銳捷路由設(shè)置實(shí)例.doc

銳捷路由設(shè)置實(shí)例設(shè)置console口密碼lh#conf tEnter configuration commands, one per line.End with CNTL/Z.lh(config)#line con 0lh(config-line)#password mimalh(config-line)#修改enable口令lh#conf tEnter configuration commands, one per line.End with CNTL/Z.lh(config)#enable password mimalh(config)#enable secret mimalh(config)#修改telnet口令lh#conf tEnter configuration commands, one per line.End with CNTL/Z.lh(config)lh(config)#line vty 0 4lh(config-line)#login lh(config-line)#password mimalh(config-line)#exitlh(config)#exitlh#exit出現(xiàn)攻擊時(shí)掉線時(shí)請(qǐng)用console鏈接路由,保存好如下命令的相關(guān)內(nèi)容,用以分析:1、show ver (版本信息)2、show run (配置信息)3、show arp (arp信息)4、show interface (端口信息)5、show ip nat trans (nat信息)6、show ip nat stat 7、show ip nat statistics per-user(只要第1屏的信息)8、show ip cache (只要第1屏的信息)9、show ip nat statistics suspicious-pc 發(fā)送免費(fèi)arp:lh#conf tEnter configuration commands, one per line.End with CNTL/Z.lh(config)#int f 0/0(內(nèi)網(wǎng))lh(config)#arp gr int 1lh(config)#int f 1/0(外網(wǎng))lh(config)#arp gr int 1lh(config)#endlh#wr端口映射:lh#conf tEnter configuration commands, one per line.End with CNTL/Z.lh(config)#ip nat source static tcp 9ip 80 10 80 permit-insidelh(config)#endlh#wr限制內(nèi)網(wǎng)某機(jī)器不限速(0):lh#conf tEnter configuration commands, one per line.End with CNTL/Z.lh(config)#ip nat translation rate-limit iprange 9 inbound 500 outbound 1000lh(config)#ip nat translation rate-limit iprange 1 53 inbound 500 outbound 1000lh(config)#endlh#wr限制內(nèi)網(wǎng)PC的鏈接線程數(shù)同限速:lh#conf tEnter configuration commands, one per line.End with CNTL/Z.lh(config)#ip nat translation per-user 250lh(config)#ip nat translation rate-limit default inbound 500 outbound 1000lh(config)#endlh#wr禁止公網(wǎng)訪問(wèn)IPlh#conf tEnter configuration commands, one per line.End with CNTL/Z.lh(config)#access-list 3199 deny icmp any any echolh(config)#access-list 3199 deny tcp any any eq 135lh(config)#access-list 3199 deny tcp any any eq 139lh(config)#access-list 3199 deny udp any any eq netbios-sslh(config)#access-list 3199 deny tcp any any eq 445lh(config)#access-list 3199 deny tcp any host 10 eq wwwlh(config)#access-list 3199 permit ip any anylh(config)#endlh#wr禁止內(nèi)網(wǎng)部分IP訪問(wèn)網(wǎng)關(guān)的lh#conf tEnter configuration commands, one per line.End with CNTL/Z.lh(config)#webaccess-list 3198 deny tcp 00 host 54 eq wwwlh(config)#access-list 3198 permit ip any anylh(config)#endlh#wr禁止IP訪問(wèn)網(wǎng)絡(luò)lh#conf tEnter configuration commands, one per line.End with CNTL/Z.lh(config)#access-list 3001 deny ip host 66 anylh(config)#access-list 3001 permit anylh(config)#end lh#wrarp綁定lh#conf tEnter configuration commands, one per line.End with CNTL/Z.lh(config)#arp 0011.5b71.2869 arpalh(config)#endlh#wr取消arp綁定:lh#conf tEnter configuration commands, one per line.End with CNTL/Z.lh(config)#no arp lh(config)#endlh#wr防范DDOS攻擊lh#conf tEnter configuration commands, one per line.End with CNTL/Z.lh(config)#security anti-wan-attack level highlh(config)#endlh#wr防范sysflood攻擊lh#conf tEnter configuration commands, one per line.End with CNTL/Z.lh(config)#access-list 10 permit host 54lh(config)#int f 0/0lh(config)#rate-limit input access-group 10 64000 3000 3000 conform-actiontransmit exceed-actiondroplh(config)#endlh#wr禁止機(jī)器上網(wǎng)lh#conf tEnter configuration commands, one per line.End with CNTL/Z.lh(config)#acl 99 deny lh(config)#acc 99 deny 0lh(config)#acc 99 per anylh(config)#endlh#wr時(shí)間同步配置lh#conf tEnter configuration commands, one per line.End with CNTL/Z.lh(config)#sntp enablelh(config)#sntp interval 60lh(config)#sntp server 1lh(config)#clock uplh(config)#endlh#wrSNMP配置lh#conf tEnter configuration commands, one per line.End with CNTL/Z.lh(config)#snmp-server location ShunDelh(config)#snmp-server host 52 version 2 mrtglh(config)#snmp-server enable traps snmp authenticationlh(config)#snmp-server community public rolh(config)#endlh#wr日志服務(wù)器配置lh#conf tEnter configuration commands, one per line.End with CNTL/Z.lh(config)#logging lh(config)#endlh#wr現(xiàn)用配置lh(config)#show runBuilding configuration.Current configuration : 13406 bytes!version 8.5 (building 13) for NBRhostname lhenable password 7 10140b2e0d07195c74 sntp enablesntp interval 60sntp server 1!access-list 3198 deny tcp any any eq 135access-list 3198 deny tcp any any eq 445access-list 3198 permit ip any anyaccess-list 3199 deny icmp any anyaccess-list 3199 deny tcp any any eq 135access-list 3199 deny tcp any any eq 445access-list 3199 permit ip any anyaccess-list 99 permit any!no service password-encryption!interface FastEthernet 0/2ip access-group 3199 inarp gratuitous-send interval 1duplex autospeed autoshutdown!interface Null 0! interface GigabitEthernet 0/0ip nat insideip access-group 3198 inno ip redirectsip address 54 arp gratuitous-send interval 1duplex autospeed auto! interface GigabitEthernet 0/1ip nat outsideip access-group 3199 inip address 48arp gratuitous-send interval 1duplex autospeed autobandwidth 100000 ! ! ip nat pool nbr_setup_build_pool prefix-length 24address 52 match interface GigabitEthernet 0/1! ip nat inside source static udp 9 27016 27016 permit-insideip nat inside source static udp 9 27015 27015 permit-insideip nat inside source static tcp 52 4899 219.128.3 5000 permit-insideip nat inside source static tcp 49 2531 2531 permit-insideip nat inside source static tcp 52 22 52 22 permit-insideip nat inside source static tcp 52 3389 3390 permit-insideip nat inside source list 99 pool nbr_setup_build_pool ip nat translation max-entries 500000ip nat translation per-user 250ip nat translation rate-limit iprange 30 inbound 800 outbound 2000ip nat translation rate-limit iprange 2 inbound 800 outbound 2000ip nat translation udp-timeout 150ip nat translation icmp-timeout 30ip nat translation tcp-timeout 600ip nat translation finrst-timeout 20ip nat translation dns-timeout 30arp 68 0011.5b71.aa0c arpaarp 0 00e0.4c73.a55a arpaarp 32 0011.5b6f.6fc2 arpaarp 04 0011.5b71.2c8e arpaarp 36 0011.5b71.26b2 arpaarp 00e0.4c73.9e0a arpaarp 0011.5b71.3224 arpaarp 00 0011.5b6b.1386 arpaarp 2 0016.ec99.b9cd arpaarp 84 0011.5b71.286b arpaarp 6 00e0.4c73.9ee1 arpaarp 48 0016.ec99.51cd arpaarp 20 0011.5b71.2353 arpaarp 52 00e0.4c73.9f03 arpaarp 4 0011.5b69.0b3d arpaarp 16 0011.5b71.23dc arpaarp 8 0016.ec99.b49c arpaarp 60 00e0.4c73.9f30 arpaarp 2 00e0.4c73.a54a arpaarp 24 0011.5b6a.fbb6 arpaarp 6 0011.5b6b.0c8e arpaarp 28 0011.5b69.0b43 arpaarp 92 0011.5b76.7605 arpaarp 4 00e0.4c73.a5e0 arpaarp 76 0011.5b71.b684 arpaarp 8 00e0.4c73.9dd0 arpaarp 40 0011.5b71.a824 arpaarp 12 0016.ec99.b775 arpaarp 44 0011.5b76.769a arpaarp 6 0011.5b76.77d2 arpaarp 6 0011.5b71.2ed9 arpaarp 08 0011.5b71.b302 arpaarp 0 0016.ec99.4a00 arpaarp 72 0011.5b71.299a arpaarp 4 00e0.4c73.a5a0 arpaarp 36 0011.5b71.2357 arpaarp 08 0011.5b71.23df arpaarp 40 0011.5b71.b9b5 arpaarp 2 0011.5b71.2c8b arpaarp 2 0011.5b71.a6ab arpaarp 04 0011.5b71.a83d arpaarp 6 0011.5b71.ba5e arpaarp 88 0011.5b71.3227 arpaarp 0 0014.7836.95ea arpaarp 52 000e.0c71.73cc arpaarp 52 000e.0c71.73cf arpaarp 24 0011.5b69.0360 arpaarp 56 00e0.4c73.a502 arpaarp 8 0011.5b71.b02a arpaarp 20 0011.5b6a.f7e6 arpaarp 2 0016.ec7d.990f arpaarp 64 0011.5b76.7d6c arpaarp 6 00e0.4c73.a54d arpaarp 28 0011.5b71.a800 arpaarp 00 0011.5b71.2246 arpaarp 32 0011.5b71.b9df arpaarp 0011.5b71.2c8d arpaarp 00e0.4c73.9ef7 arpaarp 96 0011.5b76.7300 arpaarp 8 0011.5b71.ab64 arpaarp 80 0011.5b6b.0a9c arpaarp 2 00e0.4c73.9dff arpaarp 44 0014.7837.6b76 arpaarp 16 0016.ec99.4bc3 arpaarp 48 0011.5b71.286e arpaarp 0 0011.5b71.a3b6 arpaarp 0 0011.5b6f.64da arpaarp 12 0011.5b29.8018 arpaarp 4 0016.ec97.5d5a arpaarp 70 0011.5b29.7f38 arpaarp 2 00e0.4c73.9f7b arpaarp 34 0011.5b71.ba8c arpaarp 06 0011.5b71.ad6a arpaarp 38 0011.5b71.2edf arpaarp 0 0011.5b29.8013 arpaarp 0 00e0.4c73.a597 arpaarp 02 0011.5b71.a6b0 arpaarp 4 0016.ec82.fe4b arpaarp 86 0011.5b71.ab59 arpaarp 8 00e0.4c73.9ea6 arpaarp 22 0011.5b76.734d arpaarp 54 00e0.4c73.9ee0 arpaarp 6 0011.5b6b.0c8e arpaarp 18 0011.5b71.a887 arpaarp 0 0016.ec98.f036 arpaarp 62 0011.5b71.a8a3 arpaarp 4 00e0.4c73.9e93 arpaarp 26 0011.5b6f.6aa4 arpaarp 8 0011.5b71.ac26 arpaarp 30 0011.5b71.3418 arpaarp 0011.5b71.358a arpaarp 00e0.4c73.a598 arpaarp 94 0011.5b76.84be arpaarp 6 0011.5b71.3665 arpaarp 78 0011.5b71.2ed8 arpaarp 0 00e0.4c73.9e2e arpaarp 14 0016.ec97.66bf arpaarp 46 0011.5b71.a7fe arpaarp 8 0011.5b69.0366 arpaarp 8 0011.5b76.7d6a arpaarp 10 0011.5b71.ab95 arpaarp 2 0016.ec99.b877 arpaarp 74 0011.5b6b.0a9d arpaarp 6 0011.5b71.2d02 arpaarp 38 0011.5b71.aad5 arpaarp 10 0016.ec99.4a05 arpaarp 42 0011.5b71.ab5d arpaarp 4 0011.5b6b.1475 arpaarp 4 0011.5b71.a4ef arpaarp 06 0011.5b71.abca arpaarp 8 0011.5b63.bbb3 arpaarp 90 0011.5b71.26b0 arpaarp 2 00e0.4c73.a596 arpaarp 26 0011.5b76.84f7 arpaarp 58 00e0.4c73.a5e6 arpaarp 0 0011.5b71.ab5c arpaarp 22 0011.5b6f.6f88 arpaarp 4 0011.5b71.20ba arpaarp 66 0011.5b71.b9e0 arpaarp 8 00e0.4c73.a546 arpaarp 30 0011.5b71.b4a9 arpaarp 02 0011.5b71.2350 arpaarp 34 0011.5b69.0b3c arpaarp 00e0.4c73.9f00 arpaarp 0011.5b71.b4a6 arpaarp 98 0011.5b71.2eda arpaarp 0 00e0.4c73.9ee7 arpaarp 82 0011.5b71.2bd3 arpaarp 4 00e0.4c73.a543 arpaarp 46 0050.0900.2858 arpaarp 46 0011.5b69.0e8d arpaarp 18 0016.ec99.b774 arpaarp 50 0011.5b71.b303 arpaarp 2 0011.5b71.a885 arpaarp 14 0011.5b6f.2ccf arpaarp 6 0016.ec99.b76f arpaarp 69 0011.5b6f.6a6c arpaarp 1 00e0.4c73.9e26 arpaarp 33 0011.5b71.3413 arpaarp 05 0011.5b71.a885 arpaarp 37 0011.5b71.273b arpaarp 00e0.4c73.a527 arpaarp 0011.5b6f.6f82 arpaarp 01 0011.5b6c.c263 arpaarp 3 0016.ec98.eb9d arpaarp 85 0011.5b76.72c1 arpaarp 7 0014.7833.6874 arpaarp 49 0016.ec99.b774 arpaarp 49 0011.096b.8c92 arpaarp 21 0011.5b71.b62b arpaarp 53 00e0.4c73.9e95 arpaarp 5 0011.5b76.7439 arpaarp 17 0011.5b71.2246 arpaarp 9 0016.ec99.b780 arpaarp 61 00e0.4c73.a4e8 arpaarp 3 00e0.4c73.a4fc arpaarp 25 0011.5b69.045d arpaarp 7 0011.5b71.3665 arpaarp 29 0011.5b71.a6af arpaarp 0011.5b71.2869 arpaarp 00e0.4c73.9ef2 arpaarp 93 0011.5b71.aa06 arpaarp 5 0011.5b71.2cfe arpaarp 77 0011.5b71.b5fd arpaarp 9 00e0.4c73.a555 arpaarp 41 0011.5b76.77d3 arpaarp 13 0011.5b6a.fbb1 arpaarp 45 0011.5b71.a886 arpaarp 7 0011.5b6c.cb4e arpaarp 7 0011.5b76.76d2 arpaarp 09 0011.5b71.20c1 arpaarp 1 0016.ec99.4f54 arpaarp 73 0011.5b6f.6b01 arpaarp 5 00e0.4c73.9dd1 arpaarp 37 0011.5b71.20ba arpaarp 09 0011.5b76.7421 arpaarp 41 0011.5b6c.cb54 arpaarp 3 0011.5b6b.0bc7 arpaarp 3 0011.5b71.ba8b arpaarp 05 0011.5b71.2351 arpaarp 7 0016.ec99.4bea arpaarp 89 0011.5b6f.6fc6 arpaarp 1 00e0.4c73.a5bf arpaarp 53 0013.4665.b314 arpaarp 25 0011.5b6f.2a57 arpaarp 57 00e0.4c73.9f33 arpaarp 9 0011.5b6c.cb8a arpaarp 21 0011.5b6b.0aad arpaarp 3 0016.ec7d.9738 arpaarp 65 0011.5b71.ab5e arpaarp 7 00e0.4c73.9e20 arpaarp 29 0011.5b71.b07b arpaarp 01 0011.5b71.2c8a arpaarp 33 0011.5b76.77ce arpaarp 00e0.4c73.a4ff arpaarp 0011.5b71.a805 arpaarp 97 0011.5b76.779a arpaarp 9 00e0.4c73.a54b arpaarp 81 0014.2a15.60ea arpaarp 3 00e0.4c73.a5ef arpaarp 45 0000.0000.0001 arpaarp 17 0016.ec98.f03e arpaarp 49 0011.5b71.a825 arpaarp 1 0011.5b71.ab3a arpaarp 13 0011.5b6a.fbdf arpaarp 5 0016.ec99.4f47 arpaarp 71 0011.5b71.26b3 arpaarp 3 00e0.4c73.9e3c arpaarp 35 0011.5b69.0364 arpaarp 07 0011.5b6f.6aff arpaarp 39 0011.5b69.0b3f arpaarp 1 0011.5b71.2edc arpaarp 1 0011.5b69.0365 arpaarp 03 0011.5b71.b037 arpaarp 5 0016.ec99.b9da arpaarp 87 0011.5b71.3410 arpaarp 9 00e0.4c73.9dce arpaarp 51 000e.0c71.73cd arpaarp 23 0011.5b76.84f9 arpaarp 55 00e0.4c73.a5eb arpaarp 7 0011.5b71.3501 arpaarp 19 0011.5b29.7beb arpaarp 1 0016.ec98.ecd6 arpaarp 63 0011.5b6f.6aa9 arpaarp 5 00e0.4c73.a551 arpaarp 27 0011.5b71.3500 arpaarp 9 0011.d8e9.eb6c arpaarp 9 0011.5b71.23df arpaarp 31 0011.5b6f.297a arpaarp 00e0.4c73.9efd arpaarp 0011.5b71.b4d7 arpaarp 95 0011.5b71.3412 arpaarp 7 00e0.4c73.a540 arpaarp 79 0011.5b69.0367 arpaarp 1 00e0.4c73.9ee2 arpaarp 43 0016.ec99.51cd arpaarp 15 0016.ec99.4e7a arpaarp 47 0011.5b69.0419 arpaarp 9 0011.5b59.dea1 arpaarp 9 0011.5b71.a37a arpaarp 11 0011.5b76.76cd arpaarp 3 00e0.4cf7.3cf8 arpaarp 3 0011.5b71.3585 arpaarp 75 0011.5b71.20b9 arpaar