Lab Control Plane Protection
Yêu cầu:
Hướng dẫn:
1. Đấu nối thiết bị như hình vẽ. Địa chỉ IP như hình vẽ.
Router 1:
Router 2:
Router 3:
Kiểm tra: Router 1 và Router 2 ping thấy nhau, Router 2 và Router 3 ping thấy nhau.
Lúc này R3 và R1 chưa ping thấy nhau vì chưa cấu hình các giao thức định tuyến.
Câu 2 và 3. Cấu hình giao thức OSPF đơn vùng, xác thực OSPF dùng password VnPro123.
Router 1
Router 2
Router 3
Kiểm tra tất cả các Router đã đi đến được các mạng của nhau sau khi bật xác thực OSPF.
Kiểm tra bảng định tuyến R1:
Kiểm tra bảng định tuyến R3:
Kiểm tra bảng định tuyến R3:
4. Cấu hình policing cho ICMP traffic là 8000bps. Nếu lưu lượng vượt quá 8000 bps thì ICMP traffic sẽ bị drop.
Trước khi áp Policy, R1 ping R2 để kiểm tra:
Ping thường và ping 200 gói size 300 đều thành công.
Từ R1 ping R2 theo 2 cách đã test trước khi áp Policy:
Kết quả: ping thường không xuất hiện rớt gói, tuy nhiên khi ping size lớn xảy ra hiện tượng rớt gói.
5. Cấu hình R2 để lọc (filter) telnet traffic. (CAUTION: vào control plane bỏ các policy đã áp trong câu 4 để tránh bị lỗi không cần thiết khi áp policy trong câu 5: no service-policy input pmap1)
Kiểm tra:
- Đấu nối thiết bị như hình vẽ. Địa chỉ IP như hình vẽ.
- Cấu hình giao thức OSPF đơn vùng.
- Cấu hình xác thực OSPF dùng password là VnPro123.
- Cấu hình policing cho ICMP traffic là 8000bps. Nếu lưu lượng vượt quá 8000 bps thì ICMP traffic sẽ bị drop.
- Cấu hình R2 để lọc (filter) telnet traffic.
- Cấu hình để lọc non-IP packets (ARP).
Hướng dẫn:
1. Đấu nối thiết bị như hình vẽ. Địa chỉ IP như hình vẽ.
Router 1:
Code:
R1(config)# interface Ethernet0/0 R1(config-if)# ip address 10.1.1.1 255.255.255.0 R1(config-if)# no shutdown
Code:
R2(config)# interface Ethernet0/0 R2(config-if)# ip address 10.1.1.2 255.255.255.0 R2(config-if)# no shutdown R2(config)# interface Ethernet0/1 R2(config-if)# ip address 12.1.1.2 255.255.255.0 R2(config-if)# no shutdown
Code:
R3(config)# interface Ethernet0/0 R3(config-if)# ip address 12.1.1.1 255.255.255.0 R3(config-if)# no shutdown
Lúc này R3 và R1 chưa ping thấy nhau vì chưa cấu hình các giao thức định tuyến.
Câu 2 và 3. Cấu hình giao thức OSPF đơn vùng, xác thực OSPF dùng password VnPro123.
Router 1
Code:
R1(config)# router ospf 1 R1(config-router)# network 10.1.1.1 0.0.0.0 area 0 R1(config-router)# area 0 authentication [I][COLOR=#5b9bd5]///cấu hình bật xác thực dạng plain text cho các interface trong Area 0[/COLOR][/I] R1(config)# interface Ethernet0/0 R1(config-if)# ip ospf authentication-key VnPro123 [I][COLOR=#5b9bd5]///cấu hình mã bảo mật là VnPro123 để xác thực OSPF[/COLOR][/I]
Code:
R2(config)# router ospf 1 R2(config-router)# network 10.1.1.2 0.0.0.0 area 0 R2(config-router)# network 12.1.1.2 0.0.0.0 area 0 R2(config-router)# area 0 authentication R2(config)# interface Ethernet0/0 R2(config-if)# ip ospf authentication-key VnPro123 [IMG2=JSON]{"data-align":"none","data-size":"full","src":"https:\/\/www.forum.vnpro.org\/core\/image\/png;base64,iVBORw0KGgoAAAANSUhEUgAACLgAAAArCAIAAAD+YDQ4AAAAAXNSR0IArs4c6QAAMixJREFUeF7tXT1PZMfSPrzS5vsb8LBX7L0RAdIMEhkYWCH7SsapRxYaPAk7EtoAy6FlghXSQDIGIQunF0u2hRa4kCEBEgGRveiaMb9h8w14q89n9fnsrzPnnJlabbAL\/VH9VHWf7q6up8aePn6w\/D\/93szk5rX73+bJx+5i8DvrtP186cD\/\/3T3\/vx1Df3asvq78xMbt+6P6lsPl23+91zhpP\/gRhrbd1fr49nVOLEtS7xrvmLr+G5vAXd3sfZsZd\/rPixMKlZ2JVw9DCYalGCxFBiEWwiP98Pegt\/s42l7CukXfp4ic7ZOskoIy8w1pFaLlwWDkGoqyBQ9KM46Y8uHdnOy4AhLbsquAlEta\/XoqTeXpRGt33Nz35puHZ8j08pqGYsa0kjKr7Japd8TAoQAIUAIEAKEACFACBAChAAhQAgQAoQAIUAIEAKEACFACIgg8H8ihZwyi727bt0vftv5utfHlfu9r3wvkWU1vvhUwUsE7dXW37S8Zq83dk9F5Ku1r46bDb\/kzebEs\/m13Yu+J1+\/\/3i621ubfT727PnaGWqx1v55e9r\/\/\/7y1AzUsv\/fP4PygZcInE8\/i7isRKQtsEx4vPNrZ4\/2aC\/WZkNeogKlzLfr023fFWq1vk3zZT7ce17P1VeOx\/T090NXOO8n+cqq0\/rCK38eWQcrM+1gOlj9x37\/4vTMNXWdTvy6tfUf8eKwv\/x8pt077dvWxf6wHnfa8zPPInMQfrnQPVn1piFM3lmoaFfZ7cy4bjn4b\/NEyfFsZHTUCCFACBAChAAhQAgQAoQAIUAIEAKEACFACBAChAAhQAgQAkOMgISjyLLGX18eBbfPcKXbvgig6f\/PC0ViP7vemAKvTPzfWd7DFEZ37k3gvDn8fte\/a07VwkL36n6rhfxY+xsrE5OuABOTU0sbm\/s3MS3U1s8fkJPpGmrZYk8sB+Ubq4rRUSW0G7jQDy7lrVvwjTEdTa444DQCACEw6x8TJRyApkj93vd+VFx9600QUBVt9+I3r2Rj8hP7149\/\/ekW836iKU2u1fE8sq4PgukwNjk1MbmytPz2Hefp1RQGFoe7E+R2vT7YXJr0FwHWY+fgFi8RuL\/F3jn2FS2xmTs1sXHolq83T+656EZNWak6IUAIEAKEACFACBAChAAhQAgQAoQAIUAIEAKEACFACBAChICPgJSjCGrN7R03A\/ggUkHQkSMDOY5OuN74ZkfwOrvW3rv88HB\/1F2d5hwedteN+nRjtdk9vov6BmrgZPoId9xNKMOJyapsndx\/uOqpcOjJjHiQZcfhUv7hGJxqeLDeSH\/aCgKzBinUgPp63PnaDyea7v6UqtZ+\/w9Xqukvl2xCwv5\/\/+P6Gr2fDEhsxW7ACfqUMB0ssO36yxeKDSdVG1+EHu2pBNYVNiTWY7O1DRMKCB5jWgCzdKXFv6wDi93dw2V3US0+0fAAqTlCgBAgBAgBQoAQIAQIAUKAECAECAFCgBAgBAgBQoAQIASGEIExLkdReQbIZWqJyYdUHkmHShIMe\/6JbQYL3ePO7FTHiyoTTX81WBGpN0KAECAECAFCgBAgBAgBQoAQIAQIAUKAECAECAFCgBAgBAgBQmDACMhGFA1KPEg7dO9Ht9x2Jr1sOoPqfzT76Z\/86pODtT6bGx4Q7CRMgZdo9ehqCDJODY96aCSEACFACBAChAAhQAgQAoQAIUAIEAKEACFACBAChAAhQAgQAoUhUFZHEQDC+4pYNp1Z5i4SJKIrDNHqdty\/eLtx64nf\/Dwtf09lBtlnLqJ5PwkTyM1iiXpD5AOrjCpIUEKAECAECAFCgBAgBAgBQoAQIAQIAUKAECAECAFCgBAgBAiBMiJQYkeR4yuClCerXjadm1twF00865yWEclqyNTfnR979py53HYvTvue1w3+cdaZmVzZ9wbROu4uVmNAaVKetp9PwKBuPO9XvckyTlEsUfU1SyMgBAgBQoAQIAQIAUKAECAECAFCgBAgBAgBQoAQIAQIAUKAEDCFQLkdRWyU4yzLPbiLtrdadc9jZGr0I9sOuNw2VpYmwev2nPmN4B\/Lhx7p3HTr+G5vKMKJXPXWp1urW+AierrsLtZGVuU0cEKAECAECAFCgBAgBAgBQoAQIAQIAUKAECAECAFCgBAgBAgBQiAGgbGnjx8ImBFCoH9xevLut1\/e\/2HdXt\/gcU836i+\/\/OLVq\/U5cqaMkD3QUAkBQoAQIAQIAUKAECAECAFCgBAgBAgBQoAQIAQIAUKAECAERhsBchSNtv5p9IQAIUAIEAKEACFACBAChAAhQAgQAoQAIUAIEAKEACFACBAChAAhMMIIlJ96boSVQ0MnBAgBQoAQIAQIAUKAECAEYhE46zACYefvbK9PKBEChMCIINDvzfhzn9L3VlnpkFLXW8bLmoa5\/3i625mZtfMc47+z8zOznbXdxyrDT7ITAoQAIUAIWBbeVGQdKNy0997nYO2MABxCBMhRNIRKpSERAoQAIUAIEAKEACFACBAChAAhQAgQAoRAWRG4+O3AFa2xvb5YPin7Z52ZyamljcPrm9uwdDfAY3+4\/8t\/6Y1C+fRGEhEChAAhQAgQAuoIpDuKHndm\/Zcj8zu0Cwjj\/Ng\/6+204TVN6InN\/Ey7d9pXeF+DAX8+KN+s80oIFC2lYjb2tejA2cOii1PTpmLjHPOUCZCH7uR7KwRnsB7lftV0pLou9C+YVfNPxtbOHiVxlpDZtH5VBy5Wjx2ZEDj2ZE+oGbz1LusjQbEhF1kKv5cPvWT0\/9u+KFJC6psQIATKjoDE96jsQxla+eR1ZGavogOovMw6vQV1R61fM6hRK4SALgI5rDn93bf7rljN79bH4yXMoV9RKPq9r5YPr73Sje2jh\/sPkN8a\/j7c350cb7VWm61\/UnZjUTipHCFACBAChAAhUAkE0h1F4y\/+6Y\/i5QvaBnAqhUv\/qYnlzc4BvKYJPbG5vT7YXJqcghtkqbv1\/u43nZtBmQ1sOsE\/xG5anVdCMv32wUXExr4fHTg8LNpY+f5EwUmWIsDFW4ZzzFMmQB66m5BzcVkDxRkNS7pfHR3J6BOXPW3Pj02uMKvGPwWcl6cmZjvZLkAVmQ3rV3XoQvUAnwl0ZII69mSPc7JCAO\/yodNo67hbwkeCQgOmQoQAIUAIVBQBle9RRYdaWbFVdaS7V9EBTFVmnT5Z3VHrVxcvqk8ImEQgnzXn4u2Ge4eQFE6UT7+iyJxubyIv0d3V+lzNuw6q1cYXF9p7ve5eb46uiEQBpXKEACFACBAChEAVEMignpuYnK7CKIqVcbqxunVyf2e\/r7l7OG42PHHgBnkii+ExEB3e7HibxfzG0\/cfJYEzAPxDCj2xCHRwETk1p1v+2yJ4WLTdbNQVWhStAjh3j+8e7HdMT\/dH3aCv207sTX1swwPBOaZn4X4N6EgU0XA5oMleOvC8nnWwat6kbw6XJuMjY4zIbEa\/qmMXqnfW8fFpHd+BEbZcI7ztfB3yCj\/ufO0erhrbd3sLQs1TIUKAECAECAFNBIx8jzRloOrpCGjqSHmvoqMXTZmVux61fpWBooqEQH4I5LTmZIYT5dSvMFCPf\/3pl53+cikh4Em4OSpICBAChAAhMAQI1NbPndBS5y\/ddA2BTqNDCDuKgIVsrd2JoZmq\/2PCrg0nFiAcm5ntnaLGhPJZcVk3hyHp7otvj06Ojx4+nl\/12os1Z\/M0XlvoXt1v+b4i62bzrVB2r+BaOU87u3jLB4s06tOBqCId20ESnntpunt\/vue\/LYKHRevdq0u2WFwlxc6LdBFTZm7PXoMA59cL4+6rpdrc68s77Cv6j1AY02Bwjo5BvF9tHSmCbFnMC+JVrm89XIJVeyZ93PR+cbgU4\/vUlNmgfpUHL1Tx9PdDt9zq0d7CuFWb2\/vJm+w3v75D8YNB9Fh96+f46QDkjRE2RVhaU4jsAhlTksrOr7V7O2dxfIxZHG6MyDGp99DqnUQB5\/5cisRSCHmnUOs42JHg3clTb06iFemiF2uYaTAtZy9XMiblb7uzk0nhmKWmMRGePTvtMPtSx6cd5phRURblJL5TPK40EkX3QjNgrHWpa8G0ZmDsQBMqFWMrrSnhClkgp80F4U6oYEEIaH6PCpAaz8GZhBUGbbOHgMhUT0fqexUd5erJrN7zqPWrjlSBNfEUDn\/6w1\/hRKoJgW9xgUMcnq5VcM5rzckKJ8qrX3Ft\/v0+YBwhapkY3LgbMJH9eUwbOudBp7lBnVOyNs949QttZgzucwo5a6isG+LzzGxJ1TO7iI5QmfBeVGcu6NQ1C554a1WUWXx0o13SxH3OUCAYchRd\/LZxuH9wyGimnrHsL9aLl+4wgYOO5aR5PjG5AoRj1ze\/\/pV847P\/e0zGiP7JryrxK+VFGQKu5+BvTLR1rf3daiD3\/g\/ZBHTSpGSqsLwEKuHVZhf8WzbF8NXlj1\/KxADhCPTW8fnrgkPNx19\/2\/SRuBbIpTkwnEP6kepXU0eqpvG488OhV3e6+1Ob0+1C98Q36TjfZz4yS+tXdeyC9YJ8s63PPM9ErfYvt\/bte39JPOtMuNGBzZNLHkm7sJ3lCMgbI2yKsLQyIrvnM+3EzFt9xhiZklT2dv9gs7O88lWaPyN+vIzI0eldvq4gglUsht57MvFF1pn4YTLlHna8b2tuHpNHSDA2ZqcdZl\/qkChO2uGNzaWvDWcetlPWse2BzcUaBgBMi419Y+UrIXd+8WZCc6F4HWhIkM\/3SEMgmarXG9+MQkJQDR1p7VVkVBEuqyGzTrfWqPWrBRZVJgTMI5DXmpMVTpRXv+YRohZVEdA5D\/p9Vu2cYinvc4bsrKFqNVSPECAEikNgQPc5xQ0Q9cw7is7eeQkVoYid\/WX5fdemn+r+uWnnpPGr3qYFcBy8jRx0H9\/9EkrkU4rx5ySEHGWfMCmZtrRzrxmVcPc1+LcUfDz93vco4uRN5di0Boczryi5fvV0pGwiZ7tBfqz6v19FzGPxs6bfdsT3WZDMyoM1WfGTl56r9Y+\/nNRcF2upqYngBQrKcmSTN7pZYX0iO8h7tBLLWsnq+oyRdfD4ekyMQVJZMbLQ1SMUkXP3AESOq0HF642ptbQ4yOYJijXmInvcnxfuQjao4MiXiw8dS+4JAi69+Kd7oCTdatV9hO1vaxIr6UI3CunDtpha2SOyKXDVeFIhalCgRQUtAzuoQWy8pmyTDrYHjXrT42IFjlA2dmxdOfSv16TWXNDrmmrngkDVv0dRItNcYCq0UQ0dae1VdAatIbNOt9ao9asFVhkqA9tw3L7I2w\/EPR4qg9gkQyICea05QTiRtfoqJo9pXv2SqsuCgM55EI1hgOeU8AkFM7ugU49DA5PGLqOyz6n2WaMwoxupM3thKFPHw4uA6n3OUCDCO4oWug+QaQautFan3WQzq2\/sqJHxV184F1Xw8ybcbMI1UAKfkoNKxI3U\/+9\/Iq+MQwBCJKnLlhMmrnHomJxLWPzncQeVTH8FjyIl86JFwpLV\/Egs+OnN\/x7SbAWRktW3uoIXgkUYHxdO9G1MnISgUBGKBkM8Kv9Md35p4awhs1a\/gpDqFwtI1Syr8cWnMW7EhVctvxvRu3J9uVALGfq1NHSkI2dAy\/CvF8A\/CYvSiuNuj09NxHkNPfJGu3wNiOwu73Dk1kSYxACdKi2IVQKPr8fEyKo7SWUZYyws46nrc2i849D169550LVlicRB6qBWmboxX67bznZMyGzaiGpASdreuzx\/4llJI\/rVQwW8RJNBzmFrldGiBtSgQIsKWgZ2UNs8Hn6Km+NK\/dvOS+SaOr67uux6XKxgl2zsYF0sgR+YZTLBfUHzV2kuYFYH1+HnsEG6VHsO+Qbw1yWEhsRRR4rSTjKB4U0lxI2Fuht7Bj8B9shUekObkzAipwAjouWSGcYQKs4CX3HsDs3HVqeuklFWvdLNpkJIaDBomyAaaSqL0VTXngcKdwX2KgPFY4g7k18nOb4d+2QBKx4slZj8DRZJIEEtC2wcvUlA\/gx7sGXua+JO58yst2rjVfsuqK0bpnQkJ7MWzjmtOSgKZLq7EcOfnFO\/mbbPb8bcE41d63Apnnc6stVRs41AMrm5jwigmCQ274IzfWCyO3dHbB3wv4nA2ZAJwiAKaJ0HkYAVOqdgWCX3OabOGjKa1Vo3UEdy9iwjIZWtOgKKtiF\/Zx4CKnoYtLdGKXujDNrJ1LtcM9\/9GJkZAQ8ceYIPk6Er5SSzkr7PkdevGazs3a\/ieZ8bfDhHkX\/byJLNwHXSxieuzSz9CLc8T5CP57ILd09wDZQekRLi58nknWMfgMkVly0n7FJy6JimIq4gYWYqHArjur7yXVn6f70POvDSO8V2iUnJWt+2X+Url07rAe8W+AtfKgQk6XSeUBdvowM2sLjCReFcVL+SYONspZbt8Ij+CUJnwBMc0KxJ9iRVXFy\/Us2qFp773OPfC9g1+\/0\/3ObYpMhKTcSlqmps\/xghbxxf7B0FDrlQaGbQlxX\/\/NAbGCzjChN0cQMnV0t3b6tCWLV62DseyH7wDqfokxhTrX0VpPuyrJjQW4nG+KJ8FjTwEvXiaFHtOsw83KR6yt15FQOWRfYT4CNlubvi\/7BOVSJZtWVUaEBuLtiBXLB7CXHuAX9ddJ10aEbswnyMdUA7mcpV27cp\/pY34yj+gPQP2COB3nA39m0Kuz2xOQkjctqMiLPJ22tvgEBmGAbTITOEHdr23\/E469RV0NywVLne2FVbZB52gXmSEUQjJFxGU0g+KgSPjD0LNWiyUEn3KiaHSG159Lzq66SDISy2sOIBGyqGFBbJlIjeSoOvNF7170IIK7V1o1iZhdSd05qDw4mcJ7mhPzn1KzRmw4VkbENvj3TbmXwe8C4wahwgSAAvEVsH\/EEBZ0Mqa4Lh0Sc0p3ceRI1W55wSRkJin1PZs4aePQ\/GFKmXYhBQtg2lO3M0RvaYLHoYdIjE0HvT\/FBR+O6zw2+MzIyAB448+Yma1LLAfY6yfrk+FbCCLbTyeT8y3rCjKCgAZjQ5NQF\/2XNR8OKwf4ueM6EVLuZAgneusbp14vMpQXgTR4gUOTkvrHf9FDtxqVOc4WA3Vbo7wZClceONj89wJet95b\/FXj3aKzOZG76ktiChpZN6ET95g1erg81VjpN8pqOHn+0MEuei+pW2Y5ytNMkLOP4CEpV5fzyaNemeJCqI61eiUa2iAf8eO2Y8WrBIfu19U4Gvr++nJookeXK6xTwSVvO7+Kj8uTdBWCEfvNL\/3wDTvL1PyUKnBWKVKgfecYgPQxFXh98rp3HC3yxLPjgpCT3etE6SvURG4ccE+uC8LPcnTH3kqXPhZnPCDeTyaSQxFwfXK08zAkGHHu0kYyZ0S8KzmERaQrZfRAzAmHySUfwxAskkasEQa+WJw4t4H9BdWjeHS\/HP1WErGJwcGuCD9DgVWWiazSvYqCf1q1NXXWFDUfNwSeHV883mkr2l9NR0d4KC1PeXBbIfydhzETiXcq9SBBBD3KfuOulCc7gEaSDZv6dbzqESljsfNcnH7LmhPbeHiHxxVHfr2KOqw0y\/abR1KuPV+C7wkCiuGwOTWQfnfNacgOo\/PpzIsvLpV8CUF3vY9tCsASaDeN7pVLppGdswNPe5QULWbRyr5\/wuNpe2ADbmimieBwNBqnNOiQFPcJ9T1FlDZ91go83Dns2ZILVUJAJGbEPuztwdLpzL4DGZ+x9owT7TwWEhi5o+hhgffx3EwVT47rOzJJLZOTsLyCwulELJ1PscI\/plUbzy+1hj+zobkyRHkW1GLmr\/eGm5DzHgcyv8CgOxzwVRsR6jXUQfNTtiCRR\/1Wsv+nxKQKbU+zFwBVmHv4UzZ3BBRQl0SejZTn1rEJl1hD7\/AAF+TtKEqz0FKx1cFXxJXX\/\/\/ewUy7PCxX7Bq1Xw684LW4i67H2bXWHMywTD7kTS0CsK56L6lQeW8wIKVb++T3g\/LlQ7o5Ckfk10KdjGQtd3XcNiaD\/cdmpOd7+tvQ1SE8WfmrhAw1hGcrut2tK\/g9teHLxS+wf6eTQPnOAYBIuBM1iw5OCKuWQsjKSLkWXl3TEmBvlyaRyn6QqFzMpI4vO42pX+TIvzFm6WO0Q1ttdjyO6F25IoyPFdJF12SLRX1qIic4GjkYwfCJ+sDu4ur9bdqC+bmTDrEhPe5Lr7Rbt5+Oph8kkWDs8IJIFa8OljN2wA+DFmfQsqLjqz26a7TH9twyVJXj26Ah+ktzKwEDGbV\/Dq8hx+Hh21Tt2yGsMA5VJ89cyuxT01jS+uY05R8awAAvY8QCSCrkq2VykEgyHvVHOdDKNjW7JzqITlDkX0anzEy6wBmfFqfBcSIFBbN4qVOUubuaw5aM+WRHOSS79Zg83x9wK2YWzuw0cQPYJxBzXdPUasCWb23up46Z4HvZ6rc05JwEpkn1PRs4Yxe1Y3M6pZUgT0bEP1zpyBcdpG8TfsTNe2z3RwWOhe4beDuQMn8d2PyOycnT2Zcxc1qYPk+xw9\/Ub6k8AKIumDdACS5\/3YccY6iiAkLTAj4EN7jdiQ9pdTPQGrW\/6lg78LDwJ6Vt98h4ISOIFsMpy4m0lODTFxDFzqlM23kRzs+KoCxpL\/5WeQyh4GmHJnx5GSHUdudgqze4GOGdsMFIMH1PYzPXDqBoFft2AhCYkZBFpOKYJIGyG4zYsih52ffSeSXLEonIvqVw9lqC1yK6rdSbQBVf3mIEpak4u984dj7tkFe9Bx\/6P1g7dmJsZV8IGGk58kdlOr\/Sv4HYpmqH36pR9ACcEok5AEpROXvE0REo4gNJUwU7EDU9UYSRcjy2L84zm6i5C+nJO8oTRdMhnsxCDjD1Hg0xKrpluKN5h\/v8r\/46orsXB9ybnA9nBx1DFcfxw9CFslQmriLzEjzGNcddj8SQSN4T1JNNiR22JFn9k+3AeELY2UVSsOW526wroaroKQqNIjOIWB7S9L021H6R95HsVf32WnZxGy5xLgXtBepQQjH2IRNNdJHpmIJePXNhnpY6uIsdR4tb4LceiorRvFyiyrZUNrTvCcVPCFjaF+ZYdrrLyQbZia+\/ZHcO5z7rrJFmABn6GMjU2pIe3zoNtrdc4pGCbJfU5Fzxqm7FnJwKhSqRHQtQ3lO3OcigWeOIdy48Fjmp+QNz1HCGW++5zMkbAKkBmnf85R5pimk+5zdPXLdSWDlWV8XxcXUdQ\/e\/eHHyniXnpybEh\/\/JWSBrD26otpd4Au+1wQ0JMP7RuWLRpNjD6igwgngkgX3lUbzy4F8ajVIZ2z1ck9frF\/wrZi645vDwK\/zh8wX9bXaVkW+Kj2uOfPEvP8trP8DVwWJ159GMJZWmZD\/UogYaxoqTjHsvSLRi2tI1XEagtd+9m++xeeY0ycfNNx1kz7AjehYcwjkZQIKloVpzkZfw1hB4GvyILsIJC8jSWxz0gmLzDU0POHQfjUBaSCIijYGaJOTxBJF+TKgriuSO46sWYzSyHvi\/flSmYFzGwNF8B3VZaJ6cZxEg7uQgG7Aax\/6qYfGtj8zdaV5FyIJBuDeeouDohOFif5s+L3QtgTGY6f5qtLTc+A4gYWqBh\/XmIIo43UxKS3o7MsRiif7WYIANapm62mIS3xCqepA9oBKQK62F0u\/8LgPycZsZhi9lwG9E0snmUYB8kQIKC5TnJQxqSB5F7hDBvucuPV+y5EsVNbN4qVWd4CjKw5AuFEYcmM9Cs\/XEM1xGzD0NyPfas3kOzUMmjpnwft3ip0TuHRkdrnmD1ryKhJp6whe9YRgeqWFIHCbIPzuRa3Kkp993mny6sBMaYIWk78fY5J\/UphZZne1wEMMRFF7Br0\/qgLpPP1wNlYWwcKOPsnNl9KCoDo0sFOwBAI3fw8nxw8tfU3ienfEQtcWq4gQYPIKObkS\/QKpfGhVYeULGnIka0Yp4XkfFHqSEPeMO9qnt0XB2Sa7LI4IalDUTgX1a86usXXVNFv8VLbO3Xf6Quv9T+1IIPcsyB3F7hwZG5WnRF98hJ5g\/hBMqqoCJOsk6scPEbPbY+RFCyP\/f7FDhA58mlIUvOlHS6hAUKn+G9ebht7TBB1ushIuj4gtzRcXosTokogg7YmwZcr\/UpdovWyFnXJ\/cL6jU0UyWValo01KSUACnOB+YZ\/TnoOggfJ0cgk5YGb+xxHk\/yOXuTgzZ+VVD0e1NPfD4NfyPvzOJsHv4UdyChI\/KhTt5QWMhihuNgy60CfZZTLL5gxBkF7HgwS1MuoIaC5TnJwJaWBzB1T2JOE9kX+f\/Ok5pYbr+Z3IQyi4rpRqMy5G0JCB9LhREUJaqhfQdswM\/djI7RKz+2fhnTKedCq8jlFfJ9TzbOGGXs2MgcLO7MbkX4IGynMNoQDGfMFXeq7X8Hpb1K\/UlhZhvd1thkk5Ciqzb0G0vlLzKYCj2Ttn4T5UiLWhF8vHrxb8y8pknNyoCYeT3d7a5CCAl1UBVx7iYaLr1dwenCcuUEOa\/k5EuMlSmLiqSIpGRdeB+FEn0WdhemhXfKIJtdg98VApvkRJ+LenIg8vC0K56L6NQlxoW0J6rdQGf3Og2ztreMfX2xPTWw4+ZPdPyw1\/TNp+qDUoTnGz9LI4+gip4rtMQJ30UWGt+hgxbu5mJqYXOkc+OxSbn4Lg9ietjlPUtIFCsRFiVNW1rjEG1Zsdjq9ftF7EPzl4t7mH36\/m3ueJIOKGGhTiEmS07hUeMRgJB7MXBCL+sIhOMmj1wgaCwaLZiVyElvREDdw4fNkmxDIaBM\/CniMdOoORvvl7CWUIjU1RFt2BLnmF5QVhsoTAhwCJtdJglYYAYXvgnDbeRWsoswMC4VworwgLFe7NPel9VHxc4qRfU5pzxpkz9L2PDIVjNmG2p25i\/O\/XgyIpl5Pr2rBl3p9atY2pl89OQztkRIcRVqyjb\/+tuk1cLjvRdhk8c6Bo2V+7NnU0sbmPqSgkBSAI2H307\/jcKKc83vjWKLG6tFTSv6ACpOS+VqJf9EcciZJ6lChOE+mGXp4WxTORfWrgJ9fRZ6OYyABBKn61RmvuboB1eTq0Rtr1w8ohHTiT5AV0O1Ikj7I4r6LCcKyNPIQW8MyhEF0HR+BdH2wEvWbpgwaQkUh0xJEiz59ZGmfs+BpniDmPZ+Cz\/nHlUh0RVYHIr\/nE2\/870GkjnAZnB6W5\/DFXzdr+LJht44DTkWkWd+SMYJcmMLQ3D5LzgVhk1IoiJItc9SvcvnDuNdYClKwKizKnGUibPD1PY\/R\/Npusmdap66iuENQbfw1Jgq\/2fyKfNKOVku6VxkCk6vsEIpOSh8FrrENW6nYL+mH1FjtQarAxHdhkPKyvgqS2eyag+4lMm5FzPY7aGUNpL\/yzf0chp14Hqz+OUVwnzOcZ40YU8nLnktxZs9haoxSk2HbULszF7lcGiVUyzNWM3M\/lz1SHo4iPum3q4Z03rnHnVkgbUOv2rePgF7swd5qY5ahRJ3W2t8FnC3uQ28UgZVvOFF\/dx4zzl0lJimJiB9x9+HwKZ8FKE+yAuFZwvEwCtQyY\/RZHQmS7xeFc1H9ZsEW+T2ObcdJcXBBbgEa0EsEQf1Kj9dMBTTxgdngk3c\/HLrtOpnqIcPecdP9CfNicgQCf\/wlGIySSTNlBxiBxwj8UthdlE5YBM5snGYJokV77exoUSXYIrln4i9QwEf1OikGM7Zf7hQdQ+Cu0S\/ObBfJ6YITybh5+CRxEXtsItEotzgf\/nYmUVWnKBf+ElrwEZPkkz8LdDrLr+4A54LcIBBNXFLCTLkGLSvlBtNbEBKmIUTx9s4Z+yvwEge8r07\/t\/sbKwnsr\/bvderKjnBoytfaPwd5H4Fg85uvfvF3yFqDHMgjDy0JUyuXda+S34ip5XQE5Ok0CdEQAurfheKgHKDMBtccFE6UnTXZYL\/F6SnXnis89\/XPg1U7p8Sf44T2OUNy1sicCxW258yxUQE9BDjb0L4z15OFagcImLrPyWHum9oj5eMosjiqfQZoKu8cpupi2eDhVfv6HNBPSV0bLn7W9DVnp1zufR+kC8oz+dVZJ\/DupOUlqvjM4q5lk3wJaIw5GH3FESyz+NyDnQQfBn6JkOm9KPNgDcmGUxPddxdRGFDwTjBwKsCUGX\/1BUoLf\/93ohwcvakwzRT4pS7vuoGv6DYzabkhIIauGZQe1roB5sAQdR5O2IOZTkVx4KJDhBhZuZZj7nk5f6q1j3PbiAqlUo73Xvz6Ti45lkqPFa4Tn\/EyPCAuZ2\/iaKXyWpt+jAm8xIz60vYYYc+0SGJCnboV1r2i6HZmUL\/u7fWNYjuFvcRXljetIu1VcoG1LI2aXCfLMqZSymH6uzCIQRYls7k1B4cTfdvOuuIw1+8gtKPdx2jNfe3zYLnPKeLWILLPqeRZo5r2LEB\/jR4Ny9EbiBvFsJfUsw2NO\/O0hGfDDnou44u\/z9HTr4agueyRcnIUWdhtA2NOjbDGybUgG3zm5ikBQ47tFFIub3r8dbG5DTUUgasCO+ryofcDli8xa+cHr2vb7JIl4S8On\/JZgMpBVsA5\/2J9CXjCFP9qtSici+pXz6I5P+sv\/4258sXZ1OuRMAu93itYO0hN1Nj+kQ+FSfSicZtdnyEzMvj+ya8B96acI4E7e1QQVRmROXeaTMWssig9bFZR+H2yHhMqc8kksxhZBQRgRXi9pweTCTYpUswIw7hIR0NQRuilBWKcD+2acBybJecD5g5+0uaaDD3LZPnhJIjktoSjJGEXpFF3CIxBdAgc0aVopZhy3COPL5cyyUU1usq\/Ku1V8se4uB4018niBK9cz3l9F\/IEoiiZTa05Ac1JdjgRw9FUv3nqxFzbIzb3Nc+DFTynJJmKwD6nimeNatozNssERnG0n6QX4Wrrn5ZtGLozt2SObGrDNFNLLfjSTN9ZrSTc52jpN6vP1N\/nsUfKy1Fkcfca6bxz+BAr\/Hw+BqmEj83qGzlGIwkdPe587bujrNYxRBUM85+sPSu3eKVcRkSSzHdOlWHDb2osKz8+NJMyKw9WsqKczHgfFkeohYgcrVb2UzhJWZOKy+hXbrx6AuLURJGsPMnxdrwz+\/v4tBMXbzcCEk4+QU620DgiIb\/pkC1H\/iU4d5pJzyVOD8sR9CHvPo7ckqR6Q09KIXz2zYIQUplqra2\/8RJiQYO3nUmNRVVIIqcQ\/83Vy6QyyPkrMURjRbmXFvFRX9gZb4V2TVx1FjMtLFht6d8ot5BLzCtcO6OgwPPDxBZ06pqSP72d4m1yoYtdcWqjRpkMLMvkUqkmjnYtc3uVovQ7av3KqFxznZTparTL5vpdyAnawmQ2suYgmhPRM5SRfnNShvlmR2zua50Hy3hOUbeI7H2OybOGupxyNatpzzgYIvZhGXqjWfyL8DiNFLW\/krEOHdvQuTPnAxljHoVz19oyI8qvbIllTrzP0dGvFpJ57JFycxRZc3tB0Ey6BwV7CyOXbv2Lt4iZPSNjNvfddbDOMZwoFP0neOWnZQLFVub2rJHsynjC5OicwxDwK5rwrWuxKJa1d7wPu+183eOCis46QRauweFcVv0GaLAgQk+hwToW3AIHN79OmBGXuhPSTuyEQ7cgPyFiNuPnUf+ss9burJ09JlJ8Yb7N8EVzWe1OTa6A94\/VFz11C\/SVnB4WV+YOLfs\/8JMluRfQIIpAFQ6fFVLr3N79FvYHLM12TgfABccOeIhQcWNqpn0xgG4FNFm6IosbSEEHKzCReREv1oLoZEgmtB56d8JVtw6XZkWtDoKYQ9luZLIePvb77G8CmtirHX2ooVO3dOorSqDF3hHyAWdJAc7a8ATkdGRwqcwSJb\/fl3Cvkt9gR65lzXWy0njh13i5U8hqfRcKgtmQzPI4G1hzghAQiTOUgX4LUpVKtyM299XPg2U8p6goPKiTvc8pwVlDdt2opD1zTOYx7yBRKNt01cPT9WxWq7aGbWjdmXOOhPCjcJb6qKPOca0FSEplXubNt1waZrg0K0bm9PscDf3qwWhoj4SFyM9RJD5Uzlu4vzy\/41yg9EH98zOTK\/vYav98d5p2bRFhXsrv+SR\/U9n44tNs0jlxSEpaMrStse8E2aXg4+kuugCt49tzEyM564xBmpDZ+bXdHmjfabHfv1jjVjThW1cTEg1nG3gfBqlZZgFtptw+Vq7VPLlUJYdMQq1a+g3YJqe7LDWR\/wed6JxbYDBR\/+bXd\/lwizhEfoBVuxfrjkljh9xD4IWye\/nr\/f7B4f7yFGTNmZnt7Jw5s8+dDjvt+bGAb3N4Ahztx0HzM2029+3h2gaJRtpYPTJHzpmaHhYbMA6ZjYvAw2Xhnp2tkLPPJ5YPfVLB1nGIsZANbWfWzofElOu6A\/v93ppg3CqQXmJf0Q3wrzp24nsW4eL+AuxkhmVdMhZytNg753xFBysTz2yrTvQuDOfymT0qfgMHE3nGn\/tnvbVZ5CGub\/28HuEHA\/0eNwNfIMue5eDsLwJgZtAOM6GQKyjEAr+\/\/NyZUJ7M2DBCdf9+Ozk1MTnlzkGwJbe7R7ZL5mWOvJXRqZsN58iUmNs7booP9homIHMSM+Wy1QPryORSKS5RDiWL2qvkMBRqMoyA5jpZaUDxvuJgxTthOZs8tkqfwq7P3AA1vgvmhJBsyYzMCjhrrjkK4UQOMpr9SsJbcPFRm\/uK58Fizyk52Uj2Pqf4s4bsulFJe+Yu+thhwTunwJ0GHFH9O4oI635OhjGkzarbht6deWTNca7c++wQWozHJVvBYazm3XeWoUuz7IYMlBC9z1HXr66QZvZIWIqkZDlSPw8y66wmcfW4WXkCGo361kMQcnSXQq\/RWN3qIh58W3i4ok1K88O9vvTT\/EgNR6iw+NGdG2lidiKn09gcRULyJOc9QtVlnqbaQMcAyL1bjxi0wGAjum6epAufCTW4phLtIR5wWZylZZbJQcXr14SO7N7VZMZ3vmHtJuKsJ7Mh\/aqNV3JyBZxjje27aN2EdSxs4Q\/4wjfuowDOD7Q8ujaMjTbtS1Jvxi+PGOeshTo8NG7WZ01YobUoYyX0BUhnXorVgqROkSRomJktc4K5eIpNhCQFfcSMdjEazhSJDfz+qItCfJLtJFAiHkjCFxOPK177D8dbrbrA\/ibZ8AYyfz1d68wFBjKKDRL45GGDFJj7eGsUmSb3QjjH6fHuZDuI\/UpRFV9XyKRhkxZdr54+6tQVXR\/iJrtQvxiBpI3iwGwyYWPsgxBaGfg5mPkBtYca+01x0dOwZ9XF1oCOlPYqnF1J6teAzA5co9avgpEorpPZG5Xsb5mCtHE6Tf0aJn8Hs7Z5\/OHXwHjVvgv2PFJbN4qV2dudyuHs1VJec7JW+IzvnXK\/asacfCYV3vyr2YZzDZJ9PgrvN5A2gwmClllfbPQlldy5pSCZZUvcUhDdbAiMlz8PFntOEdtvOGMOnVmyZkHqPsefudpnDZ1JkaXrmMtJAf2m7vnVDtTZy2zqmpM5B+MuQEJ3mJkHwtBcyMI2Yx4lXxoIr1ryUGvKrGobmnfmKdWnW\/gCIXuRFN5QZRtkelMgc+IBtoEvH7JlFjxdim34E+9zFL9l4Z0VvM6PMctM2DX2dZHuyhBRBJN\/fLEHmwO4AcF2MA23Dyf3d1e99usebyJpF1IoKE8ivjtzQaMCHgLwrvkjmGCTm5mwIYDZcnz3ZDzcBLqtvequQnfTiFjJFgZ+YlvI02V3cQTiuQZjgvBmx7lr5tCuT7eO7x5ywrk6+g1CXFePIqmJmH7YOgZTA6nKvkINc2\/WFrowidgWgVvxfJP+cNWbi1p0bf384f7oZHsLPuRJ08Geg93csrINxga5XiY+c8bLdw0GuX30cP8hVgvKUqKY+uZ30ZAOvl3MQmDFUjnz5UFlLW+9SlDQ+KtvYeolW0WWSKzD2txrNoXZEg3f05g1s95sbcOyGWY2UwbNqVhbaO9dfgD7ZEtH+APNzBXGDsYZDpLT7LWC1Z25b39A+V2v+zmDuZ8asllLwRm+wvBNZB\/iOCLc8cX18ye761TDuOPj84DSEKq4a04Yb9ekk2TWqVtB1eYoMvfGM7kfdkkBc5DfSLt7s9hvSo4i5990AXuV\/AdFPXgfFL11srI4wjbP3YFHz7mwvNdfvjA8NLXvgmEhJJszILMazoprjnI4kYeLYr+SsJakuO4eqSTDEBZD9jxY9DlFeGDSBYX2OcWeNRTWjUrac+Y5ReQ0Km0AI1dB1TY078z96hhwODzCpcr53gZOalsejYDM5wlugg9XP2Hi\/UHILHCf41yMFLWPNbBH8nEcA+fVIEAdWB9AY+XRPYGz2hwl0cAGQB0RAoQAIUAIEAKEACFACBSOAKLthqdqeTyFKXyIJAAhQAgQAoRAPggAf7LH1wSvg9NzNucjAbVKCBAChMAIIUD79hFStgUpIfx8BBCuHcraMEpI5DHWkkQUmRra484Ph15bzc8XTDVL7RAChAAhQAgQAoQAIUAIjBQCf7\/30mSORirKkVIuDZYQIAQIgTwRQOFEjW3Dkdx5yk1tEwKEACFQUQRo315RxamI3T\/5NUj\/\/NmcShNUJxmBoXIU9Xe\/6fhHetqQkd0TAoQAIUAIEAKEACFACKgg8Hi6+3bfrTj95dK4ShtUhxAgBAgBQmAkEZAiChtJhGjQhAAhQAgYRID27QbBLH1T\/Yu3G7eelBQiYl5fQ+Moeuzvdr7ybaW+9TMRaJq3FmqRECAECAFCgBAgBAiB4UcAktItebvKxvaPw5T7bfiVRyMkBAgBQqBgBC5+O3AloHCiglVB3RMChMAIIED79uFTcn93fuzZ87HZ+bXdi9P+Y98ZIfzjrDMzueI95rNax8Tsal75FXcUAS8hmA77OzWxceiFnjVPfkpNB20eRmqRECAECAFCgBAgBAgBQmC4EKhPt47vrujt0XBplUZDCBAChECuCPSDgNTmd\/QFyRVrapwQIAQIAR8B2rcPnzHc3O5vrCxNTk04N\/\/wj2X\/5p8d0\/Yo40wOSh97+vghh2YH1SROYGVZjfr0v75482Z9rjao\/qkfQoAQIAQIAUKAECAECAFCgBAgBAgBQoAQIAQIAUKAECAECAFCgBDQRaB\/cXry7rdf3v9h3V57KWbsNqcb9ZdffvHqFd3860KcWL\/ijqLccKGGCQFCgBAgBAgBQoAQIAQIAUKAECAECAFCgBAgBAgBQoAQIAQIAUKAEBh6BP4fYOgiORX+xqAAAAAASUVORK5CYII="}[/IMG2] R2(config)# interface Ethernet0/1 R2(config-if)# ip ospf authentication-key VnPro123
Code:
R3(config)# router ospf 1 R3(config-router)# network 12.1.1.1 0.0.0.0 area 0 R3(config-router)# area 0 authentication R3(config)# interface Ethernet0/0 R3(config-if)# ip ospf authentication-key VnPro123
Kiểm tra tất cả các Router đã đi đến được các mạng của nhau sau khi bật xác thực OSPF.
Kiểm tra bảng định tuyến R1:
Kiểm tra bảng định tuyến R3:
Kiểm tra bảng định tuyến R3:
4. Cấu hình policing cho ICMP traffic là 8000bps. Nếu lưu lượng vượt quá 8000 bps thì ICMP traffic sẽ bị drop.
Trước khi áp Policy, R1 ping R2 để kiểm tra:
Ping thường và ping 200 gói size 300 đều thành công.
Code:
R2(config)#access-list 100 permit icmp any any R2(config)#class-map cmap1 R2(config-cmap)#match access-group 100 R2(config-pmap)#class cmap1 R2(config-pmap-c)#police 8000 conform-action transmit exceed-action drop R2(config)#control-plane R2(config-cp)#service-policy input pmap1
Từ R1 ping R2 theo 2 cách đã test trước khi áp Policy:
Kết quả: ping thường không xuất hiện rớt gói, tuy nhiên khi ping size lớn xảy ra hiện tượng rớt gói.
5. Cấu hình R2 để lọc (filter) telnet traffic. (CAUTION: vào control plane bỏ các policy đã áp trong câu 4 để tránh bị lỗi không cần thiết khi áp policy trong câu 5: no service-policy input pmap1)
Code:
R2(config)#ip access-list extended 101 R2(config-ext-nacl)#permit tcp any any eq telnet R2(config)#class-map cmap2 R2(config-cmap)#match access-group 101 R2(config-cmap)#exit R2(config)#policy-map pmap2 R2(config-pmap)#class cmap2 R2(config-pmap-c)#drop R2(config-pmap-c)#log R2(config)#control-plane host R2(config-cp-host)#service-policy input pmap2
Kiểm tra:
Trên R1 thực hiện telnet đến R2 để kiểm tra:
Kết quả hiển thị trên R2 đã drop gói tin Telnet (port 23) từ R1
Thực hiện lại câu lệnh kiểm tra show control-plane counters, kết quả thấy có 4 gói tin bị drop.
6. Cấu hình để lọc non-IP packets (ARP).
Tạo class và match traffic
Code:
R2(config)#class-map cmap3 R2(config-cmap)#match protocol arp Tạo Policy map và định nghĩa hành động [I](drop)[/I] R2(config)#policy-map pmap3 R2(config-pmap)#class cmap3 R2(config-pmap-c)#drop R2(config-pmap-c)#log
Code:
R2(config)#control-plane cef-exception R2(config-cp-cef-exception)#service-policy input pmap3
Trước khi clear bảng ARP cache, thực hiện show arp để kiểm tra các entry đang có:
Thực hiện clear cache
Code:
R2#clear arp-cache
Kết quả trên R2 xuất hiện hành động Drop ARP
Kiểm tra lại thông tin trong bảng ARP