HP J8697A, Руководство по обеспечению безопасности доступа

Страница: 243 / 390

1
2
3
4
5
6
7
8
9
10
11
12
Traffic/Security Filters
Filter Types and Operation
ProCurve(config)# show filter 26
Tra ffic/Security Filters
Fi lter Type : Source Port
So urce Port : 1
De st Port Type | A ction
-- ---------------- + ------------------------
10/100TX | Forward
10/100TX | Forward
10/100TX | Forward
10/100TX | Forward
10/100TX | Forward
10/100TX | Forward
10/100TX | Drop
10/100TX | Forward
10/100TX | Forward
10/100TX | Drop
10/100TX | Drop
10/100TX | Forward
. . .
As the company grows, more resources are required in accounting. Two
additional accounting workstations are added and attached to ports 12 and
13. A second server is added attached to port8.
Accounting Server 1 Port 7
Port 1
Router to the
Internet
Port 12
Accounting Workstation 3
Port 13
Accounting Workstation 4
Network Design
1. Accounting Workstations may only send traffic to the Accounting Server.
2. No Internet traffic may be sent to the Accounting Server or Workstations.
3 All other switch ports may only send traffic to Port 1.
Port 10
Accounting Workstation 1
Port 11
Accounting Workstation 2
Accounting Server 2 Port 8
Figure 9-5. Expanded Network Configuration for Named Source-Port Filters
Example
9-13