8/8/2019 cisco ip security

1/21

Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->

Zchdi >

H`trldyjthl` tl HVZij QV@z

Vrizi`tid ox

Dr. Vitir K. Wicjbir# Jbiznvinei @itjrnatzmi`

Zchdi ?

Nolyt tbi Zvineir

Dr. Viti Wicjbir

Jhzjl JJHI *>77:# JJZH *846>4# JJHV

@itwlre dizhg` ! mn`ngimi`t jl`zycth`g

Ztlje ~yltnthl` ahrm# :666 rlytirz# TJV,HV

Zijl`d ztlje ~yltnthl` ahrm# ?666 rlytirz# YDVorlndjnztz

Bltic jbnh`# >666 rlytirz# Z@N

Glqir`mi`t ngi`jx# >966 rlytirz

Tinjb mn`x la tbi Jhzjl jlyrziz

I`tirvrhzi @itwlreh`g Mngn{h`i nrthjciz bttv;,,www`itjrnatzmi``it,wicjbir,vnvirz

8/8/2019 cisco ip security

2/21

Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi-?

Zchdi :

Ngi`dn

H`trldyjthl` n`d Mlthqnthl`

HVZij Onzhjz

I`tirvrhzi HVZij QV@

Mn`ngh`g QV@

Wrnv-yv

Zchdi 4

Wbx Dl Wi Jnri6

Tbi 4 Ztivz la HVZij ZN Iztnochzbmi t

> Blzt N zi`dz h`tirizth`g trnaahj alr Blzt O

? _lytir N n`d O `iglthnti n` HEI Vbnzi > zizzhl` n`d nytbi`thjnti

HEI ZNHEI ZN HEI Vbnzi >

: _lytir N n`d O iglthnti n` HEI Vbnzi ? zizzhl` n`d ijbn`gi eix

HEI Vbnzi ? HVZij ZNHVZij ZN

4 H`alrmnthl` hz ijbn`gid qhn HVZij ty``ic

HVZij Ty``ic

Blzt N Blzt O_lytir N _lytir O

8/8/2019 cisco ip security

6/21

Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi-1

Zchdi >>

Wbnt tl I`jrxvt

Tbi jrxvtl mnv xly jl`ahgyri riairi`jizn` njjizz chzt alr h`tirizth`g vnjeitz

Wbnt tl i`jrxvt "lytoly`d(

Wbnt tl dijrxvt "h`oly`d(

Ha tbi rlytir i`jrxvtz lr dijrxvtz tbiwrl`g vnjeit# ht gitz `l`zi`zi n`d n ondjbijezym dhzjnrdid vnjeit.

Zchdi >?

HVZij Trlyocizbllth`g Thvz

Tbi twl i`dz bnqi tl ngrii l` tbi qnrhlyzjblhjiz Blw tl dl HEI "HEI vlchjx(

Nytbi`thjnthl` mitbld# zbnrid zijrit lr JN# itj

NB qirzyz IZV

Ty``ic qirzyz trn`zvlrt

Mizzngi bnzbh`g zjbimi

Xly `iid rlyth`g tl oi noci tl dichqir vnjeitz

HVZij zlyrji nddrizz nt l`i i`d myzt mntjbdizth`nthl` nt tbi ltbir

Xly `iid jl`zhzti`t jrxvtl njjizz chztz... Tbi twl i`dvlh`t NJCz `iid tl mhrrlr injb ltbir

Yzi tbi 4 ztivz tl trlyocizbllt

8/8/2019 cisco ip security

7/21

Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi-7

Zchdi >:

Ngi`dn

H`trldyjthl` n`d Mlthqnthl`

HVZij Onzhjz

I`tirvrhzi HVZij QV@

Mn`ngh`g QV@

Wrnv-yv

Zchdi >4

Dizhg` Nzzymvthl`z

Bhgb nqnhcnohchtx n`d anhclqir whtb anztjl`qirgi`ji

Zyvvlrt alr dx`nmhj rlyth`g

Nohchtx tl jnrrx dhqirzi trnaahj# h`jcydh`g HVmycthjnzt# mycth-vrltljlc

Jl`zirqnthqi JVY ciqicz

_lytir-onzid "qirzyz QV@ jl`ji`trntlr(

8/8/2019 cisco ip security

8/21

Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi-2

Zchdi >9

Eix Dizhg` Jlmvl`i`tz

Jhzjl QV@ rlytirz nz bind-i`d QV@tirmh`nthl`

Jhzjl njjizz rlytirz nz orn`jbtirmh`nthl`

Yzi bnrdwnri HVZij njjicirnthl`

HVZij IZV Ty``ic mldi

G_I ty``icz# dync ztnr tl twl bind-i`drlytirzNt B^ lr twl bind-i`d zhtiz alr gilgrnvbhj

dhqirzhtx H`tir`it zirqhjiz arlm n` HZV

Zchdi >1

I`tirvrhzi HVZij QV@

HZV

G_I % HVZij ty``icz

_imltiLaahjiz

Ji`trncZhti"z(

8/8/2019 cisco ip security

9/21

Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi-8

Zchdi >7

Wbx G_I whtb HVZij2

Lqirbind

Jlzt "G_I % HVZij(; ?4 mlri oxtiz labindir "lqirbind(

Tltnc bindirz nddid; 71 oxtiz

HVZij Ty``ic

HV Bindir

?6 O

IZV Bindir

:? O# qnrhnoci

G_I HV

Bindir

?6 O

G_I

Bindir

4 O

HV

Bindir

?6 O

Vnxclnd

8/8/2019 cisco ip security

10/21

Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->6

Zchdi >8

Nqlhdh`g Arngmi`tnthl`

Wi wn`t tl nqlhd arngmi`th`g tbi HVZijvnjeitz

Tbix bnqi tl oi ri-nzzimocid nt tbi tirmh`nthl`rlytir tl oi dijrxvtid

_i-nzzimocx hz vrljizz zwhtjbid

Zclw % JVY hmvnjt

Zl jrinti arngmi`tz OIAL_I HVZij i`jrxvtz.

_idyji G_I ty``ic MTY tl >466% Oxtiz

Jl`zhdir i`noch`g Vntb MTY Dhzjlqirx l` tbi

ty``icz

Zchdi ?6

Vntb MTY Dhzjlqirx

Vntb MTY Dhzjlqirx hz yzid ox jyrri`t n`driji`t Y@HR n`d Wh`dlwz zirqirz Tbix zi`d cnrgi vnjeitz whtb DA zit

H`tirqi`h`g rlytirz `iidh`g zmnccir MTY zi`d onje HJMVmizzngi whtb lvthl` h`dhjnth`g dizhrid arnmi zh{i

Vrlocim; zlmi wio , zirqir zhtiz oclje ncc HJMVvnjeitz _izyct; cnrgi wio hmngiz# ATV ahci trn`zairz mxztirhlyzcx

anhc# oyt l`cx tl zlmi zhtiz

Yzi rlytir dianyct# ty``icz `lt dlh`g V-MTY-D

Yzi rlytir dianyct; Jhzjl G_I n`d HVZij ty``icz rizit

DA=> tl DA=6 n`d arngmi`t Jhzjl Vri-Arngmi`tnthl` alr HVZij QV@ aintyri

Tbhz vcyz G_I MTY la >466 min`z `l V-MTY-D hzzyiziqi` whtb wio trnaahj qhn HVZij % G_I ty``icz

8/8/2019 cisco ip security

11/21

Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->>

Zchdi ?>

Wbhjb _lytir?

Zchdi ?:

HVZij Zi~yi`ji @ymoirz

HVZij nczl yziz zi~yi`ji `ymoirz alrn`th-rivcnx vrltijthl`

Lyt-la-lrdir vnjeitz jn` cind tl drlvvid vnjeitz.

Jl`jcyzhl`; vrhlrhtx ~yiyh`g n`d clnd-oncn`jh`gjn` cind tl drlvz h` n` HVZij i`qhrl`mi`t.

Mnei l`i G_I ty``ic vrhmnrx whtb zh`gcivriairrid vntb alr injb rimlti zhti

Dx`nmhj rlyth`g anhclqir vrizirqid

Jn` yzi h`tiranji dicnx vnrnmitir tl vriair l`i

G_I ty``ic lqir tbi ltbir "ha oltb bind i`drlytirz nt znmi zhti(

Zchdi ?4

Zirqhji Vrlqhdir

HZV

_imltiLaahjiz

Ji`trncZhti"z(

@iid glldzirqhji biri.

8/8/2019 cisco ip security

13/21

Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->:

Zchdi ?9

Zirqhji Vrlqhdir?

Mn`x lr iqi` mlzt HZVz dl `lt bl`lr tbi C: ^lZmnreh`gz Xlyr qlhji trnaahj mnx ivirhi`ji y`njjivtnoci dicnx lr khttir

Wbi`iqir vlzzhoci# xly `iid ZCNz Jlqirh`g lqirncc dicnx n`d khttir# rivnhr thmi# itj

Lr alr ^lZ-nwnri zirqhji gynrn`tiih`g jirtnh` dicnx n`d khttirciqicz alr qnrhlyz jcnzziz la trnaahj# onzid l` ngriid-yvl`mnreh`gz

Ltbirwhzi# xly jn` divclx n`d cntir dhzjlqir xlyr HVZij QV@ hz`twlreh`g qirx wicc; `l rijlyrzi.

Mycthvci HZVz hz bnrdir ZCNz gi`irnccx l`cx nvvcx whtbh` n zh`gci HZVz `itwlre

Oiwnri; zlmi blmi jnoci ! DZC zirqhjiz oclje HVZijy`cizz oyzh`izz grndi zirqhji hz vnhd alr

Zchdi ?1

ZCNz

JV@ Mycth-zirqhji QV@ ztn`dnrdz;

Khttircizz tbn` lr i~ync tl ?6 mzij

Dicnxcizz tbn` lr i~ync tl 16 mzij l`i wnx

Vnjeit Clzzcizz tbn` lr i~ync tl 69 virji`t

8/8/2019 cisco ip security

14/21

Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->4

Zchdi ?7

Jl`ahgyrnthl` Ztivz

Ztiv >; Jl`ahgyri HEI vlchjx

Ztiv ?; Zvijhax HVZij trn`zalrm n`d

vrltljlc

Ztiv :; Jrinti njjizz chztz "NJCz( alri`jrxvthl`

Ztiv 4; Jl`ahgyri jrxvtl mnv

Ztiv 9; Nvvcx jrxvtl mnv

Zchdi ?2

I`tirvrhzi HVZij QV@

HZV

_imltiLaahji

Ji`trncZhti"z(

>8?>12>>

>8?>12??

>6669

>6661

>61616>

8/8/2019 cisco ip security

15/21

Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->9

Zchdi ?8

Znmvci; HEI Vlchjx

h`tiranji AnztItbir`it>,6

hv nddrizz >8?>12>>

?99?99?996

.

jrxvtl hznemv vlchjx >

i jr :diz

nytbi`thjnthl` vri-zbnri

jrxvtl hznemv eix mxohgzijrit

nddrizz >8?>12??

h`tiranji z6,6

hv nddrizz >8?>12??

?99?99?996

.

jrxvtl hznemv vlchjx >

i`jr :diz

nytbi`thjnthl` vri-zbnri

jrxvtl hznemv eix mxohgzijrit

nddrizz >8?>12>>

Bind I`d _lytir Orn`jb _lytir

Zchdi :6

Znmvci; HVZij Trn`zalrm n`d Vrltljlc

jrxvtl hvzij trn`zalrm-zit

qv`-t-tizt izv-:diz

izv-zbn-bmnj

jrxvtl hvzij trn`zalrm-zit

qv`-t-tizt izv-:diz

izv-zbn-bmnj

Bind I`d _lytir Orn`jb _lytir

8/8/2019 cisco ip security

16/21

Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->1

Zchdi :>

Znmvci; I`jrxvthl` NJCz

hv njjizz-chzt iti`did

qv`-ztnthj-> virmht gri

blzt >8?>12>> blzt

>8?>12??

hv njjizz-chzt iti`did

qv`-ztnthj-? virmht gri

blzt >8?>12?? blzt

>8?>12>>

Bind I`d _lytir Orn`jb _lytir

Zchdi :?

Znmvci; Jrxvtl Mnv

jrxvtl mnv ztnthj-mnv-vkw>

cljnc-nddrizz

AnztItbir`it>,6

jrxvtl mnv ztnthj-mnv-vkw> >

hvzij-hznemv

zit viir >8?>12??

zit trn`zalrm-zit qv`-t-tizt

mntjb nddrizz qv`-ztnthj->

jrxvtl mnv ztnthj-mnv-vkw?

cljnc-nddrizz Zirhnc6,6

jrxvtl mnv ztnthj-mnv-vkw? >

hvzij-hznemv

zit viir >8?>12>>

zit trn`zalrm-zit qv`-t-tizt

mntjb nddrizz qv`-ztnthj-?

Bind I`d _lytir Orn`jb _lytir

8/8/2019 cisco ip security

17/21

Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->7

Zchdi ::

Znmvci; Nvvcx Jrxvtl Mnv

h`tiranji Ty``ic>

hv nddrizz >6669

?99?99?99?9?

ty``ic zlyrji >8?>12>>

ty``ic dizth`nthl`

>8?>12??

jrxvtl mnv ztnthj-mnv-vkw>

.

h`tiranji AnztItbir`it>,6

hv nddrizz >8?>12>>

?99?99?996jrxvtl mnv ztnthj-mnv-vkw>

h`tiranji Ty``ic>

hv nddrizz >6661

?99?99?99?9?

ty``ic zlyrji >8?>12??

ty``ic dizth`nthl` >8?>12>>

jrxvtl mnv ztnthj-mnv-vkw?

.

h`tiranji Zirhnc6,6

on`dwhdtb >9:1

hv nddrizz >8?>12??

?99?99?996

jrxvtl mnv ztnthj-mnv-vkw?

Bind I`d _lytir Orn`jb _lytir

Zchdi :4

Ngi`dn

H`trldyjthl` n`d Mlthqnthl`

HVZij Onzhjz

I`tirvrhzi HVZij QV@

Mn`ngh`g QV@

Wrnv-yv

8/8/2019 cisco ip security

18/21

Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->2

Zchdi :9

Jhzjl QV@ @itwlre Mn`ngimi`t Tllcz

JhzjlWlrez QV@ , Zijyrhtx Mn`ngimi`t Zlcythl` "QMZ(h`jcydiz Mn`ngimi`t Ji`tir "MJ( alr HDZ Zi`zlrz

Mn`ngimi`t Ji`tir alr QV@ _lytirz

Mn`ngimi`t Ji`tir alr VHR Ahriwnccz

Ji`trnch{id jl`ahgyrnthl` n`d mn`ngimi`t la diqhjiz

Ml`htlrh`g Ji`tir alr Zijyrhtx

Ji`trnc HDZ iqi`t zlatwnri# w, jlrricnthl`# `lthahjnthl`# rivlrtz

QV@ Ml`htlr

Trnje ztntyz la QV@ diqhjiz# w, drhcc-dlw` rivlrth`g

HDZ Blzt Zi`zlr

Nytl-Yvdnti Zirqir

Vycc mldic la dhztrhoythl` la hmngiz n`d jl`ahgyrnthl`z

_izlyrji Mn`ngir Izzi`thncz "_MI(# JhzjlQhiw# Jlmml` Zirqhjiz

Zchdi :1

Ngi`dn

H`trldyjthl` n`d Mlthqnthl`

HVZij Onzhjz

I`tirvrhzi HVZij QV@

Mn`ngh`g QV@

Wrnv-yv

8/8/2019 cisco ip security

19/21

Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi->8

Zchdi :7

Zii Nczl

NQQHD I`tirvrhzi Zhti-tl-Zhti QV@ Dizhg`bttv;,,wwwjhzjljlm,nvvchjnthl`,vda,i`,yz,gyizt,`i

tzlc,`z>4?,j148,jjmhgrnthl`\68>21n66266d17a8vda

HVZij zyvvlrt vngi

bttv;,,wwwjhzjljlm,jgh-oh`,Zyvvlrt,VZV,vzv\qhiwvc

8/8/2019 cisco ip security

20/21

Jlvxrhgbt ?66:# Jbiznvinei @itjrnatzmi` Bn`dlyt Vngi-?6

Zchdi :8

TBN@E XLY .

Zchdi 46

N Wlrd Arlm Yz

Wi jn` vrlqhdi

@itwlre dizhg` riqhiw; blw tl mnei wbnt xly bnqi wlre oittir

Virhldhj ztrntighj ndqhji; wbntz tbi `it ztiv alr xlyr itwlre lr ztnaa

@itwlre mn`ngimi`t tllcz ! vrljidyriz ndqhji; wbnt z rhgbt alr xly

Hmvcimi`tnthl` gyhdn`ji "xlyr ztnaa dliz tbi ditnhcz( lr aycchmvcimi`tnthl`

Wi dl

Zmncc- n`d Cnrgi-Zjnci _lyth g n`d Zwhtjbh`g "dizhg`# binctb jbije#itj(

HVzij QV@ n`d Q:V@ "dizhg` n`d hmvcimi`tnthl`(

^lZ "ztrntigx# dizhg` n`d hmvcimi`tnthl`(

HV Ticivbl`x "vrivnrid`izz zyrqix# dizhg`# n`d hmvcimi`tnthl`(

Jncc Mn`ngir divclxmi`t

Zijyrhtx

@itwlre Mn`ngimi`t "dizhg`# h`ztnccnthl`# ty`h`g# tijb trn`zair# itj(

8/8/2019 cisco ip security

21/21

Zchdi 4>

Jbiznvinei @itjrnatzmi`hz jirthahid ox Jhzjl h`;

HV Ticivbl`x

@itwlre Mn`ngimi`t

Whricizz

Zijyrhtx

"_lyth`g n`d Zwhtjbh`g(

Jhzjl Jirthahjnthl`z