Ограничение доступа к роутеру

From

Slawa Olhovchenkov (2:5030/500)

To

All (2:5054/37.63)

Date

2006-03-15T19:41Z

Area

RU.CISCO

Hello All!

Помнится тут спрашивали как не вешать море скцес листов на всех возможных интерфейсах:

2.2.10) Management Plane Protection

Management Plane Protection (MPP) enables user to restrict the interfaces on which network management packets can enter a device. With this feature, network operators can designate one or more router interfaces as management interfaces. Device management traffic can enter a device through these management interfaces. After MPP is enabled, no interfaces except the designated management interfaces will accept network management traffic destined to the device.

Benefits

Greater access control for managing a device than allowing management protocols on all interfaces

Improved performance for data packets on non-management interfaces

Simplifies the task of using per-interface ACLs to restrict management access to the device

Fewer ACLs needed to restrict access to the device

Management packet floods on switching and routing interfaces are prevented from reaching the CPU

Hardware
Routers


Cisco 1800, 2600XM, 2800, 3700, 3800, 7200 and 7301 Series Routers

Cisco 830, 850, 870, 1701, 1711, 1712, 1721, 1751, 1751-V, 1760, and 2691 Routers

Additional Information: http://www.cisco.com/go/nfp

... Я пpишел к тебе с дискетой - pассказать, что сеть упала
--- GoldED+/BSD 1.1.5
 * Origin:  (2:5030/500)
SEEN-BY: 46/50 50/203 400/814 450/186 1024 451/30 5000/5000 5001/5001 5011/13
SEEN-BY: 5015/28 221 5019/31 5020/175 400 545 639 715 758 830 937 1042 1523
SEEN-BY: 5020/1604 1630 2020 2238 4441 5021/3 29 5022/128 5025/3 750 5026/45
SEEN-BY: 5026/49 5027/12 5030/115 436 473 500 966 1063 1900 5040/47 5042/13
SEEN-BY: 5045/7 5049/36 5053/16 5054/1 4 8 9 28 30 35 36 37 67 72 75 81 89
SEEN-BY: 5062/1 10 5063/3 5070/1222 5077/70 5080/80 1003 5082/6 5083/21
SEEN-BY: 5085/13 5090/108 5095/20 5096/18 6000/0 1 12 6001/10

PATH: 5030/500 5020/4441 545 5054/1 37