网络安全与防护全套配套课件迟恩宇实训指导4.2-3基于思科路由器的IOS入侵检测功能配置CCP.ppt

《网络安全与防护全套配套课件迟恩宇实训指导4.2-3基于思科路由器的IOS入侵检测功能配置CCP.ppt》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、计算机网络安全技术与实施学习情境4：实训任务4.2基于思科路由器的IOS入侵检测功能配置国家高等职业教育网络技术专业教学资源库内容介绍任务场景1任务相关工具软件介绍2任务设计、规划3任务实施及方法技巧4任务检查与评价5任务总结6任务场景任务相关工具软件介绍利用CCP对CISCO路由器IOS配置入侵检测与防御功能（没有路由器硬件可用模拟器）利用CCP对CISCO路由器IOS配置入侵检测与防御功能任务设计、规划R1XP:10.41.3.216F0/0:10.41.3.211WIN7:10.41.3.123CCP+JRE网关10.41.3.254R2F

2、0/1任务实施及方法技巧IncreasetheJavaMemoryHeapSizeCCPneedsaminimumJavamemoryheapsizeof256MBtosupportIOSIPS.ExitCCPandopentheWindowsControlPanel.ClickontheJavaoptionwhichopenstheJavaControlPanel.SelecttheJavatabandclickontheViewbuttonundertheJavaAppletRuntimeSettings.IntheJavaRuntimePa

3、rameterfieldenter-Xmx256mandclickOK.ConfiguringIOSIPSusingCCPSelecttheInterfacesDownloadtheSignatureFileSelecttheSignatureFileConfigurethePublicKeySpecifyLocationofSignatureFilesSummaryModifyingSignaturesThisexampleshowshowtoretireindividualsignatures.Inthisexample,signature6

4、130withsubsigIDof10isretired.R1#configureterminalEnterconfigurationcommands,oneperline.EndwithCNTL/Z.R1(config)#ipipssignature-definitionR1(config-sigdef)#signature613010R1(config-sigdef-sig)#statusR1(config-sigdef-sig-status)#retiredtrueR1(config-sigdef-sig-status)#exitR1(co

5、nfig-sigdef-sig)#exitR1(config-sigdef)#exitDoyouwanttoacceptthesechanges?[confirm]yR1(config)#ModifyingSignaturesThisexampleshowshowtounretireallsignaturesthatbelongtotheIOSIPSBasiccategory.R1#configureterminalEnterconfigurationcommands,oneperline.EndwithCNTL/Z.R1(config)#ipi

6、pssignature-categoryR1(config-ips-category)#categoryios_ipsbasicR1(config-ips-category-action)#retiredfalseR1(config-ips-category-action)#exitR1(config-ips-category)#exitDoyouwanttoacceptthesechanges?[confirm]yR1(config)#ChangeActionsforaSignatureThisexampleshowshowtochangesi

7、gnatureactionstoalert,drop,andresetforsignature6130withsubsigIDof10.R1#configureterminalEnterconfigurationcommands,oneperline.EndwithCNTL/Z.R1(config)#ipipssignature-definitionR1(config-sigdef)#signature613010R1(config-sigdef-sig)#engineR1(config-sigdef-sig-engine)#event-acti

8、onproduce-alertR1(config-sigdef-sig-engine)#event-actiondeny-packet-