1.在CISCO路由器上配置反向telnet，连接好八爪鱼。
2.注意配置line中speed stopbits配置，speed 19200 ，stopbits 1. 其他按照标准配置即可
3.用CISCO的那种一头是DB9一头是水晶头的那种线连到F5 console口上
4.用网线扩展器和一个全反线把八爪鱼的头和F5 console口出来的那个水晶头连接起来即可
以后就可以远程到CISCO路由器上，然后telnet +ip +线路端口 就可以连接了。
由于历史原因，我司一个项目组一直以来手工静态设定自己的IP，没能统一到公司的DHCP服务器上。近日决定迁移。在作完配置修改后用户却总是不能获取IP，总是处于获取状态中，检查DHCP却发现这些IP已经正确的分配给了这些用户，这是什么原因？于是进行了抓包：
正常一个DHCP获取过程是广播discover——–>单播offer——–>广播request———–>单播ACK.而图上却在ACK前横插了一个NAK.而且这个DHCP服务器不是公司正常的DHCP服务器。根据DHCP原理，接到NAK后计算机应该放弃IP。所以这个计算机始终获取不到IP。
抓包还发现这个假冒DHCP服务器始终不做offer只作NAK，如此干坏事！于是查找到该接口，发现那接了一个TP-LINK的破SOHO路由器。
学过NP的都知道如果配置缺省AAA服务器的话，CISCO设备默认是施加到所有登录类型的不管是tty 还是vty。这个本没错，可我们如果真的这么做了，会出现一些意外情况。最近我就遇到了这样一个意外。
结构：
网络设备——————-基于域的IAS服务器
网络设备设置default的AAA，并在radius服务器IP后明确指定local。
在IAS上设置策略，指明NAS-Port-Type 这个属性要等于virtual(vpn)，设置完毕后，telnet设备可以正常通过服务器认证，且服务器坏掉还能通过本地帐号认证。看上去没问题。
昨天因为特殊情况需要console到设备上，结果让人意外的是总是明确的拒绝我。既然是明确拒绝说明是radius返回的，可以说肯定是策略没匹配上。此时如果网络设备和radius服务器不通的话，肯定也是可以从console登录的，但我又不能让它不通。通过debug和在IAS服务器上查看日志及策略，发现通过console登录的，发送给IAS服务器的消息里：
NAS-Port-Type =Async
显然是这个属性没匹配上，因为之前设置的NAS-Port-Type是等于 vritual(vpn)的。
解决办法是，最好给console明确定义本地，不要使用什么花哨的验证功能，否则真有意外就太麻烦了。
很多东西不是我们想当然的那样，流程、测试、想到范围都要到位。。。工作才能做好。
® 2000, Windows® XP, Windows Vista™ antivirus support chart for FirePass Controller, version 6.0.1
This release of the FirePass controller supports the following antivirus software. The plus sign (+) in the table indicates that the antivirus software is supported by the FirePass controller through the OPSWAT® antivirus integration SDK, 2.3.2 on Windows® 2000, Windows® XP, and Windows Vista™ operating systems. The asterisk ( * ) indicates that the antivirus software is supported on Windows® XP, SP2 or later versions of Windows®.
Important: If the antivirus inspectors are not available on your FirePass controller, reactivate your license to enable the antivirus inspectors.
Note: In the table, the message unknown product indicates that the controller detected only the computer associate’s antivirus software , but not the product name or version.
| Product Name | Product Version | Product ID | Check Realtime Protection State (monitor) | Enable Realtime Protection | Perform Process Scan |
|---|---|---|---|---|---|
| AhnLab, Inc. | |||||
| AhnLab Security Pack | 2.x | AhnLabAV | |||
| AhnLab V3 Internet Security 2007 Platinum | 7.x | AhnLabAV | |||
| V3 ウイルスブロック | NA | AhnLabAV | |||
| V3Pro 2004 | 6.x | AhnLabAV | |||
| ALWIL Software | |||||
| avast! Antivirus | 4.x | AlwilAV | + | ||
| avast! Antivirus (managed) | 4.x | AlwilAV | + | + | |
| avast! Antivirus Professional | 4.x | AlwilAV | + | + | |
| America Online, Inc. | |||||
| Active Virus Shield | 6.x | AolAV | + | + | |
| AOL Safety and Security Center Virus Protection | 1.x | AolAV | + | + | |
| AOL Safety and Security Center Virus Protection | 102.x | AolAV | + | ||
| AOL Safety and Security Center Virus Protection | 2.x | AolAV | + | ||
| AOL Safety and Security Center Virus Protection | 210.x | AolAV | + | ||
| Authentium, Inc. | |||||
| Command Anti-Virus Enterprise | 4.x | CommandAV | + | ||
| Command AntiVirus for Windows | 4.x | CommandAV | + | ||
| Command AntiVirus for Windows Enterprise | 4.x | CommandAV | + | ||
| Cox High Speed Internet Security Suite | 3.x | CommandAV | + | + | + |
| Avira GmbH | |||||
| Avira AntiVir Windows Workstation | 7.x | H+BEDV | + | ||
| Avira Premium Security Suite | 7.x | H+BEDV | |||
| Beijing Rising Technology Corp. Ltd. | |||||
| Rising Antivirus Software AV | 17.x | RisingAV | * | ||
| Rising Antivirus Software AV | 18.x | RisingAV | * | ||
| BellSouth | |||||
| BellSouth Internet Security Anti-Virus | 5.5.x | RadialPointAV | * | ||
| BellSouth Internet Security Anti-Virus | 5.x | RadialPointAV | * | ||
| Sécurité Internet d’affaires Antivirus | 5.x | RadialPointAV | * | ||
| ClamWin | |||||
| ClamWin Antivirus | 0.x | ClamAV | ="center" | + | |
| ClamWin Free Antivirus | 0.x | ClamAV | + | ||
| Computer Associates International, Inc. | |||||
| CA Anti-Virus | 8.x | eTrustAV | + | ||
| CA eTrust Antivirus | 7.x | eTrustAV | + | + | + |
| CA eTrust Internet Security Suite AntiVirus | 7.x | eTrustAV | + | + | |
| CA eTrustITM Agent | 8.x | eTrustAV | + | + | + |
| CA unknown product | x | eTrustAV | |||
| eTrust EZ Antivirus | 6.1.x | eTrustAV | + | ||
| eTrust EZ Antivirus | 6.2.x | eTrustAV | + | ||
| eTrust EZ Antivirus | 6.4.x | eTrustAV | + | ||
| eTrust EZ Antivirus | 7.x | eTrustAV | + | + | |
| eTrust EZ Armor | 6.1.x | eTrustAV | + | ||
| eTrust EZ Armor | 6.2.x | eTrustAV | + | ||
| eTrust EZ Armor | 7.x | eTrustAV | + | ||
| Defender Pro LLC | |||||
| Defender Pro Anti-Virus | 5.x | DefenderProAV | * | + | |
| EarthLink, Inc. | |||||
| Aluria Security Center AntiVirus | 1.x | EarthLinkAV | + | ||
| EarthLink Protection Control Center AntiVirus | 1.x | EarthLinkAV | + | ||
| Eset Software | |||||
| NOD32 antivirus system | 2.x | EsetAV | + | + | |
| NOD32 antivirus system | NA | EsetAV | + | + | |
| NOD32 Antivirus System | NA | EsetAV | + | + | |
| NOD32 antivirus System | NA | EsetAV | + | + | |
| NOD32防毒系统 | 2.x | EsetAV | + | + | |
| NOD32防毒系統 | 2.x | EsetAV | + | + | |
| F-Secure Corp. | |||||
| F-Secure Anti-Virus | 5.x | F-SecureAV | + | ||
| F-Secure Anti-Virus | 6.x | F-SecureAV | + | ||
| F-Secure Anti-Virus | 7.x | F-SecureAV | + | ||
| F-Secure Anti-Virus 2005 | 5.x | F-SecureAV | + | ||
| F-Secure Anti-Virus Client Security | 6.x | F-SecureAV | + | ||
| F-Secure AVCS ウィルス保護 | 5.x | F-SecureAV | + | ||
| F-Secure Internet Security | 6.x | F-SecureAV | + | ||
| F-Secure Internet Security | 7.x | F-SecureAV | + | ||
| F-Secure Internet Security 2006 Beta | 6.x | F-SecureAV | + | ||
| Frisk Software International | |||||
| F-Prot for W
indows |
3.14e | F-ProtAV | |||
| F-Prot for Windows | 3.15 | F-ProtAV | |||
| F-Prot for Windows | 3.16c | F-ProtAV | * | * | + |
| F-Prot for Windows | 3.16d | F-ProtAV | * | * | + |
| F-Prot for Windows | 3.16x | F-ProtAV | * | * | + |
| GData Software AG | |||||
| AntiVirusKit 2006 | 2006.x | GDataAV | + | ||
| Grisoft, Inc. | |||||
| Antivirussystem AVG 6.0 | 6.x | GrisoftAV | + | + | + |
| AVG 6.0 Anti-Virus – FREE Edition | 6.x | GrisoftAV | + | + | + |
| AVG 6.0 Anti-Virus System | 6.x | GrisoftAV | + | + | + |
| AVG 7.5 | 7.x | GrisoftAV | + | + | + |
| AVG Anti-Vírus 7.0 | 7.x | GrisoftAV | + | + | + |
| AVG Anti-Virus 7.0 | 7.x | GrisoftAV | + | + | + |
| AVG Anti-Virus 7.1 | 7.x | GrisoftAV | + | + | + |
| AVG Antivirensystem 7.0 | 7.x | GrisoftAV | + | + | + |
| AVG Free Edition | 7.x | GrisoftAV | + | + | + |
| Grisoft unknown product | x | GrisoftAV | + | ||
| Système anti-virus AVG 7.0 | 7.x | GrisoftAV | + | + | + |
| H+BEDV Datentechnik GmbH | |||||
| AntiVir PersonalEdition Classic Windows | 7.x | H+BEDV | |||
| AntiVir/XP | 6.x | H+BEDV | * | ||
| Avira AntiVir PersonalEdition Premium | 7.x | H+BEDV | |||
| HAURI, Inc. | |||||
| ViRobot Desktop | 5.0.x | HauriAV | + | + | |
| Jiangmin, Inc. | |||||
| 江民防毒軟體KV2006 | 9.x | JiangminAV | |||
| 江民杀毒软件KV2006 | 9.x | JiangminAV | |||
| Kaspersky Labs | |||||
| 卡巴斯基反病毒Personal | 5.0.x | KasperskyAV | * | + | |
| 卡巴斯基防毒Personal | 5.0.x | KasperskyAV | * | + | |
| カスペルスキー アンチウイルス5 | 5.0.x | KasperskyAV | * | + | |
| Kaspersky Anti-Virus 2006 Beta | 6.0.x | KasperskyAV | |||
| Kaspersky Anti-Virus 6.0 | 6.x | KasperskyAV | + | + | |
| Kaspersky Anti-Virus 6.0 Beta | 6.x | KasperskyAV | + | + | |
| Kaspersky Anti-Virus Personal | 4.5.x | KasperskyAV | + | ||
| Kaspersky Anti-Virus Personal | 5.0.x | KasperskyAV | * | + | |
| Kaspersky Anti-Virus Personal Pro | 5.0.16.x | KasperskyAV | + | &n
bsp; |
+ |
| Kaspersky Anti-Virus Personal Pro | 5.0.20.x | KasperskyAV | + | + | |
| Kaspersky Anti-Virus Personal Pro | 5.0.x | KasperskyAV | * | + | |
| Kaspersky Internet Security | 6.x | KasperskyAV | + | + | |
| Kaspersky(TM) Anti-Virus Personal 4.5 | 4.5.x | KasperskyAV | + | ||
| Kaspersky(TM) Anti-Virus Personal Pro 4.5 | 4.5.x | KasperskyAV | + | ||
| Kingsoft Corp. | |||||
| 金山毒霸 2006 杀毒套装 | 2006.x | KingSoftAV | + | ||
| 金山毒霸 2006 标准版 | 2006.x | KingSoftAV | + | ||
| 金山毒霸杀毒套装 | 7.x | KingSoftAV | + | ||
| Kingsoft AntiVirus 2004 | 2004.x | KingSoftAV | + | ||
| Kingsoft Internet Security | 7.x | KingSoftAV | + | ||
| Kingsoft Internet Security 2006 + | 2006.x | KingSoftAV | + | ||
| McAfee, Inc. | |||||
| McAfee Internet Security 6.0 | 8.x | McAfeeAV | + | ||
| McAfee Managed VirusScan | 3.x | McAfeeAV | + | ||
| McAfee Managed VirusScan | 4.x | McAfeeAV | + | ||
| McAfee unknown product | x | McAfeeAV | |||
| McAfee VirusScan | 10.x | McAfeeAV | + | + | |
| McAfee VirusScan | 11.x | McAfeeAV | + | ||
| McAfee VirusScan | 4.5.1.x | McAfeeAV | + | + | |
| McAfee VirusScan | 8.x | McAfeeAV | + | ||
| McAfee VirusScan | 8xxx | McAfeeAV | + | ||
| McAfee VirusScan | 9.x | McAfeeAV | + | ||
| McAfee VirusScan | 9xxx | McAfeeAV | + | ||
| McAfee VirusScan Enterprise | 7.0.0.x | McAfeeAV | + | + | + |
| McAfee VirusScan Enterprise | 7.1.0.x | McAfeeAV | + | + | + |
| McAfee VirusScan Enterprise | 7.5.0.x | McAfeeAV | + | + | + |
| McAfee VirusScan Enterprise | 8.0.0.x | McAfeeAV | + | + | + |
| McAfee VirusScan Enterprise | 8.x | McAfeeAV | + | + | + |
| McAfee VirusScan Professional | 8.x | McAfeeAV | + | ||
| McAfee VirusScan Professional | 8xxx | McAfeeAV | + | ||
| McAfee VirusScan Professional | 9.x | McAfeeAV | + | ||
| McAfee VirusScan Professional Edition | 7.x | McAfeeAV | + | ||
| Microsoft Corp. | |||||
| Windows Live OneCare | 1.5.x | MicrosoftAV | + | ||
| Windows Live OneCare | 1.x | MicrosoftAV | + | ||
| Windows OneCare Live | 0.8.x | MicrosoftAV | |||
| MicroWorld | |||||
| eScan Anti-Virus (AV) for Windows | 8.x | MicroWorldAV | + | ||
| eScan Corporate for Windows | 8.x | MicroWorldAV | + | ||
| eScan Internet Security for Windows | 8.x | MicroWorldAV | + | ||
| eScan Professional for Windows | 8.x | MicroWorldAV | + | ||
| eScan Virus Control (VC) for Windows | 8.x | MicroWorldAV | + | ||
| Norman ASA | |||||
| Norman ASA unknown product | x | NormanAV | + | ||
| Norman Virus Control | 5.x | NormanAV | + | + | + |
| Panda Software | |||||
| Panda Antivirus + Firewall 2007 | 6.x | PandaAV | |||
| Panda Antivirus 2007 | 2.x | PandaAV | |||
| Panda Antivirus 6.0 Platinum | 6.0 | PandaAV | |||
| Panda Antivirus Lite | 1.x | PandaAV | |||
| Panda Antivirus Lite | 3.x | PandaAV | |||
| Panda Antivirus Platinum | 7.04.x | PandaAV | |||
| Panda Antivirus Platinum | 7.05.04.x | PandaAV | |||
| Panda Antivirus Platinum | 7.06.01.x | PandaAV | |||
| Panda Client Shield | 4.x | PandaAV | |||
| Panda Internet Security 2007 | 11.x | PandaAV | |||
| Panda Platinum 2005 Internet Security | 9.x | PandaAV | |||
| Panda Platinum 2006 Internet Security | 10.x | PandaAV | |||
| Panda Platinum Internet Security | 8.03.00.x | PandaAV | |||
| Panda Titanium 2006 Antivirus + Antispyware | 5.x | PandaAV | |||
| Panda Titanium Antivirus 2004 | 3.00.00 | PandaAV | |||
| Panda Titanium Antivirus 2004 | 3.01.01.x | PandaAV | |||
| Panda Titanium Antivirus 2004 | 3.02.02.x | PandaAV | |||
| Panda Titanium Antivirus 2005 | 4.x | PandaAV | |||
| Panda TruPrevent Personal 2005 | 2.x | PandaAV | + | ||
| Panda TruPrevent Personal 2006 | 3.x | PandaAV | + | ||
| WebAdmin Client Antivirus | 3.x | PandaAV | + | ||
| Radialpoint Inc. | |||||
| Radialpoint Virus Protection | 5.5.x | RadialPointAV | * | Radialpoint Virus Protection | 5.x | RadialPointAV | * |
| SalD Ltd. | |||||
| Dr.Web | 4.32.x | DrWebAV | * | + | |
| Dr.Web | 4.33.x | DrWebAV | * | + | |
| Dr.Web ® for Windows 95-XP | 4.31.x | DrWebAV | * | + | |
| Dr.Web ® for Windows 95-XP | 4.32.x | DrWebAV | * | + | |
| Sereniti, Inc. | |||||
| Sereniti Antivirus | 1.x | SerenitiAV | + | + | |
| The River Home Network Security Suite | 1.x | SerenitiAV | + | + | |
| SOFTWIN | |||||
| BitDefender 8 Free Edition | 8.x | SoftwinAV | + | ||
| BitDefender 8 Professional Plus | 8.x | SoftwinAV | * | + | |
| BitDefender 8 Standard | 8.x | SoftwinAV | * | + | |
| BitDefender 9 Internet Security AntiVirus | 9.x | SoftwinAV | * | + | |
| BitDefender 9 Professional Plus | 9.x | SoftwinAV | * | + | |
| BitDefender 9 Standard | 9.x | SoftwinAV | * | + | |
| BitDefender Antivirus Plus v10 | 10.x | SoftwinAV | * | + | |
| BitDefender Antivirus v10 | 10.x | SoftwinAV | * | + | |
| BitDefender Free Edition | 7.x | SoftwinAV | + | ||
| BitDefender Internet Security v10 | 10.x | SoftwinAV | * | + | |
| BitDefender Professional Edition | 7.x | SoftwinAV | + | + | |
| BitDefender Standard Edition | 7.x | SoftwinAV | + | + | |
| Sophos Plc. | |||||
| Sophos Anti-Virus | 3.x | SophosAV | + | + | |
| Sophos Anti-Virus | 4.x | SophosAV | + | + | |
| Sophos Anti-Virus | 5.x | SophosAV | + | + | |
| Sophos Anti-Virus | 6.x | SophosAV | + | + | |
| Sophos Anti-Virus version 3.80 | 3.80 | SophosAV | + | + | |
| Sophos unknown product | x | SophosAV | + | ||
| Symantec Corp. | |||||
| Norton AntiVirus | 10.x | NortonAV | + | + | |
| Norton AntiVirus | 14.x | NortonAV | + | + | |
| Norton AntiVirus 2002 | 8.00.58.x | NortonAV | + | + | |
| Norton AntiVirus 2002 | 8.x | NortonAV | + | + | |
| Norton AntiVirus 2002 Professional | 8.x | NortonAV | + | + | |
| Norton AntiVirus 2002 Professional Edition | 8.x | NortonAV | + | + | |
| Norton AntiVirus 2003 | 9.x | NortonAV | + | + | |
| Norton A
ntiVirus 2003 Professional |
9.x | NortonAV | + | + | |
| Norton AntiVirus 2003 Professional Edition | 9.x | NortonAV | + | + | |
| Norton AntiVirus 2004 | 10.x | NortonAV | + | + | |
| Norton AntiVirus 2004 (Symantec Corporation) | 10.x | NortonAV | + | + | |
| Norton AntiVirus 2004 Professional | 10.x | NortonAV | + | + | |
| Norton AntiVirus 2004 Professional Edition | 10.x | NortonAV | + | + | |
| Norton AntiVirus 2005 | 11.0.x | NortonAV | + | + | + |
| Norton AntiVirus 2006 | 12.0.x | NortonAV | + | + | + |
| Norton AntiVirus 2006 | 12.2.x | NortonAV | + | + | + |
| Norton AntiVirus 2006 | 12.x | NortonAV | + | + | + |
| Norton AntiVirus Corporate Edition | 7.x | NortonAV | + | + | |
| Norton AntiVirus Corporate Edition 7.0 for Windows NT | 7.x | NortonAV | + | + | |
| Norton Internet Security | 7.x | NortonAV | + | + | |
| Norton Internet Security | 8.0.x | NortonAV | + | + | |
| Norton Internet Security | 8.x | NortonAV | + | + | |
| Norton Internet Security | 9.x | NortonAV | + | + | |
| Norton Internet Security (Symantec Corporation) | 10.x | NortonAV | + | + | |
| Norton SystemWorks 2003 | 6.x | NortonAV | + | + | |
| Norton SystemWorks 2004 Professional | 7.x | NortonAV | + | + | |
| Norton SystemWorks 2005 | 8.x | NortonAV | + | + | |
| Norton SystemWorks 2005 Premier | 8.x | NortonAV | + | + | |
| Norton SystemWorks 2006 Premier | 12.0.x | NortonAV | + | + | + |
| Symantec AntiVirus | 10.x | NortonAV | + | + | |
| Symantec AntiVirus | 9.x | NortonAV | + | + | |
| Symantec AntiVirus Client | 8.x | NortonAV | + | + | |
| Symantec AntiVirus 用戶端 | 8.x | NortonAV | + | + | |
| Symantec AntiVirus Server | 8.x | NortonAV | + | + | |
| Symantec Client Security | 10.x | NortonAV | + | + | + |
| Symantec Client Security | 9.x | NortonAV | + | + | + |
| Symantec unknown product | x | NortonAV | |||
| Trend Micro, Inc. | |||||
| ウイルスバスター ビジネスセキュリティ サーバ | 7.x | TrendMicroAV | + | + | |
| ウイルスバスター2004 | 11.x | TrendMicroAV | + | + | |
| ウイルスバスター2005 | 12.x | TrendMicroAV | + | + | |
| ウイルスバス]]
> 好久没写昨天加班,把orion solarwinds NPM 配置的差不多了,总体来说还不错,但有些细节上还有些问题: 比如对有问题的NODE或者Interface还不能确认,这样直接导致有些设备就始终处于报警提示状态, 报警可选动作确实比较丰富,就是有些报警的变量取得不对,不过这个自己可以更换掉,算是一点遗憾吧. 系统对CISCO设备支持很好,但监控的项目还是感觉少了点,对路由收敛,风扇,温度都还不能监控,对发来的trap我还没发现它是否能主动响应. 我用的是7.8版本,对最新版F5系统支持不够好… 地图制作功能还是蛮不错的~~ 下面准备把短信报警搞起来 ——————————– 最近有2个朋友考了R&S CCIE,一个过了,一个挂了,……………….. 呜呼~~F5终于上线 观测中心里七上八下的 公司出口太复杂 牵涉东西太多 。。。。。。。。
思科全球峰会隆重闭幕 神州数码荣获“TOP INNOVATOR”2007年4月４日，在美国拉斯维加斯举办的思科2007全球峰会上神州数码荣获“TOP INNOVATOR”（全球创新大奖），此次全球分销峰会共设四个专项奖和一个综合大奖，TOP INNOVATOR（全球创新大奖）是四专项奖之一，每个奖有五个大区报的四名候选人，神州数码作为亚太地区唯一候选人参选并最终独家胜出，是对我们以UC为代表的创新策略的肯定，神州数码控股有限公司常务副总裁林杨、神州数码系统科技公司副总裁叶海强等出席了此次峰会。 获得“TOP INNOVATOR”全球大奖高度肯定了神州数码在理解厂家渠道政策、快速渠道响应和突出UC技术体验创新上所做出的努力。2006年9月，思科（中国）开始在中国区大力推广UC理念及其产品，随后神州数码迅速捕捉到了思科业务模式的转变，并以行动积极响应。2006年9月26日思科流动展示中心——NOW VAN大篷车在北京上地神州数码大厦开始了独具创意的全国之旅，2007年3月27日神州数码成为思科统一通信（UC）中国区战略合作伙伴，同时第一个“UC 体验中心”在上地神州数码大厦的创新中心建成，揭幕仪式受到了多家媒体和各方合作伙伴的关注。 失落的F5-BIGIP-LC上线从从未接触到开始看文档研究 F5-BIGIP-LC花去了我不少时间，最终在上周5上线，然而，没有想到的是，上线后速度不稳定，具体表现在代理服务器DNS解析会变的很慢，一个晚上，没查出问题原因，最终实施了回退。 不知道是什么原因，下面是我的疑问 通过F5后,内部代理服务器的DNS解析速度有时候变的很慢,执行b conn all delete后 能快一会 但很快又不行,当时是晚上,访问量很小. 我的结构是这样的 PIX上执行一次翻译,将内部对外发布的服务器地址都NAT成PIX–outside口所在网段(192.168.254.0/24),这样F5 也就不用再单独配路由条目了,所有内部服务器都通过PIX影射到这个网段的某IP上. PIX的DMZ放了邮件服务器,邮件只发布在电信线路上,因为牵涉到反解,所以,我用irules检查 DNS服务器也是我们的代理服务器,这个服务器在PIX上是做的PAT(不在DMZ区),被PAT成PIX的outside口地址,通过F5时,走缺省VS,automap成F5上的self ip(电信在先222.222.222.2,网通在后111.111.111.1) . VPN:L2L方式的VPN,如果用VS的话,发现会出现一些问题,所以我在F5的NAT界面将F5的self ip地址(222.222.222.2)直接NAT成PIX的outside口地址(192.168.254.2) 这些就是我的基本配置,不知道问题能出在哪,功能基本都实现了,可就是会变慢,我PING本城市一个服务器,正常的快的话是小于10MS,可是慢的时候就变成了120多MS. 请各位有经验的朋友能点拨点拨,是不是我的设计思想本身就有问题,例如都是通过2次NAT出去的,其中代理服务器还是PAT. 下面是我的irules : 版本会不会是问题? 网通地址段 这个更全些最近在配F5 ,需要这些,记录一下 58.17.128.0 255.255.128.0 p; 国内各ISP及教育科研网段.F5必备!教育网IP段 ip route 210.31.0.0 255.255.0.0 *.*.*.* 西安： 成都： 广州： 武汉： 南京： 上海： 沈阳： MISC： 一体配置： ############################################################## 中国电信 58.32.0.0/13 /20 ############################################################# 中国网通 58.16.0.0/16 | |||||
