相關商品
商品簡介
作者簡介
名人/編輯推薦
目次
商品簡介
本書全面介紹了網絡工程相關技術，共分為9 章：第1 章介紹了計算機網絡互聯基礎知識，是本書的引導章節，主要包括網絡體系結構、IP 地址、路由技術、VLAN 技術、ACL技術和NAT 技術等；第2 章至第8 章講解了網絡互聯高級技術，主要包括局域網高級技術、城域網與廣域網技術、內部路由協議、外部路由協議、路由控制技術、出口選路控制技術、網絡可靠性技術等；第9 章為防火牆技術，簡要介紹了防火牆發展歷史，並結合華為USG防火牆，介紹防火牆知識和基本配置方法。
本書內容豐富，既有理論深度，又有實用價值，適合作為高等學校網絡工程專業的教材，也可作為計算機網絡愛好者的自學參考用書。
本書內容豐富，既有理論深度，又有實用價值，適合作為高等學校網絡工程專業的教材，也可作為計算機網絡愛好者的自學參考用書。
作者簡介
桂學勤，男，碩士，副教授，湖北科技科技學院計算機科學與技術學院副院長。一直從事計算機相關專業的教學和科研工作，主要研究方向為網絡工程、網絡安全，主講計算機網絡、網絡工程實踐、網絡安全等課程。先後主編或參編教材8部，發表教研論文多篇。主持教育部高等教育司校企產學合作協同育人項目兩項，獲湖北科技學院教學成果獎三等獎一項。
鐘良驥，男，碩士，副教授，湖北科技科技學院計算機科學與技術學院教師，研究方向為物聯網大數據應用，計算機網絡。2016年入選“湖北省全國萬名優秀創新創業導師”。近五年，主持省廳級項目9個、企業合作項目4個；主編6部教材，發表EI等論文12篇；專利10項；榮獲2015年鹹甯市科技進步獎三等獎；獲得“TI杯物聯網競賽”全國一等獎1個、三等獎1個、省一等獎1個。
徐斌，男，博士，副教授。湖北科技科技學院計算機科學與技術學院院長。主要從事智能數據分析、智慧校園、教育信息化、信息檢索、數據庫應用等方面的研究。作為主要成員參與國家自然科學基金項目1項，國家社會科學基金重大計劃招標項目1項，主持省部級教研科研項目多項，在國際國內重要的學術期刊與會議上發表論文被SCI、EI論文收錄多篇。
鐘良驥，男，碩士，副教授，湖北科技科技學院計算機科學與技術學院教師，研究方向為物聯網大數據應用，計算機網絡。2016年入選“湖北省全國萬名優秀創新創業導師”。近五年，主持省廳級項目9個、企業合作項目4個；主編6部教材，發表EI等論文12篇；專利10項；榮獲2015年鹹甯市科技進步獎三等獎；獲得“TI杯物聯網競賽”全國一等獎1個、三等獎1個、省一等獎1個。
徐斌，男，博士，副教授。湖北科技科技學院計算機科學與技術學院院長。主要從事智能數據分析、智慧校園、教育信息化、信息檢索、數據庫應用等方面的研究。作為主要成員參與國家自然科學基金項目1項，國家社會科學基金重大計劃招標項目1項，主持省部級教研科研項目多項，在國際國內重要的學術期刊與會議上發表論文被SCI、EI論文收錄多篇。
名人/編輯推薦
本書全面介紹了網絡工程相關技術，內容豐富，既有理論審讀，又有實用價值
目次
第1章 計算機網絡互聯基礎····················1
1.1 計算機網絡基礎··································1
1.1.1 網絡基礎知識·······························1
1.1.2 網絡體系結構·······························4
1.1.3 網絡傳輸設備·······························8
1.2 IP 地址基礎知識································12
1.2.1 IP 地址技術的發展階段·············12
1.2.2 私有IP地址································13
1.2.3 特殊IP地址································14
1.2.4 動態分配IP地址技術················14
1.3 網絡路由技術····································14
1.3.1 路由協議分類·····························14
1.3.2 常用的動態路由協議·················15
1.3.3 路由協議選擇·····························18
1.3.4 路由配置實驗·····························19
1.4 局域網技術········································21
1.4.1 生成樹協議·································21
1.4.2 VLAN 技術·································27
1.5 ACL技術···········································31
1.5.1 ACL 的基本原理························32
1.5.2 ACL 的匹配順序························32
1.5.3 ACL 分類····································33
1.5.4 ACL 規則支持的可選參數········34
1.5.5 ACL 應用····································35
1.5.6 ACL 規則配置使用方法············35
1.5.7 ACL 報文過濾配置實驗············37
1.6 NAT 技術············································39
1.6.1 NAT 技術概述·····························39
1.6.2 NAT 的實現方式·························39
1.6.3 NAT 配置方法·····························41
1.6.4 NAT 配置實驗·····························42
小結····························································· 45
習題····························································· 45
第2章 局域網高級技術··························47
2.1 高級VLAN 技術······························· 47
2.1.1 VLAN-Aggregate························ 47
2.1.2 MUX-VLAN ······························· 51
2.1.3 QinQ 技術··································· 54
2.1.4 高級VLAN 技術綜合實驗········· 58
2.2 MSTP 技術········································· 63
2.2.1 STP技術發展概述····················· 63
2.2.2 MSTP 的基本概念····················· 65
2.2.3 MSTP 配置································· 66
2.2.4 MSTP 配置實驗························· 68
2.3 鏈路聚合Eth-Trunk ·························· 70
2.3.1 基本概念····································· 70
2.3.2 鏈路聚合模式····························· 71
2.3.3 鏈路聚合負載分擔方式············· 72
2.3.4 鏈路聚合默認配置····················· 72
2.3.5 鏈路聚合配置····························· 73
2.3.6 鏈路聚合配置實驗····················· 74
2.4 端口安全············································ 76
2.4.1 端口學習安全MAC地址的
方式············································· 76
2.4.2 配置端口安全····························· 76
2.4.3 端口安全配置實驗····················· 77
小結····························································· 78
習題····························································· 78
第3章 城域網與廣域網技術··················81
3.1 城域網技術········································ 81
3.1.1 萬兆以太網技術························· 81
計算機網絡工程實踐
II
3.1.2 光以太網RPR技術····················81
3.1.3 POS 技術·····································82
3.1.4 MSTP 技術··································82
3.2 接入網技術········································82
3.2.1 電話線接入·································82
3.2.2 雙絞線接入·································85
3.2.3 混合光纖同軸電纜接入·············85
3.2.4 光纖接入·····································87
3.3.5 無線接入·····································89
3.3 廣域網技術········································89
3.3.1 廣域網分類·································89
3.3.2 PDH 技術····································90
3.3.3 SDH 技術····································90
3.3.4 WDM 技術··································91
3.4 X.25 網絡···········································92
3.4.1 X.25 網絡結構····························92
3.4.2 X.25 網絡設備與接口················92
3.4.3 X.25 骨幹網絡組成····················93
3.4.4 X.25 網絡接入····························94
3.5 DDN網絡···········································94
3.5.1 DDN 網絡結構····························94
3.5.2 DDN 節點機································95
3.5.3 DDN 接入設備····························96
3.5.4 DDN 接口····································96
3.5.5 節點機之間的互聯方式·············96
3.5.6 DDN 用戶接入方式····················97
3.6 幀中繼網絡········································98
3.6.1 幀中繼網絡結構·························98
3.6.2 幀中繼設備·································98
3.6.3 幀中繼組網·································99
3.7 ATM網絡···········································99
3.7.1 ATM 網絡現狀····························99
3.7.2 ATM 網絡支持業務類型··········100
3.7.3 ATM 協議參考模型··················100
3.7.4 ATM 物理層······························101
3.7.5 ATM 交換機產品······················102
3.7.6 華為ATM交換機·····················102
3.7.7 ATM 交換機組網······················103
3.8 SDH網絡·········································104
3.8.1 SDH 網絡工作原理··················104
3.8.2 SDH 傳輸網絡接口··················105
3.8.3 華為SDH設備························· 105
3.8.4 SDH 設備組網·························· 106
3.9 WDM 網絡······································· 106
3.9.1 WDM 網絡概述························ 106
3.9.2 WDM 網絡接口························ 107
3.9.3 華為WDM 設備······················· 108
3.10 網絡互聯接口································ 109
3.11 各類網絡在TCP/IP協議
體系中的對應關係························ 113
3.12 各類網絡互聯配置實驗················ 114
3.12.1 X.25 配置································ 115
3.12.2 幀中繼配置····························· 117
3.12.3 G.SHDSL 接口ATM配置····· 120
3.12.4 POS 接口PPP認證配置········ 123
3.12.5 以太網接口配置····················· 125
小結··························································· 126
習題··························································· 126
第4章 內部路由協議···························128
4.1 路由相關知識·································· 128
4.1.1 靜態路由與動態路由··············· 128
4.1.2 動態路由的分類······················· 129
4.1.3 路由表和轉發表······················· 129
4.1.4 路由迭代··································· 131
4.1.5 路由協議的優先級··················· 131
4.1.6 路由度量值······························· 132
4.1.7 負載分擔與路由備份··············· 132
4.2 靜態路由·········································· 133
4.2.1 靜態路由配置··························· 133
4.2.2 默認路由配置··························· 133
4.2.2 靜態路由與故障檢測類協議
聯動配置··································· 134
4.3 RIP協議··········································· 135
4.3.1 RIP協議版本問題···················· 135
4.3.2 RIP協議自動匯總規則············ 135
4.3.3 RIP工作過程及計時器············ 136
4.3.4 RIP協議存在的問題和解決
辦法··········································· 137
4.3.4 RIP協議配置方法···················· 140
4.3.5 RIP協議配置實驗···················· 141
4.4 OSPF路由協議······························· 144
目錄
III
4.4.1 內部路由協議的基本概念·······144
4.4.2 OSPF 路由協議基礎·················146
4.4.3 OSPF 路由基本原理·················153
4.4.4 OSPF 協議配置方法·················156
4.4.5 OPSF 協議配置實驗·················159
4.5 ISIS 路由技術··································164
4.5.1 ISIS 路由基礎···························164
4.5.2 ISIS 地址結構···························168
4.5.3 ISIS 工作原理···························169
4.5.4 ISIS 配置···································172
4.5.5 ISIS 配置實驗···························175
小結···························································178
習題···························································178
第5章 外部路由協議···························180
5.1 BGP協議基礎··································180
5.1.1 自治系統···································180
5.1.2 BGP 分類···································181
5.1.3 BGP 報文交互中設備角色······181
5.1.4 BGP 的路由器ID ·····················182
5.1.5 BGP 的報文類型·······················182
5.1.6 BGP 屬性分類及常用屬性······182
5.2 BGP工作原理··································186
5.2.1 BGP 對等體交互過程···············186
5.2.2 BGP 路由選優原則···················188
5.2.3 BGP 對等體交互原則···············188
5.2.4 BGP 對等體交互環路避免······189
5.2.5 BGP 同步與路由黑洞···············189
5.2.6 BGP 路由衰減···························190
5.3 BGP路由反射器······························190
5.3.1 路由反射器相關角色···············191
5.3.2 路由反射器原理·······················191
5.3.3 備份路由反射器·······················192
5.3.4 多集群路由反射器···················192
5.4 BGP聯盟··········································193
5.5 BGP路由配置··································195
5.5.1 BGP 基本功能配置···················195
5.5.2 BGP 路由選路配置···················196
5.5.3 BGP 反射器配置·······················198
5.5.4 BGP 聯盟配置···························199
5.6 BGP路由配置實驗··························199
小結··························································· 206
習題··························································· 206
第6章 路由控制技術···························208
6.1 路由標識工具·································· 208
6.2 路由策略·········································· 211
6.2.1 路由策略基本原理··················· 212
6.2.2 配置路由策略··························· 212
6.2.3 應用路由策略··························· 214
6.3 路由引入·········································· 214
6.3.1 RIP引入外部路由···················· 215
6.3.2 OSPF 引入外部路由················ 215
6.3.3 ISIS 引入外部路由··················· 216
6.3.4 BGP 引入其他協議路由·········· 216
6.4 路由過濾·········································· 217
6.4.1 RIP協議路由過濾···················· 217
6.4.2 OSPF 協議路由過濾················ 218
6.4.3 ISIS 協議路由過濾··················· 218
6.4.4 BGP 協議路由過濾·················· 218
6.5 路由聚合·········································· 219
6.5.1 RIP-2路由聚合配置················ 220
6.5.2 OSPF 路由聚合························ 220
6.5.3 ISIS 路由聚合··························· 221
6.5.4 BGP 路由聚合·························· 221
6.6 路由控制實驗·································· 222
小結··························································· 228
習題··························································· 228
第7章 出口選路控制技術····················230
7.1 就近選路方式·································· 230
7.2 透明代理DNS選路························ 231
7.3 策略路由概述·································· 231
7.3.1 策略路由優點··························· 231
7.3.2 策略路由分類··························· 232
7.3.3 策略路由相關技術··················· 232
7.4 本地策略路由·································· 233
7.4.1 本地策略路由應用場景··········· 234
7.4.2 本地策略路由轉發接口選擇
順序··········································· 234
7.4.3 本地策略路由配置方法··········· 234
7.5 接口策略路由·································· 235
計算機網絡工程實踐
IV
7.5.1 應用場景···································235
7.5.2 接口策略路由分類···················236
7.5.3 配置接口策略路由···················236
7.6 智能策略路由··································238
7.6.1 業務區分···································238
7.6.2 鏈路質量···································238
7.6.3 探測鏈路和鏈路組···················239
7.6.4 業務選路···································239
7.6.5 相關路由參數···························240
7.6.6 智能策略路由應用場景···········240
7.6.7 智能策略路由配置···················240
7.7 選路控制實驗··································241
小結···························································245
習題···························································246
第8章 網絡可靠性技術························248
8.1 BFD原理與應用場景······················248
8.1.1 BFD 原理···································249
8.1.2 BFD 應用場景···························250
8.2 BFD鏈路檢測與聯動······················251
8.2.1 BFD 鏈路檢測···························251
8.2.2 BFD 聯動···································252
8.2.3 BFD 多跳檢測與聯動配置
實驗···········································253
8.3 VRRP 基本概念·······························256
8.4 VRRP 協議工作原理·······················257
8.4.1 VRRP 協議報文························257
8.4.2 VRRP 狀態機····························257
8.4.3 VRRP 工作過程························258
8.5 VRRP 主備備份和負載分擔···········259
8.5.1 VRRP 主備備份方式················259
8.5.2 VRRP 負載分擔方式················260
8.6 VRRP 鏈路監控與快速切換···········260
8.6.1 VRRP 設備直連上行鏈路
聯動監控···································261
8.6.2 VRRP 設備非直連上行鏈路
聯動監控···································261
8.6.3 VRRP 備份組之間鏈路聯動
監控···········································262
8.7 VRRP 配置······································· 263
8.7.1 配置VRRP的基本功能·········· 263
8.7.2 配置VRRP的監控聯動
功能··········································· 263
8.8 VRRP 配置實驗······························ 264
小結··························································· 269
習題··························································· 269
第9章 防火牆技術·······························271
9.1 防火牆概述······································ 271
9.2 華為防火牆······································ 274
9.3 防火牆技術基礎······························ 275
9.3.1 安全區域··································· 275
9.3.2 防火牆工作模式······················· 277
9.3.3 包過濾與狀態檢測··················· 278
9.3.4 安全策略··································· 280
9.3.5 黑名單與白名單······················· 285
9.3.6 ASPF 技術································ 285
9.4 防火牆高級安全功能······················ 286
9.4.1 防火牆攻擊防範······················· 286
9.4.2 防火牆NAT功能····················· 287
9.4.3 防火牆VPN功能····················· 287
9.5 防火牆配置方法······························ 288
9.5.1 AR路由器的包過濾配置········ 289
9.5.2 USG 5000 UTM 安全策略
配置··········································· 291
9.5.3 USG 6000 NGFW 安全策略
配置··········································· 295
9.6 防火牆配置實驗······························ 297
9.6.1 AR路由器防火牆包過濾
實驗··········································· 298
9.6.2 USG 5000 防火牆融合UTM
安全策略實驗··························· 301
9.6.3 USG 6000 NGFW 防火牆
一體化安全策略實驗··············· 303
小結··························································· 306
習題··························································· 306
參考文獻·················································308
1.1 計算機網絡基礎··································1
1.1.1 網絡基礎知識·······························1
1.1.2 網絡體系結構·······························4
1.1.3 網絡傳輸設備·······························8
1.2 IP 地址基礎知識································12
1.2.1 IP 地址技術的發展階段·············12
1.2.2 私有IP地址································13
1.2.3 特殊IP地址································14
1.2.4 動態分配IP地址技術················14
1.3 網絡路由技術····································14
1.3.1 路由協議分類·····························14
1.3.2 常用的動態路由協議·················15
1.3.3 路由協議選擇·····························18
1.3.4 路由配置實驗·····························19
1.4 局域網技術········································21
1.4.1 生成樹協議·································21
1.4.2 VLAN 技術·································27
1.5 ACL技術···········································31
1.5.1 ACL 的基本原理························32
1.5.2 ACL 的匹配順序························32
1.5.3 ACL 分類····································33
1.5.4 ACL 規則支持的可選參數········34
1.5.5 ACL 應用····································35
1.5.6 ACL 規則配置使用方法············35
1.5.7 ACL 報文過濾配置實驗············37
1.6 NAT 技術············································39
1.6.1 NAT 技術概述·····························39
1.6.2 NAT 的實現方式·························39
1.6.3 NAT 配置方法·····························41
1.6.4 NAT 配置實驗·····························42
小結····························································· 45
習題····························································· 45
第2章 局域網高級技術··························47
2.1 高級VLAN 技術······························· 47
2.1.1 VLAN-Aggregate························ 47
2.1.2 MUX-VLAN ······························· 51
2.1.3 QinQ 技術··································· 54
2.1.4 高級VLAN 技術綜合實驗········· 58
2.2 MSTP 技術········································· 63
2.2.1 STP技術發展概述····················· 63
2.2.2 MSTP 的基本概念····················· 65
2.2.3 MSTP 配置································· 66
2.2.4 MSTP 配置實驗························· 68
2.3 鏈路聚合Eth-Trunk ·························· 70
2.3.1 基本概念····································· 70
2.3.2 鏈路聚合模式····························· 71
2.3.3 鏈路聚合負載分擔方式············· 72
2.3.4 鏈路聚合默認配置····················· 72
2.3.5 鏈路聚合配置····························· 73
2.3.6 鏈路聚合配置實驗····················· 74
2.4 端口安全············································ 76
2.4.1 端口學習安全MAC地址的
方式············································· 76
2.4.2 配置端口安全····························· 76
2.4.3 端口安全配置實驗····················· 77
小結····························································· 78
習題····························································· 78
第3章 城域網與廣域網技術··················81
3.1 城域網技術········································ 81
3.1.1 萬兆以太網技術························· 81
計算機網絡工程實踐
II
3.1.2 光以太網RPR技術····················81
3.1.3 POS 技術·····································82
3.1.4 MSTP 技術··································82
3.2 接入網技術········································82
3.2.1 電話線接入·································82
3.2.2 雙絞線接入·································85
3.2.3 混合光纖同軸電纜接入·············85
3.2.4 光纖接入·····································87
3.3.5 無線接入·····································89
3.3 廣域網技術········································89
3.3.1 廣域網分類·································89
3.3.2 PDH 技術····································90
3.3.3 SDH 技術····································90
3.3.4 WDM 技術··································91
3.4 X.25 網絡···········································92
3.4.1 X.25 網絡結構····························92
3.4.2 X.25 網絡設備與接口················92
3.4.3 X.25 骨幹網絡組成····················93
3.4.4 X.25 網絡接入····························94
3.5 DDN網絡···········································94
3.5.1 DDN 網絡結構····························94
3.5.2 DDN 節點機································95
3.5.3 DDN 接入設備····························96
3.5.4 DDN 接口····································96
3.5.5 節點機之間的互聯方式·············96
3.5.6 DDN 用戶接入方式····················97
3.6 幀中繼網絡········································98
3.6.1 幀中繼網絡結構·························98
3.6.2 幀中繼設備·································98
3.6.3 幀中繼組網·································99
3.7 ATM網絡···········································99
3.7.1 ATM 網絡現狀····························99
3.7.2 ATM 網絡支持業務類型··········100
3.7.3 ATM 協議參考模型··················100
3.7.4 ATM 物理層······························101
3.7.5 ATM 交換機產品······················102
3.7.6 華為ATM交換機·····················102
3.7.7 ATM 交換機組網······················103
3.8 SDH網絡·········································104
3.8.1 SDH 網絡工作原理··················104
3.8.2 SDH 傳輸網絡接口··················105
3.8.3 華為SDH設備························· 105
3.8.4 SDH 設備組網·························· 106
3.9 WDM 網絡······································· 106
3.9.1 WDM 網絡概述························ 106
3.9.2 WDM 網絡接口························ 107
3.9.3 華為WDM 設備······················· 108
3.10 網絡互聯接口································ 109
3.11 各類網絡在TCP/IP協議
體系中的對應關係························ 113
3.12 各類網絡互聯配置實驗················ 114
3.12.1 X.25 配置································ 115
3.12.2 幀中繼配置····························· 117
3.12.3 G.SHDSL 接口ATM配置····· 120
3.12.4 POS 接口PPP認證配置········ 123
3.12.5 以太網接口配置····················· 125
小結··························································· 126
習題··························································· 126
第4章 內部路由協議···························128
4.1 路由相關知識·································· 128
4.1.1 靜態路由與動態路由··············· 128
4.1.2 動態路由的分類······················· 129
4.1.3 路由表和轉發表······················· 129
4.1.4 路由迭代··································· 131
4.1.5 路由協議的優先級··················· 131
4.1.6 路由度量值······························· 132
4.1.7 負載分擔與路由備份··············· 132
4.2 靜態路由·········································· 133
4.2.1 靜態路由配置··························· 133
4.2.2 默認路由配置··························· 133
4.2.2 靜態路由與故障檢測類協議
聯動配置··································· 134
4.3 RIP協議··········································· 135
4.3.1 RIP協議版本問題···················· 135
4.3.2 RIP協議自動匯總規則············ 135
4.3.3 RIP工作過程及計時器············ 136
4.3.4 RIP協議存在的問題和解決
辦法··········································· 137
4.3.4 RIP協議配置方法···················· 140
4.3.5 RIP協議配置實驗···················· 141
4.4 OSPF路由協議······························· 144
目錄
III
4.4.1 內部路由協議的基本概念·······144
4.4.2 OSPF 路由協議基礎·················146
4.4.3 OSPF 路由基本原理·················153
4.4.4 OSPF 協議配置方法·················156
4.4.5 OPSF 協議配置實驗·················159
4.5 ISIS 路由技術··································164
4.5.1 ISIS 路由基礎···························164
4.5.2 ISIS 地址結構···························168
4.5.3 ISIS 工作原理···························169
4.5.4 ISIS 配置···································172
4.5.5 ISIS 配置實驗···························175
小結···························································178
習題···························································178
第5章 外部路由協議···························180
5.1 BGP協議基礎··································180
5.1.1 自治系統···································180
5.1.2 BGP 分類···································181
5.1.3 BGP 報文交互中設備角色······181
5.1.4 BGP 的路由器ID ·····················182
5.1.5 BGP 的報文類型·······················182
5.1.6 BGP 屬性分類及常用屬性······182
5.2 BGP工作原理··································186
5.2.1 BGP 對等體交互過程···············186
5.2.2 BGP 路由選優原則···················188
5.2.3 BGP 對等體交互原則···············188
5.2.4 BGP 對等體交互環路避免······189
5.2.5 BGP 同步與路由黑洞···············189
5.2.6 BGP 路由衰減···························190
5.3 BGP路由反射器······························190
5.3.1 路由反射器相關角色···············191
5.3.2 路由反射器原理·······················191
5.3.3 備份路由反射器·······················192
5.3.4 多集群路由反射器···················192
5.4 BGP聯盟··········································193
5.5 BGP路由配置··································195
5.5.1 BGP 基本功能配置···················195
5.5.2 BGP 路由選路配置···················196
5.5.3 BGP 反射器配置·······················198
5.5.4 BGP 聯盟配置···························199
5.6 BGP路由配置實驗··························199
小結··························································· 206
習題··························································· 206
第6章 路由控制技術···························208
6.1 路由標識工具·································· 208
6.2 路由策略·········································· 211
6.2.1 路由策略基本原理··················· 212
6.2.2 配置路由策略··························· 212
6.2.3 應用路由策略··························· 214
6.3 路由引入·········································· 214
6.3.1 RIP引入外部路由···················· 215
6.3.2 OSPF 引入外部路由················ 215
6.3.3 ISIS 引入外部路由··················· 216
6.3.4 BGP 引入其他協議路由·········· 216
6.4 路由過濾·········································· 217
6.4.1 RIP協議路由過濾···················· 217
6.4.2 OSPF 協議路由過濾················ 218
6.4.3 ISIS 協議路由過濾··················· 218
6.4.4 BGP 協議路由過濾·················· 218
6.5 路由聚合·········································· 219
6.5.1 RIP-2路由聚合配置················ 220
6.5.2 OSPF 路由聚合························ 220
6.5.3 ISIS 路由聚合··························· 221
6.5.4 BGP 路由聚合·························· 221
6.6 路由控制實驗·································· 222
小結··························································· 228
習題··························································· 228
第7章 出口選路控制技術····················230
7.1 就近選路方式·································· 230
7.2 透明代理DNS選路························ 231
7.3 策略路由概述·································· 231
7.3.1 策略路由優點··························· 231
7.3.2 策略路由分類··························· 232
7.3.3 策略路由相關技術··················· 232
7.4 本地策略路由·································· 233
7.4.1 本地策略路由應用場景··········· 234
7.4.2 本地策略路由轉發接口選擇
順序··········································· 234
7.4.3 本地策略路由配置方法··········· 234
7.5 接口策略路由·································· 235
計算機網絡工程實踐
IV
7.5.1 應用場景···································235
7.5.2 接口策略路由分類···················236
7.5.3 配置接口策略路由···················236
7.6 智能策略路由··································238
7.6.1 業務區分···································238
7.6.2 鏈路質量···································238
7.6.3 探測鏈路和鏈路組···················239
7.6.4 業務選路···································239
7.6.5 相關路由參數···························240
7.6.6 智能策略路由應用場景···········240
7.6.7 智能策略路由配置···················240
7.7 選路控制實驗··································241
小結···························································245
習題···························································246
第8章 網絡可靠性技術························248
8.1 BFD原理與應用場景······················248
8.1.1 BFD 原理···································249
8.1.2 BFD 應用場景···························250
8.2 BFD鏈路檢測與聯動······················251
8.2.1 BFD 鏈路檢測···························251
8.2.2 BFD 聯動···································252
8.2.3 BFD 多跳檢測與聯動配置
實驗···········································253
8.3 VRRP 基本概念·······························256
8.4 VRRP 協議工作原理·······················257
8.4.1 VRRP 協議報文························257
8.4.2 VRRP 狀態機····························257
8.4.3 VRRP 工作過程························258
8.5 VRRP 主備備份和負載分擔···········259
8.5.1 VRRP 主備備份方式················259
8.5.2 VRRP 負載分擔方式················260
8.6 VRRP 鏈路監控與快速切換···········260
8.6.1 VRRP 設備直連上行鏈路
聯動監控···································261
8.6.2 VRRP 設備非直連上行鏈路
聯動監控···································261
8.6.3 VRRP 備份組之間鏈路聯動
監控···········································262
8.7 VRRP 配置······································· 263
8.7.1 配置VRRP的基本功能·········· 263
8.7.2 配置VRRP的監控聯動
功能··········································· 263
8.8 VRRP 配置實驗······························ 264
小結··························································· 269
習題··························································· 269
第9章 防火牆技術·······························271
9.1 防火牆概述······································ 271
9.2 華為防火牆······································ 274
9.3 防火牆技術基礎······························ 275
9.3.1 安全區域··································· 275
9.3.2 防火牆工作模式······················· 277
9.3.3 包過濾與狀態檢測··················· 278
9.3.4 安全策略··································· 280
9.3.5 黑名單與白名單······················· 285
9.3.6 ASPF 技術································ 285
9.4 防火牆高級安全功能······················ 286
9.4.1 防火牆攻擊防範······················· 286
9.4.2 防火牆NAT功能····················· 287
9.4.3 防火牆VPN功能····················· 287
9.5 防火牆配置方法······························ 288
9.5.1 AR路由器的包過濾配置········ 289
9.5.2 USG 5000 UTM 安全策略
配置··········································· 291
9.5.3 USG 6000 NGFW 安全策略
配置··········································· 295
9.6 防火牆配置實驗······························ 297
9.6.1 AR路由器防火牆包過濾
實驗··········································· 298
9.6.2 USG 5000 防火牆融合UTM
安全策略實驗··························· 301
9.6.3 USG 6000 NGFW 防火牆
一體化安全策略實驗··············· 303
小結··························································· 306
習題··························································· 306
參考文獻·················································308
您曾經瀏覽過的商品
購物須知
大陸出版品因裝訂品質及貨運條件與台灣出版品落差甚大，除封面破損、內頁脫落等較嚴重的狀態，其餘商品將正常出貨。
特別提醒：部分書籍附贈之內容(如音頻mp3或影片dvd等)已無實體光碟提供，需以QR CODE 連結至當地網站註冊“並通過驗證程序”，方可下載使用。
無現貨庫存之簡體書，將向海外調貨：
海外有庫存之書籍，等候約45個工作天;
海外無庫存之書籍，平均作業時間約60個工作天，然不保證確定可調到貨，尚請見諒。
為了保護您的權益，「三民網路書店」提供會員七日商品鑑賞期(收到商品為起始日)。
若要辦理退貨，請在商品鑑賞期內寄回，且商品必須是全新狀態與完整包裝(商品、附件、發票、隨貨贈品等)否則恕不接受退貨。