Безопасность на порту коммутатора — различия между версиями
Moiseevvi (обсуждение | вклад) (Новая страница: «<pre> -2014 target ------------ ip arp inspection vlan 88 ip arp inspection validate src-mac ip ip arp inspection log-buffer entries 1024 ip arp inspection log-bu…») |
Moiseevvi (обсуждение | вклад) |
||
Строка 3: | Строка 3: | ||
ip arp inspection vlan 88 | ip arp inspection vlan 88 | ||
ip arp inspection validate src-mac ip | ip arp inspection validate src-mac ip | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
! | ! | ||
! | ! | ||
ip dhcp snooping vlan 88 | ip dhcp snooping vlan 88 | ||
ip dhcp snooping | ip dhcp snooping | ||
− | |||
− | |||
! | ! | ||
− | interface FastEthernet0/ | + | interface range FastEthernet0/1-24 |
− | |||
− | |||
switchport nonegotiate ! do not send DTP | switchport nonegotiate ! do not send DTP | ||
switchport port-security maximum 2 | switchport port-security maximum 2 | ||
switchport port-security | switchport port-security | ||
storm-control broadcast level 20.00 | storm-control broadcast level 20.00 | ||
− | |||
no cdp enable | no cdp enable | ||
spanning-tree bpduguard enable | spanning-tree bpduguard enable | ||
ip verify source port-security | ip verify source port-security | ||
end | end | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
</pre> | </pre> | ||
Версия 03:56, 18 апреля 2014
-2014 target ------------ ip arp inspection vlan 88 ip arp inspection validate src-mac ip ! ! ip dhcp snooping vlan 88 ip dhcp snooping ! interface range FastEthernet0/1-24 switchport nonegotiate ! do not send DTP switchport port-security maximum 2 switchport port-security storm-control broadcast level 20.00 no cdp enable spanning-tree bpduguard enable ip verify source port-security end