§debug ip nat command
§debug ip nat detailed command
2018年12月23日 星期日
網路原理(一) RSE6 Section 9.2
NAT64
NAT-PT has been deprecated by IETF in favor of its replacement, NAT64. NAT64 is beyond the scope of this curriculum.
Overload
過載
Port Forwarding
通訊埠轉發就是將外網主機的IP位址的一個通訊埠轉發到內網中一台機器，提供相應的服務。當用戶訪問該IP的這個通訊埠時，伺服器自動將請求轉發到對應區域網內部的機器上。通訊埠轉發有動態和靜態之分。
Unique Local Address (ULA)
IPv6 unique local addresses (ULA) are similar to RFC 1918 private addresses in IPv4, but there are significant differences as well.
====Command====
NAT-PT has been deprecated by IETF in favor of its replacement, NAT64. NAT64 is beyond the scope of this curriculum.
Overload
過載
Port Forwarding
通訊埠轉發就是將外網主機的IP位址的一個通訊埠轉發到內網中一台機器，提供相應的服務。當用戶訪問該IP的這個通訊埠時，伺服器自動將請求轉發到對應區域網內部的機器上。通訊埠轉發有動態和靜態之分。
Unique Local Address (ULA)
IPv6 unique local addresses (ULA) are similar to RFC 1918 private addresses in IPv4, but there are significant differences as well.
====Command====
show ip nat statistics command
clear ip nat statistics command
clear ip nat translation * command
ip nat inside source command
ip nat inside source
list access-list-number pool name
command
ip nat pool command
ip nat translation timeout command
show ip nat statistics command
show ip nat translations command
網路原理(一) RSE6 Section 9.1
Dynamic Network Address Translation (Dynamic NAT)
Dynamic NAT uses a pool of public addresses and assigns them on a first-come, first-served basis.
Global Address
A global address is any address that appears on the outside portion of the network.
Inside Address
The address of the device which is being translated by NAT.
Inside Global Address
The address of source as seen from the outside network.
Inside Local Address
The address of the source as seen from inside the network.
Local Address
A local address is any address that appears on the inside portion of the network.
Network Address Translatioin (NAT)
在電腦網路中，網路位址轉換，也叫做網路掩蔽或者IP掩蔽，是一種在IP封包通過路由器或防火牆時重寫來源IP位址或目的IP地址的技術。這種技術被普遍使用在有多台主機但只通過一個公有IP位址存取因特網的私有網路中。它是一個方便且得到了廣泛應用的技術。當然，NAT也讓主機之間的通訊變得複雜，導致了通訊效率的降低。
Outside Address
The address of the destination device.
Outside Global Address
The address of the destination as seen from the outside network. It is a globally routable IPv4 address assigned to a host on the Internet.
Outside Local Address
The address of the destination as seen from the inside network.
Port Address Translation (PAT)
Many-to-one address mapping between local and global addresses.
Private Address
A private IP address is the address space allocated by InterNIC to allow organizations to create their own private network. There are three IP blocks (1 class A, 1 class B and 1 class C) reserved for a private use. The computers, tablets and smartphones sitting behind your home, and the personal computers within an organizations are usually assigned private IP addresses.
Public Address
A public IP address is the address that is assigned to a computing device to allow direct access over the Internet. A web server, email server and any server device directly accessible from the Internet are candidate for a public IP address. A public IP address is globally unique, and can only be assigned to a unique device.
RFC 1918
RFC1918，從字面上來看，會以為是某個RFC文件的標題。但實際上並不是，是解釋其三組private address，可看成把這三組private的統稱。
查詢IETF組織所編譯的資料。rfc1918是Address Allocation for Private Internets。等於說rfc1918可以代表private address。其進一步的意思解釋可以參考RFC1918
(參考網址:https://leeilu.blogspot.com/2014/05/rfc1918.html)
Static Network Address Translation (Static NAT)
One-to-one address mapping between local and global addresses.
Dynamic NAT uses a pool of public addresses and assigns them on a first-come, first-served basis.
Global Address
A global address is any address that appears on the outside portion of the network.
Inside Address
The address of the device which is being translated by NAT.
Inside Global Address
The address of source as seen from the outside network.
Inside Local Address
The address of the source as seen from inside the network.
Local Address
A local address is any address that appears on the inside portion of the network.
Network Address Translatioin (NAT)
在電腦網路中，網路位址轉換，也叫做網路掩蔽或者IP掩蔽，是一種在IP封包通過路由器或防火牆時重寫來源IP位址或目的IP地址的技術。這種技術被普遍使用在有多台主機但只通過一個公有IP位址存取因特網的私有網路中。它是一個方便且得到了廣泛應用的技術。當然，NAT也讓主機之間的通訊變得複雜，導致了通訊效率的降低。
Outside Address
The address of the destination device.
Outside Global Address
The address of the destination as seen from the outside network. It is a globally routable IPv4 address assigned to a host on the Internet.
Outside Local Address
The address of the destination as seen from the inside network.
Port Address Translation (PAT)
Many-to-one address mapping between local and global addresses.
Private Address
A private IP address is the address space allocated by InterNIC to allow organizations to create their own private network. There are three IP blocks (1 class A, 1 class B and 1 class C) reserved for a private use. The computers, tablets and smartphones sitting behind your home, and the personal computers within an organizations are usually assigned private IP addresses.
Public Address
A public IP address is the address that is assigned to a computing device to allow direct access over the Internet. A web server, email server and any server device directly accessible from the Internet are candidate for a public IP address. A public IP address is globally unique, and can only be assigned to a unique device.
RFC 1918
RFC1918，從字面上來看，會以為是某個RFC文件的標題。但實際上並不是，是解釋其三組private address，可看成把這三組private的統稱。
查詢IETF組織所編譯的資料。rfc1918是Address Allocation for Private Internets。等於說rfc1918可以代表private address。其進一步的意思解釋可以參考RFC1918
(參考網址:https://leeilu.blogspot.com/2014/05/rfc1918.html)
Static Network Address Translation (Static NAT)
One-to-one address mapping between local and global addresses.
2018年12月22日 星期六
網路原理(一) RSE6 Section 8.2
Stateless Address Autoconfiguration (SLAAC)
SLAAC is a method in which a device can obtain an IPv6 global unicast address without the services of a DHCPv6 server.
Dynamic Host Configuration Protocol for IPv6 (Stateful DHCPv6)
Stateful DHCPv6 is similar to DHCPv4. In this case, the RA message informs the client not to use the information in the RA message.
Router Advertisement (RA) message
RA messages are sent by routers to provide addressing information to clients configured to obtain their IPv6 addresses automatically. The RA message includes the prefix and prefix length of the local segment.
stateless DHCPv6 Option (Router Advertisement and DHCPv6)
The stateless DHCPv6 option informs the client to use the information in the RA message for addressing, but additional configuration parameters are available from a DHCPv6 server.
Stateful DHCPv6 (DHCPv6 only)
This option is the most similar to DHCPv4. In this case, the RA message informs the client not to use the information in the RA message.
Stateless DHCPv6 client
The client sends a DHCPv6 INFORMATION-REQUEST message to the DHCPv6 server requesting only configuration parameters, such as DNS server address.
Stateful DHCPv6 client
The client sends a DHCPv6 REQUEST message to the server to obtain an IPv6 address and all other configuration parameters from the server.
DHCPv6 SOLICIT
客戶機給伺服器發送solicit消息，以便得到Ipv6位址，以及選項中所附帶的配置參數
DHCPv6 ADVERTISE
DHCPv6 REQUEST
客戶機請求更多的配置參數
====Command====
SLAAC is a method in which a device can obtain an IPv6 global unicast address without the services of a DHCPv6 server.
Dynamic Host Configuration Protocol for IPv6 (Stateful DHCPv6)
Stateful DHCPv6 is similar to DHCPv4. In this case, the RA message informs the client not to use the information in the RA message.
Router Advertisement (RA) message
RA messages are sent by routers to provide addressing information to clients configured to obtain their IPv6 addresses automatically. The RA message includes the prefix and prefix length of the local segment.
stateless DHCPv6 Option (Router Advertisement and DHCPv6)
The stateless DHCPv6 option informs the client to use the information in the RA message for addressing, but additional configuration parameters are available from a DHCPv6 server.
Stateful DHCPv6 (DHCPv6 only)
This option is the most similar to DHCPv4. In this case, the RA message informs the client not to use the information in the RA message.
Stateless DHCPv6 client
The client sends a DHCPv6 INFORMATION-REQUEST message to the DHCPv6 server requesting only configuration parameters, such as DNS server address.
Stateful DHCPv6 client
The client sends a DHCPv6 REQUEST message to the server to obtain an IPv6 address and all other configuration parameters from the server.
DHCPv6 SOLICIT
客戶機給伺服器發送solicit消息，以便得到Ipv6位址，以及選項中所附帶的配置參數
DHCPv6 ADVERTISE
| 戶機 |
回應客戶機發送的solicit消息資料 |
DHCPv6 REQUEST
客戶機請求更多的配置參數
====Command====
no ipv6
nd
managed-config-flag
no
ipv6 nd
other-config-flag
ipv6
nd
other-config-flag
ipv6
nd
managed-config-flag
ipv6
dhcp
server pool-name
ipv6
enable
ipv6
address autoconfig
show
ipv6 dhcp
pool
show
ipv6 interface type number
debug
ipv6 dhcp
detail
address
prefix
ipv6
dhcp
server pool-name
ipv6
dhcp
pool pool-name
ipv6
enable
ipv6
address dhcp
show
ipv6 dhcp
binding
ipv6
dhcp
relay destination ipv6_address
show
ipv6 dhcp
interface type number
網路原理(一) RSE6 Section 8.1
Dynamic Host Configuration Protocol (DHCP)
動態主機設定協定（英語：Dynamic Host Configuration Protocol，DHCP）是一個區域網路的網路協定，使用UDP協定工作，主要有兩個用途： 用於內部網路或網路服務供應商自動分配IP位址給用戶
DHCP Discover (DHCPDISCOVER)
The DHCPDISCOVER message finds DHCPv4 servers on the network. Because the client has no valid IPv4 information at bootup, it uses Layer 2 and Layer 3 broadcast addresses to communicate with the server.
DHCP Offer (DHCPOFFER)
When the DHCPv4 server receives a DHCPDISCOVER message, it reserves an available IPv4 address to lease to the client. The server also creates an ARP entry consisting of the MAC address of the requesting client and the leased IPv4 address of the client.
DHCP Request (DHCPREQUEST)
When the client receives the DHCPOFFER from the server, it sends back a DHCPREQUEST message as shown in Figure 4. This message is used for both lease origination and lease renewal.
DHCP Acknowledgment (DHCPACK)
On receiving the DHCPREQUEST message, the server verifies the lease information with an ICMP ping to that address to ensure it is not being used already, creates a new ARP entry for the client lease, and replies with a DHCPACK message as shown in Figure 5.
Operation (OP) Code
Specifies the general type of message. A value of 1 indicates a request message; a value of 2 is a reply message.
Hardware Address Length
Specifies the length of the address.
Hops
Controls the forwarding of messages. Set to 0 by a client before transmitting a request.
動態主機設定協定（英語：Dynamic Host Configuration Protocol，DHCP）是一個區域網路的網路協定，使用UDP協定工作，主要有兩個用途： 用於內部網路或網路服務供應商自動分配IP位址給用戶
DHCP Discover (DHCPDISCOVER)
The DHCPDISCOVER message finds DHCPv4 servers on the network. Because the client has no valid IPv4 information at bootup, it uses Layer 2 and Layer 3 broadcast addresses to communicate with the server.
DHCP Offer (DHCPOFFER)
When the DHCPv4 server receives a DHCPDISCOVER message, it reserves an available IPv4 address to lease to the client. The server also creates an ARP entry consisting of the MAC address of the requesting client and the leased IPv4 address of the client.
DHCP Request (DHCPREQUEST)
When the client receives the DHCPOFFER from the server, it sends back a DHCPREQUEST message as shown in Figure 4. This message is used for both lease origination and lease renewal.
DHCP Acknowledgment (DHCPACK)
On receiving the DHCPREQUEST message, the server verifies the lease information with an ICMP ping to that address to ensure it is not being used already, creates a new ARP entry for the client lease, and replies with a DHCPACK message as shown in Figure 5.
Operation (OP) Code
Specifies the general type of message. A value of 1 indicates a request message; a value of 2 is a reply message.
Hardware Address Length
Specifies the length of the address.
Hops
Controls the forwarding of messages. Set to 0 by a client before transmitting a request.
Transaction Identifier
Used by the client to match the request with replies received from DHCPv4 servers.
=====Commnad====
ip
dhcp
excluded-address
ip
dhcp
pool pool-name
default-router
dns-server
domain-name domain
lease
netbios-name-server
no
service dhcp
show
running-config | section dhcp
show
ip
dhcp
binding
show
ip
dhcp
server statistics
ip
helper-address
網路原理(一) RSE6 Section 7.2
====以下皆為Cisco設備命令====
access-list access-list-number { deny | permit | remark }source [ source-wildcard ][ log ]
show
access-lists
no
access-list access-list-number
ip access-group {access-list-number | access-list-name} { in | out }
ip access-list standard name
clear
access-list counters
access-class access-list-number { in |out }
訂閱：
文章 (Atom)