<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[gotonet的专栏]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/gotonet</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; gotonet]]></copyright><item><title><![CDATA[CISCO PIX防火墙系统管理]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1509150</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1509150</guid><author>gotonet</author><pubDate>Tue, 13 Feb 2007 13:39:00 +0800</pubDate><description><![CDATA[使用Telnet进行远程系统管理（Using Telnet for Remote System Management） IDS系统日志信息（IDS Syslog Messages） 使用DHCP（Using DHCP） 使用SNMP（Using SNMP） 使用SSH（Using SSH） 一、使用Telnet进行远程系统管理（Using Telnet for Remote System Mana]]></description><category></category></item><item><title><![CDATA[Manual IPv6 tunneling ]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1502382</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1502382</guid><author>gotonet</author><pubDate>Mon, 05 Feb 2007 10:05:00 +0800</pubDate><description><![CDATA[R3----------36.1.1.0/24-------R6--------46.1.1.0/24---------R4================================================== hostname r3interface Tunnel0ipv6 address 3FFE:A1:A2:A3::3/127tunnel source 36.1.1.3tu]]></description><category></category></item><item><title><![CDATA[cisco l2tp version 3 config]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1491766</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1491766</guid><author>gotonet</author><pubDate>Wed, 24 Jan 2007 08:45:00 +0800</pubDate><description><![CDATA[500)this.width=500;" border="0" alt="" />r1(config-if)#do wr tBuilding configuration...Current configuration : 5266 byteshostname r1ip cefpseudowire-class testencapsulation l2tpv3ip local interface ]]></description><category></category></item><item><title><![CDATA[OSPF network type ]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1479764</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1479764</guid><author>gotonet</author><pubDate>Thu, 11 Jan 2007 09:18:00 +0800</pubDate><description><![CDATA[OSPF Network BroadcastDefault on broadcast medias (Ethernet / Token Ring)Sends hellos as multicastPerforms DR/BDR ElectionOSPF Network Non-BroadcastDefault on multipoint NBMA medias (Frame Relay / ATM]]></description><category></category></item><item><title><![CDATA[RIP unicast without using Neighbor]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1474716</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1474716</guid><author>gotonet</author><pubDate>Fri, 05 Jan 2007 14:15:00 +0800</pubDate><description><![CDATA[hostname r2interface Loopback0ip address 20.1.1.1 255.255.255.0!interface Ethernet0/0ip address 12.1.1.2 255.255.255.0ip nat outside!router ripversion 2passive-interface Loopback0network 12.0.0.0netwo]]></description><category></category></item><item><title><![CDATA[MQC on subinterface ]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1445165</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1445165</guid><author>gotonet</author><pubDate>Sat, 16 Dec 2006 09:23:00 +0800</pubDate><description><![CDATA[出处：bu.cublog.cnhostname r1class-map match-all VOIPmatch protocol rtpclass-map match-all ICMPmatch access-group 101policy-map police_ICMPclass ICMPpolice cir 16000policy-map 128KVOIPclass VOIPpriorit]]></description><category></category></item><item><title><![CDATA[PIX site-to-site using PAT to Static ]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1445162</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1445162</guid><author>gotonet</author><pubDate>Sat, 16 Dec 2006 09:19:00 +0800</pubDate><description><![CDATA[出处:bu.cublog.cnpix1(config)# wr t: Saved:PIX Version 7.0(1) names!interface Ethernet0nameif outsidesecurity-level 0ip address 172.29.6.1 255.255.255.0 !interface Ethernet1nameif insidesecurity-level]]></description><category></category></item><item><title><![CDATA[IPSec Site-to-Site between routers over PIX ]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1445160</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1445160</guid><author>gotonet</author><pubDate>Sat, 16 Dec 2006 09:18:00 +0800</pubDate><description><![CDATA[Lo0-10.1.1.1/24 Lo0-20.1.1.1/24! !R1----(16.1.1.0/24)---(outside)---PIX----(inside)---26.1.1.0/24--R2hostname NYr1!crypto isakmp policy 10authentication pre-sharegroup 2crypto isakmp key isakey addres]]></description><category></category></item><item><title><![CDATA[Authentication proxy on PIX 6.33 ]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1445159</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1445159</guid><author>gotonet</author><pubDate>Sat, 16 Dec 2006 09:16:00 +0800</pubDate><description><![CDATA[500)this.width=500;" border="0" alt="" />PIX Version 6.3(3)interface ethernet0 100fullinterface ethernet1 100fullinterface ethernet2 auto shutdownnameif ethernet0 outside security0nameif ethernet1 i]]></description><category></category></item><item><title><![CDATA[PIX 7.21 receive digital certificate from Router]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1445155</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1445155</guid><author>gotonet</author><pubDate>Sat, 16 Dec 2006 09:14:00 +0800</pubDate><description><![CDATA[出处:bu.cublog.cn================================================== =====================R6 is a CA server================================================== =====================Router(config)#host r6]]></description><category></category></item><item><title><![CDATA[CISCO 3550 mac acesss-list]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1445153</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1445153</guid><author>gotonet</author><pubDate>Sat, 16 Dec 2006 09:13:00 +0800</pubDate><description><![CDATA[出处：bu.cublog.cnr3>ping 12.1.1.4Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 12.1.1.4, timeout is 2 seconds:!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 m]]></description><category></category></item><item><title><![CDATA[Router Does Not Forward Multicast Packets to Host Due to RPF Failure]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1437531</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1437531</guid><author>gotonet</author><pubDate>Sun, 10 Dec 2006 20:02:00 +0800</pubDate><description><![CDATA[Background InformationWhen troubleshooting multicast routing, the primary concern is the source address. Multicast has a concept of Reverse Path Forwarding check (RPF check). When a multicast packet]]></description><category></category></item><item><title><![CDATA[IPSec site-PIX-site ]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1437526</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1437526</guid><author>gotonet</author><pubDate>Sun, 10 Dec 2006 20:01:00 +0800</pubDate><description><![CDATA[500)this.width=500;" border="0" alt="" />Lab Target: Site-to-Site between R4 and R5 Lo0 over PIXhostname r4crypto isakmp policy 10hash md5authentication pre-sharegroup 2crypto isakmp key cisco a]]></description><category></category></item><item><title><![CDATA[Site-to-site using rsa-encrypted ]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1419330</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1419330</guid><author>gotonet</author><pubDate>Wed, 29 Nov 2006 08:24:00 +0800</pubDate><description><![CDATA[Target: site-to-site between R1 (172.25.1.0/24) and R4 Lo (172.25.2.0/24) using rsa-encryptedhostname r1crypto key pubkey-chain rsaaddressed-key 10.1.1.1address 10.1.1.1key-string305C300D 06092A86]]></description><category></category></item><item><title><![CDATA[萨班斯法案：由来、影响及争论]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1419328</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1419328</guid><author>gotonet</author><pubDate>Wed, 29 Nov 2006 08:23:00 +0800</pubDate><description><![CDATA[2001年12月，美国最大的能源公司——安然公司，突然申请破产保护，此后，公司丑闻不断，规模也“屡创新高”，特别是2002年6月的世界通信会计丑闻事件，“彻底打击了（美国）投资者对（美国）资本市场的信心”（Congress report, 2002）。为了改变这一局面，美国国会和政府加速通过了《萨班斯法案》（以下简称SOX法案），该法案的另一个名称是“公众公司会计改革与投资者保护法案”。法案的第一]]></description><category></category></item><item><title><![CDATA[信息安全的“暗伤” ]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1419327</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1419327</guid><author>gotonet</author><pubDate>Wed, 29 Nov 2006 08:22:00 +0800</pubDate><description><![CDATA[来源：计算机世界 原创-IT胡英--------------------------------------------------------------------------------“城外的人想进去，城内的人想出来，人生的事，大抵如此。” 钱钟书老先生这句名言，用在信息安全领域再恰当不过。 没有进入这一领域的人，将它看成是摆脱IT困境，维持高速发展的最后一轮机会，于是，一窝蜂而上。 已经]]></description><category></category></item><item><title><![CDATA[3900/5600端口镜象配置 ]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1403987</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1403987</guid><author>gotonet</author><pubDate>Wed, 22 Nov 2006 11:01:00 +0800</pubDate><description><![CDATA[1. 配置举例镜像源端口为GigabitEthernet 1/1/1，对端口接收和发送的报文都进行镜像镜像目的端口为GigabitEthernet 1/1/4配置1： system-view[Quidway] mirroring-group 1local[Quidway] interface gigabitEthernet 1/1/4[Quidway-GigabitEthernet1/1/4] m]]></description><category></category></item><item><title><![CDATA[无法访问某高校校园内部WebServer问题的处理 ]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1403983</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1403983</guid><author>gotonet</author><pubDate>Wed, 22 Nov 2006 11:00:00 +0800</pubDate><description><![CDATA[某高校采用电信的出口作为内部上网的默认出口，提供校园内部上网，并通过教育网的出口访问教育网。组网图如下：500)this.width=500;" border="0" alt="" src="http://blog.chinaunix.net/upfile/061108141359.gif" /> 故障现象是无论是通过输入域名还是直接输入IP地址都无法访问内部的WebServer ]]></description><category></category></item><item><title><![CDATA[华为Secpath典型配置案例 ]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1403981</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1403981</guid><author>gotonet</author><pubDate>Wed, 22 Nov 2006 10:59:00 +0800</pubDate><description><![CDATA[1         时间段访问控制列表（ACL）：        功能需求及组网说明:    500)this.width=500;" border="0" alt="" src="http://blog.chinaunix.net/upfile/061021090826.gif" /> 『组网需求』：要求内部用户，在8：00－12：00和13：30－18：00可以出公]]></description><category></category></item><item><title><![CDATA[secpath nat的tcp会话数的限制设置 ]]></title><link>https://blog.youkuaiyun.com/gotonet/article/details/1403979</link><guid>https://blog.youkuaiyun.com/gotonet/article/details/1403979</guid><author>gotonet</author><pubDate>Wed, 22 Nov 2006 10:58:00 +0800</pubDate><description><![CDATA[配置如下：# 创建ACL并配置规则，来匹配源IP地址为192.168.1.2/24的数据。 system-view[Quidway] acl number 2000[Quidway-acl-basic-2000] rule 0 permit source 192.168.1.2 0[Quidway-acl-basic-2000] quit# 创建连接数限制策略，并配置子规则，对单一源地址发起的连接]]></description><category></category></item></channel></rss>