局域网常见攻击与如何防范讲解14集15.wire speed acls签名

局域网安全WireSpeed Security什么叫WireSpeed以1Gb1Gb=125,000,000bytesper6420permit/deny的操作，就意味着这个ACL是WireSpeedACLACLsor Userchooseactioncreatesaconnectionrecordifthetrafficispermitted.SubsequentpacketsthatbelongtothisconnectionareautomaticallypermittedwithoutrecheckingtheACL.TrafficthatpassesthroughtheswitchorTrafficdestinedtotheswitchor!---Anti-spoofingentries!---Denyspecial-useaddress!---RefertoRFC3330foradditionalspecialuseaddresses.access-list100denyiphost0.0.0.0anyaccess-list100denyip127.0.0.00.255.255.255access-list100denyip192.0.2.00.0.0.255access-list100denyip224.0.0.031.255.255.255!---FilterRFC1918access-list100denyip10.0.0.00.255.255.255access-list100denyip172.16.0.00.15.255.255access-list100denyip192.168.0.00.0.255.255!---DenyyourIPspaceassourcefromenteringyournetworkRFC2827.access-list100denyipYOUR_IP_RANGEany!---Permitaccess-list100permittcphostbgp_peerhostrouter_ipeqaccess-list100permittcphostbgp_peereqbgphost!---Denyaccesstointernalinfrastructureaccess-list100denyipany!---Permittransitaccess-list100permitipanyRouterACL(RACL).AnIP-basedACLthatisappliedtoaroutedinterface.ItisthemostcommontypeofACL.TheACLisaRACL.VLANACL(VACL).AppliestotrafficenteringandleavingaVLAN.ItisgloballyappliedtoallportsinagivenVLAN.ItcanfilterbothonLayer2criteria(MACaddresses)andLayer3and4parameters,justlikeaRACL.Port-basedACL(PACL).AVACLappliedtoanindividualswitchportaWorkingwithWorkingwith能够实现VACLWorkingwithaccess-list101permitiphost8.1.1.1acces