《安全功能命令》由会员分享，可在线阅读，更多相关《安全功能命令（69页珍藏版）》请在金锄头文库上搜索。
1、目 录第1章 ACL配置命令11.1 absolute-periodic/periodic11.2 absolute start21.3 access-list(ip extended)21.4 access-list(ip standard)31.5 access-list(mac extended)41.6 access-list(mac-ip extended)51.7 access-list(mac standard)61.8 clear access-group statistic interface71.9 firewall71.10 firewall default81.11 i
2、p access extended81.12 ip access standard81.13 ipv6 access-list91.14 ipv6 access standard101.15 ipv6 access extended101.16 ip|ipv6|mac|mac-ip access-group101.17 mac access extended111.18 mac-ip access extended121.19 permit | deny(ip extended)121.20 permit | deny(ip standard)131.21 permit | deny(ipv6
3、 extended)131.22 permit | deny(ipv6 standard)141.23 permit | deny(mac extended)151.24 permit | deny(mac-ip extended)161.25 show access-lists181.26 show access-group191.27 show firewall201.28 show ipv6 access-lists201.29 show time-range211.30 time-range21第2章 802.1x配置命令232.1 debug dot1x detail232.2 de
4、bug dot1x error232.3 debug dot1x fsm242.4 debug dot1x packet242.5 dot1x accept-mac242.6 dot1x eapor enable252.7 dot1x enable252.8 dot1x ipv6 passthrough262.9 dot1x guest-vlan262.10 dot1x macfilter enable272.11 dot1x max-req272.12 dot1x user free-resource272.13 dot1x max-user macbased282.14 dot1x max
5、-user userbased282.15 dot1x port-control282.16 dot1x port-method292.17 dot1x privateclient enable302.18 dot1x re-authenticate302.19 dot1x re-authentication302.20 dot1x timeout quiet-period312.21 dot1x timeout re-authperiod312.22 dot1x timeout tx-period312.23 dot1x unicast enable322.24 dot1x web auth
6、entication enable322.25 dot1x web redirect332.26 dot1x web redirect enable332.27 show dot1x33第3章 端口、VLAN中MAC、IP数量限制命令363.1 switchport mac-address dynamic maximum363.2 vlan mac-address dynamic maximum363.3 switchport arp dynamic maximum373.4 switchport nd dynamic maximum373.5 ip arp dynamic maximum38
7、3.6 ipv6 nd dynamic maximum383.7 mac-address query timeout393.8 show mac-address dynamic count393.9 show arp-dynamic count403.10 show nd-dynamic count403.11 debug switchport mac count413.12 debug switchport arp count413.13 debug switchport nd count413.14 debug vlan mac count423.15 debug ip arp count
8、423.16 debug ipv6 nd count43第4章 AM配置命令444.1 am enable444.2 am port444.3 am ip-pool444.4 am mac-ip-pool454.5 no am all454.6 show am45第5章 安全特性配置命令475.1 dosattack-check srcip-equal-dstip enable475.2 dosattack-check ipv4-first-fragment enable475.3 dosattack-check tcp-flags enable475.4 dosattack-check sr
9、cport-equal-dstport enable485.5 dosattack-check tcp-fragment enable485.6 dosattack-check tcp-segment485.7 dosattack-check icmp-attacking enable495.8 dosattack-check icmpV4-size495.9 dosattack-check icmpv6-size49第6章 TACACS+命令516.1 tacacs-server authentication host516.2 tacacs-server key516.3 tacacs-s
10、erver timeout526.4 debug tacacs-server52第7章 RADIUS配置命令537.1 aaa enable537.2 aaa-accounting enable537.3 aaa-accounting update537.4 debug aaa packet547.5 debug aaa detail attribute547.6 debug aaa detail connection557.7 debug aaa detail event557.8 debug aaa error557.9 radius nas-ipv4567.10 radius nas-i
11、pv6567.11 radius-server accounting host567.12 radius-server authentication host577.13 radius-server dead-time587.14 radius-server key587.15 radius-server retransmit587.16 radius-server timeout597.17 radius-server accounting-interim-update timeout597.18 show aaa authenticated-user607.19 show aaa auth
12、enticating-user607.20 show aaa config617.21 show radius count62第8章 SSL配置命令638.1 ip http secure-server638.2 ip http secure-port638.3 ip http secure- ciphersuite638.4 show ip http secure-server status648.5 debug ssl64第9章 IPv6安全RA命令659.1 ipv6 security-ra enable659.2 ipv6 security-ra enable659.3 show ip
13、v6 security-ra659.4 debug ipv6 security-ra66 版权所有2009，迈普通信技术股份有限公司，保留所有权利 65第1章 ACL配置命令1.1 absolute-periodic/periodic命令：no absolute-periodicMonday|Tuesday|Wednesday|Thursday|Friday|Saturday| SundaytoMonday|Tuesday|Wednesday|Thursday|Friday|Saturday| Sunday noperiodicMonday+Tuesday+Wednesday+Thursday
14、+Friday+Saturday+Sunday|daily| weekdays | weekend to 功能： 定义一周内的各种不同要求的时间范围，每周都循环这个时间。参数：Friday Friday(星期五) Monday Monday (星期一) Saturday Saturday (星期六) Sunday Sunday (星期日) Thursday Thursday （星期四） Tuesday Tuesday (星期二) Wednesday Wednesday (星期三) daily Every day of the week （每天） weekdays Monday thru Friday （星期一到星期五） weekend Saturday and Sunday （星期六到星期日） start_time 开始时间点，HH:MM:SS (小时：分钟：秒) end_time 结束时间点，HH:MM:SS (小时：分钟：秒)注：time-range轮询时间是1分钟一次，所以时间的误差=1分钟。命令模式：时间范围模式缺省情况：没有时间范围配置使用指南：周期性的时间和日期，周期是定义每周的16 和周日的具体时间段，可以同时配置多个周期性时段，
