【正文】 .................................................... 39 配置 STP、 RSTP ..................................................................................................... 40 以太網(wǎng)鏈路聚合 ........................................................................................................ 41 網(wǎng)絡(luò)壓力 ............................................................................................................... 41 流量平衡 ............................................................................................................... 42 配置 aggregate port ............................................................................................ 42 第 4 章 訪問控制列表 .............................................................................. 44 概述 .......................................................................................................................... 44 ACL、安全 ACL、 Qos ACL 及 ACE ..................................................................... 44 理解輸入 ACL、輸出 ACL.................................................................................... 45 理解過濾域模板 (masks)和規(guī)則 (rules) ................................................................... 46 在交換機上配置 ACL 的注意事項 ........................................................................ 47 配置安全 ACL .......................................................................................................... 47 支持的 ACL 類型 .................................................................................................. 48 配置 ACL 的步驟 .................................................................................................. 48 創(chuàng)建 STANDARD (標(biāo)準(zhǔn) )及 EXTENDED(擴展 )IP ACL .................................................... 48 關(guān)于 IP 地址的表示 ............................................................................................... 48 創(chuàng)建 Standard IP ACL ............................................................................................ 49 創(chuàng)建 Extended IP ACL ........................................................................................... 50 創(chuàng)建 MAC Extended ACL.................................................................................... 51 基于時間的 ACL 應(yīng)用 ........................................................................................... 52 創(chuàng)建 Expert Extended ACL..................................................................................... 53 應(yīng)用 ACL 到指定接口上 ....................................................................................... 55 顯示 ACL 配置 ......................................................................................................... 57 4 第 5 章 局域網(wǎng)與 INTERNET 網(wǎng)互聯(lián) .............................................................. 59 概述 .......................................................................................................................... 59 地址轉(zhuǎn)換技術(shù)介紹 .................................................................................................... 59 IP 地址短缺問 題 .................................................................................................... 59 公有地址和私有地址 ............................................................................................. 59 地址轉(zhuǎn)換的適用情況 ............................................................................................. 60 NAPT 方式的地址轉(zhuǎn)換 .......................................................................................... 61 內(nèi)部服務(wù)器應(yīng)用 .................................................................................................... 61 利用 ACL 控制地址轉(zhuǎn)換 ....................................................................................... 61 地址轉(zhuǎn)換應(yīng)用程序網(wǎng)關(guān) ......................................................................................... 62 地址轉(zhuǎn)換和代理 Proxy 的區(qū)別 ............................................................................. 62 地址轉(zhuǎn)換的優(yōu)點和缺點 ......................................................................................... 62 組網(wǎng)應(yīng)用 ................................................................................................................... 63 內(nèi)部源地址 NAT 配置 .......................................................................................... 63 內(nèi)部源地址 NAPT 配置 ........................................................................................ 64 重疊地址 NAT 配置 ............................................................................................. 65 TCP 負(fù)載均衡 ....................................................................................................... 66 靜態(tài)與動態(tài) NAT 配置命令 ....................................................................................... 67 第 6 章 地址解析協(xié)議 .............................................................................. 69 什么是 ARP 協(xié)議 ........................................................................................................ 69 ARP 協(xié)議的工作原理 ................................................................................................. 69 ARP 的工作過程 ................................................................................................... 69 ARP 的查詢過程 ................................................................................................... 70 ARP 欺騙 .................................................................................................................... 71 ARP 欺騙概述 ....................................................................................................... 71 ARP 欺騙技術(shù)實現(xiàn)原理分析 ................................................................................. 72 第 7 章 園區(qū)網(wǎng)安全設(shè)計 ........................................................................... 75 園區(qū)網(wǎng)安全隱患 ........................................................................................................ 75 園區(qū)網(wǎng)常用安全隱患 ............................................................................................. 75 常見解決隱患的方案 ................................