BẮT 10 GIAO THỨC (SNMP, HTTP, HTTPS, NETMEETING, NTP, TELNET, SSH, H323, SIP, DOMAIN )

Transcription

1 SƠ ĐỒ MẠNG VISIO

2 SƠ ĐỒ GNS3

3 BẮT 10 GIAO THỨC (SNMP, HTTP, HTTPS, NETMEETING, NTP, TELNET, SSH, H323, SIP, DOMAIN )

4 PING TẠO RA LƯU LƯỢNG

5 SAU KHI CẤM PING

6

7 FILE CẤU HÌNH CÁC ROUTER ROUTER SAIGON Last configuration change at 02:00:41 UTC Fri Mar version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption hostname SAIGON boot-start-marker boot-end-marker no aaa new-model resource policy memory-size iomem 5 ip cef no ip domain lookup ip domain name vuhoang.com ip ssh authentication-retries 2 crypto pki trustpoint TP-self-signed enrollment selfsigned subject-name cn=ios-self-signed-certificate revocation-check none rsakeypair TP-self-signed crypto pki certificate chain TP-self-signed certificate self-signed D A6 A D0609 2A F70D E30 2C F532D 53656C66 2D E65642D

8 D E17 0D A170D A E302C F 532D5365 6C662D E65 642D D F300D 06092A F70D D D36B63AA C4215F02 EA7DC057 A0ECA089 A8FDFA11 14D0F CD D3CF D15E5137 FF0C7E52 4D17C33F BC52DFEF 0D E9718 AAEEE1D2 6CF8AF1B 3E E84890 AF148F73 D168A8EB 1F1EF229 75EFFEFA 0568E0FC 5A7F2F04 202AAC6D C47CD95E AE 1A08BF37 98E24265 F5E1F536 A7C6ACF A F D FF FF D 11040B F 4E2E301F D D 360AD80D BD 420BE40C 252E50E4 ECCD1030 1D D0E D36 0AD80D BD42 0BE40C25 2E50E4EC CD10300D 06092A F70D AD458E 2FE19895 A7EECC9E 44FBAEBE 57AFD7C1 F9E816F1 06E5CE36 1CD8C82C 74DCC14D EC0A93D8 4DEE6C3B 65E6D96C 7898A2CC 35C7EE89 E76BE E4B46 86D80E D 99E135B7 7FCC60FD D5C304DA 3AF4B013 12AC E98AAD BDC5B093 BB6668A5 ED331F27 2EC18D FABE B79B5BFE E04E1E35 C25DC2D6 EB quit username hoang password interface FastEthernet0/0 ip address ip access-group 111 in interface Serial0/0 ip access-group 101 in ip access-group 101 out encapsulation frame-relay clock rate interface Serial0/0.2 point-to-point ip address frame-relay interface-dlci 85 interface Serial0/0.3 point-to-point ip address frame-relay interface-dlci 185 interface FastEthernet0/1 interface Serial0/1 clock rate router rip network network network

9 ip http server ip http secure-server access-list 101 deny access-list 101 deny access-list 111 deny access-list 111 deny access-list 111 permit ip any any control-plane line con 0 exec-timeout 0 0 logging synchronous line aux 0 line vty 0 4 login transport input ssh ntp master 1 End icmp host host echo icmp host host echo-reply icmp host host echo icmp host host echo-reply ROUTER NHATRANG version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption hostname NHATRANG boot-start-marker boot-end-marker no aaa new-model resource policy memory-size iomem 5 ip cef

10 no ip domain lookup interface FastEthernet0/0 interface Serial0/0 encapsulation frame-relay clock rate interface Serial0/0.1 point-to-point ip address frame-relay interface-dlci 92 interface FastEthernet0/1 interface Serial0/1 clock rate router eigrp 100 network auto-summary router rip network

11 no ip http server no ip http secure-server control-plane line con 0 exec-timeout 0 0 logging synchronous line aux 0 line vty 0 4 login End ROUTER DANANG version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption hostname DANANG boot-start-marker boot-end-marker no aaa new-model resource policy memory-size iomem 5 ip cef no ip domain lookup

12 interface FastEthernet0/0 interface Serial0/0 encapsulation frame-relay clock rate interface Serial0/0.1 point-to-point ip address frame-relay interface-dlci 192 interface FastEthernet0/1 interface Serial0/1 ip address clock rate router rip network network no ip http server no ip http secure-server control-plane

13 line con 0 exec-timeout 0 0 logging synchronous line aux 0 line vty 0 4 login End ROUTER HANOI version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption hostname HANOI boot-start-marker boot-end-marker no aaa new-model resource policy memory-size iomem 5 ip cef no ip domain lookup

14 interface FastEthernet0/0 interface Serial0/0 ip address clock rate interface FastEthernet0/1 interface Serial0/1 ip address clock rate router rip network network no ip http server no ip http secure-server control-plane line con 0 exec-timeout 0 0 logging synchronous line aux 0 line vty 0 4 End

15 ROUTER HAIPHONG Last configuration change at 01:48:58 UTC Fri Mar version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption hostname HAIPHONG boot-start-marker boot-end-marker no aaa new-model resource policy memory-size iomem 5 ip cef no ip domain lookup interface FastEthernet0/0 ip address ip access-group 111 in interface Serial0/0 ip address ip route-cache flow clock rate

16 interface FastEthernet0/1 interface Serial0/1 clock rate router rip network network ip flow-export version 5 ip flow-export destination no ip http server no ip http secure-server access-list 111 deny tcp host host eq telnet access-list 111 deny tcp host host eq 22 access-list 111 deny udp host host eq snmp access-list 111 deny tcp host host eq ftp access-list 111 deny tcp host host eq 1720 access-list 111 deny tcp host host eq 5060 access-list 111 deny tcp host host eq www access-list 111 deny tcp host host eq 443 access-list 111 deny udp host host eq domain access-list 111 deny udp host host eq ntp access-list 111 permit ip any any snmp-server community public RO control-plane line con 0 exec-timeout 0 0 logging synchronous line aux 0 line vty 0 4 ntp clock-period ntp server end

17