cisco press router security strategies phần 1 pps

... 10 1 Threats Against the Inter-Provider Edge 10 3 Carrier Supporting Carrier Threats 10 3 Inter-AS VPN Threats 10 5 IPsec VPN Threat Models 10 8 Summary 11 1 Review Questions 11 2 Further Reading 11 3 Chapter ... Plane Security Concepts 11 7 Principles of Defense in Depth and Breadth 11 7 Understanding Defense in Depth and Breadth Concepts 11 8 What Needs to Be Protected? 11 9 W...

Ngày tải lên: 14/08/2014, 18:20

... Server IP Address 17 2 .16 .1. 1/32 eBGP eBGP eBGP Valid IP Packet SA = 19 2 .16 8 .1. 1 DA = 17 2 .16 .1. 1 uRPFv1 Customer1 17 2 .16 .0.0 /16 SP (10 .0.0.0/8) R3 iBGP Customer2 19 2 .16 8.0.0 /16 R2 R1 Forwarded after ... Address 17 2 .16 .1. 1/32 eBGP eBGP eBGP Valid IP Packet SA = 19 2 .16 8 .1. 1 DA = 17 2 .16 .1. 1 uRPFv1 Customer1 17 2 .16 .0.0 /16 SP (10 .0.0.0/8) R3 iBG...

Ngày tải lên: 14/08/2014, 18:20

... snmpwalk -v 2c -c cisco 10 .82.69 .12 1 .1. 3.6 .1. 4 .1. 9.9 .16 6 .1. 15 .1. 1.2 SNMPv2-SMI::enterprises.9.9 .16 6 .1. 15 .1. 1.2.225 .10 6 211 3 = Counter32: 6799 SNMPv2-SMI::enterprises.9.9 .16 6 .1. 15 .1. 1.2.225.4988273 ... 0 SNMPv2-SMI::enterprises.9.9 .16 6 .1. 15 .1. 1.2.225.7222977 = Counter32: 0 SNMPv2-SMI::enterprises.9.9 .16 6 .1. 15 .1. 1.2.225.9 318 433 = Counter32: 2923 SN...

Ngày tải lên: 14/08/2014, 18:20

... architecture is shown in Figure 1- 15, which illustrates at a high level the Cisco 10 000 ESR forwarding architecture. The Cisco 10 000 ESR forwarding functions shown in Figure 1- 15 are carried out in the ... illustrated in Figure 1- 18 and described next. Figure 1- 18 CRS -1 Router Architecture and 40-Gbps Line Card Adj. FIB Data Plane ASIC Data Plane Interface Module Mid-Pla...

Ngày tải lên: 14/08/2014, 18:20

... Prefixes As illustrated in Figure 4 -10 , the PE1-CE1 link is assigned 17 2 .16 .12 8.4/30, with a PE interface of 17 2 .16 .12 8.5 and a CE interface of 17 2 .16 .12 8.6. The 17 2 .16 .0.0 /16 aggregate route is advertised ... Figure 4 -10 where the prefix 17 2 .16 .12 8.4/30 has been assigned to the PE1-CE1 link. In this case, the prefixes would be allocated as follows: • 17 2 .16 .12...

Ngày tải lên: 14/08/2014, 18:20

... and the MPE. router bgp 650 01 bgp router- id 19 2 .16 8 .1. 3 neighbor 19 2 .16 8 .1. 2 remote-as 650 01 neighbor 19 2 .16 8 .1. 2 update-source Loopback0 ! address-family vpnv4 neighbor 19 2 .16 8 .1. 2 activate ... Network VRFB VRFA VRFB VRFA CE Router PE2 MPE/PE1 Router CE Router MCE Router PE3 P Router P Router P Router CE Router CE Router VPN Customer B VP...

Ngày tải lên: 14/08/2014, 18:20

... A Remote 1 CPE-A1 Tunnel 0 Interface Loopback 0 10 .255.255 .1/ 32 .1FaEth0 /1 10.0 .10 .0/24 .1 .10 .11 .12 FaEth0 /1 .1 FaEth1/0 10 .0.0.0/24 NTP, SCP Web Server Syslog, SNMP Tacacs+ 17 2 .16 .0.0/24 Tunnel 1 Interface Tunnel ... 10 1 ! interface Ethernet1 ip address 10 .1. 2 .1 255.255.255.0 interface Serial1/0 ip address 19 2 .16 8.5 .1 255.255.255.252 crypto map...

Ngày tải lên: 14/08/2014, 18:20

... 19 2 .16 8 .1. 5 established 19 7 : access-list 10 1 permit udp 19 2 .16 8.252.0 0.0.3.255 host 19 2 .16 8 .1. 5 eq 69 19 8 : access-list 10 1 permit udp 19 2 .16 8.252.0 0.0.3.255 host 19 2 .16 8 .1. 5 eq 16 1 19 9 ... access-list 12 1 permit tcp 19 2 .16 8.252.0 0.0.3.255 host 19 2 .16 8 .1. 5 eq 22 210 : access-list 12 1 permit udp 19 2 .16 8.252.0 0.0.3.255 host 19...

Ngày tải lên: 14/08/2014, 18:20

... book. continues 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 1 2 3 1 1 2 3 4 5 6 7 8 9 10 11 12 VLAN Identifier Code (VLAN ID) Tag Protocol Identifier (TPI) User Priority (QoS) IEEE 802.1Q Header/Tag (4 ... (BOOTPC), 69 (TFTP), 12 3 (NTP), 13 7 (WINS), 13 8 (NETBIOS), 13 9 (NETBIOS), 16 1 (SNMP), 16 2 (SNMPTRAP), 500 (IKE), 514 (SYSLOG), 17 01 (L2TP), 18 12 (RADIUS AUTH...

Ngày tải lên: 14/08/2014, 18:21

... 200–2 01 TCP, 512 TTL expiry, 71 UDP Echo/Chargen, 519 Snork, 519 VPN networks, 96 CE, 98–99 Inter-AS, 10 3 10 7 IPsec, 10 8 11 1 MPLS, 96–98 P, 10 1 10 3 PE, 99, 10 1 WinNuke, 515 authentication, 4 21 MD5 BGP IPsec ... 520 business data, 10 3 cyber, 86 defense breadth and depth, 11 7 12 3 core security, 13 8 14 1 edge security, 13 3 13 8 interfaces, 12 7 13 2 IP traffic plan...

Ngày tải lên: 14/08/2014, 18:21