GA»Æ½ð¼×

¡°¼«¼ò¡±»ÀР¡¤ È«ÓòÖÇÁª Ø­ GA»Æ½ð¼×м«¼òÁ캽ÏÂÒ»´úÐ£Ô°Íø½¨Éè×êÑлá
date
Ô¤Ô¼Ö±²¥
ÎÞ¸Ð×¼Èë ÈËÎïͳ¹Ü Ø­ RG-SAM+5.X ÐÂÒ»´ú¸ßУAIÈÏ֤ƽ̨°ä²¼
date
Ô¤Ô¼Ö±²¥
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
²úÆ·
< ·µ»ØÖ÷²Ëµ¥
²úÆ·ÖÐÐÄ
²úÆ·
½â¾ö¹æ»®
< ·µ»ØÖ÷²Ëµ¥
½â¾ö¹æ»®ÖÐÐÄ
ÐÐÒµ
ºÏ×÷ͬ°é
·µ»ØÖ÷²Ëµ¥
Ñ¡ÔñÇøÓò/˵»°
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾ GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

ACLÓ¦¸ÃÔÚÍøÂçÖеÄÄÄÀïÅäÖÃ

Ñ¡ÔñACLÅäÖõØÎ»ºÜ³ÁÒª £¬Óй滮µÄÔÚÍøÂçÖÐÅäÖÃACL¿ÉÄܾ«×¼µÄÆ¥Åä±ØÒª¹ýÂ˵ÄÁ÷Á¿ £¬Í¬Ê±Ò²¿ÉÄÜÏ÷¼õÊý¾ÝÔÚÍøÂçÖв»ÓÃÒªµÄ´«Êä¡¢½ÚÔ¼ÍøÂç×ÊÔ´ £¬»¹ÄܽµµÍÔËάÈËÔ±µÄÅäÖÃÓëÊØ»¤¹¤×÷Á¿¡£

  • GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

    °ä²¼¹¦·ò£º2022-12-05

  • GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

    µã»÷Á¿£º

  • GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

    µãÔÞ£º

·ÖÏíÖÁ

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

ÎÒÏëÆÀÂÛ

1 Ñ¡ÔñACLÅäÖõØÎ»ºÜ³ÁÒª
ACLÊÇAccess Control ListµÄ¼ò³Æ £¬ÖÐÎÄÊǽӼû½ÚÔìÁбí¡£¶àËùÖÜÖª £¬ACLÔÚÍøÂçÖпÉÄÜʵÏÖ½Ó¼û½ÚÔì¡£½øÐнӼû½ÚÔìµÄÅäÖúÅÁîÒ²±ÈÁ¦µ¥Ò» £¬Æ¾¾ÝÏÞ¶ÈÒªÇóÅäÖÃACL¹æ¶¨²¢ÔÚ½Ó¿ÚÉÏÀûÓü´¿É¡£µ«ÊÇÒªÔÚÏÖÊµÍøÂçÖÐÓÐЧÀûÓÃACLʵÏÖ½Ó¼û½ÚÔìÈ´²¢²»ÈÝÒ× £¬Ö»ÓÐÓй滮µØÔÚÍøÂçÖÐÅäÖÃACL²Å¿ÉÄܾ«×¼µÄÆ¥Åä±ØÒª¹ýÂ˵ÄÁ÷Á¿ £¬Í¬Ê±Ò²¿ÉÄÜÏ÷¼õÊý¾ÝÔÚÍøÂçÖв»ÓÃÒªµÄ´«Êä¡¢½ÚÔ¼ÍøÂç×ÊÔ´ £¬»¹ÄܽµµÍÔËάÈËÔ±µÄÅäÖÃÓëÊØ»¤¹¤×÷Á¿¡£Èçͼ1-1Ëùʾ £¬ÍøÂçÖÐÉ豸¶à¶à £¬½Ó¿Ú¶à¶à £¬ÈôºÎÅäÖòſÉÄܵ¥Ò»¼±¾çµÄʵÏÖÒµÎñÅäÖà £¿ÏÂÎĽ«¾ßÌå½éÉÜÈôºÎÔÚÍøÂ統ѡÔñACLµÄÅäÖõØÎ»¡£
ͼ1-1 ¸´ÔÓµÄÍøÂçÍØÆË
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
                                                                                                     
2 ÈôºÎÑ¡ÔñACLÅäÖõØÎ»
±¾Õ½ڽ«´ÓÊý¾Ý·½Ïò²ãÃæ¡¢ÍøÂç²ã¼¶²ãÃæºÍÁ´Â·²ãÃæ½éÉÜACLµÄÅäÖõØÎ»¡£

l  Êý¾Ý·½Ïò²ãÃæ£ºACLÔÚ¿¿½üÔ´¶Ë»¹ÊÇÖ÷ÕŶËÅäÖà £¿

l  ÍøÂç²ã¼¶²ãÃæ£ºACLÔÚ»ã¾Û²ã»¹ÊǽÓÈë²ãÅäÖà £¿

l  Á´Â·²ãÃæ£ºACLÔÚÈë½Ó¿Ú»¹Êdzö½Ó¿ÚÅäÖà £¿

2.1   ACLÔÚ¿¿½üÔ´¶Ë»¹ÊÇÖ÷ÕŶËÅäÖà £¿
ƾ¾Ý±ØÒªÊ¹ÓõÄACLÀàÐ;ö¶¨ACLÔÚ¿¿½üÔ´¶Ë»¹ÊÇÖ÷ÕŶËÅäÖãº

l  ³ß¶ÈACL£¨Æ¥ÅäÔ´µØÖ·£© £¬ÔÚ¿¿½ü±¨ÎÄÖ÷ÕŵÄÉ豸ÉϽøÐÐÅäÖá£

Èçͼ2-1Ëùʾ £¬±ØÒªÏÞ¶ÈPC A¶ÔPC BµÄ½Ó¼û £¬ÓÉÓڳ߶ÈACLÖ»ÄÜÆ¥Å䱨ÎĵÄÔ´IPµØÖ· £¬ÈôÊǽ«³ß¶ÈACLÅäÖÃÔÚ¿¿½üÔ´¶ËµÄÉ豸£¨Device A£©ÉÏ £¬ÄÇôPC AËùº±¼û¾Ý°üÔÚ´ïµ½Device Aºó¶¼½«±»Åׯú £¬Ô̺¬·ÇÈ¥ÍùPC BµÄ±¨ÎÄ¡£¶øGA»Æ½ð¼×ÐèÒªÖ»ÊÇÏÞ¶ÈPC A½Ó¼ûPC B £¬Òò¶ø½«³ß¶ÈACLÅäÖÃÔÚ¿¿½üÔ´¶ËµÄÉ豸»áÀ©´óÏÞ¶ÈÁìÓò £¬Ó°ÏìÆäËûÕý³£Á÷Á¿×ª·¢¡£
ͼ2-1 ³ß¶ÈACLÔÚÍøÂçÖеÄÅäÖõØÎ»
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
                                                                                    

l  À©´óACL£¨Æ¥ÅäÖ÷ÕŵØÖ·£© £¬½¨ÒéÔÚ¿¿½ü±¨ÎÄÔ´µÄÉ豸ÉϽøÐÐÅäÖá£

À©´óACL²»½ö¿ÉÄÜÆ¥ÅäÔ´IPµØÖ· £¬»¹ÄÜÆ¥ÅäÖ÷ÕÅIPµØÖ· £¬Òò¶øÄܹ»¸ü¾«×¼µÄÆ¥Åä±ØÒª¹ýÂ˵ı¨ÎÄ¡£½«À©´óACLÅäÖÃÔÚ¿¿½ü±¨ÎÄÔ´µÄÉ豸ÉÏÄܹ»ÈùýÂ˱¨Îľ¡¿ÉÄÜÔçµØ±»Åׯú £¬½ÚÔ¼ÖÐÑëÍøÂçµÄת·¢×ÊÔ´¡£Èçͼ2-2Ëùʾ £¬Èô½«À©´óACLÅäÖÃÔÚDevice BÉÏ £¬PC A·¢Ë͸øPC BµÄ±¨ÎÄÔÚDevice BÉϲŻᱻÅׯú £¬Ôì³ÉDevice AÖÁDevice BÕâ¶ÎÍøÂçµÄ´ø¿íºÍÉ豸»úÄÜÀË·Ñ¡£
ͼ2-2 À©´óACLÔÚÍøÂçÖеÄÅäÖõØÎ»
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
                                                                             
À©´óACLÒ²²»ÊDZØÐëÅäÖÃÔÚ¿¿½ü±¨ÎÄÔ´µÄÉ豸ÉÏ £¬ÏÖʵÅäÖÃʱ»¹±ØÒªË¼¿¼ÅäÖÃÁ¿ºÍ¿ÉÊØ»¤ÐÔ¡£±ØÒªÔÚ¶ą̀½ÓÈë¶ËÉ豸ÅäÖÃÒ»ÑùACL¹æ¶¨µÄÇé¿öÏ £¬½«ACLÅäÖÃÔÚÍøÂçµÄ»ã¾Ûµã £¬ÒÔÏ÷¼õÅäÖÃÁ¿¡£Èçͼ2-3Ëùʾ £¬ÒªÇó²»ÈÝPC½Ó¼û·þÎñÆ÷µÄTCP 22ºÍTCP 23¶Ë¿Ú¡£ÈôÑϸñµÄ½«À©´óACL²¿ÊðÔÚ¿¿½ü±¨ÎÄÔ´µÄÉ豸ÉÏ £¬¾Í±ØÒª±ðÀëÔÚDevice A¡¢Device BºÍDevice CÅäÖÃÀ©´óACL £¬Ò»¹²±ØÒªÅäÖÃ3´Î¡£ÈôÊÇÓиü¶àµÄ½ÓÈëÉ豸 £¬ÅäÖÃÒ²½«³É±¶µÄÔö³¤¡£Ò»µ©ÐèÒª±ä¶¯±ØÒªµ÷ÕûACLÅäÖà £¬Ò²±ØÒªÔÚÿ¸ö½ÓÈëÉ豸ÉϽøÐе÷Õû¡£ÈôÊÇÔÚDevice DÉÏÅäÖà £¬ÔòÖ»±ØÒªÅäÖÃÒ»´Î £¬ÐèÒª±ä¶¯Ê± £¬ACL¹æ¶¨Ò²Ö»±ØÒªµ÷ÕûÒ»´Î¡£
ͼ2-3 ÔÚÍøÂç»ã¾ÛµãÅäÖÃACL
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
                                                                            
2.2   ACLÔÚ»ã¾Û²ã»¹ÊǽÓÈë²ãÅäÖà £¿
Ŀǰ´ó²¿ÃŵįóÒµÍø¶¼ÊÇÈý²ãÍøÂç¼Ü¹¹£ºÖ÷Ìâ²ã¡¢»ã¾Û²ãºÍ½ÓÈë²ã¡£Ö÷Ìâ²ãͨ³£×÷Ϊ¸ß¿ìת·¢µÄÊàŦ £¬²»»á²¿Êð½Ó¼û½ÚÔìÕ½Êõ £¬ËùÒÔACLͨ³£ÔÚ»ã¾Û²ã»¥»»»úºÍ½ÓÈë²ã»¥»»»úÉÏÅäÖá£

l  ½ÚÔìVLANÄÚµÄÊý¾ÝÁ÷ £¬±ØÒªÔÚ½ÓÈ뻥»»»úÉÏÅäÖÃACL¡£

Èçͼ2-4Ëùʾ £¬PC AÓëPC B½øÐÐVLAN¼äͨѶ £¬µ±PC A·¢Ë͸øPC BµÄ±¨ÎÄ´ïµ½½ÓÈ뻥»»»úºó £¬½ÓÈ뻥»»»ú½«Æ¾¾ÝMACµØÖ·±í½øÐжþ²ãת·¢ £¬±¨ÎIJ»»á¾­¹ý»ã¾Û»¥»»»ú¡£Òò¶ø £¬ÈôÊÇÒªÏÞ¶ÈPC AÖÁPC BµÄ½Ó¼û £¬¾Í±ØÒªÔÚ½ÓÈ뻥»»»úÉÏÅäÖÃACL¡£
ͼ2-4 ACLÏÞ¶ÈVLANÄÚ±¨ÎÄת·¢
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
                                                                         

l  ½ÚÔìVLAN¼äµÄÊý¾ÝÁ÷ £¬±ØÒªÔÚ»ã¾Û»¥»»»ú£¨Íø¹Ø£©ÅäÖÃACL¡£

Èçͼ2-5Ëùʾ £¬ÒªÇóVLAN10²»ÄܽӼûVLAN30 £¬VLAN20²»ÄܽӼûVLAN40¡£ÈôÊǽ«ACLÅäÖÃÔÚ½ÓÈ뻥»»»úÉÏ £¬±ØÒªÔÚ¶ą̀»¥»»»úÉÏÅäÖà £¬ÅäÖù¤×÷Á¿½Ï´ó £¬²¢ÇÒÈÝÒ×·¸´í¡ £¿çVLANµÄ±¨ÎıØÒª¾­¹ý»ã¾Û»¥»»»úµÄSVI½Ó¿Ú £¬Òò¶ø½ÚÔì¿çÍø¶Îת·¢µÄÊý¾Ý £¬½¨ÒéÔÚ»ã¾ÛÍø¹Ø£¨SVI½Ó¿Ú£©ÉÏÅäÖÃACL £¬ÕâÑùÄܹ»Ï÷¼õÅäÖÃÁ¿ £¬²¢·½±ãÊØ»¤¡£
ͼ2-5 ACLÏÞ¶ÈVLAN¼ä±¨ÎÄת·¢
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
                                                                                         
2.3   ACLÔÚÈë½Ó¿Ú»¹Êdzö½Ó¿ÚÅäÖà £¿
ͨ¹ýÒÔÉÏÁ½¸öÕ½Ú £¬ÎÒÃÇÒѾ­¿ÉÄÜÃ÷È·ACL±ØÒªÔÚÄĸöÉ豸ÉÏÅäÖÃÁË £¬µ«ÊÇÉ豸ÉϵĽӿڶà¶à £¬È·¶¨ÅäÖÃÉ豸ºóÓÖ±ØÒªÔÚÄĸö½Ó¿ÚÉÏÅäÖá¢ÔÚ½Ó¿ÚµÄÄĸö·½ÏòÉÏÅäÖÃÄØ £¿ÎÒÃDZØÒª×ñÑ­µÄ×¼ÔòÊÇ£ºÏ÷¼õÅäÖÃÊØ»¤¹¤×÷Á¿ £¬Ï÷¼õÉ豸»úÄÜ¿÷Ëð¡£
ÔÚµ¥Ò»µÄ´®ÁªÁ´Â·ÉÏ £¬½¨Ò鯾¾ÝÊý¾ÝÁ÷µÄÁ÷ÏòÔÚÈë½Ó¿ÚµÄÈë·½ÏòÅäÖÃACL¡£ÓÉÓÚÉ豸ÔÚÊÕµ½Êý¾Ý°üʱ»áÏȽøÐÐACL²é³­ £¬ÔÙ½øÐвé±íת·¢¡£Òò¶ø £¬ÔÚÈë½Ó¿ÚµÄÈë·½ÏòÅäÖÃACLÄܹ»ÔÚ²é±íת·¢Ç°ÅׯúÊý¾Ý°ü £¬½ÚÔ¼É豸ת·¢×ÊÔ´¡£Èçͼ2-4Ëùʾ £¬Òª²»ÈÝPC A½Ó¼ûPC B £¬½¨ÒéÔÚ½ÓÈ뻥»»»úµÄ×ó²à½Ó¿ÚµÄÈë·½ÏòÅäÖÃACL¡£
ÔÚ¶à½ÓÈë»òÕß¶à³ö¿ÚµÄ³¡¾°ÖÐ £¬½¨ÒéÔÚÊý¾ÝÁ÷µÄ»ã¾Û½Ó¿ÚÅäÖÃACL £¬ÕâÑù¿ÉÄܽڼóÅäÖÃÊØ»¤¹¤×÷Á¿¡£Èçͼ2-3Ëùʾ £¬½¨ÒéÔÚDevice DµÄÓÒ²à½Ó¿ÚµÄ³ö·½ÏòÅäÖÃACL¡£
                                                                             
3 ½áÂÛ
×îºóÈÃÎÒÃǻص½¿ªÆªÌáµ½µÄÍØÆË£¨Í¼1-1£© £¬ÐèҪΪÏÞ¶ÈVLAN10½Ó¼ûVLAN30 £¬ÓÉÒò¶øÏÞ¶È¿çVLANµÄ½Ó¼û £¬±ØÒªÔÚ»ã¾Û»¥»»»úDevice DÉÏÅäÖÃÀ©´óACL¡£»ã¾ÛÉ豸µÄ¶à¸ö½Ó¿Ú³ÇÊÐÓÐVLAN10ºÍVLAN30Á÷Á¿¾­¹ý £¬ËùÒÔÀ©´óACL±ØÒªÔÚÁ÷Á¿»ã¾Û½Ó¿Ú£¨SVI½Ó¿Ú£©ÉÏÀûÓá£
ͨ¹ýÉÏÎĵĽéÉÜ £¬ÈôºÎÑ¡ÔñACLÅäÖõØÎ»ÎÒÃÇÄܹ»×ܽá³ö´óÌåµÄÅжÏÁ÷³Ì£º
(1) ʹÓó߶ÈACL»¹ÊÇÀ©´óACL £¿
¡ð³ß¶ÈACL£ºÔÚ¿¿½üÖ÷ÕŶ˵ÄÉ豸ÉÏÅäÖá£
¡ðÀ©´óACL£ºÔÚ¿¿½üÔ´¶ËµÄÉ豸ÉÏÅäÖã¨ÔÚ¶ą̀½ÓÈë¶ËÉ豸ÅäÖÃÒ»ÑùACL¹æ¶¨µÄÇé¿öÏ £¬½«ACLÅäÖÃÔÚÍøÂçµÄ»ã¾Ûµã£©¡£
(2) ÏÞ¶ÈVLAN¼ä½Ó¼û»¹ÊÇVLANÄÚ½Ó¼û £¿
¡ðÏÞ¶ÈVLANÄÚ½Ó¼û£ºÔÚ½ÓÈë²ãÅäÖá£
¡ðÏÞ¶ÈVLAN¼ä½Ó¼û£ºÔÚ»ã¾Û²ãÅäÖá£
(3) ÊÇ´®ÐÐÁ´Â·»¹ÊǶà½ÓÈë¡¢¶à³ö¿ÚÁ´Â· £¿
¡ð´®ÐÐÁ´Â·£ºÔÚÈë½Ó¿ÚµÄÈë·½ÏòÅäÖá£
¡ð¶à½ÓÈë¡¢¶à³ö¿ÚÁ´Â·£ºÔÚÊý¾ÝÁ÷µÄ»ã¾Û½Ó¿ÚÅäÖÃACL¡£
ÒÔÉÏÊÇÒ»¸ö´óÌåµÄÅжÏÁ÷³Ì £¬ÏÖʵÀûÓÃÖбØÒª½Ã½Ýµ÷Õû¡£ÎÒÃÇÆ¾¾Ý×¼ÔòÊÇ£º¾«×¼Æ¥Åä±ØÒª¹ýÂ˵ÄÁ÷Á¿ £¬½µµÍÔËάÈËÔ±µÄÅäÖÃÓëÊØ»¤¹¤×÷Á¿ £¬½ÚÔ¼ÍøÂç´ø¿íºÍÉ豸×ÊÔ´¡£
                                                                                                        
ÓйØÁ´½Ó
ACL¸ù»ù¸ÅÏë¼°µÀÀí½éÉÜ
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾ GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

µãÔÞ

¸ü¶à¼¼Êõ²©ÎÄ

ÈκαØÒª £¬ÇëÁªÏµGA»Æ½ð¼×

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

·µ»Ø¶¥²¿

ÊÕÆð
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾ ÎĵµAI¸±ÊÖ
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾ ÎĵµÆÀ¼Û
ev-close
¸Ã×ÊÁÏÊÇ·ñ½â¾öÁËÄúµÄÎÊÌâ £¿
ev-close
Äú¶Ôµ±Ç°Ò³ÃæµÄÖÐÒâ¶ÈÈôºÎ £¿
²»Õ¦µÎ
¼«¶ÈºÃ
dark-star dark-star dark-star dark-star dark-star
ev-close
ÄúÖÐÒâµÄÔ­ÒòÊÇ£¨¶àÑ¡£© £¿
ev-close
Äú²»ÖÐÒâµÄÔ­ÒòÊÇ£¨¶àÑ¡£© £¿
ev-close
ÄúÊÇ·ñ»¹ÓÐÆäËûÎÊÌâ»ò½¨Òé £¿
ΪÁ˼±¾ç½â¾ö²¢»Ø¸´ÄúµÄÎÊÌâ £¬ÄúÄܹ»ÁôÏÂÁªÏµ·½Ê½
ÓÊÏä
ÊÖ»úºÅ
ev-bg
¸Ð¼¤ÄúµÄ·´À¡£¡
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
ÇëÑ¡Ôñ·þÎñÏîÄ¿
¹Ø¹ØÕ÷ѯҳ
ÊÛǰÕ÷ѯ ÊÛǰÕ÷ѯ
ÊÛǰÕ÷ѯ
ÊÛºó·þÎñ ÊÛºó·þÎñ
ÊÛºó·þÎñ
¶¨¼û·´À¡ ¶¨¼û·´À¡
¶¨¼û·´À¡
¸ü¶àÁªÏµ·½Ê½
¡¾ÍøÕ¾µØÍ¼¡¿