第6章 路由安全管理（The sixth chapter is about route security management）.docVIP

第6章 路由安全管理（The sixth chapter is about route security management） The sixth chapter of routing security management There are two meanings of the 1. router safety features: 1. ensure the internal LAN security protection; 2. external security data exchange. 2. router security features: authentication. Access control, information hiding, data encryption and security management, security, reliability and safety line. 3.: the main identity authentication to ensure that only legitimate users and authorized users can access and control the router. 4. network security authentication including access router authentication, Console login configuration, Telnet login configuration, SNMP configuration, Modem configuration, remote login to other routing authentication, directly connected neighbor router configuration, logical connection peer configuration, routing information, identity authentication, anti-counterfeiting routing information security intrusion characteristic. 5. access control: to achieve the functions of network equipment, protection at different levels of users with different permissions, based on five tuple (Baotou IP source IP address, destination IP address, protocol number, source port and destination) access control, according to the data packet information to classify the data, using different data streams different strategies. The user based access control, access server for users, set a specific filter, access control is an important security router to provide access control, can effectively prevent the illegal visit. 6. information hiding: internal address internal user realizes the function including the address conversion to hide network can be directly initiates a connection request to protect the internal LAN access Inretnet. , 7. data encryption and security: the use of public transport data inevitably face the problem of data interception, data encryption transmission, to ensure that only communication with the receiver can decrypt the data packets