User Tools

Site Tools


сервис_snortsam

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revision Both sides next revision
сервис_snortsam [2015/06/03 12:14]
val [ipfilter]
сервис_snortsam [2015/06/05 10:06]
val [cisco router acl tftp]
Line 89: Line 89:
 ... ...
 # ciscoacl 192.168.X.1 student/​tacacs cisco /​usr/​local/​etc/​snortsam/​snortsam.acl # ciscoacl 192.168.X.1 student/​tacacs cisco /​usr/​local/​etc/​snortsam/​snortsam.acl
-# ciscoacl 192.168.X.1 cisco cisco /​etc/​snortsam/​snortsam.acl+# ciscoacl 192.168.X.1 cisco cisco /usr/local/​etc/​snortsam/​snortsam.acl
 </​code>​ </​code>​
  
 ==== cisco router acl tftp ==== ==== cisco router acl tftp ====
  
-Настройка+=== Настройка ​===
 <​code>​ <​code>​
 server# cat /​tftpboot/​snortsam.acl server# cat /​tftpboot/​snortsam.acl
Line 109: Line 109:
  ​permit tcp any any established  ​permit tcp any any established
  ​deny ​  ip any any log  ​deny ​  ip any any log
 +end
 </​code><​code>​ </​code><​code>​
 server# cat snortsam.tftp server# cat snortsam.tftp
 </​code><​code>​ </​code><​code>​
-copy tftp://​192.168.X.1/ running-config+copy tftp://​192.168.X.10/ running-config
 </​code><​code>​ </​code><​code>​
 server# cat snortsam.conf server# cat snortsam.conf
 </​code><​code>​ </​code><​code>​
 ... ...
 +# ciscoacl 192.168.X.1 cisco cisco snortsam.acl|/​usr/​local/​etc/​snortsam/​snortsam.tftp
 # ciscoacl 192.168.X.1 student/​tacacs cisco snortsam.acl|/​usr/​local/​etc/​snortsam/​snortsam.tftp # ciscoacl 192.168.X.1 student/​tacacs cisco snortsam.acl|/​usr/​local/​etc/​snortsam/​snortsam.tftp
-# ciscoacl 192.168.X.1 student/​tacacs cisco snortsam.acl|/​etc/​snortsam/​snortsam.tftp 
-</​code><​code>​ 
-server# cd /tftpboot/ 
 </​code>​ </​code>​
  
-Запуск+=== Запуск ​===
  
 <​code>​ <​code>​
 +server# cd /tftpboot/
 +
 [server:/​tftpboot] # snortsam /​usr/​local/​etc/​snortsam/​snortsam.conf [server:/​tftpboot] # snortsam /​usr/​local/​etc/​snortsam/​snortsam.conf
 +
 +server# cat /​usr/​local/​etc/​rc.d/​snortsam
 +</​code><​code>​
 +...
 +cd /tftpboot/
 +
 +run_rc_command "​$1"​
 </​code>​ </​code>​
  
сервис_snortsam.txt · Last modified: 2017/12/06 09:10 by val