GA»Æ½ð¼×

¡°¼«¼ò¡±»ÀР¡¤ È«ÓòÖÇÁª Ø­ GA»Æ½ð¼×м«¼òÁ캽ÏÂÒ»´úÐ£Ô°Íø½¨Éè×êÑлá
date
Ô¤Ô¼Ö±²¥
ÎÞ¸Ð×¼Èë ÈËÎïͳ¹Ü Ø­ RG-SAM+5.X ÐÂÒ»´ú¸ßУAIÈÏ֤ƽ̨°ä²¼
date
Ô¤Ô¼Ö±²¥
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
²úÆ·
< ·µ»ØÖ÷²Ëµ¥
²úÆ·ÖÐÐÄ
²úÆ·
½â¾ö¹æ»®
< ·µ»ØÖ÷²Ëµ¥
½â¾ö¹æ»®ÖÐÐÄ
ÐÐÒµ
ºÏ×÷ͬ°é
·µ»ØÖ÷²Ëµ¥
Ñ¡ÔñÇøÓò/˵»°
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾ GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

Äã²»³ÉºöÊÓµÄÔ°ÇøÍøARP°²È«·À»¤

¡¾ARP°²È«·À»¤¡¿±¾ÎijÁµãÕë¶ÔÔÚIPv4»·¾³ÏµÄARP·À»¤ÎÊÌâÒÔ¼°½â¾ö¹æ»®½øÐоßÌåÂÛÊö¡£ÖØÒªÔ̺¬£ºARPºýŪ¹¥»÷ÒÔ¼°½â¾ö¹æ»®¡¢ARP·ººé¹¥»÷ÒÔ¼°½â¾ö¹æ»®ºÍÏÖʵ²¿ÊðʱµÄ½¨Òé¡£

  • GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

    °ä²¼¹¦·ò£º2019-04-03

  • GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

    µã»÷Á¿£º

  • GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

    µãÔÞ£º

·ÖÏíÖÁ

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

ÎÒÏëÆÀÂÛ

ý½é

ARP£¨Address Resolution Protocol£¬µØÖ·½âÎöºÍ̸£©£¬Ö÷ÕÅÊÇʵÏÖIPµØÖ·µ½MACµØÖ·µÄÓ³Éä¡£¶øÔÚTCP/IPºÍ̸ջÖУ¬×î²»°²È«µÄºÍ̸£¬¿ÉÄÜ·ÇARPĪÊôÁË¡£ÎÒÃÇʱʱÌýµ½µÄÕâЩÊõÓÔ̺¬"ÍøÂçɨÃè"¡¢"ÄÚÍøÉøÈë"¡¢"ÖÐÑëÈËÀ¹½Ø"¡¢"¾ÖÓòÍøÁ÷¿Ø"¡¢"Á÷Á¿ºýŪ"£¬¸ù»ù¶¼¸úARPÍѲ»Á˸Éϵ¡£±¾ÎijÁµãÕë¶ÔÔÚIPv4»·¾³ÏµÄARP·ÀÓùÎÊÌâÒÔ¼°½â¾ö¹æ»®½øÐоßÌåÂÛÊö¡£ÖØÒªÔ̺¬£ºARPºýŪ¹¥»÷ÒÔ¼°½â¾ö¹æ»®¡¢ARP·ººé¹¥»÷ÒÔ¼°½â¾ö¹æ»®ºÍÏÖʵ²¿ÊðʱµÄ½¨Òé¡£

 

ARP¹¥»÷½éÉÜ

ARPºýŪ¹¥»÷

• ARPºý۵ĵÀÀí

Õý³£µÄARPͨѶ¹ý³ÌÖ»Ðè¹ã²¥ARP RequestºÍµ¥²¥ARP ReplyÁ½¸ö¹ý³Ì£¬µ¥Ò»µÄ˵¾ÍÊÇÒ»ÎÊÒ»´ð¡£¶øARPµÄºýŪ¾ÍÊÇͨ¹ýαÔìÒªÇó»òÕßÓ¦´ð±¨ÎÄÐγɵĺýŪ¡£

• ARPºýŪ¹¥»÷µÄ·ÖÀà

ƾ¾ÝARPºýŪÕßÓë±»ºýŪÕßÖ®¼ä½ÇÉ«¹ØÏµµÄ·ÖÆç£¬Í¨³£Äܹ»°ÑARPºýŪ¹¥»÷·ÖΪÈçÏÂÁ½ÖÖ£¬Èçͼ1Ëùʾ£º

Ö÷»úÐÍARPºýŪ£ººýŪÕßÖ÷»ú¼ÙÒâÍø¹ØÉ豸¶ÔÆäËûÖ÷»ú½øÐкýŪ¡£

Íø¹ØÐÍARPºýŪ£ººýŪÕßÖ÷»ú¼ÙÒâÆäËûÖ÷»ú¶ÔÍø¹ØÉ豸½øÐкýŪ¡£

 

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

¡øÍ¼1 ARPºýŪ·ÖÀà

 

ARP·ººé¹¥»÷

• ARP·ººé¹¥»÷µÄµÀÀí

ARP·ººé¹¥»÷£¬Ò²½Ð»Ø¾ø·þÎñ¹¥»÷£¨Denial of Service£©£¬¿ÉÄܵ¼Ö´óÁ¿¿÷Ë𻥻»»úÄÚ´æ¡¢±íÏî»òÕ߯äËü×ÊÔ´£¬Ê¹ÏµÍ³ÎÞ·¨³ÖÐø·þÎñ¡£´óÁ¿µÄ±¨ÎÄÔÒÏòCPU£¬Õ¼ÓÃÁËÕû¸öËÍCPU±¨ÎĵĴø¿í£¬µ¼ÖÂÕý³£µÄºÍ̸±¨ÎĺÍÖÎÀí±¨ÎÄÎÞ·¨±»CPU´¦Ö㬴øÀ´ºÍ̸Õðµ´»òÕßÉ豸ÎÞ·¨ÖÎÀí£¬½ø¶øµ¼ÖÂÊý¾ÝÃæ×ª·¢ÊÜÓ°Ï죬²¢ÒýÆðÕû¸öÍøÂçÎÞ·¨Õý³£ÔËÐС£

 

ARPºýŪ¹¥»÷½â¾ö¹æ»®

ÔÚ½éÉܾßÌå½â¾ö¹æ»®Ö®Ç°£¬ÎÒÃÇÏÈÏàʶÏ·ÀARPºýŪµÄÖ÷ÌâÖ°ÄÜ£ºARP-check£¨ARP±¨ÎĺϹæÐ£Ñ飩£¬Ð£ÑéARP±¨ÎĵÄÔ´IPÓ밲ȫµØÖ·ÖеÄIPÊÇ·ñÒ»Ö£¬Ð£ÑéARP±¨ÎĵÄÔ´MACÓ밲ȫµØÖ·ÖеÄMACÊÇ·ñÒ»Ö£¬ÔÚÁ½ÏîУÑé¾ùºÏ¹æµÄÇé¿ö϶Ա¨ÎĽøÐÐת·¢¡£¶ø°²È«µØÖ·µÄÌìÉú£¬ÎÒÃÇÄܹ»Í¨¹ýÊÖ¹¤¾²Ì¬°ó¶¨µÄ·½Ê½ÒÔ¼°DHCP Snooping¼à²âµÄ·½Ê½»ñÈ¡£¬¾ßÌåÁ÷³ÌÈçͼ2£º

 

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

¡øÍ¼2 ARP-checkÁ÷³Ì

 

ÒÔÉÏÊÇÓ²¼þ¼ì²âµÄÁ÷³Ì£¬³ý´ËÖ®±í»¹ÓÐÒ»ÖÖÈí¼þУÑéµÄ·½Ê½£¬¾ÍÊǽ«¶Ë¿ÚµÄARPÒªÇóÖ±½ÓËÍÍùCPU£¬¶øCPUƾ¾ÝDHCP SnoopingµÄ±íÏî½øÐкϹæ²é³­¡£

 

¶Ë¿Ú°²È« + ARP-check¹æ»®

ÀûÓó¡¾°£º´Ë¹æ»®ºÏÓÃÓÚÓû§IPµØÖ·Îª¾²Ì¬·ÖÅäµÄ³¡¾°£¬²¢ÇÒ±ØÒªÃ÷ȷ֪·ÿ¸öÓû§ËùÏνӻ¥»»»ú¶Ë¿Ú¡£

Ö°Äܼò½é£ºÍ¨¹ýÊÖ¹¤µÄ·½Ê½½«IPÓëMACµÄ¶ÔÓ¦¹ØÏµÅäÖõ½»¥»»»úµÄ¶Ë¿Ú£¬²¢¿ªÆôARPºÏ¹æ²é³­¡£¾ßÌåÅäÖÃÈçͼ3£º

 

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

¡øÍ¼3 ¶Ë¿Ú°²È«+ARP-check¹æ»®ÅäÖÃ

 

¹æ»®µÄÓÅÊÆ£º½ÚÔ켫¶ÈÑϸñ£¬ÀûÓÃÓ²¼þ·½Ê½Ö±½ÓУÑéARP±¨ÎÄ£¬ÕýÈ·£¬ÎÞÐè¿÷ËðCPU¡£

±×¶ËµÄÁÓÊÆ£º¶Ë¿Ú°²È«±ØÐëÍøÂç²¢ÅäÖÃËùÓÐЧ»§IPºÍMACÐÅÏ¢£¬½ÏΪ·±Îߣ¬²»¹»½Ã½Ý£¬²»ÊʺÏÓÚÓû§±ØÒªÆµÈÔǨáã¶Ë¿ÚµÄ»·¾³¡£

 

È«¾ÖIP&MAC°ó¶¨+ARP-check¹æ»®

ÀûÓó¡¾°£º´Ë¹æ»®ºÏÓÃÓÚÓû§IPµØÖ·Îª¾²Ì¬·ÖÅäµÄ³¡¾°£¬µ«ÖÎÀíÔ±²»±ØÒªÖªÂ·Ã¿¸öÓû§ËùÏνӵĻ¥»»»ú¶Ë¿Ú£¬Òò¶øºÏÓÃÓÚÓû§É¢²¼Çé¿ö²»È·¶¨£¬»òÕßÏÂÁªÓû§´æÔÚÇáÒ×ÒÆ¶¯¶Ë¿ÚµÄ³¡¾°ÖС£

Ö°Äܼò½é£ºÍ¨¹ýÊÖ¹¤·½Ê½½«IPÓëMACµÄ¶ÔÓ¦¹ØÏµÅäÖõ½»¥»»»úÈ«¾Ö£¬²¢ÔÚ»¥»»»úµÄ¶Ë¿ÚÏ¿ªÆôARPºÏ¹æ²é³­¡£¾ßÌåÅäÖÃÈçͼ4£º

 

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

¡øÍ¼4 È«¾ÖIP+MAC°ó¶¨+ARP-check¹æ»®ÅäÖÃ

 

¹æ»®µÄÀûÒæ£º½ÚÔì½ÏΪÑϸñ£¬ÔÊÐíÓû§ÔÚ±¾»¥»»»úÄÚ²¿½øÐж˿ÚǨáã¾ß±¸¿Ï¶¨µÄ½Ã½ÝÐÔ£¬ÀûÓÃÓ²¼þ·½Ê½Ö±½ÓУÑéARP±¨ÎÄ£¬ÕýÈ·£¬ÎÞÐè¿÷ËðCPU¡£

¹æ»®µÄ±×¶Ë£º¶Ë¿Ú°²È«±ØÐëÍøÂç²¢ÅäÖÃËùÓÐЧ»§IPºÍMACÐÅÏ¢£¬½ÏΪ·±Îß¡£

 

DAI¹æ»®

ÀûÓó¡¾°£ºDAI£¨Dynamic ARP Inspection£©¹æ»®ÊʺÏÓÚ½ÓÈëÓû§Ê¹ÓÃDHCP¶¯Ì¬»ñÈ¡IPµØÖ·»·¾³£¬Í¬Ê±ÒªÇó²¿ÊðDHCP SnoopingÖ°ÄÜ¡£

Ö°Äܼò½é£ºÌáÈ¡DHCP Snooping±íÖеÄIP+MACÐÅÏ¢£¬Í¨¹ýCPU¹ýÂËÔ´MAC/Ô´IP²»ÔÚSnooping±íÖеÄARP±¨ÎÄ£¬¾ßÌåÁ÷³ÌÈçͼ5£º

 

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

¡øÍ¼5 DAI¹æ»®ARPºÏ¹æ²é³­Á÷³Ìͼ

 

¾ßÌåÅäÖüûͼ6£º

 

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

¡øÍ¼6 DAI¹æ»®ÅäÖÃ

 

¹æ»®µÄÀûÒæ£ºÅäÖÃÊØ»¤µ¥Ò»£¬ÎÞÐèÊÖ¹¤ÅäÖÃÿ¸öÓû§µÄIP&MAC°ó¶¨¡£

¹æ»®µÄ±×¶Ë£ºÓÉÓÚÓû§µÄARP±¨ÎÄËÍCPU²é³­£¬²é³­µÄÆðÔ´ÊÇDHCP SnoopingËù¼Í¼µÄÈí¼þ±íÏÒò¶ø»á¶î±í¿÷ËðÉ豸µÄCPU×ÊÔ´¡£

 

IP Source Guard + ARP-check¹æ»®

ÀûÓó¡¾°£º´Ë¹æ»®ÊʺÏÓÚ½ÓÈëÓû§Ê¹ÓÃDHCP¶¯Ì¬»ñÈ¡IPµØÖ·»·¾³£¬Í¬Ê±ÒªÇó²¿ÊðDHCP SnoopingÖ°ÄÜ ¡£

Ö°Äܼò½é£ºÌáÈ¡DHCP Snooping±íÖÐÕýÈ·µÄIPÓëMAC£¬Í¨¹ýIP Source Guard½«DHCP Snooping±íдÈ뻥»»»úÓ²¼þ±íÏʹÓÃARP-checkÖ°ÄÜУÑéARP±¨ÎĵĺϷ¨ÐÔ£¬¾ßÌåÁ÷³ÌÈçͼ7£º

 

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

¡øÍ¼7 IP Source Guard + ARP-check¹æ»®Á÷³Ìͼ

 

¾ßÌåÅäÖÃÈçͼ8£º

 

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

¡øÍ¼8 IP Source Guard + ARP-check¹æ»®ÅäÖÃ

 

¹æ»®µÄÀûÒæ£ºÅäÖÃÊØ»¤µ¥Ò»£¬ºÍDAIÏà±È£¬ARP-checkÊôÓÚÓ²¼þоƬ²é³­°²È«±íÏ²»¿÷ËðCPU×ÊÔ´¡£

¹æ»®µÄ±×¶Ë£º¶Ô»¥»»»úµÄ°²È«Ö°ÄÜÒªÇó½Ï¸ß£¬±ØÒªÍ¬Ê±Ö§³ÖDHCP Snooping¡¢IP Source Guard¡¢ARP-checkÕâÈýÖÖÖ°ÄÜ¡£¸úDAIÏà±È£¬»á¿÷ËðÓ²¼þ×ÊÔ´±íÏµ±»¥»»»úʹÓý϶లȫְÄÜʱ£¬ºÃ±ÈACL£¬ÇÒ»¥»»»úϽÓÓû§Êý¹ý¶à£¬¿ÉÄܻᵼÖÂÉ豸Ӳ¼þ°²È«×ÊÔ´²»¼°£¬±ØÒªÊʵ±½ÚÔ쵥̨»¥»»»úµÄ´ø»úÊý¡£

É豸Ӳ¼þ×ÊÔ´²»ÊµÊ±£¬»áÌáÐÑÀàËÆÕâÑùµÄlog£º

%SECURITY-3-TCAM_RESOURCE_LIMIT: TCAM resource is temporary not available.

 

ARPºýŪ½â¾ö¹æ»®¶Ô±È·ÖÎö

 

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

¡ø±í1 ARPºýŪ½â¾ö¹æ»®¶Ô±È·ÖÎö±í

 

Èç±í1Ëùʾ£¬µ±ÍøÂçÄÚѡȡDHCP·½Ê½¶¯Ì¬»ñÈ¡IP£¬ÄÇÃ´ÍÆ¼öѡȡIP Source Guard + ARP-check¹æ»®½øÐзÀARPºýŪ¹¥»÷²¿Ê𣬶ÔÓÚ²¿°Ý±ð¹¤ÅäÖõÄIPµØÖ·±ØÒªÍøÂç½Ó¼ûʱ£¬ÀýÈç´òÓ¡»ú£¬Äܹ»½áºÏ¶Ë¿Ú»òÕßÈ«¾ÖIP&MACÊÖ¶¯°ó¶¨µÄ·½Ê½+ ARP-check½â¾ö¡£

 

ARP·ººé¹¥»÷½â¾ö¹æ»®

 

CPP+NFPP½â¾öARP·ººé¹¥»÷

ÓÉÓÚARP±¨ÎĵĽâÎö¾ùÒªËÍÍùCPU½øÐнâÎö£¬Òò¶øÎÒÃÇÄܹ»Í¨¹ýÏÞ¶ÈARPËÍÍùCPUµÄ±¨ÎÄ¿ìÂÊʵÏÖ¶ÔCPUµÄ±£»¤

CPP£¨CPU Protect Policy£¬CPU±£»¤Õ½Êõ£©ÊÇÒ»ÖÖÉ豸×ÔÉíÓÃÀ´±£»¤CPUµÄ°²È«·À»¤Ö°ÄÜ£¬ÓÃÓÚÔ¤·ÀÍøÂçÉ豸µÄCPUÊÕµ½ÍøÂçÉϲ»ÓÃÒªºÍÓµÓжñÒâ¹¥»÷Ö÷ÕŵÄÊý¾Ý±¨ÎÄ£¬Í¨¹ý½«·¢ÍùCPUµÄ±¨Îļø±ð·ÖÀà¡¢»®·Ö¶ÓÁÓ×¢ÏÞ¿ì¡¢µ÷¶È¡¢Á÷Á¿ÕûÐεȴ¦Öúó£¬Í¶µÝCPU£¬±£ÕÏÍøÂçÉ豸µÄCPU¼´±ãÔÚÒ»¸ö³äÒç×ÅÍøÂç¹¥»÷µÄ»·¾³ÖÐÈÔÄܹ»¶ÔÕý³£½øÐкÍ̸±¨ÎÄ´¦Öã¬È·±£ÍøÂçµÄ²»±äÔËÐС£Èçͼ9Ëùʾ£º

 

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

¡øÍ¼9 CPP¹¤×÷Á÷³Ìͼ

 

µ±È»CPP×ÔÉíÒ²ÊÇÓоÖÏÞÐԵģ¬ÀýÈç½öÕë¶Ô±¨ÎĽøÐÐÏ޿죬ÎÞ·¨´Óµ××Ó½â¾öÎÊÌ⣬²¢ÇÒûÓÐÓйصÄÈÕÖ¾²úÉú£¬µ¼Ö³öÏÖÎÊÌâºóÎÞ·¨¶¨Î»¹ÊÕÏ¡£Õë¶ÔCPPµÄ¾ÖÏÞ£¬Ò»¸öȫеÄϵͳ¼Ü¹¹³öÏÖ£¬¼´£ºNFPP(Network Foundation Protection Policy£¬ÍøÂç»ù´¡±£»¤Õ½Êõ)¡£

¶Ô±Å×ÚCPP£¬NFPPÔö³¤Á˰²È«Õ½Êõ£¬È磨¸ôÀëÕ½Êõ£¬¹¥»÷¼ì²âÕ½Êõ£©£¬²¢ÇÒ¿ÉÄÜÔÚ´¥·¢°²È«Õ½ÊõºóÒÔsyslog»òÕßtrapµÄ·½Ê½Éϱ¨·þÎñÆ÷£¬¾ßÌåÁ÷³ÌÈçͼ10Ëùʾ£º

 

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

¡øÍ¼10 NFPP¼ò»¯Á÷³Ìͼ

 

ÔÚNFPP¿ò¼ÜÄÚ¸ôÀëÕ½Êõ£¬¿É´ÓÔ´Í·ÆÁ±Î¹¥»÷£¬²¢ÇÒ»á²úÉúÓйصÄlogÐÅÏ¢£¬´Ó¶øÔ®ÊÖÍøÂçÖÎÀíÔ±¶¨Î»ÎÊÌâ¡£ÔÚNFPP¿ò¼ÜÄÚ£¬¿ÉʵÏÖ¶ÔÓÚARP±¨ÎĵķÀ»¤£¨ARP-Guard£©¡¢ND±¨ÎĵķÀ»¤¡¢DHCP±¨ÎÄ·À»¤µÈµÈ£¬±¾ÎĽ«Õë¶ÔARP·À»¤½øÇ°½øÒ»²½¾ßÌå½éÉÜ¡£

 

ARP·À»¤£¨ARP-Guard£©£º

ARP-GuardÖ°ÄÜÖØÒªÖ¸±êΪ±£»¤É豸CPU£¬Ô¤·À´óÁ¿ARP¹¥»÷±¨ÎÄËÍCPUµ¼ÖÂCPUÀûÓÃÂÊÉý¸ß£¬ËùÒÔARP-GuardʵÏÖÁ˶ÔËÍÍùCPUµÄARP±¨ÎĵÄÏÞ¿ìºÍ¹¥»÷¼ì²â¡£

ͨ¹ýÔÚ»¥»»»úÉÏ¿ªÆôARP-GuardÖ°ÄÜ£¬ÉèÖÃARP±¨ÎĵĹ¥»÷Ë®ÏßÒÔ¼°ÏÞ¿ìË®Ïß¡£ÈôÊÇARP±¨ÎÄÁ¿³¬¹ý¹¥»÷Ë®Ïߣ¬ÄÇôÉ豸½«Í¨¹ý°²È«Õ½ÊõÖ±½Ó½øÐиôÀ룬²¢²úÉúlogÐÅÏ¢¸øÈÕÖ¾·þÎñÆ÷¡£ÈôÊÇARP±¨ÎÄÁ¿Ó×ÓÚ¹¥»÷Ë®Ïßµ«´óÓÚÏÞ¿ìË®Ïߣ¬ÄÇô½«¶Ô±¨ÎĽøÐÐÏÞ¿ì´¦Ö㬲¢²úÉúlogÐÅÏ¢¸øÈÕÖ¾·þÎñÆ÷¡£ÈôÊÇARP±¨ÎÄÁ¿µÍÓÚÏÞ¿ìË®Ïߣ¬¿ÉÕý³£×ª·¢ÖÁCPU¡£Èçͼ11Ëùʾ£º

 

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

¡øÍ¼11 ARP-Guard¹¤×÷Á÷³Ìͼ

 

ÔÚÏÖʵ²¿Êð¹ý³Ì°ø±ß£¬NFPPÍùÍùÓëCPPͬʱ¿ªÆô¡£

 

 

×Ü ½á

ARPºýŪ¹¥»÷¿ÉÄÜÒý·¢ÍøÂçµÄÐÅÏ¢°²È«ÎÊÌ⣬¶øARP·ººé¹¥»÷¿ÉÄÜÖ±½Óµ¼ÖÂÍøÂ绥»»»úµÄ̱»¾£¬Ôì³ÉÍøÂçµÄ²»³ÉÓá£Ò»¸öÒý·¢Êý¾Ýй¶£¬¶øÁíÒ»¸ö½«µ¼Ö³ö²úÒµÎñÖжÏ£¬Òò¶ø±ØÒªÍøÂçÖÎÀíÈËÔ±¸ß¶ÈÆ÷³Á¡£½¨ÒéÏÖʵ²¿Êð»òÕß½»¸¶¹ý³ÌÖУ¬Ôö³¤¶ÔARP·À»¤µÄÅäÖã¬ÍƼö¹æ»®Îª£º

• ²¿ÊðIP Source Guard + ARP-check£¬¿ÉʵÏÖÔ¤·ÀAPRºýŪ¡¢Ô¤·ÀDHCP˽ÉèÒÔ¼°Ô¤·ÀÄÚÍøIP˽Éè¡£

• ²¿ÊðCPP+NFPP£¬¿ÉÔ¤·ÀARP·ººé¹¥»÷¡¢DHCP¹¥»÷£¬Ô¤·ÀCPU¸ºÔعý¸ß¡£

 

 


±¾ÆÚ×÷ÕߣºÕÅÎĽÜ

GA»Æ½ð¼×ÍøÂ绥ÁªÍøÏµÍ³²¿ÐÐÒµÕ÷ѯ

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

 

ÍùÆÚ½Ü³ö»ØÊ×  

  • ¡¾µÚÒ»ÆÚ¡¿Ç³Ì¸ÎïÁªÍø¼¼Êõ֮ͨѶºÍ̸µÄ·×Õù
  • ¡¾µÚ¶þÆÚ¡¿ÈôºÎͨ¹ýÍøÂçÒ£²â£¨Network Telemetry£©¼¼ÊõʵÏÖ¾«ÃÜ»¯ÍøÂçÔËά£¿
  • ¡¾µÚÈýÆÚ¡¿³©Ì¸Êý¾ÝÖÐÐÄÍøÂçÔËά×Ô¶¯»¯
  • ¡¾µÚËÄÆÚ¡¿»ùÓÚRogue AP·´ÔìµÄÎÞÏß°²È«¼¼Êõ̽Çó
  • ¡¾µÚÎåÆÚ¡¿Á÷Á¿¿ÉÊÓ»¯Ö®ERSPANµÄǰÊÀ½ñÉú
  • ¡¾µÚÁùÆÚ¡¿ÈôºÎʵÏÖÊý¾ÝÖÐÐÄÍøÂç¼Ü¹¹“È¥”¶Ñµþ
  • ¡¾µÚÆßÆÚ¡¿ÔËά¿ÉÊÓ»¯Ö®INTÖ°ÄÜÏê½â
  • ¡¾µÚ°ËÆÚ¡¿Ç³ÎöRDMAÍøÂçÏÂMMUË®ÏßÉèÖÃ
  • ¡¾µÚ¾ÅÆÚ¡¿µÚÆß´úÎÞÏß¼¼Êõ802.11axÏê½â
  • ¡¾µÚÊ®ÆÚ¡¿Êý¾ÝÖÐÐÄ×Ô¶¯»¯ÔËά¼¼ÊõË÷ÇóÖ®»¥»»»úÁãÅäÖÃÉÏÏß
  • ¡¾µÚʮһÆÚ¡¿ Ç³Ì¸Êý¾ÝÖÐÐÄ100G¹âÄ£¿é
  • ¡¾µÚÊ®¶þÆÚ¡¿Êý¾ÝÖÐÐÄÍøÂçµÈ¼Û¶àõè¾¶£¨ECMP£©¼¼ÊõÀûÓÃ×êÑÐ
  • ¡¾µÚÊ®ÈýÆÚ¡¿ÈôºÎΪRDMA¹¹½¨ÎÞËðÍøÂç
  • ¡¾µÚÊ®ËÄÆÚ¡¿»ùÓÚEVPNµÄÉ¢²¼Ê½VXLANʵÏֹ滮
  • ¡¾µÚÊ®ÎåÆÚ¡¿Êý¾ÝÖÐÐÄ×Ô¶¯»¯ÔËά¼¼ÊõË÷ÇóÖ®NETCONF
  • ¡¾µÚÊ®ÁùÆÚ¡¿Ò»ÎĶÁ¶®ÍøÂç½çйóSegment Routing¼¼Êõ»¯·±Îª¼òµÄ°ÂÃØ
  • ¡¾µÚÊ®ÆßÆÚ¡¿Ç³Ì¸UWB£¨³¬¿í´ø£©ÊÒÄÚ¶¨Î»¼¼Êõ
  • ¡¾µÚÊ®°ËÆÚ¡¿PoEÒÔÌ«Íø¹©µç¼¼ÊõÏê½â
  • ¡¾µÚÊ®¾ÅÆÚ¡¿»ú¿òʽÖ÷Ì⻥»»»úÓ²¼þ¼Ü¹¹Ñݽø
  • ¡¾µÚ¶þÊ®ÆÚ¡¿ IPv6»ù´¡Æª£¨ÉÏ£©——µØÖ·Ó뱨ÎÄÌåʽ
  • ¡¾µÚ¶þʮһÆÚ¡¿IPv6ϵÁлù´¡Æª£¨Ï£©——ÁÚ¾Ó·¢ÏÖºÍ̸NDP
  • ¡¾µÚ¶þÊ®¶þÆÚ¡¿IPv6ϵÁа²È«Æª——SAVI¼¼Êõ½âÎö
  • ¡¾µÚ¶þÊ®ÈýÆÚ¡¿IPv6ϵÁа²È«Æª——Ô°ÇøÍøIPv6µÄ½ÓÈ밲ȫսÊõ
  • ¡¾µÚ¶þÊ®ËÄÆÚ¡¿Wi-Fi 6ÕæµÄºÜ“6”£¨¸ÅÊöƪ£©——²»Ö»ÊǸü¸ßµÄ´«Êä¿ìÂÊ
  • ¡¾µÚ¶þÊ®ÎåÆÚ¡¿ Wi-Fi 6ÕæµÄºÜ“6”£¨¼¼Êõƪ£© ——ǰ·½¸ßÄÜ£¬Ó×°×É÷Èë
  • ¡¾µÚ¶þÊ®ÁùÆÚ¡¿IPv6ϵÁÐÀûÓÃÆª——Êý¾ÝÖÐÐÄIPv4/IPv6˫ջ¼Ü¹¹Ì½Çó

ÓйØÍƼö£º

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾ GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

µãÔÞ

¸ü¶à¼¼Êõ²©ÎÄ

ÈκαØÒª£¬ÇëÁªÏµGA»Æ½ð¼×

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

·µ»Ø¶¥²¿

ÊÕÆð
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾ ÎĵµAI¸±ÊÖ
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾ ÎĵµÆÀ¼Û
ev-close
¸Ã×ÊÁÏÊÇ·ñ½â¾öÁËÄúµÄÎÊÌ⣿
ev-close
Äú¶Ôµ±Ç°Ò³ÃæµÄÖÐÒâ¶ÈÈôºÎ£¿
²»Õ¦µÎ
¼«¶ÈºÃ
dark-star dark-star dark-star dark-star dark-star
ev-close
ÄúÖÐÒâµÄÔ­ÒòÊÇ£¨¶àÑ¡£©£¿
ev-close
Äú²»ÖÐÒâµÄÔ­ÒòÊÇ£¨¶àÑ¡£©£¿
ev-close
ÄúÊÇ·ñ»¹ÓÐÆäËûÎÊÌâ»ò½¨Ò飿
ΪÁ˼±¾ç½â¾ö²¢»Ø¸´ÄúµÄÎÊÌ⣬ÄúÄܹ»ÁôÏÂÁªÏµ·½Ê½
ÓÊÏä
ÊÖ»úºÅ
ev-bg
¸Ð¼¤ÄúµÄ·´À¡£¡
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
ÇëÑ¡Ôñ·þÎñÏîÄ¿
¹Ø¹ØÕ÷ѯҳ
ÊÛǰÕ÷ѯ ÊÛǰÕ÷ѯ
ÊÛǰÕ÷ѯ
ÊÛºó·þÎñ ÊÛºó·þÎñ
ÊÛºó·þÎñ
¶¨¼û·´À¡ ¶¨¼û·´À¡
¶¨¼û·´À¡
¸ü¶àÁªÏµ·½Ê½
¡¾ÍøÕ¾µØÍ¼¡¿