With the development of China's routing industry, this article mainly analyzes the basic configuration methods of routers, in addition, this article introduces the use of fixed IP addresses for computers, the issuance of fixed IP addresses for DHCP servers, and the prevention of unauthorized computer access and group management.
With the development of China's routing industry, we have also promoted the upgrade and promotion of the routing technology. Here we have analyzed the basic configuration methods of xiaonuo Ping An router, the LAN end is the line connecting the local network to the enterprise user. Some chinan.com routers have LAN ports and can be connected to switches. Some network management systems will first connect chinan.com to the trunk switch, connect to a common vswitch. Both of the above methods can be used. The latter is suitable for the use of large throughput. For common enterprise use, the local port of xiaonuo Ping An router can be forwarded with bandwidth. Therefore, hardware configuration is complicated. The experience of Qno's technical service personnel points out that IP address management is important to stop a good security network configuration. IP is the address of the computer on the Internet. Therefore, you must be able to effectively manage the address to prevent attacks or control the computer with scores. For network management, precautions for IP address management are as follows, the following are four important topics:
The computer uses a fixed IP Address: The computer uses a fixed IP address, which is the most rigorous configuration method. In this way, you must manually enter IP address-related data in the computer. The advantage of this is that the IP address of each machine must be specified in advance. Without an IP address specified in advance, the Internet cannot be accessed. external users or computers cannot access the Internet easily through the enterprise network. However, for users, you must set up a mobile IP address and re-set it in other places. This will cause a lot of trouble for some business staff or senior supervisors who often need to move the IP address.
The DHCP server issues a Mobile IP address. The advantage of the DHCP server is that you do not need to make any settings on the computer, which is more convenient for users. However, the disadvantage of DHCP is that, if it is not controlled, a user can access the enterprise's network at will, and simply launch internal attacks, resulting in an impact. Therefore, for enterprises, it is better to issue P addresses through DHCP, but at the same time limit the IP addresses that can be obtained by computers for governance. The IP/MAC binding function of the Qno xianuo Security Router allows you to identify the MAC address of a computer and issue a specific IP address based on the network management configuration so that you can manage the IP address. At the same time, the I/MAC binding function can also prevent users from modifying the IP address to obtain a combination of MAC/IP addresses with high-Permission questions. This will be blocked by the "blocked wrong MAC address" of the jianuo Ping An router, this function can also prevent ARP attacks.
Prevent Unauthorized computers from accessing the Internet: for network administrators, uncontrolled computers often cause security problems. Some users will bring their own poisoned computers, or even users on other floors will access the company's network through wireless networks. In this case, the IP/MC binding function of Qno is avoided, and the function of "disabling MAC addresses not in the corresponding table column" can be provided, group Management cannot work when the MC address is not configured for the network management: in addition to IP/MAC binding, it can be used outdoors for ineffective control. In addition, the group function is used as appropriate, users can also be conveniently managed. For example, Qo.