一、安全策略
范围:DCT & IDC
Description
This article describes how to configure a basic layer2-policer for rate limiting on a physical port in Access Mode.
Symptoms
Equal-Cost Multi-Path (ECMP) Routing
The ASA supports Equal-Cost Multi-Path (ECMP) routing.
You can have up to 8 equal cost static or dynamic routes per interface. For example, you can configure multiple default routes on the outside interface that specify different gateways.
route outside 0 0 10.1.1.2
route outside 0 0 10.1.1.3
route outside 0 0 10.1.1.4
This example uses the hierarchical QoS Policy in order to shape all outbound traffic on the outside interface to
50 Mbps
like the shaping example but it also specifies that Voice packets with the Differentiated Services Code Point (DSCP) value “ef”, as well as Secure Shell (SSH) traffic, shall receive priority.
ciscoasa(config)#priority-queue outside1
ciscoasa(config-priority-queue)#queue-limit 2048 // max
ciscoasa(config-priority-queue)#tx-ring-limit 511 // max
ciscoasa(config)#priority-queue outside2
ciscoasa(config-priority-queue)#queue-limit 2048 // max
ciscoasa(config-priority-queue)#tx-ring-limit 511 // max
This is how you set a Ge interface on a Juniper device disable auto MDI-X negotiation as well as set the speed on the interface to 1Gbps.
set interfaces ge-0/0/1 ether-options no-auto-negotiation
set interfaces ge-0/0/1 ether-options link-mode full-duplex
set interfaces ge-0/0/1 ether-options speed 1g
radius scheme dot1x
primary authentication 172.16.100.41
key authentication simple admin@123
user-name-format without-domain
#
domain dot1x
authentication lan-access radius-scheme dot1x none //加个none
authorization lan-access none
accounting lan-access none
#
dot1x
dot1x authentication-method eap