表 2 2 成绩表2
Chapter5: Implementing IPsec
5.1 Configuration the lab’s platform for IPv4
5.1.1 The requirement analysis
We ought to have more than three subnets during the lab for the analysis of Internet Protocol (IP) security. The first subnet and the second subnet are used for communicating with one another. The third subnet acts as opponent of the first or second or both subnets. The user of the third subnet wants to know the messages which belong to his opponent. And he may obtain the secret which belong to the first and second subnet users. A message is to be transferred from first party to the second party across some sort of Internet. When the first and second subnets user exchange their information, a logical information channel is established by defining a route through the internet from source to destination and by the operative use of communication protocols by (e .g ,TCP/IP) the subnet’s users. The third subnet user can implement passive attack at the internet .
The structure of the lab’s platform
From the following drawing, you will know that we have three subnets 101.1.1.0/24,102.2.2.0/24 103.3.3.0/24 and 104.4.4.0/24. We have three routers and a lot of personal computers and switches. The four subnets’s IP addresses were allocated by the DHCP server.
5.1.2 Configuration the platform
Configuration of the server
The server is windows server 2003 enterprise edition. First, you must install the DHCP service from Add or Remove Programs in Control Panel. After install a DHCP server, we can use the DHCP console to perform these basic administrative server tasks:
Create three scopes
View and modify scope properties for scopes, such as setting additional exclusion ranges
Active scopes
Monitor scope leasing activity by reviewing the active leases for each scope
Create reservations in scopes as needed for DHCP clients that require a permanent IP address for leased use.
After configuration success, we can look DHCP console, four scopes were activated.
DHCP console
Configure routers
At the router2, first, we assign the interface Ethernet 0/0, 0/1, interface serial 1/0, 1/1 with the following IP addresses 101.1.1.254/24, 202.203.132.115/26, 10.1.1.2/30, 11.1.1.1/30 .Second, we must add three static route to router1 and router3.
We can see the result with the following configuration file
#
interface Ethernet0/0
ip address 101.1.1.254 255.255.255.0
#
interface Ethernet0/1
ip address 202.203.132.115 255.255.255.192
#
interface Serial1/0
link-protocol ppp
ip address 10.1.1.2 255.255.255.252
#
interface Serial1/1
link-protocol ppp
ip address 11.1.1.1 255.255.255.252
#
ip route-static 102.2.2.0 24 11.1.1.2
ip route-static 103.3.3.0 24 10.1.1.1
ip route-static 104.4.4.0 24 11.1.1.2
上一页 [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] ... 下一页 >>