F5 BIGIP基本故障排除&;常见问题处理(4)

文档名称: F5 BIG-IP V9产品的常见问题处理手册

第4章 WEB与命令行管理

4.1. 通过WEB界面修改配置时出现General Database Error错误，

如何处理？

如果条件允许，先将系统重启后再次修改配置，看问题是否依然存在。 如果问题依然存在，或者不允许重启系统，则需要用SSH客户端以命令行方式登陆BIG-IP。

注：建议从管理网口用命令行登陆。

用SSH登陆命令行以后，看命令行提示符现示系统是否处于Inoperational状态。

如果是处于Inoperational状态，则可能是License没有激活或已经到期。（License到期的现象只发生在采用了临时License的测试设备上）。

如果License已经处于有效激活状态，而系统处于Inoperaitonal状态，则有可能是配置文件有错误，导致配置文件无法被顺利加载。

如果命令行提示符提示系统处于Active状态或Standby状态，而通过WEB界面修改配置出现General Database Error，则有可能是负责WEB管理的进程出现异常，可能采用bigstart tomcat restart的方式看能否解决问题。

4.2. SSH访问具有密码加密传输的优点，请问从哪里获取SSH客户

端？

常用的SSH客户端有：

?

Secure Shell Client ——下载链接

http://www.ssh.com/support/downloads/secureshellwks/non-commercial.html或http://www.f5.com.cn/f5gz/tools/SSHSecureShellClient-3.2.5.exe。 2013-8-15

第13页, 共52页

? ?

文档名称: F5 BIG-IP V9产品的常见问题处理手册 Putty ――下载链接http://www.f5.com.cn/f5gz/tools/putty.zip

TTSSH —— http://www.zip.com.au/~roca/ttssh.html TTSSH是公司标准软件Tera Term的SSH扩展免费软件。

? SecureCRT —— http://www.vandyke.com/ 本软件功能强大，评估版为免费软件。

4.3. 为什么无法用Telnet登陆到BIG-IP的命令行？

出于安全考虑，BIG-IP不允许采用Telnet的方法登陆到BIG-IP。 Please refer to the following SOL for detail.

http://tech.f5.com/home/bigip-next/solutions/toolsscript/sol3848.html

4.4. BIG-IP系统Web管理员admin密码忘记了，如何恢复？

可以通过在命令行执行 passwd admin重新设置admin密码。

方法请参考http://tech.f5.com/home/solutions/sol3350.html --Changing account passwords for the command line and Configuration utility。

4.5. BIG-IP系统root密码忘记了，如何恢复？

如果Root密码丢失，但还可以进入Web管理界面，则可以在System->Platform界面重新设置Root密码。

如果Root密码丢失，且无法进入Web管理界面，则需要进入到单用户模式，重新设置Root密码。方法请参考Solution ID: SOL4178 Booting BIG-IP in single user mode

和Solution ID: SOL3350 Changing account passwords for the command line and Configuration utility。

2013-8-15

第14页, 共52页

文档名称: F5 BIG-IP V9产品的常见问题处理手册

4.6. 默认的用户名和口令不安全，如何添加新用户或修改现有用户？

Web管理员的密码与命令行登陆root帐可以密码可以通过Web界面进行修改： 登录bigip的WEB管理界面时需使用Admin的用户名，登录bigip的命令行界面需要使用root的用户名，更改这个两个用户名的方法如下：

点击左侧导航条的System?Platform，进入其属性页面：

在右侧的页面中，可以在User Administration中对这两个用户名的密码进行更改。更改完毕后点击Update即可生效。

“root”用户也可以通过CLI“passwd”命令进行修改。

4.7. 如果忘记了SCCP的密码，如何恢复SCCP的密码到出厂设置？

In normal operating conditions the root password on the SCCP is synchronized from the root password on the BIG-IP host, thus the SCCP root password is the same as the BIG-IP root password.

To reset password, the procedure as below:

2013-8-15

第15页, 共52页

文档名称: F5 BIG-IP V9产品的常见问题处理手册

Resetting the SCCP password to its default value will allow you to access the SCCP, if required. To reset the SCCP password to its factory default value, perform the following steps:

Note: This procedure must be performed from the console (accessed through the console terminal).

1.Power up the BIG-IP system from a powered-off state. 2.At the press any key to stop Autoboot prompt, stop the boot. The system will return a => prompt.

3.From the => prompt, type the following commands: setenv runlevel init=/bin/bash -s -- run flashboot

Note: In order for the command to execute properly, you must include the two dashes (--) at the end of the setenv runlevel init=/bin/bash -s -- line of code, above. The system will return a bash prompt.

4.From the bash prompt, type the following commands: echo \mount /proc

5.Type the following command: Note: 下面的命令须在同一命令行执行

ln -s `awk '/Boot FS/ { printf(\6.Type the following command: Note: 下面的命令须在同一命令行执行

echo -e \7.Type the following commands: mount -a cd /boot rm nvfiles.tgz sync cd / umount /boot 8.Power-cycle the box.

Important: The system must be power cycled for this procedure to be effective.

Note: As the BIG-IP reboots you will see warning messages, which are expected at this stage in the procedure. The warning messages will appear as follows: Warning: Remote Host Identification Has Changed!

Backing up the known_hosts file and re-synchronizing the SSH keys

The known_hosts files now need to be updated on the BIG-IP system and the SCCP, and the SSH keys need to be synchronized to the SCCP, and from the SCCP to the BIG-IP system. The following steps will back up the current known_hosts files and re-synchronize the SSH keys. Note: For this procedure, BIG-IP is also known as the host. 2013-8-15

第16页, 共52页

文档名称: F5 BIG-IP V9产品的常见问题处理手册

1.Log in to the Console command line as the root account.

2.Rename the /var/ssh/root/known_hosts file, by typing the following command: mv /var/ssh/root/known_hosts /var/ssh/root/known_hosts.orig

3.Synchronize the keys from the BIG-IP to the SCCP, by typing the following command: keyswap.sh sccp

A message will appear, indicating that the authenticity of host sccp (127.2.0.1) cannot be established. 4.At the Are you sure you want to continue connecting (yes/no)? prompt, type yes. You will be prompted for a password. 5.Type the SCCP password default.

You will be prompted several more times (approximately 6 times) for the password. Continue to type the password default for each prompt until you are returned to the BIG-IP command line. 6.Connect to the SCCP by typing the following command: ssh sccp

A message will appear indicating that the authenticity of host sccp (127.2.0.1) cannot be established. 7.At the Are you sure you want to continue connecting (yes/no)? prompt, type yes.

If the SSH keys have been properly synchronized from the host to the SCCP, the system should not prompt you for a password.

You should now be connected to the SCCP, and have an sccp# prompt. 8.Rename the /root/.ssh/known_hosts file, by typing the following command: mv /root/.ssh/known_hosts /root/.ssh/known_hosts.orig

9.Synchronize the keys from the SCCP to the host, by typing the following command:

keyswap.sh host

A message will appear indicating that the authenticity of host sccp (127.2.0.1) cannot be established. 10.At the Are you sure you want to continue connecting (yes/no)? prompt, type yes. You will be prompted for a password.

11.Type the password for the host's root account.

You will be prompted several more times (approximately 6 times) for the password. Continue to type the password default for each prompt until you are returned to the BIG-IP command line. 12.Connect to the host by typing the following command: ssh host

A message will appear, indicating that the authenticity of host sccp (127.2.0.2) cannot be established. 13.At the Are you sure you want to continue connecting (yes/no)? prompt, type yes.

If the SSH keys have been properly synchronized from the SCCP to the host, the system should not prompt you for a password.

You should now be connected to the host, and have the BIG-IP prompt [root@bigip:Standby] root #. 14.Exit the host and return to the SCCP, by typing the following command: exit

15.Exit the SCCP and return to the host, by typing the following command: exit

16.Reboot the host, by typing the following command:

2013-8-15

第17页, 共52页

百度搜索“77cn”或“免费范文网”即可找到本站免费阅读全部范文。收藏本站方便下次阅读，免费范文网，提供经典小说综合文库F5 BIGIP基本故障排除&;常见问题处理(4)在线全文阅读。