安全功能命令(DOC 70頁)

第1章 ACL配置命令....1
1.1 absolute-periodic/periodic....1
1.2 absolute start....2
1.3 access-list(ip extended)....2
1.4 access-list(ip standard)....3
1.5 access-list(mac extended)....4
1.6 access-list(mac-ip extended)....5
1.7 access-list(mac standard)....6
1.8 clear access-group statistic interface....7
1.9 firewall....7
1.10 firewall default....8
1.11 ip access extended....8
1.12 ip access standard....8
1.13 ipv6 access-list....9
1.14 ipv6 access standard....10
1.15 ipv6 access extended....10
1.16 {ip|ipv6|mac|mac-ip} access-group....10
1.17 mac access extended....11
1.18 mac-ip access extended....12
1.19 permit | deny(ip extended)....12
1.20 permit | deny(ip standard)....13
1.21 permit | deny(ipv6 extended)....13
1.22 permit | deny(ipv6 standard)....14
1.23 permit | deny(mac extended)....15
1.24 permit | deny(mac-ip extended)....16
1.25 show access-lists....18
1.26 show access-group....19
1.27 show firewall....20
1.28 show ipv6 access-lists....20
1.29 show time-range....21
1.30 time-range....21
第2章 802.1x配置命令....23
2.1 debug dot1x detail....23
2.2 debug dot1x error....23
2.3 debug dot1x fsm....24
2.4 debug dot1x packet....24
2.5 dot1x accept-mac....24
2.6 dot1x eapor enable....25
2.7 dot1x enable....25
2.8 dot1x ipv6 passthrough....26
2.9 dot1x guest-vlan....26
2.10 dot1x macfilter enable....27
2.11 dot1x max-req....27
2.12 dot1x user free-resource....27
2.13 dot1x max-user macbased....28
2.14 dot1x max-user userbased....28
2.15 dot1x port-control....28
2.16 dot1x port-method....29
2.17 dot1x privateclient enable....30
2.18 dot1x re-authenticate....30
2.19 dot1x re-authentication....30
2.20 dot1x timeout quiet-period....31
2.21 dot1x timeout re-authperiod....31
2.22 dot1x timeout tx-period....31
2.23 dot1x unicast enable....32
2.24 dot1x web authentication enable....32
2.25 dot1x web redirect....33
2.26 dot1x web redirect enable....33
2.27 show dot1x....33
第3章 端口、VLAN中MAC、IP數量限製命令....36
3.1 switchport mac-address dynamic maximum....36
3.2 vlan mac-address dynamic maximum....36
3.3 switchport arp dynamic maximum....37
3.4 switchport nd dynamic maximum....37
3.5 ip arp dynamic maximum....38
3.6 ipv6 nd dynamic maximum....38
3.7 mac-address query timeout....39
3.8 show mac-address dynamic count....39
3.9 show arp-dynamic count....40
3.10 show nd-dynamic count....40
3.11 debug switchport mac count....41
3.12 debug switchport arp count....41
3.13 debug switchport nd count....41
3.14 debug vlan mac count....42
3.15 debug ip arp count....42
3.16 debug ipv6 nd count....43
第4章 AM配置命令....44
4.1 am enable....44
4.2 am port....44
4.3 am ip-pool....44
4.4 am mac-ip-pool....45
4.5 no am all....45
4.6 show am....45
第5章 安全特性配置命令....47
5.1 dosattack-check srcip-equal-dstip enable....47
5.2 dosattack-check ipv4-first-fragment enable....47
5.3 dosattack-check tcp-flags enable....47
5.4 dosattack-check srcport-equal-dstport enable....48
5.5 dosattack-check tcp-fragment enable....48
5.6 dosattack-check tcp-segment....48
5.7 dosattack-check icmp-attacking enable....49
5.8 dosattack-check icmpV4-size....49
5.9 dosattack-check icmpv6-size....49
第6章 TACACS+命令....51
6.1 tacacs-server authentication host....51
6.2 tacacs-server key....51
6.3 tacacs-server timeout....52
6.4 debug tacacs-server....52
第7章 RADIUS配置命令....53
7.1 aaa enable....53
7.2 aaa-accounting enable....53
7.3 aaa-accounting update....53
7.4 debug aaa packet....54
7.5 debug aaa detail attribute....54
7.6 debug aaa detail connection....55
7.7 debug aaa detail event....55
7.8 debug aaa error....55
7.9 radius nas-ipv4....56
7.10 radius nas-ipv6....56
7.11 radius-server accounting host....56
7.12 radius-server authentication host....57
7.13 radius-server dead-time....58
7.14 radius-server key....58
7.15 radius-server retransmit....58
7.16 radius-server timeout....59
7.17 radius-server accounting-interim-update timeout....59
7.18 show aaa authenticated-user....60
7.19 show aaa authenticating-user....60
7.20 show aaa config....61
7.21 show radius count....62
第8章 SSL配置命令....63
8.1 ip http secure-server....63
8.2 ip http secure-port....63
8.3 ip http secure- ciphersuite....63
8.4 show ip http secure-server status....64
8.5 debug ssl....64
第9章 IPv6安全RA命令....65
9.1 ipv6 security-ra enable....65
9.2 ipv6 security-ra enable....65
9.3 show ipv6 security-ra....65
9.4 debug ipv6 security-ra....66
..............................