NAF上網(wǎng)行為管理器用戶手冊(cè)

NCWDON

NAF上網(wǎng)行為管理器

用

戶

手

冊(cè)

（適用于VI.3.7、VI.3.8版本）

2011年4月

上海紐盾科技發(fā)展有限公司

目錄

第一部分產(chǎn)品概述...........................................................................1

1圖形界面格式約定...........................................................................1

2環(huán)境要求...................................................................................1

3接線方式...................................................................................1

4登錄設(shè)備...................................................................................2

5刷新/保存/注銷..............................................................................2

6密碼恢復(fù)...................................................................................2

第二部分產(chǎn)品配置..........................................................................4

7設(shè)備狀態(tài)...................................................................................4

8實(shí)時(shí)監(jiān)控...................................................................................5

8.1設(shè)備資源...........................................................................5

8.2物理接口...........................................................................6

8.3服務(wù)監(jiān)控...........................................................................7

8.3.1服務(wù)趨勢(shì)疊加圖................................................................7

8.3.2服務(wù)組趨勢(shì)圖..................................................................8

8.3.3活躍服務(wù)統(tǒng)計(jì)..................................................................9

8.3.4所有服務(wù)統(tǒng)計(jì)..................................................................10

8.4用戶監(jiān)控..........................................................................11

8.4,1流量分析......................................................................11

8.4.2會(huì)話分析......................................................................12

8.4.3活躍會(huì)話......................................................................13

9系統(tǒng)配置..................................................................................14

9.1設(shè)備工作模式......................................................................14

9.1.1網(wǎng)橋模式......................................................................15

9.1.2路由模式......................................................................16

9.1.3旁路模式......................................................................17

9.2系統(tǒng)維護(hù).........................................................................19

9.2.1系統(tǒng)升級(jí)......................................................................19

9.2.2備份與恢復(fù)...................................................................20

9.2.3重啟/關(guān)機(jī).....................................................................21

9.2.4自動(dòng)升級(jí)......................................................................22

9.3系統(tǒng)管理員........................................................................23

9.4網(wǎng)管策略..........................................................................25

9.5網(wǎng)管參數(shù)..........................................................................26

9.6網(wǎng)絡(luò)工具..........................................................................27

9.6.1Ping.....................................................................................................................................................27

9.6.2TraceRoute.........................................................................................................................................28

9.7系統(tǒng)時(shí)間..........................................................................29

9.8系統(tǒng)信息..........................................................................31

9.9集中管理..........................................................................31

9.10郵件配置..........................................................................32

10系統(tǒng)對(duì)象..............................................................................33

10.1地址簿............................................................................33

10.2網(wǎng)絡(luò)服務(wù)..........................................................................35

10.2.1自定義普通服務(wù)............................................................35

10.2.2自定義特征識(shí)別............................................................37

10.2.3常用服務(wù)..................................................................38

10.3時(shí)間計(jì)劃..........................................................................39

10.4URL庫............................................................................41

10.5關(guān)鍵字組..........................................................................43

10.6文件類型..........................................................................44

10.7白名單............................................................................46

11網(wǎng)絡(luò)配置..............................................................................48

11.1接口配置..........................................................................48

11.1.1物理接口......................................................................48

11.1.2VLAN接口....................................................................49

11.1.3PPPoE.................................................................................................................................................51

11.1.4GRE隧道.....................................................................53

11.2配置IP地址.......................................................................55

11.3路由配置..........................................................................56

11.3.1靜態(tài)路由......................................................................56

11.3.2策略路由......................................................................58

11.4本機(jī)DNS.....................................................................................................................................................65

11.5ARP表.......................................................................65

11.6DHCP配置.........................................................................67

11.6.1基本參數(shù)......................................................................67

11.6.2DHCP中繼....................................................................70

11.6.3已分配IP地址.................................................................71

11.7SNMP服務(wù)器.......................................................................71

11.8代理服務(wù)器列表...................................................................71

12防火墻................................................................................72

12.1安全策略..........................................................................72

12.2NAT規(guī)則..........................................................................74

12.2.1內(nèi)網(wǎng)代理......................................................................74

12.2.2一對(duì)一地址轉(zhuǎn)換...............................................................76

12.2.3端口映射......................................................................77

13VPN配置.............................................................................79

13.1IPSec........................................................................................................................................................79

13.1.1IPSec隧道....................................................................79

13.1.2IPSec規(guī)則....................................................................81

13.2PPTP............................................................................................................................................................83

13.3VPN用戶..........................................................................84

14流量管理..............................................................................86

14.1線路帶寬配置......................................................................86

14.2基于策略的流控....................................................................87

14.3基于用戶的流控....................................................................91

III

15行為管理..............................................................................94

15.1.1認(rèn)證策略......................................................................94

15.2上網(wǎng)策略對(duì)象.....................................................................97

15.2.1URL過濾.....................................................................98

15.2.2關(guān)鍵字過濾....................................................................99

15.2.3文件傳輸過濾.................................................................101

15.2.4即時(shí)通訊過濾.................................................................102

15.2.5郵件過濾.....................................................................102

15.3組織管理.........................................................................103

15.3.1組織結(jié)構(gòu).....................................................................104

15.3.2批量導(dǎo)入.....................................................................120

15.3.3LDAP導(dǎo)入....................................................................121

15.3.4AD導(dǎo)入......................................................................123

15.3.5掃描內(nèi)網(wǎng)主機(jī).................................................................125

15.4臨時(shí)賬戶管理.....................................................................128

15.4.1臨時(shí)賬戶設(shè)置.................................................................128

15.4.2申請(qǐng)臨時(shí)賬戶.................................................................130

15.4.3未審核賬戶...................................................................132

15.5認(rèn)證選項(xiàng).........................................................................133

15.5.1SNMP設(shè)置...................................................................133

15.5.2認(rèn)證參數(shù).....................................................................134

15.5.3未認(rèn)證權(quán)限...................................................................135

15.6認(rèn)證服務(wù)器.....................................................................135

15.6.1RADIUS服務(wù)器...............................................................135

15.6.2AD服務(wù)器.................................................................137

15.6.3LDAP服務(wù)器..................................................................138

15.6.4POP3服務(wù)器..................................................................140

15.7黑名單管理.......................................................................141

15.7.1黑名單規(guī)則...................................................................141

15.7.2當(dāng)前黑名單...................................................................143

15.8白名單管理.......................................................................145

15.9在線用戶.........................................................................147

16IPv6配置..............................................................................148

16.1網(wǎng)絡(luò)工具.........................................................................148

16.1.1Ping6..................................................................................................................................................148

16.1.2TraceRoute6......................................................................................................................................149

16.2配置IPv6地址....................................................................150

16.3無狀態(tài)自動(dòng)地址配置...............................................................152

16.4靜態(tài)路由.........................................................................154

16.5本機(jī)DNS....................................................................................................................................................155

16.6鄰居表...........................................................................156

16.7防火墻...........................................................................158

17酒店管理-即插即用.....................................................................160

18高可靠性(HA)....................................................................................................................................................161

IV

19系統(tǒng)日志.............................................................................162

19.1命令日志.........................................................................162

19.2事件日志.........................................................................163

19.3用戶日志.........................................................................164

19.4PPTP日志........................................................................165

19.5黑名單日志.......................................................................166

19.6日志服務(wù)器.......................................................................167

19.7郵件配置告警.....................................................................168

20故障排除.............................................................................169

20.1捕獲數(shù)據(jù)包.......................................................................169

20.2查看數(shù)據(jù)包.......................................................................170

21報(bào)表中心.............................................................................171

21.1內(nèi)容記錄配置.....................................................................172

21.2內(nèi)置報(bào)表中心.....................................................................174

V

N6WDON產(chǎn)品概述

第一部分產(chǎn)品概述

1圖形界面格式約定

格式描述

[]代表菜單或子菜單名稱

代表WEB網(wǎng)管配置路徑：如【系統(tǒng)對(duì)象】>【地址簿】，表示“系

>

統(tǒng)對(duì)象”菜單下的“地址簿”菜單

<>代表窗口中的選項(xiàng)或按鈕名稱

面版說明

前面版，從左至右依次為：公司LOG、Console口、WAN2、LAN2、WAN1、LANI（此處注意LANIU

在第四個(gè)口）、電源指示燈。

2環(huán)境要求

設(shè)備系列產(chǎn)品可在如下環(huán)境使用：

>輸入電壓：220?240V

>溫度：-10?50℃

>濕度：5~90%

>電源：交流電源110V-230V

為保證系統(tǒng)能長期穩(wěn)定的運(yùn)行，應(yīng)保證電源有良好的接地措施、防塵措施、保持使用環(huán)境的空氣通暢和室溫

穩(wěn)定。本產(chǎn)品符合關(guān)于環(huán)境保護(hù)方面的設(shè)計(jì)要求。

提示：

1、保證設(shè)備工作在建議的環(huán)境要求內(nèi)，否則可能導(dǎo)致設(shè)備損壞或提早老化。

2、設(shè)備良好的接地可以有效避免雷擊。

3接線方式

請(qǐng)按照如下步驟進(jìn)行設(shè)備的接線：

1、在后面板電源插座上插上電源線，打開電源開關(guān)，前面板的Power燈（綠色，電源指示燈）和Alarm燈（紅

色，告警燈）會(huì)點(diǎn)亮。大約1-2分鐘后Alarm燈熄滅，說明設(shè)備正常工作。

http:〃第］頁/共179頁

NCW0ON產(chǎn)品概述

2、用標(biāo)準(zhǔn)RJ-45以太網(wǎng)線將LAN口與內(nèi)部局域網(wǎng)連接。

3、用標(biāo)準(zhǔn)RJ-45以太網(wǎng)線將WAN口與Internet接入設(shè)備相連接，如路由器、光纖收發(fā)器或ADSLModem等。

4、橋接模式：LAN1和WAN1為網(wǎng)橋1,LAN2和WAN2為網(wǎng)橋2、....、LANm和WANm為網(wǎng)橋每個(gè)橋之間是

獨(dú)立通信的，橋之間不能傳遞數(shù)據(jù)。

5、路由模式：可以接入多條出口線路，每個(gè)端口之間在策略允許的情況下可以通信。

提示：如果開機(jī)5分鐘后，紅燈還長亮，請(qǐng)關(guān)閉電源5分鐘，然后重開。

4登錄設(shè)備

設(shè)備默認(rèn)使用LAN1作為網(wǎng)管口，LAN1出廠地

址為/24。設(shè)備支持兩種方式的

WEBUI登錄：

1、安全的HTTPS登錄，默認(rèn)端口9090o初始登

錄URL為：https:〃192.168.0.1:9090

2、傳統(tǒng)的HTTP登錄，默認(rèn)端口9090o初始登錄

URL為：http:〃192.168.0.1:9090

系統(tǒng)默認(rèn)使用HTTPS的登錄方式，默認(rèn)的管理員賬號(hào)是admin,密碼是admin*PITO。正確輸入用戶名和

密碼后，點(diǎn)擊〈登錄>按鈕即可進(jìn)入管理界面。

提示：

1、配置之前，必須保證用于網(wǎng)管的電腦與上網(wǎng)行為管理產(chǎn)品的網(wǎng)管口地址在同一個(gè)網(wǎng)段。如果第一

次配置，請(qǐng)連接LAN1口，LAN1出廠地址為/24,電腦的地址應(yīng)配置為/24,

但不允許為.

2、連接后可以增加/修改物理端口或者網(wǎng)橋的IP地址，設(shè)備的每?個(gè)IP地址都可以用于網(wǎng)管。

5刷新/保存/注銷

在設(shè)備提供的WEB方式的管理界面中的最右上角有三個(gè)鏈接，分別是“刷新”、“保存”、“注銷”。點(diǎn)擊

“刷新”可手動(dòng)刷新當(dāng)前頁。點(diǎn)擊“保存”并確認(rèn)后，可將當(dāng)前配置保存到系統(tǒng)硬盤注銷保存刷新

中。點(diǎn)擊“注銷”并確認(rèn)后，即可成功退出系統(tǒng)。

6密碼恢復(fù)

如果管理員密碼丟失，請(qǐng)按以下步驟恢復(fù)系統(tǒng)默認(rèn)密碼：

1.進(jìn)入Console連接,每秒位數(shù)C5200,數(shù)據(jù)位8,使用root用戶(username：root,password：root*PWD)

登錄。

http:〃www.newdon.net第2頁/共179頁

NCW0ON產(chǎn)品概述

2.選擇ResetWEBUIPassword,進(jìn)入密碼恢復(fù)菜單，然后輸入yes,再回車。

3.密碼恢復(fù)成功，網(wǎng)管密碼恢復(fù)到出廠設(shè)置(username：admin,password：admin*PWD)。

http:〃www.newdon.net第3頁/共179頁

N6WDON設(shè)備狀態(tài)

第二部分產(chǎn)品配置

7設(shè)備狀態(tài)

登錄設(shè)備后，進(jìn)入到設(shè)備首頁，即設(shè)備狀態(tài)頁面。設(shè)備狀態(tài)頁面包含了設(shè)備版本信息、設(shè)備資源、實(shí)時(shí)

網(wǎng)絡(luò)流量、前十名服務(wù)實(shí)時(shí)速率分布、前十名用戶實(shí)時(shí)速率排名、前十名站點(diǎn)排名、最近五次事件日志等七

項(xiàng)內(nèi)容。如下圖：

箭千名困便朝蹙丞萍

■設(shè)智狀態(tài)

口賓時(shí)降?迅雷1019Ubps316

CPPS網(wǎng)絡(luò)電視541Mbps231

?耳他TCP協(xié)議39.0Mbps#140

a系統(tǒng)對(duì)象

下載

口網(wǎng)絡(luò)配置?Web29.8Mbps106

口防火塔HTTP29.4Mbps87

優(yōu)的

oVPNKS16.1Mbps86

?QQLive14oubps52

?BT12.8Mbpsgroupqqcom45

口的ss

?HTTP多戰(zhàn)程下就

aHA12.5Mbps40

?QQ（超級(jí)婀下載?

n系統(tǒng)日志120Mbps39

?Other?Other

口故障排除555MbpS1328

n隨越往蛹W

WANSftx用戶上行下行S31S

WAN2Tx222.21.1301824471K26.8M2010-11-09苫理雞錄成功.用戶名：admin,[Pits址:

7585.7K11,1M15:40:5509.

097.6U2.7M

2010-11-09哲理昂登聶期1用戶名：admin.IPmt：

222.21.1292398.5M3712K

14:48:19183.62,140.75

222.21136.381.8M5.8M

苦亙轉(zhuǎn)錄物,用戶名：址:

222.21151.26133.8K6.7M2010-11-09Sadmin,IWS

04983.2K5.8M13:26:535

748.5K5.9M2010-11-09營理兄受錄矢致.用戶名：admin,IPHS3t：

211.67