Secure Shell (SSH)
Secure
Shell是一種加密的網路傳輸協定，可在不安全的網路中為網路服務提供安全的傳輸環境。SSH通過在網路中建立安全隧道來實現SSH用戶端與伺服器之間的連接。雖然任何網路服務都可以通過SSH實現安全傳輸，SSH最常見的用途是遠端登入系統，人們通常利用SSH來傳輸命令列介面和遠端執行命令。
show ip ssh version 2
crypto key generate rsa
crypto key zeroize rsa
username username secret password
transport input ssh
login local
show ip ssh
static secure mac address
MAC addresses that are manually configured on a port by using the switchport port-security mac-address mac-address interface configuration mode command. MAC addresses configured in this way are stored in the address table and are added to the running configuration on the switch.
dynamic secure mac address
MAC addresses that are dynamically learned and stored only in the address table. MAC addresses configured in this way are removed when the switch restarts.
sticky secure mac address
MAC addresses that can be dynamically learned or manually configured, then stored in the address table and added to the running configuration.
show port-security
show port-security mac-address
show port-security mac-address sticky
show port-security interface
protect
When the number of secure MAC addresses reaches the limit allowed on the
port, packets with unknown source addresses are dropped until a
sufficient number of secure MAC addresses are removed, or the number of
maximum allowable addresses is increased. There is no notification that a
security violation has occurred.
restrict
When the number of secure MAC addresses reaches the limit allowed on the
port, packets with unknown source addresses are dropped until a
sufficient number of secure MAC addresses are removed, or the number of
maximum allowable addresses is increased. In this mode, there is a
notification that a security violation has occurred.
shutdown
n this (default) mode, a port security violation causes the interface to
immediately become error-disabled and turns off the port LED. It
increments the violation counter. When a secure port is in the
error-disabled state, it can be brought out of this state by entering
the shutdown interface configuration mode command followed by the no shutdown command.
switchport port-security violation { protect | restrict | shutdown }
To change the violation mode on a switch port, use the switchport port-security violation {protect | restrict | shutdown} interface configuration mode command.
switchport port-security maximum #
show port-security interface interface-id
show port-security address
secure-shutdown
沒有留言:
張貼留言