IP攻击解决方案

《IP攻击解决方案》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、在S7500E上禁止特定IP地址进入网络的案例：system-viewSystemView:returntoUserViewwithCtrl+Z.[H3C]aclnumber2000#创建匹配源地址是6.14.5.2的IP报文。[H3C-acl-basic-2000]ruledenysource6.14.5.20[H3C-acl-basic-2000]quit[H3C]interfaceVlan-interface1#禁止ACL2000匹配的报文进入设备。（在靠近上行的接口下发）[H3C-Vlan-interface1]packet-filter2000

2、inbound[H3C-Vlan-interface1]quit反向跟踪法查询IP：PC收到一个源地址，会回包，回包就会经过相同的路径。1、查看PC的网关地址，找到作为PC网关的设备。C:UsersCallCenter>ipconfigWindowsIP配置以太网适配器本地连接:连接特定的DNS后缀.......:h3c.comIPv4地址............:10.XXX.XXX.XXX子网掩码............:255.255.255.0默认网关.............:10.XXX.XXX.XXX2、查看该设备的路由表，判定该数据报回程的时候

3、的路径。3、在路径的下一跳设备上继续查找路由表项。displayiprouting-tableRoutingTables:PublicDestinations:11Routes:12Destination/MaskProtoPreCostNextHopInterface0.0.0.0/0Static60010.153.XX.1M-E1/0/0/010.153.XX.0/24Direct0010.153.XX.11M-E1/0/0/010.153.XX.11/32Direct00127.0.0.1InLoop0127.0.0.0/8Direct00127.

4、0.0.1InLoop0127.0.0.1/32Direct00127.0.0.1InLoop04、依次排查中间的每台设备，发现下一跳是本机（127.0.0.1）的时候查看ARP表。displayiprouting-tableRoutingTables:PublicDestinations:11Routes:12Destination/MaskProtoPreCostNextHopInterface0.0.0.0Direct00192.168.1.1InLoop010.153.XX.0/21Static60010.153.XX.1M-E1/0/0/06.

5、1.5.0/26Direct00127.0.0.1M-E1/0/0/06.14.5.2/32Direct00127.0.0.1InLoop0127.0.0.0/8Direct00127.0.0.1InLoop0127.0.0.1/32Direct00127.0.0.1InLoop05、通过ARP表项找到对应的出接口。displayarpallType:S-StaticD-DynamicM-MultiportIPAddressMACAddressVLANIDInterfaceAgingType6.14.5.20011-2233-4455N/AGE0/018

6、D……6、根据接口查找到二层交换机。7、根据MAC地址表找到接该PC的接口。displaymac-addressMACADDRVLANIDSTATEPORTINDEXAGINGTIME(s)0011-2233-44551LearnedGigabitEthernet1/0/1AGING0011-2233-44561LearnedGigabitEthernet1/0/1AGING8、最终在PC上查看MAC认定是否为该PC。C:UsersCallCenter>ipconfig/allWindowsIP配置主机名.............:CallCente

7、r-Ext主DNS后缀...........:节点类型............:混合IP路由已启用..........:否WINS代理已启用.........:否DNS后缀搜索列表........:h3c.com以太网适配器本地连接:连接特定的DNS后缀.......:h3c.com描述...............:Intel(R)82567LM-3GigabitNetworkConnection物理地址.............:00-11-22-33-44-55DHCP已启用...........:是自动配置已启用..........:是IPv4地址....

8、.....