Shunze ¾Ç¶é >¸ê°T³]³Æ±M°Ï >Sophos XG > ¡m¤À¨É¡nMAC/IP Spoof Protection «¢Åo¡AÁÙ¨S¦³µù¥U©ÎªÌµn¤J¡C½Ð§A[µù¥U|µn¤J]
« ¤W¤@½g¥DÃD ¤U¤@½g¥DÃD » Åã¥Ü¦¨¦C¦L¼Ò¦¡ | ¼W¥[¨ì§Úªº³Ì·R
µoªí·s¥DÃD µoªí¦^ÂÐ
§@ªÌ
¥DÃD
shunze
¤u¤Í§B§B


µù¥U¤é´Á: 2002 04
¨Ó¦Û: ¼é¦Á²×¤î¤§¦a
¤å³¹: 2370

shunze Â÷½u
¡m¤À¨É¡nMAC/IP Spoof Protection¤Þ¥Î¦^ÂÐ ½s¿è/§R°£¤å³¹ ·j´M¥Ñ  µoªíªº¨ä¥L¤å³¹ ¦^³øµ¹ª©¥D IP ¦ì¸m ¦^¦¹­¶³Ì¤W¤è

«È¤á¦b°Ý¡A¯à§_¦bXG¤W­­¨î¥u¦³®Ö­ãªººô¥d¤~¥i¥H¤Wºô©O¡H

¦³ªº¡A³o³¡¤Àªº¥\¯à¦b Protect > Intrusion Prevention > DoS & Spoof Protection ùضi¦æ¡C
¦b Spoof Protection General Settings ²Ä¤@¶¥ªº Enable Spoof Prevention ¥\¯àùØ¡A¥i¥H­­¨î¥u¦³¯à°÷¸ÑªR¨ì¸ô¥ÑªºIP©Î¤wµn°Oªººô¥d¤~¯à©ñ¦æ¡C



¦Óºô¥dªºµù¥Uµn°O«h¦b¤U¤èSpoof Protection Trusted MAC°Ï¶ô¤¤¶i¦æµn°O¡C
(¦b³o¶¥¬q¤¤¡AIP¥u¬O¶H¼x©Êªº¿é¤J¡A¨Ã¨S¦³ºô¥d»PIP»Ý¤@­Pªº±j¨î©Ê­n¨D¡C)



³oùتºIP Spoofing»PMAC Filter¬O¡§OR¡¨¤£¬O¡§AND¡¨³á¡I
¥u­nIP¯à°÷³z¹Lrouting¤Ï¸Ñ¥X¨Ó¡A©Î¬Oºô¥d¦bµù¥U²M³æ¤§¤¤¡A´N¥i¥H©ñ¦æ¡C
©Ò¥H­Y§Ú­Ì­n­­¨î¥u¦³¦bSpoof Protection Trusted MAC°Ï¶ô¦³¤¤µn°Oªººô¥d¤~©ñ¦æ¡A
¨º¥u­n¤Ä¿ïMAC Filter§Y¥i¡AIP Spoofing¤£¥Î¤Ä¡C


§Ú­Ì¦pªG­n­­¨îIP»Pºô¥dªº°t¹ï­n»PXG¤Wªº°O¿ý¤@­P¤~¯à©ñ¦æ¡A¤]´N¬O¡§AND¡¨Å޿誺¸Ü¡A­n¦p¦ó¶i¦æ©O¡H
³o´N­n±Ò¥Î²Ä¤G¶¥ªº Restrict Unknown IP on Trusted MAC ¥\¯à¤~¯à¿ì¨ì¡C



¦b³o¼Ëªº±ø¥ó­­¨î¤U¡A´N¥u¦³IP/MAC»PSpoof Protection Trusted MAC¤¤ªº°t¹ï°O¿ý¤@­P¤~¯à©ñ¦æ¡I


³o¼ËªºSpoof Protection¯à§_·f°tDHCP¾÷¨î¨Ó¹B¦æ©O¡H

¨Ò¦p¡A§Ú­Ì¥u­­¨îMAC¥²»Ý¦bXG¤Wµn°O¡A¦ÓIPªº°tµo¤@¼Ë¥ÑXG¨ÓÀH¾÷µo©ñ¡C
¥u­n¬OXG¤WDHCPªA°È©Ò®ÖµoªºIP´N²Å¦X³W½d¡A¥i¥H³q¦æ¡A¬Ù¥hºÞ²zªÌ¦bIP¤À°t¤Wªº­t¾á¡C

¨º»ò§Ú­Ì¥u­n¦bMACªºµn°O°O¿ýªí¤¤¡A±NIPªº¨Ó·½¿ï¾ÜDHCP´N¥i¥H·f°tXGªºDHCP¨Ó©ñ¦æ¡C



µM«á¦bSpoof Protection General Settings¤¤¡A±Ò¥ÎEnable Spoof Prevention¡A¨Ã¤Ä¿ïMAC Filter§Y¥i¡AIP Spoofing¤£¥Î¤Ä¡F
²Ä¤G¶¥ªº Restrict Unknown IP on Trusted MAC ¤]¤£»Ý­n±Ò¥Î¤Ä¿ï¡C


³o¼ËªºSpoof Protection¦ü¥G¥i¥H¨¾ªvµs¥ÎIPªº°ÝÃD©Î¬O±`¨£ªºARP§ðÀ»¡A¹ï¶Ü¡H
¹ï¡A¤]¤£¹ï¡I

IP/MAC¸j©w¾÷¨î½T¹ê¥i¥H­­¨î«eºÝuser¥²»Ý¬O»{¥iªº²Õ¦X¤~¥i¥H¤Wºô¡A
¦ý¤@¯ëªºARP§ðÀ»«o¬Oµo¥Í¦bswitchºÝ¡A
ÁöµMµs¥ÎIPªº¹q¸£½T¹êµLªk¤Wºô¡A¦ýÁÙ¬O¥i¥H¦bswitch¤W³y¦¨°²ªºARP¸ê°T¡A¤zÂZ¤F¯u¥¿¨Ï¥ÎªÌªººô¸ô¦æ¬°¡C
©Ò¥H¯à¹F¨ìARP¨¾ªv®ÄªG¦³­­...



­Y¹J¨ì°Ï°ìºô¸ô¤¤ªºARP§ðÀ»¡AÁÙ¬O­n¦bswitch¤WµÛ¤â¡A®M¥ÎswitchºÝªºsolution¤~¯à¯u¥¿¸Ñ¨M°ÝÃD¡I


PS.
³o­ÓDoS & Spoof Protection¥\¯à»Ý­nNetwork Protection±ÂÅv¤~¯à¨Ï¥Î³á¡I



♥¶¶¤l¦Ñ±Cªººô©ç¡A½Ð¦hÃö·Ó¡ã

If you don't like something, change it.
If you can't change it, change your attitude.
Don't complain!




2017-03-20, 16:16 shunze ªº­Ó¤H¸ê®Æ §â shunze ¥[¤J¦n¤Í¦Cªí µo°eEmailµ¹ shunze ÂsÄý shunze ªººô¯¸ MSN : shunze@gmail.com
shunze
¤u¤Í§B§B


µù¥U¤é´Á: 2002 04
¨Ó¦Û: ¼é¦Á²×¤î¤§¦a
¤å³¹: 2370

shunze Â÷½u
¡m¤À¨É¡nXG¤ä´©´X²ÕMAC°O¿ý¡H¤Þ¥Î¦^ÂÐ ½s¿è/§R°£¤å³¹ ·j´M¥Ñ  µoªíªº¨ä¥L¤å³¹ ¦^³øµ¹ª©¥D IP ¦ì¸m ¦^¦¹­¶³Ì¤W¤è

Sophos XG¤ä´©´X²ÕMAC°O¿ý¡H
³o¬O«È¤á¹ê»Ú¦b¨Ï¥Î¦¹¥\¯à®É¡A©Ò´£¥Xªº¤@­Ó¦n°ÝÃD¡I

¸U¤@¤ä´©MAC°O¿ý¤Ó¤Ö¡A¨Ò¦p¥u¦³250²Õ¡A
¨º»ò¦b¤¤¡B¤j«¬¤½¥q¡A¹q¸£¼Æ¶q¶W¹L250¥x®É¡A³o·|¬O¤@­Ó«Ü¤jªº°ÝÃD¡C


¸g­ì¼t¬d¸ß«á¡ASophos XG¤ä´©¤F16000 MAC°O¿ý¡A
¤£¹L¨t²Î­±ªºARP§Ö¨ú¥u¤ä´©1700²Õªº°O¿ý¡C

©Ò¥H·íÀô¹Ò¤¤¹q¸£¼Æ¶q¹L¦h¡A²§°Ê¶q¤j©ó1700µ§®É¡A
´N¥²»Ý¶Ô©ó²M²zARP§Ö¨ú¡A¥Hºû«ù¦¹¥\¯àªº¥¿½T©Ê¡I


°Ñ¦Ò¸ê®Æ
How many MAC addresses does XG support?



♥¶¶¤l¦Ñ±Cªººô©ç¡A½Ð¦hÃö·Ó¡ã

If you don't like something, change it.
If you can't change it, change your attitude.
Don't complain!




2017-04-21, 22:00 shunze ªº­Ó¤H¸ê®Æ §â shunze ¥[¤J¦n¤Í¦Cªí µo°eEmailµ¹ shunze ÂsÄý shunze ªººô¯¸ MSN : shunze@gmail.com
shunze
¤u¤Í§B§B


µù¥U¤é´Á: 2002 04
¨Ó¦Û: ¼é¦Á²×¤î¤§¦a
¤å³¹: 2370

shunze Â÷½u
¡m¤À¨É¡nSpoof Protection Trusted MAC¤ä´©ªº¶×¤J®æ¦¡¤Þ¥Î¦^ÂÐ ½s¿è/§R°£¤å³¹ ·j´M¥Ñ  µoªíªº¨ä¥L¤å³¹ ¦^³øµ¹ª©¥D IP ¦ì¸m ¦^¦¹­¶³Ì¤W¤è

³z¹LMAC¨Ó±±ºÞ¹q¸£¬O­Ó¦n¥D·N¡A¦ýºô¥d¤@¦h¥i¬O·|­n¤H©R¡A
ÁÙ¦nXGªºSpoof Protection Trusted MAC¤ä´©¤FcsvÀɪº¶×¤J¡A
¨ä¼Ë¥»®æ¦¡¦p¤U¡C

MAC Address,IP Association,IP Address
00:A0:C9:14:C8:29,DHCP,
00:C0:D9:19:C6:45,Static,15.12.26.45

¨ä¤¤²Ä¤@¦æheader row¤@©w­n¦³¡A¥B¦³¤j¤p¼gªº®t²§¡A
¤@©w­n¸ò¤W­z¼Ë¥»¤@¼Ò¼Ò¤@¼Ë¼Ë¤~·|¹L³á¡I
(¤§©Ò¥H±j½Õ³o¤@ÂI¬O¦]¬°XG½u¤Whelp´£¨Ñªºheader rowÄæ¦ì¦WºÙ¤j¤p¼g»P¹ê»Ú­n¨D¤£¦P¡A¾É­P¶×¤J¥¢±Ñ¡I)
¦ÓDHCP¹ïÀ³ªºIP«h¥i¥H¦Û¥Ñ¨M©w¬O§_­n¿é¤J¡C


°Ñ¦Ò¸ê®Æ
Import Trusted MAC Address from CSV File

shunze ¤W¶ÇªºÀÉ®×
Sample.zip (0 KB, ¤w¸g³Q¤U¸ü 1048 ¦¸)


♥¶¶¤l¦Ñ±Cªººô©ç¡A½Ð¦hÃö·Ó¡ã

If you don't like something, change it.
If you can't change it, change your attitude.
Don't complain!




2017-12-20, 23:03 shunze ªº­Ó¤H¸ê®Æ §â shunze ¥[¤J¦n¤Í¦Cªí µo°eEmailµ¹ shunze ÂsÄý shunze ªººô¯¸ MSN : shunze@gmail.com
  « ¤W¤@½g¥DÃD ¤U¤@½g¥DÃD »
µoªí·s¥DÃD µoªí¦^ÂÐ
¸õ¨ì:

Powered by: Burning Board 1.1.1 2001 WoltLab GbR