Manuale d’uso / di manutenzione del prodotto 7600 SERIES del fabbricante Cisco Systems
Vai alla pagina of 24
CH A P T E R 23-1 Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E 78-14064-04 23 Configuring Network Security This chapter contains n etwork security information unique to the .
23-2 Cisco 7600 Series Router Cisco IOS Software C onfiguration Guide—12.1E 78-14064-04 Chapter 23 Configur ing Network Security Hardware and Software ACL Support Wi t h t h e ip unr eachable s comm.
23-3 Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E 78-14064-04 Chapter 23 Con figuring Network Security Guidelines and Restrictio ns for Using Layer 4 Operators in ACLs • Flo ws that require logging are processed in software witho ut impacting nonlog ged flo w processing in hardware.
23-4 Cisco 7600 Series Router Cisco IOS Software C onfiguration Guide—12.1E 78-14064-04 Chapter 23 Configur ing Network Security Configuring the Cisco IOS Firewall Feature Set Determining Logical Operation Unit Usage Logical operation units (LOUs) are registers that st ore operator-operand cou ples.
23-5 Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E 78-14064-04 Chapter 23 Con figuring Network Security Configuring the Cisco IO S Firewall Feature Se t • Fire wall Configu.
23-6 Cisco 7600 Series Router Cisco IOS Software C onfiguration Guide—12.1E 78-14064-04 Chapter 23 Configur ing Network Security Configuring the Cisco IOS Firewall Feature Set Note Cisco 7600 series router s support the Intrusi on Detection System Module (ID SM) (WS-X6381-IDS).
23-7 Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E 78-14064-04 Chapter 23 Con figuring Network Security Configuring MAC Address-Based Tra ffic Blocking Router(config-if)# exi.
23-8 Cisco 7600 Series Router Cisco IOS Software C onfiguration Guide—12.1E 78-14064-04 Chapter 23 Configur ing Network Security Configuring VLAN ACLs This exampl e sho ws ho w to block all traf fic to or from MA C address 0050.3e8d.6400 in VLAN 12: Router# configure terminal Router(config)# mac-address-table static 0050.
23-9 Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E 78-14064-04 Chapter 23 Con figuring Network Security Configuring VLAN ACLs is first checked against the output ACL applied to the routed interface and, if permitt ed, the VACL configured for the destinat ion VLAN is applied.
23-10 Cisco 7600 Series Router Cisco IOS Software C onfiguration Guide—12.1E 78-14064-04 Chapter 23 Configur ing Network Security Configuring VLAN ACLs Routed Packets Figure 23-2 sh ow s ho w A CLs are applied on routed and Layer 3-switched pack ets.
23-11 Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E 78-14064-04 Chapter 23 Con figuring Network Security Configuring VLAN ACLs Multicast Packets Figure 23-3 sho ws how A CLs are applied on packets that need multicast e xpansion.
23-12 Cisco 7600 Series Router Cisco IOS Software C onfiguration Guide—12.1E 78-14064-04 Chapter 23 Configur ing Network Security Configuring VLAN ACLs • VLAN Access Map Conf iguration and V e rif.
23-13 Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E 78-14064-04 Chapter 23 Con figuring Network Security Configuring VLAN ACLs When defini ng a VLAN access map, note the follo wing syntax information: • T o insert or modify an entry , specify the map sequence number .
23-14 Cisco 7600 Series Router Cisco IOS Software C onfiguration Guide—12.1E 78-14064-04 Chapter 23 Configur ing Network Security Configuring VLAN ACLs Configuring an Action Clause in a VLAN Access .
23-15 Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E 78-14064-04 Chapter 23 Con figuring Network Security Configuring VLAN ACLs When applying a VLAN access map, note the follow ing syntax informati o n: • Y ou can apply the VLAN access map to on e or more VLANs or W AN interfaces.
23-16 Cisco 7600 Series Router Cisco IOS Software C onfiguration Guide—12.1E 78-14064-04 Chapter 23 Configur ing Network Security Configuring VLAN ACLs This exampl e sho ws how to def ine and apply a VLAN ac cess map to forward IP packets.
23-17 Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E 78-14064-04 Chapter 23 Con figuring Network Security Configuring VLAN ACLs When config uring a capture port, note th e follo wing syntax information: • W ith Release 12.1(13)E and later releases, you can co nfigure an y port as a capture port.
23-18 Cisco 7600 Series Router Cisco IOS Software C onfiguration Guide—12.1E 78-14064-04 Chapter 23 Configur ing Network Security Configuring TCP Interc ept These restrictions apply to V A CL logging: • Supported only with Su pervisor Engine 2.
23-19 Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E 78-14064-04 Chapter 23 Con figuring Network Security Configuring Unicast Re verse Path Forwarding Configuring Unicast Reve.
23-20 Cisco 7600 Series Router Cisco IOS Software C onfiguration Guide—12.1E 78-14064-04 Chapter 23 Configur ing Network Security Configuring Unicast Re verse Path Forwarding This e xample sho ws ho.
23-21 Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E 78-14064-04 Chapter 23 Con figuring Network Security Configuring Unicast Flood Protection This example sho ws how to enabl.
23-22 Cisco 7600 Series Router Cisco IOS Software C onfiguration Guide—12.1E 78-14064-04 Chapter 23 Configur ing Network Security Configuring MAC Move Notification When config uring unicast flood pr.
23-23 Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E 78-14064-04 Chapter 23 Con figuring Network Security Configuring MAC Move Notification This exampl e sho ws ho w to enable.
23-24 Cisco 7600 Series Router Cisco IOS Software C onfiguration Guide—12.1E 78-14064-04 Chapter 23 Configur ing Network Security Configuring MAC Move Notification.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il Cisco Systems 7600 SERIES è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del Cisco Systems 7600 SERIES - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso Cisco Systems 7600 SERIES imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul Cisco Systems 7600 SERIES ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il Cisco Systems 7600 SERIES, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del Cisco Systems 7600 SERIES.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il Cisco Systems 7600 SERIES. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo Cisco Systems 7600 SERIES insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
