Cisco 7609 Spezifikationen Seite 327
- Seite / 572
- Inhaltsverzeichnis
- FEHLERBEHEBUNG
- LESEZEICHEN
Bewertet. / 5. Basierend auf Kundenbewertungen
23-5
Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E
78-14064-04
Chapter 23 Configuring Network Security
Configuring the Cisco IOS Firewall Feature Set
• Firewall Configuration Guidelines and Restrictions, page 23-6
• Configuring CBAC on Cisco 7600 Series Routers, page 23-6
Cisco IOS Firewall Feature Set Support Overview
The firewall feature set images support these Cisco IOS firewall features:
• Context-based Access Control (CBAC)
• Port-to-Application Mapping (PAM)
• Authentication Proxy
These are the firewall feature set image names:
• c6sup22-jo3sv-mz
• c6sup22-po3sv-mz
• c6sup12-jo3sv-mz
• c6sup12-po3sv-mz
For more information about Cisco IOS firewall features, refer to the Cisco IOS Security Configuration
Guide, Release 12.1, “Traffic Filtering and Firewalls” online publications:
• The “Cisco IOS Firewall Overview” chapter at this URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/secur_c/scprt3/scdfirw
l.htm
• The “Configuring Context-Based Access Control” chapter at this URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/secur_c/scprt3/scdcbac
.htm
• The “Configuring Authentication Proxy” chapter at this URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/secur_c/scprt3/scdauth
p.htm
• Cisco IOS Security Command Reference publication at this URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/secur_r/index.htm
The following features are supported with and without the use of a Cisco IOS firewall image:
• Standard access lists and static extended access lists
• Lock-and-key (dynamic access lists)
• IP session filtering (reflexive access lists)
• TCP intercept
• Security server support
• Network address translation
• Neighbor router authentication
• Event logging
• User authentication and authorization
- Text Part Number: 78-14064-04 1
- CONTENTS 3
- 6 Configuring Interfaces 6-1 5
- 8 Configuring VTP 8-1 6
- 9 Configuring VLANs 9-1 6
- Contents 10
- 78-14064-04 10
- 22 Configuring RGMP 22-1 12
- 30 Configuring CDP 30-1 15
- 31 Configuring UDLD 31-1 15
- 32 Configuring PFC QoS 32-1 15
- 33 Configuring NDE 33-1 16
- A Acronyms A-1 19
- Audience 21
- Organization 21
- Related Documentation 23
- Conventions 24
- Obtaining Documentation 25
- Documentation Feedback 26
- TAC Case Priority Definitions 27
- Product Overview 29
- Command Purpose 31
- Command-Line Interfaces 33
- Table 2-1 Keyboard Shortcuts 35
- Cisco IOS Command Modes 36
- First Time 39
- Setup Overview 40
- Configuring Interfaces 46
- Using Configuration Mode 48
- Reviewing the Configuration 49
- Configuring a Default Gateway 50
- Configuring a Static Route 50
- Configuring a BOOTP Server 52
- Encrypting Passwords 55
- Exiting a Privilege Level 57
- Understanding the ROM Monitor 58
- Modifying the Boot Field 61
- Understanding Flash Memory 62
- BOOTLDR Environment Variable 63
- Redundancy 67
- main-cpu 69
- Configuring RPR and RPR+ 73
- Supervisor Engine Redundancy 73
- RPR Operation 74
- RPR+ Operation 74
- Using the Interface Command 84
- Jumbo Frame Support Overview 93
- Ethernet Ports 94
- VLAN Interfaces 95
- Configuring MTU Sizes 95
- Configuring the MTU Size 95
- Monitoring Interface Status 99
- Resetting an Interface 101
- Understanding VLAN Trunks 104
- Trunking Overview 105
- Layer 2 LAN Port Modes 106
- Restrictions 108
- Guidelines 108
- Configuring the Default VLAN 112
- Configuring VTP 121
- Understanding the VTP Domain 122
- Understanding VTP Modes 122
- Understanding VTP Version 2 123
- Understanding VTP Pruning 123
- Understanding How VTP Works 124
- VTP Default Configuration 125
- Enabling VTP Pruning 127
- Enabling VTP Version 2 127
- Configuring the VTP Mode 128
- Displaying VTP Statistics 130
- Configuring VLANs 131
- VLAN Ranges 132
- Configurable VLAN Parameters 133
- Token Ring TrCRF VLANs 134
- Figure 9-3 Distributed TrCRF 135
- VLAN Default Configuration 136
- Configuring Private VLANs 145
- Cisco IP Phone Support 155
- Cisco IP Phone Voice Traffic 156
- Cisco IP Phone Data Traffic 157
- Fast Ethernet port 5/4: 166
- Configuring EtherChannels 171
- EtherChannel Feature Overview 172
- Table 13-1 EtherChannel Modes 173
- Understanding Load Balancing 175
- Configuring Channel Groups 178
- Protocol Tunneling 183
- Configuring 802.1Q Tunneling 187
- Service provider 189
- Understanding How STP Works 194
- Understanding the Bridge ID 195
- Election of the Root Bridge 196
- STP Protocol Timers 197
- STP Port States 198
- Blocking State 200
- Listening State 201
- Learning State 202
- Forwarding State 203
- STP and IEEE 802.1Q Trunks 204
- IEEE 802.1w RSTP Overview 205
- RSTP Port Roles 205
- RSTP Port States 206
- Rapid-PVST 206
- IEEE 802.1s MST Overview 207
- MST-to-PVST Interoperability 208
- Common Spanning Tree 210
- MST Instances 210
- MST Configuration Parameters 210
- MST Regions 211
- Message Age and Hop Count 212
- Default STP Configuration 213
- Configuring STP 214
- Enabling STP 215
- Configuring the Root Bridge 217
- Configuring STP Port Priority 219
- Configuring STP Port Cost 221
- Configuring the Hello Time 224
- Enabling Rapid-PVST 225
- Configuring IEEE 802.1s MST 226
- Displaying MST Configurations 228
- Restarting Protocol Migration 232
- Enabling PortFast 242
- Enabling BPDU Guard 245
- Enabling UplinkFast 246
- Enabling BackboneFast 247
- Enabling EtherChannel Guard 248
- Enabling Root Guard 248
- Enabling Loop Guard 249
- Supervisor Engine 2 251
- Subnet 3/Marketing 253
- Non-RPF Traffic Processing 261
- Unsupported Features 265
- Using Debug Commands 274
- Supervisor Engine 1 277
- IP MLS Flows 278
- IP MLS Overview 278
- Layer 3 MLS Cache 279
- Flow Masks 279
- IP MLS Operation 281
- Default IP MLS Configuration 282
- Configuring IP MLS 282
- Displaying IP MLS Information 285
- Clearing IP MLS Cache Entries 287
- Troubleshooting IP MLS 290
- IPX MLS Overview 292
- IPX MLS Flows 292
- IPX MLS Operation 294
- Default IPX MLS Configuration 295
- Configuring IPX MLS 296
- Troubleshooting IPX MLS 304
- Configuring IGMP Snooping 305
- IGMP Snooping Overview 306
- Joining a Multicast Group 306
- Leaving a Multicast Group 308
- Fast-Leave Processing 309
- Guidelines and Restrictions 310
- Enabling IGMP Snooping 313
- Configuring a Host Statically 316
- Configuring RGMP 319
- Default RGMP Configuration 320
- Configuring Network Security 323
- Configuring VLAN ACLs 330
- Bridged Packets 331
- Routed Packets 332
- Configuring VACLs 333
- VACL Configuration Overview 334
- Defining a VLAN Access Map 334
- Applying a VLAN Access Map 336
- Configuring a Capture Port 338
- Configuring VACL Logging 339
- Configuring TCP Intercept 340
- Configuring Unicast RPF 341
- Enabling Self-Pinging 341
- DoS Protection Overview 347
- Configuring DoS Protection 348
- QoS ACLs 350
- APR Throttling 351
- Device Roles 356
- Figure 25-2 Message Exchange 357
- Supported Topologies 358
- Changing the Quiet Period 365
- EAP-Request Frames 367
- Time for Layer 4 Packets 367
- Enabling Multiple Hosts 368
- Displaying 802.1X Status 369
- Configuring Port Security 371
- Configuring CDP 389
- Enabling CDP Globally 390
- Enabling CDP on a Port 390
- Configuring UDLD 393
- UDLD Aggressive Mode 394
- Default UDLD Configuration 395
- Configuring PFC QoS 399
- Hardware Supported by PFC QoS 400
- QoS Terminology 401
- 1. MSb = most significant bit 403
- PFC QoS Feature Flowcharts 404
- PFC QoS Feature Summary 409
- Ingress LAN Port Features 410
- Receive Queues 411
- Scheduling 412
- Congestion Avoidance 412
- PFC Marking and Policing 414
- Internal DSCP Values 415
- Internal DSCP Sources 415
- Egress DSCP and CoS Sources 415
- Policy Maps 416
- Policers 417
- LAN Egress Port Features 419
- 2q2t Ports 421
- 1p2q2t Ports 421
- 1p3q1t Ports 421
- 1p2q1t Ports 422
- PFC QoS Default Configuration 423
- Guidelines: 429
- Enabling Queueing-Only Mode 432
- Configuring a PFC QoS Policy 435
- Creating a Class Map 438
- Configuring a Policy Map 440
- Creating a Policy Map 440
- Configuring DSCP Value Maps 464
- Configuring NDE 477
- NDE Overview 478
- NDE from the MSFC 478
- NDE from the PFC 478
- NDE Versions 479
- Understanding How NDE Works 481
- MLS Cache Entries 482
- Sampled NetFlow 482
- Default NDE Configuration 483
- Configuring Sampled NetFlow 487
- Configuring NDE on the MSFC 489
- Configuring NDE Flow Filters 491
- Clearing an NDE Flow Filter 493
- Local SPAN and RSPAN Overview 495
- Local SPAN Overview 496
- Local SPAN and RSPAN Sessions 497
- Monitored Traffic 498
- SPAN Sources 498
- Configuring RSPAN VLANs 502
- Verifying the Configuration 506
- Configuration Examples 506
- Understanding WCCP 509
- WCCP Overview 510
- Hardware Acceleration 510
- WCCPv2 Features 513
- Restrictions for WCCPv2 514
- Configuring WCCP 515
- WCCP Configuration Examples 519
- Using Access Lists Example 521
- Switch Fabric Module Overview 529
- Switch Fabric Module Slots 530
- Switch Fabric Redundancy 530
- Switching Modes 530
- Configuring an LCD Message 533
- Displaying the Fabric Status 535
- Displaying Fabric Errors 535
- Monitoring 537
- Acronyms 543
- Appendix A Acronyms 544
- Numerics 551
Verwandte Produkte und Handbücher für Vernetzung Cisco 7609
Vernetzung Cisco CISCO7201 Bedienungsanleitung
(28 Seiten)
(28 Seiten)
(44 Seiten)
Vernetzung Cisco WS-C2960-8TC-L Spezifikationen
(19 Seiten)
(19 Seiten)
Vernetzung Cisco 1900 series Spezifikationen
(44 Seiten)
(44 Seiten)
Vernetzung Cisco DPC2202 Bedienungsanleitung
(8 Seiten)
(8 Seiten)
Vernetzung Cisco EPC3208 Bedienungsanleitung
(98 Seiten)
(98 Seiten)
Vernetzung Cisco CX-TRIP2 Spezifikationen
(28 Seiten)
(28 Seiten)
(48 Seiten)
Vernetzung Cisco 3631 Spezifikationen
(198 Seiten)
(198 Seiten)
Vernetzung Cisco 2650 - 2650 Router Spezifikationen
(266 Seiten)
(266 Seiten)
© 2020, manymanuals.de. Alle Rechte vorbehalten. | 0.056 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Kommentare zu diesen Handbüchern