O’zbekiston respublikasi axborot texnologiyalari va kommunikatsiyalarini rivojlantirish vazirligi muhammad al-xorazmiy nomidagi toshkent axborot texnologiyalari

Manba MAC manzilini tekshirishni sozlash.
MAC-manzilning izchilligini tekshirishni sozlash uchun ushbu protsedurani
bajarish kerak.
Device> enable
Device# configure terminal
Device# arp anti-spoofing valid-check
Antispofing shlyuzini sozlash.
Shlyuzni soxtalashtirishni sozlash uchun ushbu protsedurani bajarish kerak.
Device> enable
Device# configure terminal
Device# arp anti-spoofing deny-disguiser
Ishonch portini sozlash.
Ishonch portini sozlash uchun ushbu protsedurani bajarish kerak.
Device> enable Device# configure terminal
Device# interface fastEthernet (interfeysportining raqamini ko'rsating) Device# arp anti trust
Ishonchli port sozlamalarini o'chirish uchun quyidagi buyruqni kiriting: Device# no arp anti trust Anti-Flood Attackni sozlash.
Toshqinlarga qarshi hujumni tashkil qilish uchun ushbu protsedurani
bajarish kerak.
Device> enable
Device# configure terminal
Device(config)# arp anti-flood
Device(config)# arp anti-flood threshold (odatda sekundiga 16paket) Device(config)# arp anti-flood action deny-arp {deny-all\deny-arp} {deny- all \ deny-arp}
(Yiqiladigan paketlar turini belgilaydi.deny-all: Xostni manzilning qora
ro'yxatiga qo'shadi va barcha packets.deny- arp: Faqat ARP paketlarini tashlaydi)
Device(config)# arp anti-flood recover-time 100 Device(config)# arp anti-flood recover 00:00:00:00:32:33 Device# interface fastEthernet (interfeysportining raqamini ko'rsating) Device(config)# arp anti-flood threshold
ARP snooping va Flood Attack hujumini kuzatish.
ARP Snooping va Flood Attack-ni kuzatish uchun quyidagi jadvaldagi buyruqlardan foydalanish mumkin.

Jadval 12.1. ARP Snooping va Flood Attack buyruqlari