计算机网络信息安全第8章精品.pptVIP

Cisco 路由器的安全配置信息如下： Hostname East ! interface Ethernet 0 description Outside interface to the /16 network 　　ip address0 　　ip access-group 100 in ! interface Ethernet 1 description Inside interface to the /24 network ip address 55.0 　 ip access-group 102 in * ! router ospf 44 network 55 area 0 network 55 area 1 ! ! access-list 75 applies to hosts allowed to gather SNMP info ! from this router no access-list 75 access-list 75 permit host access-list 75 permit host 8 ! * 　　! access-list 100 applies to traffic from external networks 　　! to the internal network or to the router 　　no access-list 100 　　access-list 100 deny ip 55 any log 　　access-list 100 deny ip host 　0 host 0 log 　　access-list 100 deny ip 55any log 　　access-list 100 deny ip 55any log * access-list 100 deny ip 55 any log access-list 100 deny 　ip 　55 any log access-list 100 deny ip 55 any log access-list 100 deny ip 55 any log access-list 100 deny ip 55 any log access-list 100 deny ip 55　any log access-list 100 deny ip any host 55 log access-list 100 deny ip any host log access-list 100 permit tcp any 55 established access-list 100 deny icmp any any echo log access-list 100 deny icmp any any redirect log * access-list 100 deny icmp any any mask-request log access-list 100 permit icmp any 55 access-list 100 permit ospf 55 host 0 access-list 100 deny tcp any any range 6000 6063 log access-list 100 deny tcp any any eq 6667 log access-list 100 deny tcp any any range 12345 12346 log access-list 100 deny tcp any any eq 31337 log access-list 100 permit tcp any eq20 55 gt 1023 access-list 100 deny udp any any eq 2049 log access-list 100 deny udp any any eq 31337 log * access-list 100 deny udp any any range 33400 34400 log access-list 100 permit udp any eq 53 55 gt 1023 access-list 100 deny tcp any range 0 65535 any range 0 65535 log access-list 100 deny udp any range 0 65535 any range 0 65535 log access-list 100 deny ip any any log !