%n: Anywhere where this appears in a template file, the full resulting unit name will be inserted. %N: This is the same as the above, but any escaping, such as those present in file path patterns, will be reversed. %p: This references the unit name prefix. This is the portion of the unit name that comes before the @ symbol. %P: This is the same as above, but with any escaping reversed. %i: This references the instance name, which is the identifier following the @ in the instance unit. This is one of the most commonly used specifiers because it will be guaranteed to be dynamic. The use of this identifier encourages the use of configuration significant identifiers. For example, the port that the service will be run at can be used as the instance identifier and the template can use this specifier to set up the port specification. %I: This specifier is the same as the above, but with any escaping reversed. %f: This will be replaced with the unescaped instance name or the prefix name, prepended with a /. %c: This will indicate the control group of the unit, with the standard parent hierarchy of /sys/fs/cgroup/ssytemd/ removed. %u: The name of the user configured to run the unit. %U: The same as above, but as a numeric UID instead of name. %H: The host name of the system that is running the unit. %%: This is used to insert a literal percentage sign.
display nqa statistics NQA entry(admin admin, tag yidong) test statistics: NO. : 1 Destination IP address: 218.201.*.* Start time: 2000-10-1615:00:37.9 Life time: 3520 Send operation times: 33633 Receive response times: 33628 Min/Max/Average round trip time: 1/5/1 Square-Sum of round trip time: 33773 Extended results: Packet lost in test: 0% Failures due to timeout: 5 Failures due to disconnect: 0 Failures due to no connection: 0 Failures due to sequence error: 0 Failures due to internal error: 0 Failures due to other errors: 0 Packet(s) arrived late: 0 NQA entry(admin admin, tag wangtong) test statistics: NO. : 1 Destination IP address: 222.132.*.* Start time: 2000-10-1615:00:07.6 Life time: 3549 Send operation times: 1099 Receive response times: 0 Min/Max/Average round trip time: 0/0/0 Square-Sum of round trip time: 0 Extended results: Packet lost in test: 100% Failures due to timeout: 1099 Failures due to disconnect: 0 Failures due to no connection: 0 Failures due to sequence error: 0 Failures due to internal error: 0 Failures due to other errors: 0 Packet(s) arrived late: 0
可以看到网通链路是无效的。
查看当前路由表
1 2 3 4 5 6 7 8 9
display ip routing-table Routing Tables: Public Destinations : 419 Routes : 419
Destination/Mask Proto Pre Cost NextHop Interface
0.0.0.0/0 Static 800218.201.*.* Vlan200 2.0.0.0/8 Direct 002.0.0.59 Vlan300
Please deploy a DNS TXT record under the name _acme-challenge.openwares.net with the following value:
ZvjRBkEYcMVZSEslsuj*******************
Before continuing, verify the record is deployed.
按照要求配置域名TXT记录，确认TXT记录生效
1 2
$ host -t TXT _acme-challenge.openwares.net _acme-challenge.openwares.net descriptive text "ZvjRBkEYcMVZSEslsu************"
TXT记录生效可能稍微会需要一些时间，确认生效后继续,如果通过验证则会生成证书
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
Waiting for verification... Cleaning up challenges
IMPORTANT NOTES: - Congratulations! Your certificate and chain have been saved at: /etc/letsencrypt/live/openwares.net/fullchain.pem Your key file has been saved at: /etc/letsencrypt/live/openwares.net/privkey.pem Your cert will expire on 2018-08-31. To obtain a new or tweaked version ofthis certificate in the future, simply run certbot again. To non-interactively renew *all* of your certificates, run "certbot renew" - If you like Certbot, please consider supporting our work by:
Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate Donating to EFF: https://eff.org/donate-le