网络常见安全威胁及DCN解决方案-第三稿.doc

网络常见安全威胁及DCN解决方案 神州数码网络公司 目录  TOC \o 1-4 \h \z \u  HYPERLINK \l _Toc170029247 专题一 ARP常见安全威胁及解决方案  PAGEREF _Toc170029247 \h 5  HYPERLINK \l _Toc170029248 1．1 ARP相关威胁  PAGEREF _Toc170029248 \h 5  HYPERLINK \l _Toc170029249 1．1．1 ARP欺骗  PAGEREF _Toc170029249 \h 5  HYPERLINK \l _Toc170029250  ARP欺骗主机  PAGEREF _Toc170029250 \h 5  HYPERLINK \l _Toc170029251  ARP仿冒网关  PAGEREF _Toc170029251 \h 6  HYPERLINK \l _Toc170029252 1．1．2 ARP 扫描及ARP Flood攻击  PAGEREF _Toc170029252 \h 7  HYPERLINK \l _Toc170029253 1．2 ARP威胁防范原理  PAGEREF _Toc170029253 \h 8  HYPERLINK \l _Toc170029254 1．2．1 ARP介绍  PAGEREF _Toc170029254 \h 8  HYPERLINK \l _Toc170029255 1．2．1．1 ARP概念  PAGEREF _Toc170029255 \h 8  HYPERLINK \l _Toc170029256 1．2．1．2 MAC地址到IP地址的转换  PAGEREF _Toc170029256 \h 9  HYPERLINK \l _Toc170029257 1．2．1．3 ARP缓存表  PAGEREF _Toc170029257 \h 10  HYPERLINK \l _Toc170029258 1．2．2 ARP协议攻击原理  PAGEREF _Toc170029258 \h 11  HYPERLINK \l _Toc170029259 1．3 DCN解决方案  PAGEREF _Toc170029259 \h 11  HYPERLINK \l _Toc170029260 1．3．1 接入交换机ACL防止ARP仿冒网关  PAGEREF _Toc170029260 \h 11  HYPERLINK \l _Toc170029261 1．3．2 DCN接入交换机＋DCBI＋静态IP地址分配  PAGEREF _Toc170029261 \h 12  HYPERLINK \l _Toc170029262 1．3．3 DCN接入交换机＋动态IP地址分配  PAGEREF _Toc170029262 \h 16  HYPERLINK \l _Toc170029263 1．3．4 DCN汇聚交换机（接入交换机是其它品牌）  PAGEREF _Toc170029263 \h 17  HYPERLINK \l _Toc170029264 1．3．5在接入交换机或??聚交换机上防范ARP扫描  PAGEREF _Toc170029264 \h 19  HYPERLINK \l _Toc170029265 专题二 DHCP常见安全威胁及解决方案  PAGEREF _Toc170029265 \h 22  HYPERLINK \l _Toc170029266 2.1 DHCP常见威胁  PAGEREF _Toc170029266 \h 22  HYPERLINK \l _Toc170029267 2．1．1DHCP拒绝服务攻击  PAGEREF _Toc170029267 \h 22  HYPERLINK \l _Toc170029268 2．1．2非法DHCP Server  PAGEREF _Toc170029268 \h 22  HYPERLINK \l _Toc170029269 2.2防范原理  PAGEREF _Toc170029269 \h 23  HYPERLINK \l _Toc170029270 2．2．1 DHCP协议介绍  PAGEREF _Toc170029270 \h 23  HYPERLINK \l _Toc170029271