{"id":1322,"date":"2009-07-07T08:47:31","date_gmt":"2009-07-07T00:47:31","guid":{"rendered":"http:\/\/www.killtest.com.tw\/?p=1322"},"modified":"2009-07-07T08:48:52","modified_gmt":"2009-07-07T00:48:52","slug":"cisco-12","status":"publish","type":"post","link":"https:\/\/www.killtest.com.tw\/?p=1322","title":{"rendered":"\u8f7b\u677e\u914d\u7f6eCisco IOS"},"content":{"rendered":"

\u672c\u6587\u6458\u81ea\uff1ahttp:\/\/cisco.chinaitlab.com\/CiscoIOS\/788580.html<\/a><\/p>\n

\u5728\u5178\u578b\u7684IP\u5730\u5740\u6b3a\u9a19\u4e2d\uff0c\u653b\u64ca\u8005\u901a\u5e38\u507d\u9020\u6578\u64da\u5305\u7684\u767c\u9001\u5730\u5740\uff0c\u4ee5\u4fbf\u81ea\u5df1\u770b\u8d77\u4f86\u50cf\u662f\u4f86\u81ea\u5167\u7db2\u3002\u9019\u88cf\u6211\u5011\u6703\u544a\u8a34\u59b3\u53ef\u4ee5\u91c7\u53d6\u76843\u500b\u8fa6\u6cd5\uff0c\u8b93\u653b\u64ca\u8005\u7684\u65e5\u5b50\u4e0d\u90a3\u9ebd\u597d\u904e\uff0c\u4f7fIP\u5730\u5740\u6b3a\u9a19\u4e5f\u7121\u6cd5\u8f15\u6613\u5f97\u901e\u3002\u773e\u6240\u5468\u77e5\uff0c\u4e92\u806f\u7db2\u4e0a\u5230\u8655\u90fd\u662f\u5b89\u5168\u98a8\u96aa\uff0c\u5176\u4e2d\u4e4b\u58f9\u4fbf\u662fIP\u5730\u5740\u6b3a\u9a19\u3002\u5728\u5178\u578b\u7684IP\u5730\u5740\u6b3a\u9a19\u4e2d\uff0c\u653b\u64ca\u8005\u901a\u5e38\u507d\u9020\u6578\u64da\u5305\u7684\u767c\u9001\u5730\u5740\uff0c\u4ee5\u4fbf\u81ea\u5df1\u770b\u8d77\u4f86\u50cf\u662f\u4f86\u81ea\u5167\u7db2\u3002\u4e0b\u9762\u8b93\u6211\u5011\u8a0e\u8ad63\u7a2e\u4fdd\u8b77\u4f01\u696d\u4e0d\u53d7\u6b64\u7a2e\u653b\u64ca\u7684\u65b9\u6cd5\u3002<\/p>\n

\u00a0\u00a0 \u963b\u6b62IP\u5730\u5740\u9632\u6b62IP\u671f\u9a19\u5f97\u7b2c\u58f9\u62db\u662f\u963b\u6b62\u53ef\u80fd\u9020\u6210\u98a8\u96aa\u7684IP\u5730\u5740\u3002\u4e0d\u7ba1\u80cc\u5f8c\u539f\u56e0\u662f\u4ec0\u9ebd\uff0c\u653b\u64ca\u8005\u53ef\u4ee5\u5047\u5192\u4efb\u4f55IP\u5730\u5740\uff0c\u6700\u5e38\u88ab\u4eff\u5192\u7684IP\u5730\u5740\u662f\u79c1\u7db2IP\u5730\u5740\u548c\u5176\u5b83\u985e\u578b\u7684\u5171\u4eab\/\u7279\u6b8aIP\u5730\u5740\u3002\u9019\u88cf\u662f\u58f9\u4e9b\u6211\u6703\u963b\u6b62\u5176\u5f9e\u4e92\u806f\u7db2\u9032\u5165\u6211\u7684\u7db2\u7d61\u7684IP\u5730\u5740\u4ee5\u53ca\u5b83\u5011\u7684\u5b50\u7db2\u63a9\u78bc\u7684\u5217\u8868<\/p>\n

\u00a0\u00a0\u00a0 \u25c610.0.0.0\/8<\/p>\n

\u00a0\u00a0\u00a0 \u25c6172.16.0.0\/12<\/p>\n

\u00a0\u00a0\u00a0 \u25c6192.168.0.0\/16<\/p>\n

\u00a0\u00a0\u00a0 \u25c6127.0.0.0\/8<\/p>\n

\u00a0\u00a0\u00a0 \u25c6224.0.0.0\/3<\/p>\n

\u00a0\u00a0\u00a0 \u25c6169.254.0.0\/16<\/p>\n

\u00a0\u00a0\u00a0 \u6240\u6709\u4e0a\u9762\u9019\u4e9b\u5730\u5740\u90fd\u8981\u9ebd\u662f\u5728\u4e92\u806f\u7db2\u4e0a\u4e0d\u53ef\u8def\u7531\u7684\u79c1\u7db2IP\u5730\u5740\uff0c\u8981\u9ebd\u662f\u7528\u4f5c\u5176\u5b83\u7528\u9014\u800c\u6839\u672c\u4e0d\u61c9\u8a72\u5728\u4e92\u806f\u7db2\u4e0a\u7684IP\u5730\u5740\u3002\u5982\u679c\u5f9e\u4e92\u806f\u7db2\u4e0a\u9032\u5165\u7684\u6578\u64da\u6a19\u6709\u9019\u4e9bIP\u6e90\u5730\u5740\uff0c\u90a3\u9ebd\u6beb\u7121\u7591\u554f\u80af\u5b9a\u662f\u9a19\u4eba\u7684\u3002<\/p>\n

\u00a0\u00a0\u00a0 \u6b64\u5916\uff0c\u5176\u5b83\u58f9\u4e9b\u7d93\u5e38\u88ab\u4eff\u5192\u7684IP\u5730\u5740\u662f\u59b3\u7684\u4f01\u696d\u6240\u4f7f\u7528\u7684\u4efb\u610f\u5167\u7db2IP\u5730\u5740\u3002\u5982\u679c\u59b3\u5168\u90e8\u4f7f\u7528\u79c1\u7db2IP\u5730\u5740\uff0c\u90a3\u9ebd\u59b3\u8981\u963b\u6b62\u7684\u5730\u5740\u7bc4\u570d\u5c31\u5df2\u7d93\u843d\u5165\u4e0a\u8ff0\u5217\u8868\u4e4b\u4e2d\uff0c\u7136\u800c\uff0c\u5982\u679c\u59b3\u4f7f\u7528\u7684\u662f\u58f9\u7d44\u516c\u7db2IP\u5730\u5740\uff0c\u90a3\u9ebd\u59b3\u61c9\u628a\u5b83\u5011\u4e5f\u52a0\u5165\u5230\u4ee5\u4e0a\u5217\u8868\u4e2d\u3002<\/p>\n

\u00a0\u91c7\u7528\u8a2a\u554f\u63a7\u5236\u5217\u8868\uff08ACLS\uff09<\/p>\n

\u00a0\u963b\u6b62IP\u6b3a\u9a19\u7684\u6700\u7c21\u55ae\u65b9\u6cd5\u662f\u5c0d\u6240\u6709\u4e92\u806f\u7db2\u6578\u64da\u4f7f\u7528\u9032\u7ad9\u904e\u6ffe\u3002\u904e\u6ffe\u5c07\u6254\u6389\u6240\u6709\u843d\u5165\u4ee5\u4e0aIP\u5730\u5740\u7684\u6578\u64da\u5305\u3002\u63db\u8a00\u4e4b\uff0c\u901a\u904e\u5275\u5efa\u58f9\u5f35\u8a2a\u554f\u63a7\u5236\u5217\u8868\uff0c\u53ef\u4ee5\u5254\u9664\u6240\u6709\u4f86\u81ea\u4e0a\u8ff0\u7bc4\u570d\u5167\u7684IP\u5730\u5740\u7684\u5165\u7ad9\u6578\u64da\u3002<\/p>\n

\u9019\u88cf\u662f\u58f9\u500b\u914d\u7f6e\u7684\u793a\u4f8b\uff1a
\n\u00a0Router# conf t
\nEnter configuration commands, one per line.\u00a0 End with CNTL\/Z.
\nRouter(config)# ip access-list ext ingress-antispoof
\nRouter(config-ext-nacl)# deny ip 10.0.0.0 0.255.255.255 any
\nRouter(config-ext-nacl)# deny ip 172.16.0.0 0.15.255.255 any
\nRouter(config-ext-nacl)# deny ip 192.168.0.0 0.0.255.255 any
\nRouter(config-ext-nacl)# deny ip 127.0.0.0 0.255.255.255 any
\nRouter(config-ext-nacl)# deny ip 224.0.0.0 31.255.255.255 any
\nRouter(config-ext-nacl)# deny ip 169.254.0.0 0.0.255.255 any
\nRouter(config-ext-nacl)# permit ip any any
\nRouter(config-ext-nacl)# exit
\nRouter(config)#int s0\/0
\nRouter(config-if)#ip access-group ingress-antispoof in<\/p>\n

\u6839\u64daRFC 2267\u898f\u5b9a\uff0c\u4e92\u806f\u7db2\u670d\u52d9\u63d0\u4f9b\u5546\uff08ISP\uff09\u5fc5\u9808\u5728\u7db2\u7d61\u4e0a\u4f7f\u7528\u985e\u4f3c\u9019\u58f9\u985e\u7684\u904e\u6ffe\u3002\u8a3b\u610f\u672b\u5c3e\u8655ACL\u5305\u542bpermit ip any any\u7684\u65b9\u5f0f\u3002\u5728\u201c\u771f\u5be6\u4e16\u754c\u201d\u4e2d\uff0c\u59b3\u7684\u8def\u7531\u5668\u4e2d\u53ef\u80fd\u64c1\u6709\u58f9\u500b\u72c0\u614b\u5f0f\u9632\u706b\u58bb\uff08stateful fireful\uff09\uff0c\u5b83\u53ef\u4ee5\u4fdd\u8b77\u59b3\u7684\u5167\u90e8\u5c40\u57df\u7db2\u3002\u7576\u7136\u59b3\u53ef\u4ee5\u5728\u9019\u65b9\u9762\u66f4\u9032\u58f9\u6b65\uff0c\u5373\u904e\u6ffe\u6240\u6709\u4f86\u81ea\u5167\u7db2\u4e2d\u5176\u4ed6\u5b50\u7db2\u7684\u9032\u7ad9\u4fe1\u606f\uff0c\u4ee5\u4fbf\u4fdd\u8b49\u6c92\u6709\u4eba\u5728\u58f9\u500b\u5b50\u7db2\u5167\u5411\u5176\u5b83\u5b50\u7db2\u9032\u884cIP\u5730\u5740\u6b3a\u9a19\u3002\u59b3\u9084\u53ef\u4ee5\u5be6\u65bd\u51fa\u7ad9ACL\u4f86\u9632\u6b62\u59b3\u7684\u7db2\u7d61\u4e2d\u7684\u7528\u6236\u4eff\u5192\u5176\u4ed6\u7db2\u7d61\u7684IP\u5730\u5740\u3002\u4e0d\u904e\u8a18\u4f4f\u9019\u53ea\u662f\u6574\u500b\u7db2\u7d61\u5b89\u5168\u7b56\u7565\u4e2d\u7684\u58f9\u500b\u65b9\u9762\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

\u672c\u6587\u6458\u81ea\uff1ahttp:\/\/cisco.chinaitlab.com\/CiscoIOS\/788580.html \u5728\u5178\u578b\u7684IP\u5730\u5740\u6b3a\u9a19\u4e2d\uff0c\u653b\u64ca\u8005\u901a\u5e38\u507d\u9020\u6578\u64da\u5305\u7684\u767c\u9001\u5730\u5740\uff0c\u4ee5\u4fbf\u81ea\u5df1\u770b\u8d77\u4f86\u50cf\u662f\u4f86\u81ea\u5167\u7db2\u3002\u9019\u88cf\u6211\u5011\u6703\u544a\u8a34\u59b3\u53ef\u4ee5\u91c7\u53d6\u76843\u500b\u8fa6\u6cd5\uff0c\u8b93\u653b\u64ca\u8005\u7684\u65e5\u5b50\u4e0d\u90a3\u9ebd\u597d\u904e\uff0c\u4f7fIP\u5730\u5740\u6b3a\u9a19\u4e5f\u7121\u6cd5\u8f15\u6613\u5f97\u901e\u3002\u773e\u6240\u5468\u77e5\uff0c\u4e92\u806f\u7db2\u4e0a\u5230\u8655\u90fd\u662f\u5b89\u5168\u98a8\u96aa\uff0c\u5176\u4e2d\u4e4b\u58f9\u4fbf\u662fIP\u5730\u5740\u6b3a\u9a19\u3002\u5728\u5178\u578b\u7684IP\u5730\u5740\u6b3a\u9a19\u4e2d\uff0c\u653b\u64ca\u8005\u901a\u5e38\u507d\u9020\u6578\u64da\u5305\u7684\u767c\u9001\u5730\u5740\uff0c\u4ee5\u4fbf\u81ea\u5df1\u770b\u8d77\u4f86\u50cf\u662f\u4f86\u81ea\u5167\u7db2\u3002\u4e0b\u9762\u8b93\u6211\u5011\u8a0e\u8ad63\u7a2e\u4fdd\u8b77\u4f01\u696d\u4e0d\u53d7\u6b64\u7a2e\u653b\u64ca\u7684\u65b9\u6cd5\u3002 \u00a0\u00a0 \u963b\u6b62IP\u5730\u5740\u9632\u6b62IP\u671f\u9a19\u5f97\u7b2c\u58f9\u62db\u662f\u963b\u6b62\u53ef\u80fd\u9020\u6210\u98a8\u96aa\u7684IP\u5730\u5740\u3002\u4e0d\u7ba1\u80cc\u5f8c\u539f\u56e0\u662f\u4ec0\u9ebd\uff0c\u653b\u64ca\u8005\u53ef\u4ee5\u5047\u5192\u4efb\u4f55IP\u5730\u5740\uff0c\u6700\u5e38\u88ab\u4eff\u5192\u7684IP\u5730\u5740\u662f\u79c1\u7db2IP\u5730\u5740\u548c\u5176\u5b83\u985e\u578b\u7684\u5171\u4eab\/\u7279\u6b8aIP\u5730\u5740\u3002\u9019\u88cf\u662f\u58f9\u4e9b\u6211\u6703\u963b\u6b62\u5176\u5f9e\u4e92\u806f\u7db2\u9032\u5165\u6211\u7684\u7db2\u7d61\u7684IP\u5730\u5740\u4ee5\u53ca\u5b83\u5011\u7684\u5b50\u7db2\u63a9\u78bc\u7684\u5217\u8868 \u00a0\u00a0\u00a0 \u25c610.0.0.0\/8 \u00a0\u00a0\u00a0 \u25c6172.16.0.0\/12 \u00a0\u00a0\u00a0 \u25c6192.168.0.0\/16 \u00a0\u00a0\u00a0 \u25c6127.0.0.0\/8 \u00a0\u00a0\u00a0 \u25c6224.0.0.0\/3 \u00a0\u00a0\u00a0 \u25c6169.254.0.0\/16 \u00a0\u00a0\u00a0 \u6240\u6709\u4e0a\u9762\u9019\u4e9b\u5730\u5740\u90fd\u8981\u9ebd\u662f\u5728\u4e92\u806f\u7db2\u4e0a\u4e0d\u53ef\u8def\u7531\u7684\u79c1\u7db2IP\u5730\u5740\uff0c\u8981\u9ebd\u662f\u7528\u4f5c\u5176\u5b83\u7528\u9014\u800c\u6839\u672c\u4e0d\u61c9\u8a72\u5728\u4e92\u806f\u7db2\u4e0a\u7684IP\u5730\u5740\u3002\u5982\u679c\u5f9e\u4e92\u806f\u7db2\u4e0a\u9032\u5165\u7684\u6578\u64da\u6a19\u6709\u9019\u4e9bIP\u6e90\u5730\u5740\uff0c\u90a3\u9ebd\u6beb\u7121\u7591\u554f\u80af\u5b9a\u662f\u9a19\u4eba\u7684\u3002 \u00a0\u00a0\u00a0 \u6b64\u5916\uff0c\u5176\u5b83\u58f9\u4e9b\u7d93\u5e38\u88ab\u4eff\u5192\u7684IP\u5730\u5740\u662f\u59b3\u7684\u4f01\u696d\u6240\u4f7f\u7528\u7684\u4efb\u610f\u5167\u7db2IP\u5730\u5740\u3002\u5982\u679c\u59b3\u5168\u90e8\u4f7f\u7528\u79c1\u7db2IP\u5730\u5740\uff0c\u90a3\u9ebd\u59b3\u8981\u963b\u6b62\u7684\u5730\u5740\u7bc4\u570d\u5c31\u5df2\u7d93\u843d\u5165\u4e0a\u8ff0\u5217\u8868\u4e4b\u4e2d\uff0c\u7136\u800c\uff0c\u5982\u679c\u59b3\u4f7f\u7528\u7684\u662f\u58f9\u7d44\u516c\u7db2IP\u5730\u5740\uff0c\u90a3\u9ebd\u59b3\u61c9\u628a\u5b83\u5011\u4e5f\u52a0\u5165\u5230\u4ee5\u4e0a\u5217\u8868\u4e2d\u3002 \u00a0\u91c7\u7528\u8a2a\u554f\u63a7\u5236\u5217\u8868\uff08ACLS\uff09 \u00a0\u963b\u6b62IP\u6b3a\u9a19\u7684\u6700\u7c21\u55ae\u65b9\u6cd5\u662f\u5c0d\u6240\u6709\u4e92\u806f\u7db2\u6578\u64da\u4f7f\u7528\u9032\u7ad9\u904e\u6ffe\u3002\u904e\u6ffe\u5c07\u6254\u6389\u6240\u6709\u843d\u5165\u4ee5\u4e0aIP\u5730\u5740\u7684\u6578\u64da\u5305\u3002\u63db\u8a00\u4e4b\uff0c\u901a\u904e\u5275\u5efa\u58f9\u5f35\u8a2a\u554f\u63a7\u5236\u5217\u8868\uff0c\u53ef\u4ee5\u5254\u9664\u6240\u6709\u4f86\u81ea\u4e0a\u8ff0\u7bc4\u570d\u5167\u7684IP\u5730\u5740\u7684\u5165\u7ad9\u6578\u64da\u3002 \u9019\u88cf\u662f\u58f9\u500b\u914d\u7f6e\u7684\u793a\u4f8b\uff1a \u00a0Router# conf t Enter configuration commands, one per line.\u00a0 End with CNTL\/Z. Router(config)# ip access-list ext ingress-antispoof Router(config-ext-nacl)# deny ip 10.0.0.0 0.255.255.255 any Router(config-ext-nacl)# deny ip 172.16.0.0 0.15.255.255 any Router(config-ext-nacl)# deny ip […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[3155,405],"class_list":["post-1322","post","type-post","status-publish","format-standard","hentry","category-cisco","tag-cisco","tag-ios"],"_links":{"self":[{"href":"https:\/\/www.killtest.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/1322","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.killtest.com.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.killtest.com.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.killtest.com.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.killtest.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1322"}],"version-history":[{"count":2,"href":"https:\/\/www.killtest.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/1322\/revisions"}],"predecessor-version":[{"id":1324,"href":"https:\/\/www.killtest.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/1322\/revisions\/1324"}],"wp:attachment":[{"href":"https:\/\/www.killtest.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1322"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.killtest.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1322"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.killtest.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1322"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}