網(wǎng)絡(luò)安全和信息化（2017超值精華本）

第１章　基礎(chǔ)設(shè)施管理 利用軟件搭建網(wǎng)絡(luò)平臺................................................. 2 網(wǎng)絡(luò)運維簡介 ......................................................... 2 開源網(wǎng)絡(luò)運維軟件簡介 ......................................... 2 治安監(jiān)控綜合實施方案................................................. 3 項目背景 ................................................................. 3 項目實施方案 ......................................................... 3 項目實施規(guī)劃 ......................................................... 4 EPON配置 ............................................................... 4 后期維護 ................................................................. 5 利用工具建立監(jiān)控模型................................................. 5 一般網(wǎng)絡(luò)流量監(jiān)控使用的方法和技術(shù) ................. 5 Sniffer Pro監(jiān)控網(wǎng)絡(luò)流量模型 ................................ 6 日志審計分析系統(tǒng)的應(yīng)用............................................. 7 利用端口聚合增加交換網(wǎng)帶寬..................................... 8 端口聚合 ................................................................. 8 流量平衡 ................................................................. 9 服務(wù)器上使用隨身WiFi ................................................ 9 雙網(wǎng)卡同時訪問的設(shè)置方式....................................... 10 網(wǎng)絡(luò)虛擬化技術(shù)的應(yīng)用研究........................................11 技術(shù)概況 ................................................................11 網(wǎng)絡(luò)虛擬化在吐哈信息網(wǎng)的應(yīng)用 .......................11 IRF網(wǎng)絡(luò)虛擬化技術(shù)的應(yīng)用研究 ..........................11 結(jié)語 ....................................................................... 12 端口隔離在網(wǎng)絡(luò)管理中的應(yīng)用................................... 13 聯(lián)網(wǎng)計算機相互隔離的方法 ............................... 13 單交換機端口隔離的實現(xiàn) ................................... 13 跨交換機端口隔離的實現(xiàn) ................................... 13 分組隔離 ............................................................... 14 國際EPC項目的網(wǎng)絡(luò)規(guī)劃 ........................................... 14 項目背景 ............................................................... 14 總體設(shè)想與規(guī)劃方案 ........................................... 14 網(wǎng)絡(luò)配置與網(wǎng)絡(luò)參數(shù)設(shè)置 ................................... 15 應(yīng)用歷程以及實施情況 ....................................... 15 實施中的難點與注意事項 ................................... 16 如何解決IP地址故障 ................................................... 16 DHCP Snooping和ARP Detection技術(shù)介紹 ........ 16 具體配置方法和命令 ........................................... 17 功能驗證 ............................................................... 17 全網(wǎng)數(shù)據(jù)設(shè)備自動備份............................................... 17 自動備份軟件實現(xiàn)原理 ....................................... 17 自動備份開發(fā)要點 ............................................... 18 自動備份相關(guān)服務(wù)安裝事項 ............................... 19 防火墻的配置 ....................................................... 19 應(yīng)用實例 ............................................................... 19 綜述 ....................................................................... 20 巧用NQA聯(lián)動解決故障 .............................................. 20 工作流程 ............................................................... 21 結(jié)語 ....................................................................... 21 系統(tǒng)網(wǎng)絡(luò)端口安全防護............................................... 21 常用端口及分類 ................................................... 21 查看本機開放的端口 ........................................... 22 關(guān)閉本機不用的端口 ........................................... 22 重定向本機默認端口，保護系統(tǒng)安全 ................. 22 思科交換機架構(gòu)探討................................................... 23 Cisco 6500系列交換機體系架構(gòu) ......................... 23 背板與機箱槽位間的數(shù)據(jù)通路 ........................... 24 Cisco常用線卡 ...................................................... 26 常用線卡結(jié)構(gòu)圖 ................................................... 26 線卡間的數(shù)據(jù)包流向 ........................................... 27 結(jié)語 ....................................................................... 28 鏈路聚合擴帶寬........................................................... 28 巧用批處理查找端口................................................... 30 實現(xiàn)思路 ............................................................... 30 鏈路聚合在局域網(wǎng)的應(yīng)用........................................... 33 物理層連接 ........................................................... 34 數(shù)據(jù)配置 ............................................................... 34 驗證效果 ............................................................... 34 注意事項 ............................................................... 35 簡化版的網(wǎng)絡(luò)防火墻................................................... 35 在核心上對指定VLAN做ACL控制 .................... 35 在接入層交換機上做ACL控制 ........................... 35 用命令配置兩張網(wǎng)卡................................................... 36 4KB扇區(qū)硬盤安裝之路 ............................................... 36 如何延長UPS的使用壽命 ........................................... 37 負載數(shù)量應(yīng)適中 ................................................... 37 感性負載不搭接 ................................................... 37 定期維護是保證 ................................................... 38 工作環(huán)境要講究 ................................................... 38 快速破壞環(huán)路............................................................... 38 二層環(huán)路危害 ....................................................... 38 二層環(huán)路產(chǎn)生原因 ............................................... 38 環(huán)路檢測原理及報文結(jié)構(gòu) ................................... 39 環(huán)路檢測功能配置方法（以華為交換機為例） ... 39 Mac在Windows上的打印 ............................................ 41 對Windows PC進行配置 ...................................... 41 配置你的Mac ........................................................ 41 尋找丟失的交換機....................................................... 42 批處理實現(xiàn)信息統(tǒng)計................................................... 43 設(shè)計思路 ............................................................... 43 常用命令及實現(xiàn) ................................................... 43 批處理腳本 ........................................................... 43 結(jié)語 ....................................................................... 44 淺談ACL在SSH中的應(yīng)用 ........................................... 44 無線局域網(wǎng)部署的優(yōu)化............................................... 45 交叉板故障處理及分析............................................... 47 網(wǎng)絡(luò)拓撲 ............................................................... 47 故障經(jīng)過 ............................................................... 47 故障處理 ............................................................... 47 故障分析 ............................................................... 47 維護經(jīng)驗及改進措施 ........................................... 47 淺析高校無線網(wǎng)絡(luò)的部署........................................... 48 高校無線網(wǎng)絡(luò)的需求分析 ................................... 48 高校無線網(wǎng)絡(luò)的部署策略 ................................... 49 結(jié)語 ....................................................................... 50 雙絞線系統(tǒng)中問題的解決........................................... 50 什么是近端串擾 ................................................... 50 近端串擾過大的原因 ........................................... 50 近端串擾過大的影響 ........................................... 51 解決近端串擾過大需要注意的方面 ................... 51 結(jié)語 ....................................................................... 52 解決網(wǎng)絡(luò)規(guī)劃中的問題............................................... 52 某政務(wù)中心Internet網(wǎng)絡(luò)接入規(guī)劃問題 ............... 52 某單位通過VPN網(wǎng)絡(luò)之后路由器信息沒有更新 ... 53 企業(yè)外包呼叫中心的保護技術(shù)................................... 54 項目背景 ............................................................... 54 接入ISP網(wǎng)絡(luò)保護設(shè)計 .......................................... 54 內(nèi)部網(wǎng)絡(luò)保護設(shè)計 ............................................... 55 結(jié)語 ....................................................................... 56 多點視頻會議連接方式比較....................................... 56 校園無線平臺構(gòu)建研究............................................... 57 中學(xué)校園無線網(wǎng)絡(luò)規(guī)劃與設(shè)計原則 ................... 58 案例背景及需求分析 ........................................... 58 曲靖市某中學(xué)校園無線網(wǎng)絡(luò)設(shè)計 ....................... 58 網(wǎng)絡(luò)仿真測試數(shù)據(jù)及其分析 ............................... 59 結(jié)語 ....................................................................... 59 快速實現(xiàn)多系統(tǒng)集中維護........................................... 60 維護現(xiàn)狀概述 ....................................................... 60 集中維護多元設(shè)備方案介紹 ............................... 60 維護臺的設(shè)置 ....................................................... 61 結(jié)語 ....................................................................... 62 巧用交換機的局域網(wǎng)業(yè)務(wù)........................................... 63 VLAN簡述 ............................................................ 63 交換機接口類型 ................................................... 63 Hybrid接口轉(zhuǎn)發(fā)數(shù)據(jù)幀的原理 ............................ 63 應(yīng)用Hybrid特性區(qū)分局域網(wǎng)業(yè)務(wù)實例 ................ 63 結(jié)語 ....................................................................... 64 多網(wǎng)段監(jiān)控網(wǎng)絡(luò)聚合方法........................................... 65 PC多網(wǎng)卡法 .......................................................... 65 網(wǎng)絡(luò)考試Kiosk模式的探究 ......................................... 66 網(wǎng)絡(luò)考試現(xiàn)狀 ....................................................... 66 問題的提出 ........................................................... 66 問題的解決 ........................................................... 67 淺析策略路由的使用................................................... 67 ACL在網(wǎng)絡(luò)中的應(yīng)用................................................... 69 網(wǎng)絡(luò)打印新經(jīng)驗........................................................... 71 在Windows中快速安裝共享打印機 .................... 71 將網(wǎng)絡(luò)打印機添加為Windows系統(tǒng)本地打印機 ... 71 為筆記本設(shè)置“對位”打印 ................................... 71 通過第三方軟件管理網(wǎng)絡(luò)打印 ........................... 71 使用虛擬打印機 ................................................... 71 手機和平板電腦也能“網(wǎng)打” ............................... 72 網(wǎng)絡(luò)設(shè)備數(shù)據(jù)采集與分析........................................... 72 局域網(wǎng)無線路由設(shè)置方法........................................... 73 無線路由器的一般設(shè)置方法 ............................... 73 特殊情況下無線路由器的設(shè)置方法 ................... 75 克隆MAC地址 ...................................................... 75 無線路由器的安全策略 ....................................... 75 結(jié)語 ....................................................................... 76 第２章　系統(tǒng)維護 Exchange群集復(fù)制配置與管理 ................................... 78 架構(gòu)準備與基礎(chǔ)設(shè)置 ........................................... 79 CCR仲裁與服務(wù)角色設(shè)置 ................................... 80 備用群集設(shè)置與最終測試 ................................... 81 結(jié)語 ....................................................................... 82 升級vSphere實例 ......................................................... 82 升級的主要流程 ................................................... 83 當前主機 ............................................................... 83 升級vCenter Server 5.5到6.0 ................................ 83 升級vSphere Client ............................................... 84 安裝vCenter Server Update Manager.................... 84 啟用Update Manager插件 ..................................... 85 升級ESXi主機 ....................................................... 85 被忽視的遠程管理模塊............................................... 87 更改遠程管理口的IP地址 .................................... 88 更改遠程管理默認用戶USERID的密碼， 或者創(chuàng)建新用戶 ................................................... 88 使用遠程管理功能 ............................................... 88 經(jīng)驗總結(jié) ............................................................... 89 用復(fù)制功能實現(xiàn)災(zāi)備................................................... 89 測試環(huán)境 ............................................................... 90 配置副本服務(wù)器 ................................................... 90 啟用復(fù)制 ............................................................... 90 配置主服務(wù)器 ....................................................... 91 測試部署 ............................................................... 91 測試故障轉(zhuǎn)移 ....................................................... 91 經(jīng)驗總結(jié) ............................................................... 92 通過PE查電腦IP地址 .................................................. 92 Hyper-V集群生成問題對策 ........................................ 93 Hyper-V Hosts與VMM Host Group ..................... 93 Hyper-V 共享型存儲 ............................................ 93 Hyper-V主機的網(wǎng)絡(luò)化需求 ................................. 94 用Virtual Machine Manager生成Hyper-V集群 .... 94 ARP代理解決地址重疊 ............................................... 95 網(wǎng)絡(luò)結(jié)構(gòu) ............................................................... 95 改造計劃 ............................................................... 95 故障現(xiàn)象 ............................................................... 96 故障分析 ............................................................... 96 故障解決 ............................................................... 96 經(jīng)驗總結(jié) ............................................................... 96 服務(wù)器操作系統(tǒng)巧安裝............................................... 97 準備篇 ................................................................... 97 方案篇 ................................................................... 97 制作篇 ................................................................... 98 維護篇 ................................................................... 99 部署高可靠性ACS主備機 ........................................... 99 配置ACS主機 ...................................................... 100 配置ACS備機 ...................................................... 100 同步數(shù)據(jù)庫 ......................................................... 101 讓View 6.1支持XP ..................................................... 101 快速備份與遷移虛擬機............................................. 102 準備工作 ............................................................. 102 開啟Hyper-V復(fù)制功能 ....................................... 102 開始備份副本 ..................................................... 103 啟用計劃轉(zhuǎn)移 ..................................................... 104 Windows 7 中使用工作文件夾 ................................. 104 應(yīng)用需求 ............................................................. 105 同步設(shè)置 ............................................................. 105 批處理統(tǒng)計信息......................................................... 106 設(shè)計思路 ............................................................. 106 常用命令及實現(xiàn) ................................................. 106 批處理腳本 ......................................................... 106 經(jīng)驗總結(jié) ............................................................. 107 刪除孤立的虛擬機..................................................... 107 登錄View Composer刪除孤立的虛擬機............ 107 登錄View連接服務(wù)器刪除數(shù)據(jù)庫 ..................... 108 修改Manifest控制權(quán)限 .............................................. 108 用戶賬戶控制機制 ............................................. 108 修改Manifest文件 ............................................... 109 注意事項 ..............................................................110 部署vCenter Server經(jīng)驗 .............................................110 部署 vCenter Server Appliance時的“客戶 端集成插件”問題 ................................................110 更改vCenter SSO的密碼策略 .............................110 vCenter升級問題 ..................................................111 vSphere Web Client英文界面問題 ......................111 顯示ESXi的正常運行時間為0秒 ........................111 在IE11不能初始配置VDP 5.5.x及VDP 6.0的問題 ...112 調(diào)整Linux系統(tǒng)CPU頻率 ............................................113 用VHD打造雙系統(tǒng) .....................................................114 將Hyper-V安裝到Windows 10 ...................................115 Hyper-V安裝條件 ................................................115 適用系統(tǒng) ..............................................................115 安裝Hyper-V操作 ................................................115 值得關(guān)注的ReFS .........................................................116 ReFS：可靠可擴展的磁盤結(jié)構(gòu) ...........................116 ReFS的局限性 .....................................................116 ReFS v2有哪些改進 ............................................116 用Linux日志運維服務(wù)器 ............................................117 Linux系統(tǒng)運維難點 .............................................117 日志文件 ..............................................................118 日志文件應(yīng)用實例 ..............................................118 Windows 10 實用技巧 ................................................119 重置Windows背景 ...............................................119 修改Windows 10主題色 ......................................119 升級到Windows 10之后如何刪除舊系統(tǒng)冗余文件...119 關(guān)閉Windows 10操作中心 ................................. 120 解決Windows 10下IE運行時頻繁 提示“InternetExplorer已停止工作” ................... 120 禁用Windows 10的追蹤功能 ............................. 120 為Windows 10文件資源管理器“整容” ............. 120 讓W(xué)indows 10賬戶只能打開指定應(yīng)用 ............. 120 讓虛擬服務(wù)器時間同步............................................. 121 應(yīng)用環(huán)境 ............................................................. 121 時間同步需求 ..................................................... 121 配置實現(xiàn) ............................................................. 121 應(yīng)用效果 ............................................................. 122 為Windows 2012指定授權(quán)服務(wù)器 ............................ 122 安裝遠程桌面會話主機 ..................................... 123 修改本地策略指定授權(quán)服務(wù) ............................. 123 修改組策略指定授權(quán)服務(wù) ................................. 123 用AppLocker設(shè)置控制策略 ...................................... 124 在Windows Server 2012 R2中配置AppLocker .. 124 利用AppLocker阻止用戶安裝程序?qū)嵗?nbsp;........... 124 經(jīng)驗總結(jié) ............................................................. 125 桌面虛擬化構(gòu)建電教室............................................. 125 傳統(tǒng)教室多媒體系統(tǒng)存在的問題 ..................... 125 桌面虛擬化技術(shù)分析 ......................................... 125 桌面虛擬化的優(yōu)勢 ............................................. 126 實施方案 ............................................................. 126 經(jīng)驗總結(jié) ............................................................. 126 虛擬云桌面管控終端................................................. 127 應(yīng)用需求 ............................................................. 127 解決方案 ............................................................. 127 構(gòu)建Web日志分析服務(wù)器 ......................................... 128 Web日志分析服務(wù)器部署方法 .......................... 128 Web日志分析原理 .............................................. 128 部署rsync ............................................................. 129 定時執(zhí)行工具cron .............................................. 130 日志分析工具——AWStats ............................... 130 用KVM虛擬化網(wǎng)絡(luò)服務(wù) ........................................... 131 安裝配置KVM服務(wù)器 ........................................ 131 轉(zhuǎn)化物理機為KVM虛擬機 ................................ 132 安裝配置遠程管理工具 ..................................... 133 經(jīng)驗總結(jié) ............................................................. 134 管理Windows Server 2008文件服務(wù)器 ..................... 135 分布式文件系統(tǒng)（DFS） ...................................... 135 文件服務(wù)器資源管理 ......................................... 135 打印機集中配置 ................................................. 135 初始化已使用的硬盤................................................. 139 用組策略修改主頁設(shè)置............................................. 139 IE7主頁不管用，修改組策略 .............................. 139 沒有IE這一項怎么辦 .......................................... 140 模板文件是什么 ................................................. 140 用Linux巧解硬盤邏輯鎖 ........................................... 141 制作啟動盤 ......................................................... 141 啟動計算機 ......................................................... 141 修復(fù)硬盤主引導(dǎo)記錄 ......................................... 141 恢復(fù)硬盤數(shù)據(jù) ..................................................... 141 讓虛擬機實現(xiàn)互動..................................................... 142 Workstation連接到vSphere直接上傳下載 ......... 142 上傳虛擬機 ......................................................... 142 下載虛擬機 ......................................................... 143 在Workstation與vSphere中使用OVF文件交互 . 143 在vSphere中導(dǎo)出OVF ........................................ 144 在vSphere中部署OVF模板 ................................ 144 在Workstation中更改虛擬機硬件版本 .............. 144 在Workstation中導(dǎo)出與導(dǎo)入OVF ...................... 145 存儲瀏覽器復(fù)制或下載 ..................................... 145 從vSphere下載虛擬機 ........................................ 145 將虛擬機上傳到vSphere .................................... 145 向WinPE添加服務(wù)器驅(qū)動 ......................................... 146 WinPE調(diào)用磁盤陣列卡驅(qū)動程序的流程 .......... 146 向WinPE系統(tǒng)添加磁盤陣列卡驅(qū)動程序 .......... 146 WinPE系統(tǒng)制作 .................................................. 146 使用DISM命令向WIM映像中添加驅(qū)動程序 ... 147 經(jīng)驗總結(jié) ............................................................. 148 監(jiān)控遠程用戶行為..................................................... 148 了解遠程在線用戶 ............................................. 148 限制遠程桌面用戶使用同一個會話 ................. 148 在Windows Server 2012中實現(xiàn)允許多個 用戶遠程桌面登錄 ............................................. 148 用Kickstart自動安裝系統(tǒng) .......................................... 149 自動安裝需求 ..................................................... 149 Kickstart自動安裝原理 ....................................... 150 PXE協(xié)議 .............................................................. 150 Kickstart網(wǎng)絡(luò)自動化安裝技術(shù)架構(gòu) ................... 150 經(jīng)驗總結(jié) ............................................................. 151 構(gòu)建收入合同管理系統(tǒng)............................................. 151 建設(shè)背景 ............................................................. 151 研究與實踐 ......................................................... 151 經(jīng)驗與體會 ......................................................... 152 NTP服務(wù)統(tǒng)一終端配置 ............................................. 153 可選的NTP方案 .................................................. 153 服務(wù)端建設(shè)方法設(shè)計 ......................................... 153 設(shè)置客戶端 ......................................................... 153 HPUX系統(tǒng)下NTP客戶端設(shè)置 ........................... 154 Cisco網(wǎng)絡(luò)、安全設(shè)備NTP客戶端設(shè)置 ............... 154 華為網(wǎng)絡(luò)設(shè)備NTP客戶端設(shè)置 .......................... 154 經(jīng)驗總結(jié) ............................................................. 154 在存儲虛擬機遷移數(shù)據(jù)............................................. 155 常見數(shù)據(jù)遷移技術(shù) ............................................. 155 基于存儲虛擬機的不停機數(shù)據(jù)遷移技術(shù) 及遷移方案步驟 ................................................. 156 數(shù)據(jù)遷移項目實踐及效益評估 ......................... 157 結(jié)語 ..................................................................... 157 Exchange 2010郵件管理秘訣 .................................... 158 電子郵件發(fā)送前的審閱管理 ............................. 158 如何解決E-mail存檔的問題 .............................. 159 電子郵件保留策略功能使用 ............................. 159 多重電子郵件郵箱審核管理 ............................. 160 使用Exchange命令控制臺管理多重郵箱的探索 ... 161 如何在Outlook 2010中同時開啟探索郵箱 ....... 161 設(shè)置AD RMS主機集成Exchange Server 2010 .... 162 如何設(shè)置Exchange 2010服務(wù)器的IRM ............. 162 建立集成AD RMS傳輸規(guī)則 .............................. 162 自我測試小秘訣 ................................................. 163 客戶端電子郵件傳送測試 ................................. 163 結(jié)語 ..................................................................... 163 FCoE在Linux下的部署 .............................................. 163 FCoE的部署 ........................................................ 164 FCoE適配卡在Linux下配置 .............................. 164 FCoE交換機配置 ................................................ 167 日志審計分析系統(tǒng)的應(yīng)用......................................... 168 數(shù)據(jù)庫日志 ......................................................... 168 操作系統(tǒng)日志 ..................................................... 168 網(wǎng)絡(luò)及安全設(shè)備日志 ......................................... 169 如何使用Oracle數(shù)據(jù)庫分區(qū)表 .................................. 169 分區(qū)表與海量數(shù)據(jù) ............................................. 169 分區(qū)表與數(shù)據(jù)歸檔 ............................................. 170 分區(qū)表與RAC集群環(huán)境 .................................... 170 如何實施分區(qū) ..................................................... 171 結(jié)語 ..................................................................... 171 搭建Hadoop實驗平臺 ................................................ 171 實驗材料 ............................................................. 171 實驗過程 ............................................................. 171 經(jīng)驗總結(jié) ............................................................. 175 利用ownCloud建立云盤 ............................................ 176 為何選擇ownCloud建立云盤 ............................. 176 ownCloud的安裝過程 ......................................... 176 ownCloud的使用 ................................................. 177 Hyper-v Replica功能詳解 .......................................... 179 測試環(huán)境 ............................................................ 179 測試步驟 ............................................................. 179 結(jié)語 ..................................................................... 182 搭建網(wǎng)絡(luò)數(shù)據(jù)備份系統(tǒng)............................................. 182 數(shù)據(jù)備份現(xiàn)狀 ..................................................... 182 Rsync遠程同步工具簡介 ................................... 183 統(tǒng)一網(wǎng)絡(luò)數(shù)據(jù)備份系統(tǒng)建設(shè)方案 ..................... 184 結(jié)語 ..................................................................... 186 第３章　故障診斷 設(shè)備升級欲速則不達................................................. 188 故障現(xiàn)象 ............................................................. 188 故障分析 ............................................................. 188 故障解決 ............................................................. 188 經(jīng)驗總結(jié) ............................................................. 189 探究網(wǎng)絡(luò)同傳延時故障............................................. 189 故障現(xiàn)象 ............................................................. 189 故障排查 ............................................................. 190 故障處理 ............................................................. 190 交換機級聯(lián)端口被綁之后......................................... 190 故障現(xiàn)象 ............................................................. 190 故障排查 ............................................................. 190 故障解決 ............................................................. 191 經(jīng)驗總結(jié) ............................................................. 191 使用重啟大招之前的思索......................................... 192 故障現(xiàn)象 ............................................................. 192 系統(tǒng)介紹 ............................................................. 192 排錯與測試 ......................................................... 192 經(jīng)驗總結(jié) ............................................................. 194 圖像編碼器互聯(lián)故障解析......................................... 194 故障現(xiàn)象 ............................................................. 194 故障排查 ............................................................. 194 故障排除 ............................................................. 195 經(jīng)驗總結(jié) ............................................................. 195 添加帶外控制設(shè)備網(wǎng)不通......................................... 195 故障現(xiàn)象 ............................................................. 195 故障排查 ............................................................. 196 故障分析 ............................................................. 196 故障排除 ............................................................. 196 電磁屏蔽機房維護記................................................. 196 故障現(xiàn)象 ............................................................. 196 故障排查 ............................................................. 196 故障解決 ............................................................. 197 經(jīng)驗總結(jié) ............................................................. 197 360瀏覽器醫(yī)生排除故障........................................... 197 搞定IE瀏覽器無法登錄網(wǎng)銀賬戶 ...................... 197 12306訂票網(wǎng)上支付報錯 ................................... 198 經(jīng)驗總結(jié) ............................................................. 198 網(wǎng)關(guān)IP配置引發(fā)故障 ................................................. 199 故障現(xiàn)象 ............................................................. 199 故障排查 ............................................................. 199 故障解決 ............................................................. 200 經(jīng)驗總結(jié) ............................................................. 200 IRQ沖突硬件無法使用 .............................................. 200 故障現(xiàn)象 ............................................................. 200 故障分析 ............................................................. 200 IRQ家族 .............................................................. 201 IRQ的分配 .......................................................... 201 IRQ沖突 .............................................................. 201 故障排查 ............................................................. 201 故障解決 ............................................................. 202 解析交換機CPU占用率 ............................................. 203 交換機CPU占用率高的危害 .............................. 203 交換機CPU占用率高的正常應(yīng)用場景 .............. 203 故障引發(fā)交換機CPU占用率高 .......................... 204 CPU占用率高故障排除方法 .............................. 204 插錯網(wǎng)線鬧風(fēng)暴......................................................... 207 故障分析 ............................................................. 207 排除步驟 ............................................................. 207 經(jīng)驗總結(jié) ............................................................. 208 語音業(yè)務(wù)單通故障分析............................................. 208 故障現(xiàn)象 ............................................................. 208 故障分析 ............................................................. 208 解決方法 ............................................................. 209 維護建議 ............................................................. 209 修復(fù)RedHat虛機掛盤故障 ........................................ 209 故障現(xiàn)象 ............................................................. 209 故障處理 ............................................................. 210 故障原因分析 ..................................................... 210 經(jīng)驗總結(jié) ............................................................. 210 不可忽視電源線干擾..................................................211 故障現(xiàn)象 ..............................................................211 故障排查 ..............................................................211 故障分析 ..............................................................211 經(jīng)驗總結(jié) ............................................................. 212 路由器IOS災(zāi)難恢復(fù) .................................................. 212 路由器IOS相關(guān)概念 ........................................... 212 路由器IOS災(zāi)難恢復(fù) ........................................... 212 路由器IOS故障處置案例 ................................... 214 交換機端口不可用解析............................................. 215 故障現(xiàn)象 ............................................................. 215 故障原因 ............................................................. 215 故障解決方法 ..................................................... 215 廣告代碼為何無法解析............................................. 217 故障現(xiàn)象 ............................................................. 217 故障診斷 ............................................................. 217 全方位排查 ......................................................... 218 重點突破 ............................................................. 218 經(jīng)驗總結(jié) ............................................................. 219 擺脫強制升級............................................................. 219 故障現(xiàn)象 ............................................................. 219 故障分析 ............................................................. 219 故障解決 ............................................................. 220 用交換機監(jiān)測網(wǎng)絡(luò)環(huán)路............................................. 221 故障現(xiàn)象 ............................................................. 221 故障定位 ............................................................. 221 故障排除 ............................................................. 221 經(jīng)驗總結(jié) ............................................................. 222 超大硬盤服務(wù)器安裝記............................................. 222 故障現(xiàn)象 ............................................................. 222 故障分析 ............................................................. 222 故障解決 ............................................................. 222 配置詳解 ............................................................. 223 經(jīng)驗總結(jié) ............................................................. 223 用交換機捕獲數(shù)據(jù)排障............................................. 223 數(shù)據(jù)包捕獲環(huán)境與方式 ..................................... 224 交換機自主捕獲方式 ......................................... 225 交換機自主捕獲數(shù)據(jù)包示例 ............................ 225 濫用飛秋網(wǎng)堵塞......................................................... 225 故障現(xiàn)象 ............................................................. 225 故障解決 ............................................................. 226 規(guī)范使用飛秋 ..................................................... 226 關(guān)注交換機版本......................................................... 227 故障現(xiàn)象 ............................................................. 227 故障分析 ............................................................. 227 試驗驗證 ............................................................. 228 故障啟示 ............................................................. 229 被“*”感染的IP ........................................................... 229 故障現(xiàn)象 ............................................................. 229 更換IP臨時解決 .................................................. 229 故障排查 ............................................................. 229 故障排除 ............................................................. 230 修復(fù)交換機系統(tǒng)文件................................................. 230 獲取系統(tǒng)文件 ..................................................... 230 網(wǎng)絡(luò)啟動 ............................................................. 231 下載系統(tǒng)文件 ..................................................... 231 修改交換機啟動項設(shè)置 ..................................... 231 低版本引發(fā)路由器重啟............................................. 232 故障現(xiàn)象 ............................................................. 232 引起路由器重啟的主要原因 ............................. 232 故障分析 ............................................................. 232 故障排除過程 ..................................................... 232 辨識真?zhèn)尉W(wǎng)關(guān)............................................................. 233 故障現(xiàn)象 ............................................................. 233 故障排查 ............................................................. 233 故障分析 ............................................................. 234 經(jīng)驗總結(jié) ............................................................. 234 定位違規(guī)電腦............................................................. 234 故障現(xiàn)象 ............................................................. 234 故障排查 ............................................................. 235 故障解決 ............................................................. 235 經(jīng)驗總結(jié) ............................................................. 235 軟件引起的開機故障................................................. 235 故障現(xiàn)象 ............................................................. 235 故障排查 ............................................................. 235 故障解決 ............................................................. 236 故障分析 ............................................................. 236 經(jīng)驗總結(jié) ............................................................. 236 無效路由條目鬧故障................................................. 237 故障現(xiàn)象 ............................................................. 237 造成網(wǎng)絡(luò)異常的可能原因 ................................. 237 故障排查 ............................................................. 238 經(jīng)驗總結(jié) ............................................................. 238 限速配置引故障......................................................... 239 故障現(xiàn)象 ............................................................. 239 故障分析 ............................................................. 239 故障解決 ............................................................. 239 經(jīng)驗總結(jié) ............................................................. 239 光模塊選型不當網(wǎng)不通............................................. 240 故障現(xiàn)象 ............................................................. 240 引起鏈路無法連通的可能原因 ......................... 240 故障排查 ............................................................. 240 經(jīng)驗總結(jié) ............................................................. 241 策略路由缺失引發(fā)故障............................................. 242 故障現(xiàn)象 ............................................................. 242 故障分析 ............................................................. 242 故障解決 ............................................................. 242 經(jīng)驗總結(jié) ............................................................. 242 PoE供電引發(fā)故障 ...................................................... 243 故障現(xiàn)象 ............................................................. 243 故障排查 ............................................................. 243 故障分析 ............................................................. 244 設(shè)備供電流程 ..................................................... 244 故障解決 ............................................................. 244 經(jīng)驗總結(jié) ............................................................. 244 找回丟失的虛擬機..................................................... 245 故障現(xiàn)象 ............................................................. 245 故障排查 ............................................................. 245 故障解決 ............................................................. 246 經(jīng)驗總結(jié) ............................................................. 247 鏈路層協(xié)議為何報錯................................................. 247 網(wǎng)絡(luò)結(jié)構(gòu) ............................................................. 247 故障解決 ............................................................. 247 經(jīng)驗總結(jié) ............................................................. 248 精確定位“軟故障”源頭............................................. 249 背景及故障現(xiàn)象 ................................................. 249 故障分析 ............................................................. 249 故障解決 ............................................................. 250 經(jīng)驗總結(jié) ............................................................. 250 鏈路聚合解決網(wǎng)絡(luò)瓶頸............................................. 251 故障現(xiàn)象 ............................................................ 251 故障排查 ............................................................. 251 解決方案 ............................................................. 252 配置交換機 ......................................................... 252 擴展應(yīng)用 ............................................................. 252 用時鐘反轉(zhuǎn)調(diào)試路由................................................. 253 網(wǎng)絡(luò)結(jié)構(gòu) ............................................................. 253 路由調(diào)試過程 ..................................................... 253 配置端口為異步工作方式 ................................. 253 配置時鐘反轉(zhuǎn) ..................................................... 254 經(jīng)驗總結(jié) ............................................................. 254 用事件查看器查故障................................................. 255 Windows事件查看器的作用 .............................. 255 事件查看器日志分類 ......................................... 255 事件查看器記錄內(nèi)容 ......................................... 255 用事件查看器解決故障案例 ............................. 256 經(jīng)驗總結(jié) ............................................................. 256 兩網(wǎng)串連故障............................................................. 257 故障現(xiàn)象 ............................................................. 257 故障排查 ............................................................. 257 經(jīng)驗總結(jié) ............................................................. 258 安裝群集遇麻煩......................................................... 258 故障現(xiàn)象 ............................................................. 258 故障排查 ............................................................. 258 故障解決 ............................................................. 259 硬盤擴容出故障......................................................... 259 故障現(xiàn)象 ............................................................. 259 故障處理 ............................................................. 259 經(jīng)驗總結(jié) ............................................................. 260 巧破數(shù)據(jù)包重傳故障................................................. 260 故障現(xiàn)象 ............................................................. 260 故障排查 ............................................................. 261 故障原因 ............................................................. 261 數(shù)據(jù)包重傳解決方法 ......................................... 261 組播路由故障排除心得............................................. 263 故障現(xiàn)象 ............................................................. 263 步驟一：查看局域網(wǎng)交換機能否接收到組播包 ... 263 步驟二：檢查路由自治系統(tǒng)間組播路由是否異常 .. 263 步驟三：檢查RP之間能否建立MSDP對等體 .... 264 經(jīng)驗總結(jié) ............................................................. 264 接口降級識別加密狗................................................. 264 故障現(xiàn)象 ............................................................. 264 故障原因 ............................................................. 264 解決方案 ............................................................. 264 解決過程 ............................................................. 264 恢復(fù)辦法 ............................................................. 265 關(guān)于USB Over Network ...................................... 265 路由匯聚引發(fā)網(wǎng)絡(luò)故障............................................. 266 故障現(xiàn)象 ............................................................. 266 故障排查 ............................................................. 266 故障排除與分析 ................................................. 267 修復(fù)網(wǎng)站服務(wù)器......................................................... 267 故障現(xiàn)象 ............................................................. 267 故障排查 ............................................................. 267 故障排除 ............................................................. 268 經(jīng)驗總結(jié) ............................................................. 268 被遺忘的路由............................................................. 268 故障現(xiàn)象及處理 ................................................. 269 恢復(fù)測試 ............................................................. 269 故障分析 ............................................................. 270 經(jīng)驗總結(jié) ............................................................. 270 抓出交換機系統(tǒng)Bug .................................................. 270 故障現(xiàn)象 ............................................................. 270 故障分析 ............................................................. 271 故障排查 ............................................................. 271 故障排除 ............................................................. 272 經(jīng)驗總結(jié) ............................................................. 272 進水導(dǎo)致光纖鏈路異常............................................. 272 故障現(xiàn)象 ............................................................. 272 網(wǎng)絡(luò)不穩(wěn)定因素 ................................................. 272 故障排查 ............................................................. 273 故障排除 ............................................................. 273 經(jīng)驗總結(jié) ............................................................. 273 機房搬遷網(wǎng)不通......................................................... 274 故障現(xiàn)象 ............................................................. 274 故障排查 ............................................................. 274 故障排除 ............................................................. 274 故障分析 ............................................................. 275 經(jīng)驗總結(jié) ............................................................. 275 無線路由引發(fā)網(wǎng)絡(luò)故障............................................. 275 網(wǎng)絡(luò)環(huán)境 ............................................................. 275 故障現(xiàn)象 ............................................................. 275 故障排查 ............................................................. 275 故障排除 ............................................................. 276 經(jīng)驗總結(jié) ............................................................. 276 路由故障分析三例..................................................... 277 故障現(xiàn)象一 ......................................................... 277 故障現(xiàn)象二 ......................................................... 277 故障現(xiàn)象三 ......................................................... 277 替換法解決存儲問題................................................. 278 故障現(xiàn)象 ............................................................. 278 解決方案 ............................................................. 278 故障處理過程 ..................................................... 278 揭秘?zé)o線同頻干擾..................................................... 279 故障現(xiàn)象 ............................................................. 279 故障分析 ............................................................. 279 故障排除 ............................................................. 280 經(jīng)驗總結(jié) ............................................................. 281 華為交換機互聯(lián)出故障............................................. 281 故障現(xiàn)象 ............................................................. 281 故障排查 ............................................................. 281 故障排除 ............................................................. 282 故障分析 ............................................................. 282 經(jīng)驗總結(jié) ............................................................. 282 用流量統(tǒng)計追查丟包................................................. 282 丟包故障點快速定位方法 ................................. 282 流量統(tǒng)計定位原理 ............................................. 282 流量統(tǒng)計部署方法 ............................................. 283 二層丟包故障排除 ............................................. 283 三層丟包故障排除 ............................................. 284 經(jīng)驗總結(jié) ............................................................. 284 設(shè)備兼容性帶來的故障............................................. 284 故障現(xiàn)象 ............................................................. 284 故障分析 ............................................................. 284 故障排除 ............................................................. 284 故障總結(jié) ............................................................. 285 排查High CPU網(wǎng)絡(luò)故障 ............................................ 285 故障現(xiàn)象 ............................................................. 285 故障排查 ............................................................. 285 故障排除 ............................................................. 286 經(jīng)驗總結(jié) ............................................................. 286 配置失誤導(dǎo)致監(jiān)控異常............................................. 286 故障現(xiàn)象 ............................................................. 286 故障排除 ............................................................. 286 故障原因分析 ..................................................... 287 經(jīng)驗總結(jié) ............................................................. 287 HP小型機數(shù)據(jù)庫故障處理 ....................................... 288 故障現(xiàn)象 ............................................................. 288 故障處理及分析 ................................................. 288 經(jīng)驗總結(jié) ............................................................. 289 防火墻故障排除案例................................................. 289 實例一：客戶機無法Telnet或GUI管理防火墻 .. 289 實例二：增加策略禁止某主機，該主機仍能 通過防火墻 ......................................................... 290 實例三：IP地址綁定未起作用 ............................ 290 實例四：使用防火墻后原本可互相訪問的 主機無法通信 ..................................................... 290 經(jīng)驗總結(jié) ............................................................. 290 尋找無線信號異常根源............................................. 291 故障現(xiàn)象 ............................................................. 291 故障原因 ............................................................. 291 故障排除步驟 ..................................................... 292 經(jīng)驗總結(jié) ............................................................. 292 HP服務(wù)器時間同步出Bug ......................................... 293 網(wǎng)絡(luò)環(huán)境 ............................................................. 293 故障現(xiàn)象 ............................................................. 293 故障排查 ............................................................. 293 故障原因 ............................................................. 294 故障排除 ............................................................. 294 經(jīng)驗總結(jié) ............................................................. 294 新?lián)Q電腦為何無法上網(wǎng)............................................. 294 網(wǎng)絡(luò)環(huán)境 ............................................................. 294 故障現(xiàn)象 ............................................................. 294 故障排查 ............................................................. 295 故障排除 ............................................................. 295 經(jīng)驗總結(jié) ............................................................. 296 巧用CNA排除接線故障 ............................................ 296 網(wǎng)絡(luò)結(jié)構(gòu) ............................................................. 296 故障現(xiàn)象 ............................................................. 296 故障分析 ............................................................. 296 故障排查 ............................................................. 297 系統(tǒng)升級惹麻煩......................................................... 298 故障現(xiàn)象 ............................................................. 298 故障排查 ............................................................. 298 故障排除 ............................................................. 298 經(jīng)驗總結(jié) ............................................................. 299 路由器兼容性故障案例............................................. 299 案例一：路由器協(xié)議不匹配 ............................... 299 案例二：路由器時鐘匹配問題 ........................... 299 案例三：路由器帶寬匹配問題 ........................... 300 分析方法 ............................................................. 300 NAT配置不當網(wǎng)異常 ................................................. 301 故障現(xiàn)象 ............................................................. 301 故障分析 ............................................................. 301 故障排除 ............................................................. 302 經(jīng)驗總結(jié) ............................................................. 302 地址重復(fù)引發(fā)路由故障............................................. 303 故障現(xiàn)象 ............................................................. 303 故障分析 ............................................................. 303 故障排除 ............................................................. 303 故障總結(jié) ............................................................. 304 當虛擬網(wǎng)關(guān)遇上地址沖突......................................... 304 故障因素 ............................................................. 304 故障現(xiàn)象 ............................................................. 305 故障排查 ............................................................. 305 故障排除 ............................................................. 305 故障分析 ............................................................. 305 虛擬路由冗余協(xié)議 ............................................. 306 端口控制阻礙遠程接入............................................. 306 故障現(xiàn)象 ............................................................. 306 故障排查 ............................................................. 306 故障分析 ............................................................. 307 故障排除 ............................................................. 307 經(jīng)驗總結(jié) ............................................................. 308 防火墻影響路由備份................................................. 308 故障現(xiàn)象 ............................................................. 308 故障排查 ............................................................. 308 故障排除 ............................................................. 308 經(jīng)驗總結(jié) ............................................................. 308 VRRP引發(fā)網(wǎng)絡(luò)中斷 .................................................. 309 故障網(wǎng)絡(luò)拓撲結(jié)構(gòu) ............................................. 309 故障現(xiàn)象 ............................................................. 309 故障原因分析 ..................................................... 309 故障排除 ............................................................. 310 經(jīng)驗總結(jié) ............................................................. 310 第４章　信息安全 防共享，堵漏洞........................................................... 312 防共享檢測技術(shù)介紹 ......................................... 312 防共享設(shè)備的部署 ............................................. 313 結(jié)語 ..................................................................... 314 正確使用Cookies ....................................................... 314 Cookies及其功能 ................................................ 314 Cookies的主要安全隱患 .................................... 315 確保Cookies安全措施 ........................................ 315 IP地址封堵有法 ......................................................... 316 華為S9306的訪問控制 .............................................. 318 定義訪問控制列表ACL...................................... 318 創(chuàng)建流分類 ......................................................... 318 創(chuàng)建流行為 ......................................................... 318 創(chuàng)建流策略 ......................................................... 318 應(yīng)用流策略 ......................................................... 319 IP擴展訪問控制列表的配置 ..................................... 319 擴展訪問控制列表配置方法 ............................. 319 配置命名的訪問控制列表 ................................. 320 OpenSCAP管理主機安全 .......................................... 320 什么是SCAP........................................................ 320 安裝OpenSCAP軟件包 ....................................... 321 使用Oscap 命令行工具 ...................................... 321 掃描本地系統(tǒng) ..................................................... 321 使用 SCAP工作臺 .............................................. 322 使用SACP 工作臺掃描系統(tǒng)............................... 323 結(jié)語 ..................................................................... 323 關(guān)閉Windows系統(tǒng)危險端口 ..................................... 323 系統(tǒng)關(guān)閉法 ......................................................... 323 TCP/IP篩選關(guān)閉法 ............................................. 324 IP安全策略關(guān)閉法 .............................................. 324 防火墻關(guān)閉法 ..................................................... 325 經(jīng)驗總結(jié) ............................................................. 325 流媒體環(huán)境下的防火墻配置..................................... 326 Windows Media服務(wù)器配置軟件防火墻 ........... 326 支持單播流配置防火墻 ..................................... 327 支持多播流配置防火墻 ..................................... 327 支持允許對防火墻之外的編碼器進行訪問 ..... 327 支持允許分發(fā)服務(wù)器與源服務(wù)器的連接 ......... 328 支持允許管理遠程服務(wù)器 ................................. 328 其他 ..................................................................... 328 內(nèi)網(wǎng)安全防護體系的設(shè)計......................................... 329 安全防護體系總體設(shè)計 ..................................... 329 安全策略設(shè)計 ..................................................... 329 網(wǎng)絡(luò)VLAN劃分及防火墻配置 .......................... 330 服務(wù)器配置 ......................................................... 330 結(jié)語 ..................................................................... 330 巧設(shè)Event Viewer讓AD更安全 ................................. 331 讓AD具有安全審計功能（Security Auditing） ... 331 定制安全顯示 ..................................................... 331 通過Email 接收安全警報 ................................... 331 動動配置，數(shù)據(jù)存取更安全....................................... 332 移除數(shù)據(jù)加密圖標 ............................................. 332 拒絕解密威脅數(shù)據(jù) ............................................. 332 追蹤數(shù)據(jù)存取痕跡 ............................................. 333 智能授予數(shù)據(jù)權(quán)限 ............................................. 333 管好數(shù)據(jù)安全證書 ............................................. 334 謹防隱私數(shù)據(jù)顯現(xiàn) ............................................. 334 Hadoop加密靜態(tài)及傳輸數(shù)據(jù) .................................... 335 Apache Hadoop傳輸加密.................................... 335 RPC/SASL ........................................................... 335 TCP/IP.................................................................. 336 TLS/HTTPS ......................................................... 336 HDFS外的靜態(tài)數(shù)據(jù)加密 ................................... 336 移動設(shè)備安全使用全監(jiān)控......................................... 337 監(jiān)控染毒狀態(tài) ..................................................... 337 監(jiān)控本地狀態(tài) ..................................................... 337 監(jiān)控遠程狀態(tài) ..................................................... 338 SNMP服務(wù)弱口令安全漏洞防范 .............................. 340 讓漏網(wǎng)病毒無力回天................................................. 341 尋找漏網(wǎng)病毒蹤跡 ............................................. 341 不讓漏網(wǎng)病毒潛藏 ............................................. 343 多VLAN環(huán)境下防火墻配置 ..................................... 344 需求分析 ............................................................. 344 配置方案 ............................................................. 345 操作流程與步驟 ................................................. 345 訪問控制策略失效案例............................................. 346 案例一：VLAN1透傳引起的ACL策略失效 ...... 346 案例二：DHCP改造引起的ACL策略失效 ......... 346 優(yōu)化網(wǎng)絡(luò)性能，細化安全配置................................... 347 網(wǎng)絡(luò)與信息安全建設(shè)總體現(xiàn)狀 ......................... 347 網(wǎng)絡(luò)與信息安全建設(shè)存在的問題 ..................... 348 網(wǎng)絡(luò)與信息安全建設(shè)解決方法 ......................... 349 驅(qū)逐病毒恢復(fù)IE活力 ................................................. 350 電力企業(yè)中的病毒防護............................................. 352 電力企業(yè)病毒防護系統(tǒng)應(yīng)當考慮的幾個問題 ... 352 多層次、分級式病毒防護體系的設(shè)計原理 ....... 353 系統(tǒng)中心 ............................................................. 353 服務(wù)器端 ............................................................. 353 客戶端 ................................................................. 353 Internet網(wǎng)關(guān) ......................................................... 353 “移動式”管理員控制臺 ..................................... 353 病毒定義代碼的更新策略 ................................. 354 病毒服務(wù)器的實時防護策略 ............................. 354 客戶端的實時防護策略 ..................................... 354 客戶端的安裝策略 ............................................. 354 結(jié)語 ..................................................................... 355 Intranet網(wǎng)絡(luò)架構(gòu)安全評估 ........................................ 355 Intranet網(wǎng)絡(luò)架構(gòu)安全評估方案 ......................... 355 網(wǎng)絡(luò)建設(shè)規(guī)范性 ................................................. 355 網(wǎng)絡(luò)可靠性 ......................................................... 356 網(wǎng)絡(luò)邊界安全性 ................................................. 356 網(wǎng)絡(luò)協(xié)議安全分析 ............................................. 356 網(wǎng)絡(luò)流量分析 ..................................................... 356 網(wǎng)絡(luò)通信安全 ..................................................... 356 網(wǎng)絡(luò)安全管理 ..................................................... 356 強化IIS 8.0安全性 ...................................................... 357 終端賬號安全不容忽視............................................. 359 監(jiān)控賬號創(chuàng)建安全 ............................................. 359 強制賬號密碼安全 ............................................. 360 保障賬號盜用安全 ............................................. 360 嚴控賬號權(quán)限安全 ............................................. 360 管理隱藏賬號安全 ............................................. 361 保護CMD命令行安全 ............................................... 362 利用NTFS權(quán)限，防止黑客操作CMD命令 ........ 362 對CMD進行完美加密 ........................................ 362 為CMD設(shè)置專用記錄器 .................................... 363 莫讓遠控軟件成幫手................................................. 363 清除暗中潛伏的Radmin ..................................... 364 被黑客惡意控制的TeamViewer ......................... 364 無線路由安全不容忽視............................................. 365 更新固件程序 ..................................................... 365 修改賬號密碼 ..................................................... 366 調(diào)整遠程端口 ..................................................... 366 預(yù)防網(wǎng)頁劫持 ..................................................... 367 拒絕他人蹭網(wǎng) ..................................................... 368 讓木馬無法藏身啟動項............................................. 368 值得注意的非常規(guī)啟動位置 ............................. 369 為啟動項和服務(wù)安裝“監(jiān)控器” ......................... 369 實戰(zhàn)攻防TCP/IP篩選策略......................................... 370 設(shè)置TCP/IP篩選策略 ......................................... 370 黑客如何破解TCP/IP篩選策略 ......................... 370 徹底保護TCP/IP篩選策略 ................................ 371 交換機安全由配置把關(guān)............................................. 372 配置密碼保護 ..................................................... 372 配置環(huán)路保護 ..................................................... 372 配置服務(wù)保護 ..................................................... 373 配置流量保護 ..................................................... 373 配置VTP協(xié)議保護 .............................................. 374 配置Root地位保護 .............................................. 374 DHCP上動手腳，安全有保障 .................................... 375 保護重要主機安全 ............................................. 375 保護網(wǎng)絡(luò)運行安全 ............................................ 375 保護終端接入安全 ............................................. 376 預(yù)防ARP欺騙攻擊 .............................................. 377 讓服務(wù)器網(wǎng)絡(luò)更安全................................................. 378 讓DNS服務(wù)更安全 ............................................. 378 讓DHCP服務(wù)更安全 ........................................... 379 讓W(xué)eb服務(wù)更安全 .............................................. 381 巧妙謝絕危險訪問..................................................... 382 謝絕使用無線網(wǎng)絡(luò) ............................................. 382 謝絕訪問重要網(wǎng)站 ............................................. 382 謝絕隨意更改地址 ............................................. 383 謝絕使用有線網(wǎng)絡(luò) ............................................. 383 謝絕進行Ping攻擊 ............................................. 384 提高Linux安全技巧 ................................................... 384 多賬戶信息外泄防范................................................. 386 預(yù)防跳轉(zhuǎn)列表外泄 ............................................. 386 預(yù)防特定程序外泄 ............................................. 386 預(yù)防登錄賬號外泄 ............................................. 387 預(yù)防數(shù)據(jù)分區(qū)外泄 ............................................. 387 預(yù)防磁貼記錄外泄 ............................................. 388 預(yù)防搜索功能外泄 ............................................. 388 預(yù)防文件歷史外泄 ............................................. 389 預(yù)防共享訪問外泄 ............................................. 389 事前設(shè)防“做主”登錄安全......................................... 389 強化登錄安全提醒 ............................................. 389 嚴密監(jiān)控登錄狀態(tài) ............................................. 390 強行使用登錄密碼 ............................................. 390 嚴格限制登錄方式 ............................................. 391 加強登錄時間管控 ............................................. 392 限制登錄權(quán)限 ..................................................... 392 SSH轉(zhuǎn)發(fā)保VNC安全 ................................................. 393 VNC的基本功能與操作 ..................................... 393 SSH的基本功能與操作 ...................................... 393 使用SSH轉(zhuǎn)發(fā)，為VNC開啟加密通道 ................ 394 加強無線網(wǎng)絡(luò)安全性................................................. 394 無線網(wǎng)絡(luò)安全機制 ............................................. 394 無線安全面臨的威脅 ......................................... 395 設(shè)置復(fù)雜密碼 抗擊非法破解 ............................ 395 抗擊快速破解的技巧 ......................................... 396 搭建VPN環(huán)境 ..................................................... 396 保護無線VPN的技巧 ......................................... 397 Windows IP安全策略 ................................................. 398 移動設(shè)備安全靠策略................................................. 399 停用自動播放功能 ............................................. 399 按需分配操作權(quán)限 ............................................. 399 安裝特定移動設(shè)備 ............................................. 400 禁用自動運行命令 ............................................. 401 安全“例外” 效率兼顧................................................ 401 隔離“例外”讓共享高效 ..................................... 401 虛擬“例外”讓升級高效 ..................................... 402 掃描“例外”讓殺毒高效 ..................................... 403 阻斷“例外”讓瀏覽高效 ..................................... 403 攔截“例外”讓運行高效 ..................................... 403 重識“DNS劫持”......................................................... 404 什么是DNS ......................................................... 405 什么是DNS劫持 ................................................. 405 什么是DNS污染 ................................................. 405 解決方法 ............................................................. 405 寫在最后 ............................................................. 406 包過濾保障網(wǎng)絡(luò)安全................................................. 406 避免單位網(wǎng)絡(luò)單點風(fēng)險............................................. 408 網(wǎng)絡(luò)信息安全建設(shè)總體現(xiàn)狀 ............................. 408 網(wǎng)絡(luò)信息安全建設(shè)不足之處 ............................. 409 網(wǎng)絡(luò)信息安全提升基本策略 ............................. 409 構(gòu)建網(wǎng)絡(luò)信息安全的意義 ................................. 410 小心注入式入侵預(yù)防中的短板..................................411 “短板”一：被“注入中轉(zhuǎn)”注入的“防注” ............411 “短板”二：被搜索“出賣”的“偽靜態(tài)” ................411 “短板”修補措施：做好三個“化” ....................... 412 構(gòu)筑信息終端防護“安全之門”................................. 412 完善本地安全策略 ............................................. 412 優(yōu)化系統(tǒng)注冊表設(shè)置 ......................................... 413 制定IP安全策略 .................................................. 413 打造更安全的遠控服務(wù)............................................. 414