IP Features on Cisco Routers - In Depth Course

所在平台: Udemy

课程主页: https://www.udemy.com/course/ip-features-on-cisco-routers/

课程评论:没有评论

第一个写评论        关注课程

课程简介

**课程名称**: 思科路由器上的 IP 特性深度解析 **课程概述**: 本课程旨在帮助网络工程师和网络架构师深入理解网络协议的工作原理,提升在配置、操作和设计网络方面的能力。通过本课程的学习,您将能够解释网络中看似异常的行为,例如未配置默认网关的主机如何与其他子网通信。 课程将深入探讨以下重要的 IP 特性: * **代理 ARP (Proxy ARP)**: 理解其工作机制,它如何允许没有默认网关的主机与外部子网通信,以及它对设备缓存的影响,从而指导最佳的静态路由配置。同时,还将剖析代理 ARP 如何被用于拒绝服务 (DoS) 和中间人 (MiTM) 攻击,并介绍其合理的应用场景。 * **IP 重定向 (IP redirects)**: 学习其功能和潜在的安全隐患。 * **IP 直接广播 (IP directed Broadcasts)**: 了解其实现原理,特别是它如何被利用于 IP Smurfing 攻击,以及如何使用单播反向路径转发 (uRPF) 等机制进行缓解。 本课程强调实践操作,将利用 GNS3 模拟的思科路由器进行演示,并通过 `show` 和 `debug` 命令深入分析协议行为。课程将全面涵盖这些特性的优势、劣势、安全问题、可利用的攻击方式以及相应的缓解措施。

课程评论(0条)

课程详情

It is crucial for network engineers to understand how networking protocols work in depth. This will help them to configure and operate networks effectively and be distinguished from other engineers who do not possess this understanding.This type of knowledge is also important for network architects. It will allow them to design networks that consist of parts that work together in harmony.This course will help you understand some behaviors that seem strange or unusual in networking, such as hosts that do not use a default gateway to communicate with other subnets. You will understand how such things happen.You will understand the mechanisms of some important IP features, such as Proxy ARP, IP redirects, and IP directed Broadcasts.You will understand the disadvantages and security issues related to these features, the attacks that they allow, and how to mitigate them. This course focuses on the practical side as much as possible, using Cisco routers emulated in GNS3. We will deep dive into protocols' behaviors with show and debug commands.For example, we will see how the Proxy ARP feature allows hosts that do not have a default gateway configured to communicate with other subnets or to use a default gateway that is located outside their own subnet. We will see how this feature affects the cache of the devices and therefore will understand what is the best way to configure static routing. Additionally, we will see how both the DOS (denial of service) and MiTM (Man in the middle) attacks take advantage of the Proxy ARP feature. However, this feature was not there without a reason, so its usage cases will be explained.Another example is how the IP directed Broadcast feature allows for the IP Smurfing attack to occur and how we can mitigate this attack using the uRPF (unicast Reverse Path Forwarding) mechanism.

课程标签

0人关注该课程

主题相关的课程