineup17:22:55.
133:Serial2/0:HDLCmyseq11,mineseen10,yourseen10,lineup17:23:05.
153:HD(0):Resetfrom0x20375817:23:05.
153:HD(0):AssertingDTR17:23:05.
153:HD(0):AssertingDTRandRTS17:23:05.
153:Serial2/0:HDLCmyseq12,mineseen10,yourseen10,lineup17:23:15.
173:HD(0):Resetfrom0x20375817:23:15.
173:HD(0):AssertingDTR17:23:15.
173:HD(0):AssertingDTRandRTS17:23:15.
173:Serial2/0:HDLCmyseq13,mineseen10,yourseen10,linedown17:23:16.
201:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial2/0,changedstatetodownRouter2#17:23:25.
193:Serial2/0:HDLCmyseq14,mineseen10,yourseen10,linedownerespostasquesorecebidas:Router2#showinterfacesserial0/0/0Serial0/0/0isup,lineprotocolisup(connected)HardwareisHD64570Internetaddressis10.
0.
0.
2/8MTU1500bytes,BW64Kbit,DLY20000usec,rely255/255,load1/255EncapsulationHDLC,loopbacknotset,keepaliveset(10sec)[outputisomited]17:21:04.
929:Serial2/0:HDLCmyseq0,mineseen0,yourseen0,lineup17:21:14.
941:Serial2/0:HDLCmyseq1,mineseen1*,yourseen1,lineup17:21:24.
961:Serial2/0:HDLCmyseq2,mineseen2*,yourseen2,lineup17:21:34.
981:Serial2/0:HDLCmyseq3,mineseen3*,yourseen3,lineup17:21:45.
001:Serial2/0:HDLCmyseq4,mineseen4*,yourseen4,lineup17:21:55.
021:Serial2/0:HDLCmyseq5,mineseen5*,yourseen5,lineup17:22:05.
041:Serial2/0:HDLCmyseq6,mineseen6*,yourseen6,lineup17:22:15.
061:Serial2/0:HDLCmyseq7,mineseen7*,yourseen7,lineup17:22:25.
081:Serial2/0:HDLCmyseq8,mineseen8*,yourseen8,lineup17:22:35.
101:Serial2/0:HDLCmyseq9,mineseen9*,yourseen9,lineup17:22:45.
113:Serial2/0:HDLCmyseq10,mineseen10*,yourseen10,lineup17:22:55.
133:Serial2/0:HDLCmyseq11,mineseen10,yourseen10,lineup17:23:05.
153:HD(0):Resetfrom0x20375817:23:05.
153:HD(0):AssertingDTR17:23:05.
153:HD(0):AssertingDTRandRTS17:23:05.
153:Serial2/0:HDLCmyseq12,mineseen10,yourseen10,lineup17:23:15.
173:HD(0):Resetfrom0x20375817:23:15.
173:HD(0):AssertingDTR17:23:15.
173:HD(0):AssertingDTRandRTS17:23:15.
173:Serial2/0:HDLCmyseq13,mineseen10,yourseen10,linedown17:23:16.
201:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial2/0,changedstatetodownRouter2#17:23:25.
193:Serial2/0:HDLCmyseq14,mineseen10,yourseen10,linedownAsmanutenesdeatividadedePPPcontêmtrêspartes:NúmerodeID-usadoparaidentificaraqueoECHOREQoparresponde.
qTipokeepalive-OECHOREQéKeepalivesenviadopelodispositivodeorigemeoqECHOREPérespostasenviadaspelopar.
Númerosmágicos-asnotificaesincluemosnúmerosmágicosdoserveredoclienteremoto.
OparvalidaonúmeromágiconopacotederequisiodeecoLCP,etransmiteopacotederespostadeecocorrespondenteLCPquecontémonúmeromágiconegociadopeloroteador.
qParaoencapsulamentoPPP,cincoKeepalivesignoradosfazemcomquearelaosejaderrubadaInterfacesdotúnelGREOmecanismokeepalivedotúnelGREélevementediferentedoqueparaEthernetouinterfacesserial.
DáacapacidadeparaqueumladoorigineerecebapacoteskeepaliveaedeumroteadorremotomesmoseoroteadorremotonoapoiamanutenesdeatividadedeGRE.
DesdequeoGREéummecanismodetunelamentodopacoteparaescavarumtúneloIPdentrodoIP,umpacotedotúnelIPGREpodeserconstruídodentrodeumoutropacotedotúnelIPGRE.
ParamanutenesdeatividadedeGRE,asPRE-construesdoremetenteopacotedarespostadekeepalivedentrodopacotederequisiodokeepaliveoriginaldemodoqueasnecessidadesdaextremidaderemotasomentedefazerodesencapsulamentoGREpadrodocabealhoIPexteriorGREeenviamentoopacoteGREinternoIP.
Estemecanismofazcomquearespostadekeepaliveenvieparaforaainterfacefísicaumpoucodoqueainterfacedetúnel.
ParamaisdetalhesaotrabalhardoKeepalivesdotúnelGRE,vejacomoasmanutenesdeatividadedeGREtrabalham.
KeepalivescriptoKeepalivesdeIKEOKeepalivesdoInternetKeyExchange(IKE)éummecanismousadoparadeterminarseumparVPNpodeascendenteereceberotráfegocriptografado.
OKeepalivescriptoseparadoéexigidoalémdoquekeepalivesdeinterfaceporqueosparesVPNgeralmentesoconectadosnuncadevoltaàpartetraseira,assimqueoskeepalivesdeinterfacenofornecembastanteinformaosobreoestadodoparVPN.
EmdispositivosIOSCisco,oskeepalivesdeIKEsopermitidospelousodeummétodoproprietáriochamadooDeadPeerDetection(DPD).
AfimpermitirqueogatewayenvieDPDaopar,incorporeestecomandoaomododeconfiguraoglobal:cryptoisakmpkeepaliveseconds[retry-seconds][periodic|on-demand]AfimdesabilitaroKeepalives,use"no"oformuláriodestecomando.
Paraobtermaisinformaessobredoquecadapalavra-chavenestecomandofaz,vejaokeepalivecriptodoisakmp.
Paramaisgranularidade,oKeepalivespodeigualmenteserconfiguradosoboperfilISAKMP.
Paramaisdetalhes,vejao[CiscoIOSIPsec]davistageraldoperfilISAKMP.
KeepalivesNATEmcasodasencenaesondeumparVPNestáatrásdeumNetworkAddressTranslation(NAT),NAT-Traversaléusadoparaacriptografia.
Contudo,duranteperíodosociososépossívelqueaentradaNATnodispositivoascendentepdecronometrarparafora.
IstopodecausarproblemasquandovocêtrazacimaotúneleoNATnoébidirecional.
OKeepalivesNATépermitidoafimmanterotraodinmicoNATvivoduranteumaconexoentredoispares.
OKeepalivesNATépacotesdeUDPcomumpayloadunencrypteddeumbyte.
EmboraaaplicaoatualDPDsejasimilaraoKeepalivesNAT,háumapequenadiferena-oDPDestáusadoparadetectarostatusdepeerquandooKeepalivesNATforenviadoseaentidadedoIPsecnoenviounemrecebeuopacoteemumperíododetempoespecificado.
Ointervaloválidoestáentre5a3600segundos.
Dica:SeoKeepalivesNATestápermitido(atravésdocomandokeepalivenatdoisamkpcripto),osusuáriosdevemassegurar-sedequeovalorinativosejamaiscurtodoqueotempodeexpiraodomapeamentoNATde20segundos.
Paraobtermaisinformaessobredestacaracterística,vejaatransparênciadeNATdoIPsec.
hostodo从2014年年底运作至今一直都是走低价促销侧率运作VPS,在市场上一直都是那种不温不火的品牌知名度,好在坚持了7年都还运作得好好的,站长觉得hostodo还是值得大家在买VPS的时候作为一个候选考虑项的。当前,hostodo有拉斯维加斯和迈阿密两个数据中心的VPS在促销,专门列出了2款VPS给8T流量/月,基于KVM虚拟+NVMe整列,年付送DirectAdmin授权(发ticket...
Hostkey.com成立于2007年的荷兰公司,主要运营服务器出租与托管,其次是VPS、域名、域名证书,各种软件授权等。hostkey当前运作荷兰阿姆斯特丹、俄罗斯莫斯科、美国纽约等数据中心。支持Paypal,信用卡,Webmoney,以及支付宝等付款方式。禁止VPN,代理,Tor,网络诈骗,儿童色情,Spam,网络扫描,俄罗斯色情,俄罗斯电影,俄罗斯MP3,俄罗斯Trackers,以及俄罗斯法...
WHloud Date(鲸云数据),原做大数据和软件开发的团队,现在转变成云计算服务,面对海内外用户提供中国大陆,韩国,日本,香港等多个地方节点服务。24*7小时的在线支持,较为全面的虚拟化构架以及全方面的技术支持!官方网站:https://www.whloud.com/WHloud Date 韩国BGP云主机少量补货随时可以开通,随时可以用,两小时内提交退款,可在工作日期间全额原路返回!支持pa...
ios6 1 3为你推荐
百度k站百度k站为什么渗透测试web渗透测试有前途吗工信部备案怎样在工信部进行域名备案?要详细arm开发板ARM开发板具体有什么作用?有什么商业价值?linux虚拟机怎么样在Linux下安装虚拟机二层交换机什么是三层交换机?什么是二层叫交换机?有什么区别?发邮件怎么发怎样发送邮件微信电话本怎么用微信电话本在哪里 微信电话本怎么打开网站营运网站运营都分为哪些方面声母是什么什么是声母,什么是音母?
windows虚机 adman mysql主机 服务器架设 java虚拟主机 福建天翼加速 gspeed idc资讯 789电视网 息壤代理 电信主机 linode支付宝 监控服务器 wordpress中文主题 789电视剧网 双十二促销 免费的加速器 卡巴斯基免费版 最好的空间日志 万网空间价格 更多