Xin chào ! Nếu đây là lần đầu tiên bạn đến với diễn đàn, xin vui lòng danh ra một phút bấm vào đây để đăng kí và tham gia thảo luận cùng VnPro.

Announcement

Collapse
No announcement yet.

Lab Control Plane Protection

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Lab Control Plane Protection

    Lab Control Plane Protection
    Lab Control Plane Protection

    Yêu cầu:
    1. Đấu nối thiết bị như hình vẽ. Địa chỉ IP như hình vẽ.
    2. Cấu hình giao thức OSPF đơn vùng.
    3. Cấu hình xác thực OSPF dùng password là VnPro123.
    4. Cấu hình policing cho ICMP traffic là 8000bps. Nếu lưu lượng vượt quá 8000 bps thì ICMP traffic sẽ bị drop.
    5. Cấu hình R2 để lọc (filter) telnet traffic.
    6. Cấu hình để lọc non-IP packets (ARP).

    Hướng dẫn:

    1. Đấu nối thiết bị như hình vẽ. Địa chỉ IP như hình vẽ.

    Router 1:
    Code:
    R1(config)# interface Ethernet0/0
    R1(config-if)# ip address 10.1.1.1 255.255.255.0
    R1(config-if)# no shutdown
    Router 2:
    Code:
    R2(config)# interface Ethernet0/0
    R2(config-if)# ip address 10.1.1.2 255.255.255.0
    R2(config-if)# no shutdown
    R2(config)# interface Ethernet0/1
    R2(config-if)# ip address 12.1.1.2 255.255.255.0
    R2(config-if)# no shutdown
    Router 3:
    Code:
    R3(config)# interface Ethernet0/0
    R3(config-if)# ip address 12.1.1.1 255.255.255.0
    R3(config-if)# no shutdown
    Kiểm tra: Router 1 và Router 2 ping thấy nhau, Router 2 và Router 3 ping thấy nhau.





    Lúc này R3 và R1 chưa ping thấy nhau vì chưa cấu hình các giao thức định tuyến.


    Câu 2 và 3. Cấu hình giao thức OSPF đơn vùng, xác thực OSPF dùng password VnPro123.

    Router 1
    Code:
    R1(config)# router ospf 1
    R1(config-router)# network 10.1.1.1 0.0.0.0 area 0
    R1(config-router)# area 0 authentication [I][COLOR=#5b9bd5]///cấu hình bật xác thực dạng plain text cho các interface trong Area 0[/COLOR][/I]
    R1(config)# interface Ethernet0/0
    R1(config-if)# ip ospf authentication-key VnPro123 [I][COLOR=#5b9bd5]///cấu hình mã bảo mật là VnPro123 để xác thực OSPF[/COLOR][/I]
    Router 2
    Code:
    R2(config)# router ospf 1
    R2(config-router)# network 10.1.1.2 0.0.0.0 area 0
    R2(config-router)# network 12.1.1.2 0.0.0.0 area 0
    R2(config-router)# area 0 authentication
    R2(config)# interface Ethernet0/0
    R2(config-if)# ip ospf authentication-key VnPro123
    [IMG2=JSON]{"data-align":"none","data-size":"full","src":"https:\/\/www.forum.vnpro.org\/core\/image\/png;base64,iVBORw0KGgoAAAANSUhEUgAACLgAAAArCAIAAAD+YDQ4AAAAAXNSR0IArs4c6QAAMixJREFUeF7tXT1PZMfSPrzS5vsb8LBX7L0RAdIMEhkYWCH7SsapRxYaPAk7EtoAy6FlghXSQDIGIQunF0u2hRa4kCEBEgGRveiaMb9h8w14q89n9fnsrzPnnJlabbAL\/VH9VHWf7q6up8aePn6w\/D\/93szk5rX73+bJx+5i8DvrtP186cD\/\/3T3\/vx1Df3asvq78xMbt+6P6lsPl23+91zhpP\/gRhrbd1fr49nVOLEtS7xrvmLr+G5vAXd3sfZsZd\/rPixMKlZ2JVw9DCYalGCxFBiEWwiP98Pegt\/s42l7CukXfp4ic7ZOskoIy8w1pFaLlwWDkGoqyBQ9KM46Y8uHdnOy4AhLbsquAlEta\/XoqTeXpRGt33Nz35puHZ8j08pqGYsa0kjKr7Japd8TAoQAIUAIEAKEACFACBAChAAhQAgQAoQAIUAIEAKEACFACIgg8H8ihZwyi727bt0vftv5utfHlfu9r3wvkWU1vvhUwUsE7dXW37S8Zq83dk9F5Ku1r46bDb\/kzebEs\/m13Yu+J1+\/\/3i621ubfT727PnaGWqx1v55e9r\/\/\/7y1AzUsv\/fP4PygZcInE8\/i7isRKQtsEx4vPNrZ4\/2aC\/WZkNeogKlzLfr023fFWq1vk3zZT7ce17P1VeOx\/T090NXOO8n+cqq0\/rCK38eWQcrM+1gOlj9x37\/4vTMNXWdTvy6tfUf8eKwv\/x8pt077dvWxf6wHnfa8zPPInMQfrnQPVn1piFM3lmoaFfZ7cy4bjn4b\/NEyfFsZHTUCCFACBAChAAhQAgQAoQAIUAIEAKEACFACBAChAAhQAgQAkOMgISjyLLGX18eBbfPcKXbvgig6f\/PC0ViP7vemAKvTPzfWd7DFEZ37k3gvDn8fte\/a07VwkL36n6rhfxY+xsrE5OuABOTU0sbm\/s3MS3U1s8fkJPpGmrZYk8sB+Ubq4rRUSW0G7jQDy7lrVvwjTEdTa444DQCACEw6x8TJRyApkj93vd+VFx9600QUBVt9+I3r2Rj8hP7149\/\/ekW836iKU2u1fE8sq4PgukwNjk1MbmytPz2Hefp1RQGFoe7E+R2vT7YXJr0FwHWY+fgFi8RuL\/F3jn2FS2xmTs1sXHolq83T+656EZNWak6IUAIEAKEACFACBAChAAhQAgQAoQAIUAIEAKEACFACBAChICPgJSjCGrN7R03A\/ggUkHQkSMDOY5OuN74ZkfwOrvW3rv88HB\/1F2d5hwedteN+nRjtdk9vov6BmrgZPoId9xNKMOJyapsndx\/uOqpcOjJjHiQZcfhUv7hGJxqeLDeSH\/aCgKzBinUgPp63PnaDyea7v6UqtZ+\/w9Xqukvl2xCwv5\/\/+P6Gr2fDEhsxW7ACfqUMB0ssO36yxeKDSdVG1+EHu2pBNYVNiTWY7O1DRMKCB5jWgCzdKXFv6wDi93dw2V3US0+0fAAqTlCgBAgBAgBQoAQIAQIAUKAECAECAFCgBAgBAgBQoAQIASGEIExLkdReQbIZWqJyYdUHkmHShIMe\/6JbQYL3ePO7FTHiyoTTX81WBGpN0KAECAECAFCgBAgBAgBQoAQIAQIAUKAECAECAFCgBAgBAgBQmDACMhGFA1KPEg7dO9Ht9x2Jr1sOoPqfzT76Z\/86pODtT6bGx4Q7CRMgZdo9ehqCDJODY96aCSEACFACBAChAAhQAgQAoQAIUAIEAKEACFACBAChAAhQAgQAoUhUFZHEQDC+4pYNp1Z5i4SJKIrDNHqdty\/eLtx64nf\/Dwtf09lBtlnLqJ5PwkTyM1iiXpD5AOrjCpIUEKAECAECAFCgBAgBAgBQoAQIAQIAUKAECAECAFCgBAgBAiBMiJQYkeR4yuClCerXjadm1twF00865yWEclqyNTfnR979py53HYvTvue1w3+cdaZmVzZ9wbROu4uVmNAaVKetp9PwKBuPO9XvckyTlEsUfU1SyMgBAgBQoAQIAQIAUKAECAECAFCgBAgBAgBQoAQIAQIAUKAEDCFQLkdRWyU4yzLPbiLtrdadc9jZGr0I9sOuNw2VpYmwev2nPmN4B\/Lhx7p3HTr+G5vKMKJXPXWp1urW+AierrsLtZGVuU0cEKAECAECAFCgBAgBAgBQoAQIAQIAUKAECAECAFCgBAgBAgBQiAGgbGnjx8ImBFCoH9xevLut1\/e\/2HdXt\/gcU836i+\/\/OLVq\/U5cqaMkD3QUAkBQoAQIAQIAUKAECAECAFCgBAgBAgBQoAQIAQIAUKAECAERhsBchSNtv5p9IQAIUAIEAKEACFACBAChAAhQAgQAoQAIUAIEAKEACFACBAChAAhMMIIlJ96boSVQ0MnBAgBQoAQIAQIAUKAECAEYhE46zACYefvbK9PKBEChMCIINDvzfhzn9L3VlnpkFLXW8bLmoa5\/3i625mZtfMc47+z8zOznbXdxyrDT7ITAoQAIUAIWBbeVGQdKNy0997nYO2MABxCBMhRNIRKpSERAoQAIUAIEAKEACFACBAChAAhQAgQAoRAWRG4+O3AFa2xvb5YPin7Z52ZyamljcPrm9uwdDfAY3+4\/8t\/6Y1C+fRGEhEChAAhQAgQAuoIpDuKHndm\/Zcj8zu0Cwjj\/Ng\/6+204TVN6InN\/Ey7d9pXeF+DAX8+KN+s80oIFC2lYjb2tejA2cOii1PTpmLjHPOUCZCH7uR7KwRnsB7lftV0pLou9C+YVfNPxtbOHiVxlpDZtH5VBy5Wjx2ZEDj2ZE+oGbz1LusjQbEhF1kKv5cPvWT0\/9u+KFJC6psQIATKjoDE96jsQxla+eR1ZGavogOovMw6vQV1R61fM6hRK4SALgI5rDn93bf7rljN79bH4yXMoV9RKPq9r5YPr73Sje2jh\/sPkN8a\/j7c350cb7VWm61\/UnZjUTipHCFACBAChAAhUAkE0h1F4y\/+6Y\/i5QvaBnAqhUv\/qYnlzc4BvKYJPbG5vT7YXJqcghtkqbv1\/u43nZtBmQ1sOsE\/xG5anVdCMv32wUXExr4fHTg8LNpY+f5EwUmWIsDFW4ZzzFMmQB66m5BzcVkDxRkNS7pfHR3J6BOXPW3Pj02uMKvGPwWcl6cmZjvZLkAVmQ3rV3XoQvUAnwl0ZII69mSPc7JCAO\/yodNo67hbwkeCQgOmQoQAIUAIVBQBle9RRYdaWbFVdaS7V9EBTFVmnT5Z3VHrVxcvqk8ImEQgnzXn4u2Ge4eQFE6UT7+iyJxubyIv0d3V+lzNuw6q1cYXF9p7ve5eb46uiEQBpXKEACFACBAChEAVEMignpuYnK7CKIqVcbqxunVyf2e\/r7l7OG42PHHgBnkii+ExEB3e7HibxfzG0\/cfJYEzAPxDCj2xCHRwETk1p1v+2yJ4WLTdbNQVWhStAjh3j+8e7HdMT\/dH3aCv207sTX1swwPBOaZn4X4N6EgU0XA5oMleOvC8nnWwat6kbw6XJuMjY4zIbEa\/qmMXqnfW8fFpHd+BEbZcI7ztfB3yCj\/ufO0erhrbd3sLQs1TIUKAECAECAFNBIx8jzRloOrpCGjqSHmvoqMXTZmVux61fpWBooqEQH4I5LTmZIYT5dSvMFCPf\/3pl53+cikh4Em4OSpICBAChAAhMAQI1NbPndBS5y\/ddA2BTqNDCDuKgIVsrd2JoZmq\/2PCrg0nFiAcm5ntnaLGhPJZcVk3hyHp7otvj06Ojx4+nl\/12os1Z\/M0XlvoXt1v+b4i62bzrVB2r+BaOU87u3jLB4s06tOBqCId20ESnntpunt\/vue\/LYKHRevdq0u2WFwlxc6LdBFTZm7PXoMA59cL4+6rpdrc68s77Cv6j1AY02Bwjo5BvF9tHSmCbFnMC+JVrm89XIJVeyZ93PR+cbgU4\/vUlNmgfpUHL1Tx9PdDt9zq0d7CuFWb2\/vJm+w3v75D8YNB9Fh96+f46QDkjRE2RVhaU4jsAhlTksrOr7V7O2dxfIxZHG6MyDGp99DqnUQB5\/5cisRSCHmnUOs42JHg3clTb06iFemiF2uYaTAtZy9XMiblb7uzk0nhmKWmMRGePTvtMPtSx6cd5phRURblJL5TPK40EkX3QjNgrHWpa8G0ZmDsQBMqFWMrrSnhClkgp80F4U6oYEEIaH6PCpAaz8GZhBUGbbOHgMhUT0fqexUd5erJrN7zqPWrjlSBNfEUDn\/6w1\/hRKoJgW9xgUMcnq5VcM5rzckKJ8qrX3Ft\/v0+YBwhapkY3LgbMJH9eUwbOudBp7lBnVOyNs949QttZgzucwo5a6isG+LzzGxJ1TO7iI5QmfBeVGcu6NQ1C554a1WUWXx0o13SxH3OUCAYchRd\/LZxuH9wyGimnrHsL9aLl+4wgYOO5aR5PjG5AoRj1ze\/\/pV847P\/e0zGiP7JryrxK+VFGQKu5+BvTLR1rf3daiD3\/g\/ZBHTSpGSqsLwEKuHVZhf8WzbF8NXlj1\/KxADhCPTW8fnrgkPNx19\/2\/SRuBbIpTkwnEP6kepXU0eqpvG488OhV3e6+1Ob0+1C98Q36TjfZz4yS+tXdeyC9YJ8s63PPM9ErfYvt\/bte39JPOtMuNGBzZNLHkm7sJ3lCMgbI2yKsLQyIrvnM+3EzFt9xhiZklT2dv9gs7O88lWaPyN+vIzI0eldvq4gglUsht57MvFF1pn4YTLlHna8b2tuHpNHSDA2ZqcdZl\/qkChO2uGNzaWvDWcetlPWse2BzcUaBgBMi419Y+UrIXd+8WZCc6F4HWhIkM\/3SEMgmarXG9+MQkJQDR1p7VVkVBEuqyGzTrfWqPWrBRZVJgTMI5DXmpMVTpRXv+YRohZVEdA5D\/p9Vu2cYinvc4bsrKFqNVSPECAEikNgQPc5xQ0Q9cw7is7eeQkVoYid\/WX5fdemn+r+uWnnpPGr3qYFcBy8jRx0H9\/9EkrkU4rx5ySEHGWfMCmZtrRzrxmVcPc1+LcUfDz93vco4uRN5di0Boczryi5fvV0pGwiZ7tBfqz6v19FzGPxs6bfdsT3WZDMyoM1WfGTl56r9Y+\/nNRcF2upqYngBQrKcmSTN7pZYX0iO8h7tBLLWsnq+oyRdfD4ekyMQVJZMbLQ1SMUkXP3AESOq0HF642ptbQ4yOYJijXmInvcnxfuQjao4MiXiw8dS+4JAi69+Kd7oCTdatV9hO1vaxIr6UI3CunDtpha2SOyKXDVeFIhalCgRQUtAzuoQWy8pmyTDrYHjXrT42IFjlA2dmxdOfSv16TWXNDrmmrngkDVv0dRItNcYCq0UQ0dae1VdAatIbNOt9ao9asFVhkqA9tw3L7I2w\/EPR4qg9gkQyICea05QTiRtfoqJo9pXv2SqsuCgM55EI1hgOeU8AkFM7ugU49DA5PGLqOyz6n2WaMwoxupM3thKFPHw4uA6n3OUCDCO4oWug+QaQautFan3WQzq2\/sqJHxV184F1Xw8ybcbMI1UAKfkoNKxI3U\/+9\/Iq+MQwBCJKnLlhMmrnHomJxLWPzncQeVTH8FjyIl86JFwpLV\/Egs+OnN\/x7SbAWRktW3uoIXgkUYHxdO9G1MnISgUBGKBkM8Kv9Md35p4awhs1a\/gpDqFwtI1Syr8cWnMW7EhVctvxvRu3J9uVALGfq1NHSkI2dAy\/CvF8A\/CYvSiuNuj09NxHkNPfJGu3wNiOwu73Dk1kSYxACdKi2IVQKPr8fEyKo7SWUZYyws46nrc2i849D169550LVlicRB6qBWmboxX67bznZMyGzaiGpASdreuzx\/4llJI\/rVQwW8RJNBzmFrldGiBtSgQIsKWgZ2UNs8Hn6Km+NK\/dvOS+SaOr67uux6XKxgl2zsYF0sgR+YZTLBfUHzV2kuYFYH1+HnsEG6VHsO+Qbw1yWEhsRRR4rSTjKB4U0lxI2Fuht7Bj8B9shUekObkzAipwAjouWSGcYQKs4CX3HsDs3HVqeuklFWvdLNpkJIaDBomyAaaSqL0VTXngcKdwX2KgPFY4g7k18nOb4d+2QBKx4slZj8DRZJIEEtC2wcvUlA\/gx7sGXua+JO58yst2rjVfsuqK0bpnQkJ7MWzjmtOSgKZLq7EcOfnFO\/mbbPb8bcE41d63Apnnc6stVRs41AMrm5jwigmCQ274IzfWCyO3dHbB3wv4nA2ZAJwiAKaJ0HkYAVOqdgWCX3OabOGjKa1Vo3UEdy9iwjIZWtOgKKtiF\/Zx4CKnoYtLdGKXujDNrJ1LtcM9\/9GJkZAQ8ceYIPk6Er5SSzkr7PkdevGazs3a\/ieZ8bfDhHkX\/byJLNwHXSxieuzSz9CLc8T5CP57ILd09wDZQekRLi58nknWMfgMkVly0n7FJy6JimIq4gYWYqHArjur7yXVn6f70POvDSO8V2iUnJWt+2X+Url07rAe8W+AtfKgQk6XSeUBdvowM2sLjCReFcVL+SYONspZbt8Ij+CUJnwBMc0KxJ9iRVXFy\/Us2qFp773OPfC9g1+\/0\/3ObYpMhKTcSlqmps\/xghbxxf7B0FDrlQaGbQlxX\/\/NAbGCzjChN0cQMnV0t3b6tCWLV62DseyH7wDqfokxhTrX0VpPuyrJjQW4nG+KJ8FjTwEvXiaFHtOsw83KR6yt15FQOWRfYT4CNlubvi\/7BOVSJZtWVUaEBuLtiBXLB7CXHuAX9ddJ10aEbswnyMdUA7mcpV27cp\/pY34yj+gPQP2COB3nA39m0Kuz2xOQkjctqMiLPJ22tvgEBmGAbTITOEHdr23\/E469RV0NywVLne2FVbZB52gXmSEUQjJFxGU0g+KgSPjD0LNWiyUEn3KiaHSG159Lzq66SDISy2sOIBGyqGFBbJlIjeSoOvNF7170IIK7V1o1iZhdSd05qDw4mcJ7mhPzn1KzRmw4VkbENvj3TbmXwe8C4wahwgSAAvEVsH\/EEBZ0Mqa4Lh0Sc0p3ceRI1W55wSRkJin1PZs4aePQ\/GFKmXYhBQtg2lO3M0RvaYLHoYdIjE0HvT\/FBR+O6zw2+MzIyAB448+Yma1LLAfY6yfrk+FbCCLbTyeT8y3rCjKCgAZjQ5NQF\/2XNR8OKwf4ueM6EVLuZAgneusbp14vMpQXgTR4gUOTkvrHf9FDtxqVOc4WA3Vbo7wZClceONj89wJet95b\/FXj3aKzOZG76ktiChpZN6ET95g1erg81VjpN8pqOHn+0MEuei+pW2Y5ytNMkLOP4CEpV5fzyaNemeJCqI61eiUa2iAf8eO2Y8WrBIfu19U4Gvr++nJookeXK6xTwSVvO7+Kj8uTdBWCEfvNL\/3wDTvL1PyUKnBWKVKgfecYgPQxFXh98rp3HC3yxLPjgpCT3etE6SvURG4ccE+uC8LPcnTH3kqXPhZnPCDeTyaSQxFwfXK08zAkGHHu0kYyZ0S8KzmERaQrZfRAzAmHySUfwxAskkasEQa+WJw4t4H9BdWjeHS\/HP1WErGJwcGuCD9DgVWWiazSvYqCf1q1NXXWFDUfNwSeHV883mkr2l9NR0d4KC1PeXBbIfydhzETiXcq9SBBBD3KfuOulCc7gEaSDZv6dbzqESljsfNcnH7LmhPbeHiHxxVHfr2KOqw0y\/abR1KuPV+C7wkCiuGwOTWQfnfNacgOo\/PpzIsvLpV8CUF3vY9tCsASaDeN7pVLppGdswNPe5QULWbRyr5\/wuNpe2ADbmimieBwNBqnNOiQFPcJ9T1FlDZ91go83Dns2ZILVUJAJGbEPuztwdLpzL4DGZ+x9owT7TwWEhi5o+hhgffx3EwVT47rOzJJLZOTsLyCwulELJ1PscI\/plUbzy+1hj+zobkyRHkW1GLmr\/eGm5DzHgcyv8CgOxzwVRsR6jXUQfNTtiCRR\/1Wsv+nxKQKbU+zFwBVmHv4UzZ3BBRQl0SejZTn1rEJl1hD7\/AAF+TtKEqz0FKx1cFXxJXX\/\/\/ewUy7PCxX7Bq1Xw684LW4i67H2bXWHMywTD7kTS0CsK56L6lQeW8wIKVb++T3g\/LlQ7o5Ckfk10KdjGQtd3XcNiaD\/cdmpOd7+tvQ1SE8WfmrhAw1hGcrut2tK\/g9teHLxS+wf6eTQPnOAYBIuBM1iw5OCKuWQsjKSLkWXl3TEmBvlyaRyn6QqFzMpI4vO42pX+TIvzFm6WO0Q1ttdjyO6F25IoyPFdJF12SLRX1qIic4GjkYwfCJ+sDu4ur9bdqC+bmTDrEhPe5Lr7Rbt5+Oph8kkWDs8IJIFa8OljN2wA+DFmfQsqLjqz26a7TH9twyVJXj26Ah+ktzKwEDGbV\/Dq8hx+Hh21Tt2yGsMA5VJ89cyuxT01jS+uY05R8awAAvY8QCSCrkq2VykEgyHvVHOdDKNjW7JzqITlDkX0anzEy6wBmfFqfBcSIFBbN4qVOUubuaw5aM+WRHOSS79Zg83x9wK2YWzuw0cQPYJxBzXdPUasCWb23up46Z4HvZ6rc05JwEpkn1PRs4Yxe1Y3M6pZUgT0bEP1zpyBcdpG8TfsTNe2z3RwWOhe4beDuQMn8d2PyOycnT2Zcxc1qYPk+xw9\/Ub6k8AKIumDdACS5\/3YccY6iiAkLTAj4EN7jdiQ9pdTPQGrW\/6lg78LDwJ6Vt98h4ISOIFsMpy4m0lODTFxDFzqlM23kRzs+KoCxpL\/5WeQyh4GmHJnx5GSHUdudgqze4GOGdsMFIMH1PYzPXDqBoFft2AhCYkZBFpOKYJIGyG4zYsih52ffSeSXLEonIvqVw9lqC1yK6rdSbQBVf3mIEpak4u984dj7tkFe9Bx\/6P1g7dmJsZV8IGGk58kdlOr\/Sv4HYpmqH36pR9ACcEok5AEpROXvE0REo4gNJUwU7EDU9UYSRcjy2L84zm6i5C+nJO8oTRdMhnsxCDjD1Hg0xKrpluKN5h\/v8r\/46orsXB9ybnA9nBx1DFcfxw9CFslQmriLzEjzGNcddj8SQSN4T1JNNiR22JFn9k+3AeELY2UVSsOW526wroaroKQqNIjOIWB7S9L021H6R95HsVf32WnZxGy5xLgXtBepQQjH2IRNNdJHpmIJePXNhnpY6uIsdR4tb4LceiorRvFyiyrZUNrTvCcVPCFjaF+ZYdrrLyQbZia+\/ZHcO5z7rrJFmABn6GMjU2pIe3zoNtrdc4pGCbJfU5Fzxqm7FnJwKhSqRHQtQ3lO3OcigWeOIdy48Fjmp+QNz1HCGW++5zMkbAKkBmnf85R5pimk+5zdPXLdSWDlWV8XxcXUdQ\/e\/eHHyniXnpybEh\/\/JWSBrD26otpd4Au+1wQ0JMP7RuWLRpNjD6igwgngkgX3lUbzy4F8ajVIZ2z1ck9frF\/wrZi645vDwK\/zh8wX9bXaVkW+Kj2uOfPEvP8trP8DVwWJ159GMJZWmZD\/UogYaxoqTjHsvSLRi2tI1XEagtd+9m++xeeY0ycfNNx1kz7AjehYcwjkZQIKloVpzkZfw1hB4GvyILsIJC8jSWxz0gmLzDU0POHQfjUBaSCIijYGaJOTxBJF+TKgriuSO46sWYzSyHvi\/flSmYFzGwNF8B3VZaJ6cZxEg7uQgG7Aax\/6qYfGtj8zdaV5FyIJBuDeeouDohOFif5s+L3QtgTGY6f5qtLTc+A4gYWqBh\/XmIIo43UxKS3o7MsRiif7WYIANapm62mIS3xCqepA9oBKQK62F0u\/8LgPycZsZhi9lwG9E0snmUYB8kQIKC5TnJQxqSB5F7hDBvucuPV+y5EsVNbN4qVWd4CjKw5AuFEYcmM9Cs\/XEM1xGzD0NyPfas3kOzUMmjpnwft3ip0TuHRkdrnmD1ryKhJp6whe9YRgeqWFIHCbIPzuRa3Kkp993mny6sBMaYIWk78fY5J\/UphZZne1wEMMRFF7Br0\/qgLpPP1wNlYWwcKOPsnNl9KCoDo0sFOwBAI3fw8nxw8tfU3ienfEQtcWq4gQYPIKObkS\/QKpfGhVYeULGnIka0Yp4XkfFHqSEPeMO9qnt0XB2Sa7LI4IalDUTgX1a86usXXVNFv8VLbO3Xf6Quv9T+1IIPcsyB3F7hwZG5WnRF98hJ5g\/hBMqqoCJOsk6scPEbPbY+RFCyP\/f7FDhA58mlIUvOlHS6hAUKn+G9ebht7TBB1ushIuj4gtzRcXosTokogg7YmwZcr\/UpdovWyFnXJ\/cL6jU0UyWValo01KSUACnOB+YZ\/TnoOggfJ0cgk5YGb+xxHk\/yOXuTgzZ+VVD0e1NPfD4NfyPvzOJsHv4UdyChI\/KhTt5QWMhihuNgy60CfZZTLL5gxBkF7HgwS1MuoIaC5TnJwJaWBzB1T2JOE9kX+f\/Ok5pYbr+Z3IQyi4rpRqMy5G0JCB9LhREUJaqhfQdswM\/djI7RKz+2fhnTKedCq8jlFfJ9TzbOGGXs2MgcLO7MbkX4IGynMNoQDGfMFXeq7X8Hpb1K\/UlhZhvd1thkk5Ciqzb0G0vlLzKYCj2Ttn4T5UiLWhF8vHrxb8y8pknNyoCYeT3d7a5CCAl1UBVx7iYaLr1dwenCcuUEOa\/k5EuMlSmLiqSIpGRdeB+FEn0WdhemhXfKIJtdg98VApvkRJ+LenIg8vC0K56L6NQlxoW0J6rdQGf3Og2ztreMfX2xPTWw4+ZPdPyw1\/TNp+qDUoTnGz9LI4+gip4rtMQJ30UWGt+hgxbu5mJqYXOkc+OxSbn4Lg9ietjlPUtIFCsRFiVNW1rjEG1Zsdjq9ftF7EPzl4t7mH36\/m3ueJIOKGGhTiEmS07hUeMRgJB7MXBCL+sIhOMmj1wgaCwaLZiVyElvREDdw4fNkmxDIaBM\/CniMdOoORvvl7CWUIjU1RFt2BLnmF5QVhsoTAhwCJtdJglYYAYXvgnDbeRWsoswMC4VworwgLFe7NPel9VHxc4qRfU5pzxpkz9L2PDIVjNmG2p25i\/O\/XgyIpl5Pr2rBl3p9atY2pl89OQztkRIcRVqyjb\/+tuk1cLjvRdhk8c6Bo2V+7NnU0sbmPqSgkBSAI2H307\/jcKKc83vjWKLG6tFTSv6ACpOS+VqJf9EcciZJ6lChOE+mGXp4WxTORfWrgJ9fRZ6OYyABBKn61RmvuboB1eTq0Rtr1w8ohHTiT5AV0O1Ikj7I4r6LCcKyNPIQW8MyhEF0HR+BdH2wEvWbpgwaQkUh0xJEiz59ZGmfs+BpniDmPZ+Cz\/nHlUh0RVYHIr\/nE2\/870GkjnAZnB6W5\/DFXzdr+LJht44DTkWkWd+SMYJcmMLQ3D5LzgVhk1IoiJItc9SvcvnDuNdYClKwKizKnGUibPD1PY\/R\/Npusmdap66iuENQbfw1Jgq\/2fyKfNKOVku6VxkCk6vsEIpOSh8FrrENW6nYL+mH1FjtQarAxHdhkPKyvgqS2eyag+4lMm5FzPY7aGUNpL\/yzf0chp14Hqz+OUVwnzOcZ40YU8nLnktxZs9haoxSk2HbULszF7lcGiVUyzNWM3M\/lz1SHo4iPum3q4Z03rnHnVkgbUOv2rePgF7swd5qY5ahRJ3W2t8FnC3uQ28UgZVvOFF\/dx4zzl0lJimJiB9x9+HwKZ8FKE+yAuFZwvEwCtQyY\/RZHQmS7xeFc1H9ZsEW+T2ObcdJcXBBbgEa0EsEQf1Kj9dMBTTxgdngk3c\/HLrtOpnqIcPecdP9CfNicgQCf\/wlGIySSTNlBxiBxwj8UthdlE5YBM5snGYJokV77exoUSXYIrln4i9QwEf1OikGM7Zf7hQdQ+Cu0S\/ObBfJ6YITybh5+CRxEXtsItEotzgf\/nYmUVWnKBf+ElrwEZPkkz8LdDrLr+4A54LcIBBNXFLCTLkGLSvlBtNbEBKmIUTx9s4Z+yvwEge8r07\/t\/sbKwnsr\/bvderKjnBoytfaPwd5H4Fg85uvfvF3yFqDHMgjDy0JUyuXda+S34ip5XQE5Ok0CdEQAurfheKgHKDMBtccFE6UnTXZYL\/F6SnXnis89\/XPg1U7p8Sf44T2OUNy1sicCxW258yxUQE9BDjb0L4z15OFagcImLrPyWHum9oj5eMosjiqfQZoKu8cpupi2eDhVfv6HNBPSV0bLn7W9DVnp1zufR+kC8oz+dVZJ\/DupOUlqvjM4q5lk3wJaIw5GH3FESyz+NyDnQQfBn6JkOm9KPNgDcmGUxPddxdRGFDwTjBwKsCUGX\/1BUoLf\/93ohwcvakwzRT4pS7vuoGv6DYzabkhIIauGZQe1roB5sAQdR5O2IOZTkVx4KJDhBhZuZZj7nk5f6q1j3PbiAqlUo73Xvz6Ti45lkqPFa4Tn\/EyPCAuZ2\/iaKXyWpt+jAm8xIz60vYYYc+0SGJCnboV1r2i6HZmUL\/u7fWNYjuFvcRXljetIu1VcoG1LI2aXCfLMqZSymH6uzCIQRYls7k1B4cTfdvOuuIw1+8gtKPdx2jNfe3zYLnPKeLWILLPqeRZo5r2LEB\/jR4Ny9EbiBvFsJfUsw2NO\/O0hGfDDnou44u\/z9HTr4agueyRcnIUWdhtA2NOjbDGybUgG3zm5ikBQ47tFFIub3r8dbG5DTUUgasCO+ryofcDli8xa+cHr2vb7JIl4S8On\/JZgMpBVsA5\/2J9CXjCFP9qtSici+pXz6I5P+sv\/4258sXZ1OuRMAu93itYO0hN1Nj+kQ+FSfSicZtdnyEzMvj+ya8B96acI4E7e1QQVRmROXeaTMWssig9bFZR+H2yHhMqc8kksxhZBQRgRXi9pweTCTYpUswIw7hIR0NQRuilBWKcD+2acBybJecD5g5+0uaaDD3LZPnhJIjktoSjJGEXpFF3CIxBdAgc0aVopZhy3COPL5cyyUU1usq\/Ku1V8se4uB4018niBK9cz3l9F\/IEoiiZTa05Ac1JdjgRw9FUv3nqxFzbIzb3Nc+DFTynJJmKwD6nimeNatozNssERnG0n6QX4Wrrn5ZtGLozt2SObGrDNFNLLfjSTN9ZrSTc52jpN6vP1N\/nsUfKy1Fkcfca6bxz+BAr\/Hw+BqmEj83qGzlGIwkdPe587bujrNYxRBUM85+sPSu3eKVcRkSSzHdOlWHDb2osKz8+NJMyKw9WsqKczHgfFkeohYgcrVb2UzhJWZOKy+hXbrx6AuLURJGsPMnxdrwz+\/v4tBMXbzcCEk4+QU620DgiIb\/pkC1H\/iU4d5pJzyVOD8sR9CHvPo7ckqR6Q09KIXz2zYIQUplqra2\/8RJiQYO3nUmNRVVIIqcQ\/83Vy6QyyPkrMURjRbmXFvFRX9gZb4V2TVx1FjMtLFht6d8ot5BLzCtcO6OgwPPDxBZ06pqSP72d4m1yoYtdcWqjRpkMLMvkUqkmjnYtc3uVovQ7av3KqFxznZTparTL5vpdyAnawmQ2suYgmhPRM5SRfnNShvlmR2zua50Hy3hOUbeI7H2OybOGupxyNatpzzgYIvZhGXqjWfyL8DiNFLW\/krEOHdvQuTPnAxljHoVz19oyI8qvbIllTrzP0dGvFpJ57JFycxRZc3tB0Ey6BwV7CyOXbv2Lt4iZPSNjNvfddbDOMZwoFP0neOWnZQLFVub2rJHsynjC5OicwxDwK5rwrWuxKJa1d7wPu+183eOCis46QRauweFcVv0GaLAgQk+hwToW3AIHN79OmBGXuhPSTuyEQ7cgPyFiNuPnUf+ss9burJ09JlJ8Yb7N8EVzWe1OTa6A94\/VFz11C\/SVnB4WV+YOLfs\/8JMluRfQIIpAFQ6fFVLr3N79FvYHLM12TgfABccOeIhQcWNqpn0xgG4FNFm6IosbSEEHKzCReREv1oLoZEgmtB56d8JVtw6XZkWtDoKYQ9luZLIePvb77G8CmtirHX2ooVO3dOorSqDF3hHyAWdJAc7a8ATkdGRwqcwSJb\/fl3Cvkt9gR65lzXWy0njh13i5U8hqfRcKgtmQzPI4G1hzghAQiTOUgX4LUpVKtyM299XPg2U8p6goPKiTvc8pwVlDdt2opD1zTOYx7yBRKNt01cPT9WxWq7aGbWjdmXOOhPCjcJb6qKPOca0FSEplXubNt1waZrg0K0bm9PscDf3qwWhoj4SFyM9RJD5Uzlu4vzy\/41yg9EH98zOTK\/vYav98d5p2bRFhXsrv+SR\/U9n44tNs0jlxSEpaMrStse8E2aXg4+kuugCt49tzEyM564xBmpDZ+bXdHmjfabHfv1jjVjThW1cTEg1nG3gfBqlZZgFtptw+Vq7VPLlUJYdMQq1a+g3YJqe7LDWR\/wed6JxbYDBR\/+bXd\/lwizhEfoBVuxfrjkljh9xD4IWye\/nr\/f7B4f7yFGTNmZnt7Jw5s8+dDjvt+bGAb3N4Ahztx0HzM2029+3h2gaJRtpYPTJHzpmaHhYbMA6ZjYvAw2Xhnp2tkLPPJ5YPfVLB1nGIsZANbWfWzofElOu6A\/v93ppg3CqQXmJf0Q3wrzp24nsW4eL+AuxkhmVdMhZytNg753xFBysTz2yrTvQuDOfymT0qfgMHE3nGn\/tnvbVZ5CGub\/28HuEHA\/0eNwNfIMue5eDsLwJgZtAOM6GQKyjEAr+\/\/NyZUJ7M2DBCdf9+Ozk1MTnlzkGwJbe7R7ZL5mWOvJXRqZsN58iUmNs7booP9homIHMSM+Wy1QPryORSKS5RDiWL2qvkMBRqMoyA5jpZaUDxvuJgxTthOZs8tkqfwq7P3AA1vgvmhJBsyYzMCjhrrjkK4UQOMpr9SsJbcPFRm\/uK58Fizyk52Uj2Pqf4s4bsulFJe+Yu+thhwTunwJ0GHFH9O4oI635OhjGkzarbht6deWTNca7c++wQWozHJVvBYazm3XeWoUuz7IYMlBC9z1HXr66QZvZIWIqkZDlSPw8y66wmcfW4WXkCGo361kMQcnSXQq\/RWN3qIh58W3i4ok1K88O9vvTT\/EgNR6iw+NGdG2lidiKn09gcRULyJOc9QtVlnqbaQMcAyL1bjxi0wGAjum6epAufCTW4phLtIR5wWZylZZbJQcXr14SO7N7VZMZ3vmHtJuKsJ7Mh\/aqNV3JyBZxjje27aN2EdSxs4Q\/4wjfuowDOD7Q8ujaMjTbtS1Jvxi+PGOeshTo8NG7WZ01YobUoYyX0BUhnXorVgqROkSRomJktc4K5eIpNhCQFfcSMdjEazhSJDfz+qItCfJLtJFAiHkjCFxOPK177D8dbrbrA\/ibZ8AYyfz1d68wFBjKKDRL45GGDFJj7eGsUmSb3QjjH6fHuZDuI\/UpRFV9XyKRhkxZdr54+6tQVXR\/iJrtQvxiBpI3iwGwyYWPsgxBaGfg5mPkBtYca+01x0dOwZ9XF1oCOlPYqnF1J6teAzA5co9avgpEorpPZG5Xsb5mCtHE6Tf0aJn8Hs7Z5\/OHXwHjVvgv2PFJbN4qV2dudyuHs1VJec7JW+IzvnXK\/asacfCYV3vyr2YZzDZJ9PgrvN5A2gwmClllfbPQlldy5pSCZZUvcUhDdbAiMlz8PFntOEdtvOGMOnVmyZkHqPsefudpnDZ1JkaXrmMtJAf2m7vnVDtTZy2zqmpM5B+MuQEJ3mJkHwtBcyMI2Yx4lXxoIr1ryUGvKrGobmnfmKdWnW\/gCIXuRFN5QZRtkelMgc+IBtoEvH7JlFjxdim34E+9zFL9l4Z0VvM6PMctM2DX2dZHuyhBRBJN\/fLEHmwO4AcF2MA23Dyf3d1e99usebyJpF1IoKE8ivjtzQaMCHgLwrvkjmGCTm5mwIYDZcnz3ZDzcBLqtvequQnfTiFjJFgZ+YlvI02V3cQTiuQZjgvBmx7lr5tCuT7eO7x5ywrk6+g1CXFePIqmJmH7YOgZTA6nKvkINc2\/WFrowidgWgVvxfJP+cNWbi1p0bf384f7oZHsLPuRJ08Geg93csrINxga5XiY+c8bLdw0GuX30cP8hVgvKUqKY+uZ30ZAOvl3MQmDFUjnz5UFlLW+9SlDQ+KtvYeolW0WWSKzD2txrNoXZEg3f05g1s95sbcOyGWY2UwbNqVhbaO9dfgD7ZEtH+APNzBXGDsYZDpLT7LWC1Z25b39A+V2v+zmDuZ8asllLwRm+wvBNZB\/iOCLc8cX18ye761TDuOPj84DSEKq4a04Yb9ekk2TWqVtB1eYoMvfGM7kfdkkBc5DfSLt7s9hvSo4i5990AXuV\/AdFPXgfFL11srI4wjbP3YFHz7mwvNdfvjA8NLXvgmEhJJszILMazoprjnI4kYeLYr+SsJakuO4eqSTDEBZD9jxY9DlFeGDSBYX2OcWeNRTWjUrac+Y5ReQ0Km0AI1dB1TY078z96hhwODzCpcr53gZOalsejYDM5wlugg9XP2Hi\/UHILHCf41yMFLWPNbBH8nEcA+fVIEAdWB9AY+XRPYGz2hwl0cAGQB0RAoQAIUAIEAKEACFACBSOAKLthqdqeTyFKXyIJAAhQAgQAoRAPggAf7LH1wSvg9NzNucjAbVKCBAChMAIIUD79hFStgUpIfx8BBCuHcraMEpI5DHWkkQUmRra484Ph15bzc8XTDVL7RAChAAhQAgQAoQAIUAIjBQCf7\/30mSORirKkVIuDZYQIAQIgTwRQOFEjW3Dkdx5yk1tEwKEACFQUQRo315RxamI3T\/5NUj\/\/NmcShNUJxmBoXIU9Xe\/6fhHetqQkd0TAoQAIUAIEAKEACFACKgg8Hi6+3bfrTj95dK4ShtUhxAgBAgBQmAkEZAiChtJhGjQhAAhQAgYRID27QbBLH1T\/Yu3G7eelBQiYl5fQ+Moeuzvdr7ybaW+9TMRaJq3FmqRECAECAFCgBAgBAiB4UcAktItebvKxvaPw5T7bfiVRyMkBAgBQqBgBC5+O3AloHCiglVB3RMChMAIIED79uFTcn93fuzZ87HZ+bXdi9P+Y98ZIfzjrDMzueI95rNax8Tsal75FXcUAS8hmA77OzWxceiFnjVPfkpNB20eRmqRECAECAFCgBAgBAgBQmC4EKhPt47vrujt0XBplUZDCBAChECuCPSDgNTmd\/QFyRVrapwQIAQIAR8B2rcPnzHc3O5vrCxNTk04N\/\/wj2X\/5p8d0\/Yo40wOSh97+vghh2YH1SROYGVZjfr0v75482Z9rjao\/qkfQoAQIAQIAUKAECAECAFCgBAgBAgBQoAQIAQIAUKAECAECAFCgBDQRaB\/cXry7rdf3v9h3V57KWbsNqcb9ZdffvHqFd3860KcWL\/ijqLccKGGCQFCgBAgBAgBQoAQIAQIAUKAECAECAFCgBAgBAgBQoAQIAQIAUKAEBh6BP4fYOgiORX+xqAAAAAASUVORK5CYII="}[/IMG2]
    R2(config)# interface Ethernet0/1
    R2(config-if)# ip ospf authentication-key VnPro123
    Router 3
    Code:
    R3(config)# router ospf 1
    R3(config-router)# network 12.1.1.1 0.0.0.0 area 0
    R3(config-router)# area 0 authentication
    R3(config)# interface Ethernet0/0
    R3(config-if)# ip ospf authentication-key VnPro123

    Kiểm tra tất cả các Router đã đi đến được các mạng của nhau sau khi bật xác thực OSPF.
    Kiểm tra bảng định tuyến R1:



    Kiểm tra bảng định tuyến R3:


    Kiểm tra bảng định tuyến R3:



    4. Cấu hình policing cho ICMP traffic là 8000bps. Nếu lưu lượng vượt quá 8000 bps thì ICMP traffic sẽ bị drop.

    Trước khi áp Policy, R1 ping R2 để kiểm tra:



    Ping thường và ping 200 gói size 300 đều thành công.
    Code:
    R2(config)#access-list 100 permit icmp any any
    R2(config)#class-map cmap1
    R2(config-cmap)#match access-group 100
    
    R2(config-pmap)#class cmap1
    R2(config-pmap-c)#police 8000 conform-action transmit exceed-action drop
    R2(config)#control-plane
    R2(config-cp)#service-policy input pmap1


    Từ R1 ping R2 theo 2 cách đã test trước khi áp Policy:



    Kết quả: ping thường không xuất hiện rớt gói, tuy nhiên khi ping size lớn xảy ra hiện tượng rớt gói.

    5. Cấu hình R2 để lọc (filter) telnet traffic. (CAUTION: vào control plane bỏ các policy đã áp trong câu 4 để tránh bị lỗi không cần thiết khi áp policy trong câu 5: no service-policy input pmap1)
    Code:
    R2(config)#ip access-list extended 101
    R2(config-ext-nacl)#permit tcp any any eq telnet
    R2(config)#class-map cmap2
    R2(config-cmap)#match access-group 101
    R2(config-cmap)#exit
    R2(config)#policy-map pmap2
    R2(config-pmap)#class cmap2
    R2(config-pmap-c)#drop
    R2(config-pmap-c)#log
    R2(config)#control-plane host
    R2(config-cp-host)#service-policy input pmap2


    Kiểm tra:


    Trên R1 thực hiện telnet đến R2 để kiểm tra:


    Kết quả hiển thị trên R2 đã drop gói tin Telnet (port 23) từ R1


    Thực hiện lại câu lệnh kiểm tra show control-plane counters, kết quả thấy có 4 gói tin bị drop.



    6. Cấu hình để lọc non-IP packets (ARP).

    Tạo class và match traffic
    Code:
    R2(config)#class-map cmap3
    R2(config-cmap)#match protocol arp
    
    Tạo Policy map và định nghĩa hành động [I](drop)[/I]
    R2(config)#policy-map pmap3
    R2(config-pmap)#class cmap3
    R2(config-pmap-c)#drop
    R2(config-pmap-c)#log
    Áp Policy map vào Control plane cef-exception
    Code:
    R2(config)#control-plane cef-exception
    R2(config-cp-cef-exception)#service-policy input pmap3
    Kiểm tra:

    Trước khi clear bảng ARP cache, thực hiện show arp để kiểm tra các entry đang có:



    Thực hiện clear cache
    Code:
    R2#clear arp-cache
    Từ R1 thực hiện ping R3



    Kết quả trên R2 xuất hiện hành động Drop ARP


    Kiểm tra lại thông tin trong bảng ARP

    Last edited by Tín Phan; 27-05-2020, 12:12 PM.
    Phan Trung Tín
    Email: phantrungtin@vnpro.org
    .
    Trung Tâm Tin Học VnPro
    149/1D Ung Văn Khiêm, P.25, Q.Bình Thạnh, Tp.HCM
    Tel: (028) 35124257 (028) 36222234
    Fax: (028) 35124314

    Home Page: http://www.vnpro.vn
    Forum: http://www.vnpro.org
    Twitter: https://twitter.com/VnVnpro
    LinkedIn: https://www.linkedin.com/in/VnPro
    - Chuyên đào tạo quản trị mạng và hạ tầng Internet
    - Phát hành sách chuyên môn
    - Tư vấn và tuyển dụng nhân sự IT
    - Tư vấn thiết kế và hỗ trợ kỹ thuật hệ thống mạng

    Videos: http://www.dancisco.com
    Blog: http://www.vnpro.org/blog
    Facebook: http://facebook.com/VnPro
    Zalo: https://zalo.me/1005309060549762169
    ​​​​​​
Working...
X