网络与信息安全管理员练习题

流星

防火墙配置：

security-policy
rule name deny_PC1_to_web
  source-zone trust
  destination-zone untrust
  source-address 10.10.10.1 mask 255.255.255.255
  destination-address 20.20.20.1 mask 255.255.255.255
  action deny
rule name log_internet
  policy logging
  session logging
  traffic logging enable
  action permit



firewall defend time-stamp enable
firewall defend route-record enable
firewall defend tracert enable
firewall defend icmp-redirect enable
firewall defend action discard


firewall blacklist enable
firewall blacklist item source-ip 10.20.20.20

流星

AC配置

ap-group name apgroup1
ap-id 0 ap-mac 001a-2b3c-4d5e
  ap-name kaoshi
  ap-group apgroup1
ap-id 1 ap-mac 001a-2b3c-4d5f
  ap-name ceshi
  ap-group default

流星

交换机2个端口做隔离

interface GigabitEthernet0/0/1
port link-type access
port default vlan 20
port-isolate enable group 1
#
interface GigabitEthernet0/0/2
port link-type access
port default vlan 20
port-isolate enable group 1
#