Đồ án chuyên ngành ---- ASA FW
-
Upload
son-nguyen -
Category
Documents
-
view
231 -
download
0
Transcript of Đồ án chuyên ngành ---- ASA FW
-
8/12/2019 n chuyn ngnh ---- ASA FW
1/85
TM HIU V TRIN KHAI ASA FIREWALL
Li cm n
SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng1
-
8/12/2019 n chuyn ngnh ---- ASA FW
2/85
TM HIU V TRIN KHAI ASA FIREWALL
Mc cLi cm n..............................................................................................................................1Mc lc...................................................................................................................................2
Danh mc hnh.......................................................................................................................3A.Tng quan v ti............................................................................................................!. "#u t$%c c&a ti.............................................................................................................'(.Tng quan v an ninh m)ng*................................................................................................+
1.Mc ti,u an ninh m)ng....................................................................................................+2."-c h/ng th0c t#n cng...............................................................................................+3. "-c chnh -ch an ninh m)ng.......................................................................................12
((. 4a5iu..............................................................................................................................211. Tng quan v 4a5iu*...................................................................................................212. 6i7n t$%c 4AD(89*......................................................................................................23. :;)t "*............................................................................................................................='(((. A9A................................................................................................................................21. L?ch @ $a i. ..............................................................................................................22. "-c n hm t/ng l@a c&a "ic;*.............................................................................23. Biu Chin t$uE cF m)ng GHA"I................................................................................3=. Jia; th0c AAA v 5?ch v hK t$ c&a "ic; A9A........................................................ 6im t$a 0ng 5ng........................................................................................................'N'. 6h nOng ch?u lKi v 5P hQng GRail;vS$ an5 $S5un5ancEI..........................................'N. h-t hiUn VWm nhF G(D9I............................................................................................+3
(X. M hYng.......................................................................................................................++1. Mc ti,u c&a m hYng................................................................................................++
2. "-c cng c cZn thi7t thPc hiUn m hYng..............................................................++3. "-c [/\c gi lF A9A t$,n JH93................................................................................+=. 67t qu )t /c..........................................................................................................3
X.6]T L8^H ":8HJ.......................................................................................................3X(.:_`HJ :T T4(bH "A Bd Te(..........................................................................=Ti liUu tham Ch;*...............................................................................................................=
SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng2
-
8/12/2019 n chuyn ngnh ---- ASA FW
3/85
TM HIU V TRIN KHAI ASA FIREWALL
Danh mc h!nhDanh mc [ng.......................................................................................................................=:nh 1f1* "-c l\ [; mFt t/ng l@a...................................................................................13
:nh 2f1*Mi quan hU tin t/ng
-
8/12/2019 n chuyn ngnh ---- ASA FW
4/85
TM HIU V TRIN KHAI ASA FIREWALL
Danh mc [ng
SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng=
-
8/12/2019 n chuyn ngnh ---- ASA FW
5/85
TM HIU V TRIN KHAI ASA FIREWALL
".T#ng $uan %& '& ()iMc ti,u c&a viUc nghi,n c0u v >i$Sall A9A
r XiUc nghi,n c0u gi% ch; Ch nOng tP hc tm hiu v nghi,n c0u
-
8/12/2019 n chuyn ngnh ---- ASA FW
6/85
TM HIU V TRIN KHAI ASA FIREWALL
*. C+u (,-c ca '& ()i.B ti /c chia lm ' hZn.
(. Tng quan v an ninh m)ng
"h/ng nE m t v c-c nguE c an ninh m)ng v c-c chnh -ch an ninh
nhxm Sm l)i hiUu qua ch; viUc [; mFt 5k liUu lm gim nguE c h;oc h-t hiUn $a
P t#n cng.
((. 4a5iu"h/ng nE m t v C thuFt @ 5ng V-c thPc&E quEnthanh t;-n
nhxm Sm l)i hiu qu ca; ch; an ninh m)ng t;n vn v t$-nh th#t th;-t 5k liUu.
(((. A9A
"h/ng nE gi\i thiUu v t/ng l&a cic; aa c-c C thuFt /c - 5ng ch;
t/ng l@u .
(X. M hYng.
"h/ng nE m t qu- t$nh hiUn thPc cic; aa v\i m hnh m)ng c th ch;
th#E tnh thPc t7 v Cim nghiUm %ng ls thuE7t c&a ti nE."h $~ chi ti7t qu-
t$nh thPc nghiUm.
X. 67t luFn chung.
"h/ng nE n,u $a nhkng C7t qu c&a ti lm /c nhkng g v nhkng
moc h)n ch7 Chj ChOn ch/a thPc hiUn /c c&a ti.
X(. :/\ng h-t t$in c&a ti.
SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng'
-
8/12/2019 n chuyn ngnh ---- ASA FW
7/85
TM HIU V TRIN KHAI ASA FIREWALL
/.T#ng $uan %& an ninh m0ng:
1.Mc (i2u an ninh m0ng
XiUc h-t t$in ngE cng tOng c&a m)ng intS$nSt 5; P thuFn tiUn m nj Sm l)ich; c;n ng/i tuE nhi,n cng C; thS; nhiu mi nguE him $nh $F c&a nhkng
hacCS$ m)ng. Bm [; ch; ng/i 5zng /c an t;n Chi lm viUc t$,n m)ng l mc
ti,u hng Zu c&a an ninh m)ng*
!; m m)ng n
-
8/12/2019 n chuyn ngnh ---- ASA FW
8/85
TM HIU V TRIN KHAI ASA FIREWALL
3.1 Vi,u8
M
-
8/12/2019 n chuyn ngnh ---- ASA FW
9/85
TM HIU V TRIN KHAI ASA FIREWALL
M
-
8/12/2019 n chuyn ngnh ---- ASA FW
10/85
TM HIU V TRIN KHAI ASA FIREWALL
cng D;9 tn t)i [a; gm c-c cu
-
8/12/2019 n chuyn ngnh ---- ASA FW
11/85
TM HIU V TRIN KHAI ASA FIREWALL
3.. Di8(,iu(=A D=niaEFES=,%ic=
DD;9 t/ng tP nh/ t$;ng s ?nh c&a cu
-
8/12/2019 n chuyn ngnh ---- ASA FW
12/85
TM HIU V TRIN KHAI ASA FIREWALL
thPc P. "-c cu
-
8/12/2019 n chuyn ngnh ---- ASA FW
13/85
TM HIU V TRIN KHAI ASA FIREWALL
th c&a m
-
8/12/2019 n chuyn ngnh ---- ASA FW
14/85
TM HIU V TRIN KHAI ASA FIREWALL
V-c ?nh c-c h)n ch7 /c E,u cZu h)n ch7 t$uE cF qun t$? [a; gm c [n
cF nhFt hZn mm thPc hiUn v c#u hnh t/ng l@a.
L\ th0 [a l c#u hnh t/ng l@a
-
8/12/2019 n chuyn ngnh ---- ASA FW
15/85
TM HIU V TRIN KHAI ASA FIREWALL
MKi t ch0c cj E,u cZu an ninh $i,ng [iUt v 5; j cj chnh -ch [; mFt $i,ng
T >T 9imlS
HSt;$C ManagSmSnt $;t;c;l G9HMI v [#t Cy gia; th0c Ch-c cj th /c @
5ng qun ls v 5uE t$ thi7t [?.
;.;. Chnh 84ch c:
ThaE v ?nh ngh}a [< quE t{c thPc t7 t/ng l@a @ 5ng c-c chnh -ch lc
cZn hi ch v V-c ?nh chnh V-c c-c l;)i lc m hi /c @ 5ng v ni lc
/c - 5ng. "hnh -ch nE cj Vu h/\ng gii quE7t c#u hnh t/ng l@a t}nh v
chi ti7t t$;ng l\ l/u l/ng m)ng qua t/ng l@a. X 5 m
-
8/12/2019 n chuyn ngnh ---- ASA FW
16/85
TM HIU V TRIN KHAI ASA FIREWALL
"-c chnh -ch lc cng cZn V-c ?nh c-c E,u cZu chung t$;ng viUc C7t ni m)ng
c# < [; mFt v ngun Ch-c nhau. X 5 v\i m
-
8/12/2019 n chuyn ngnh ---- ASA FW
17/85
TM HIU V TRIN KHAI ASA FIREWALL
;.>. Chnh 84ch 'Bnh (uyn:
"-c chnh -ch ?nh tuE7n th/ng Chng hi l m
-
8/12/2019 n chuyn ngnh ---- ASA FW
18/85
TM HIU V TRIN KHAI ASA FIREWALL
$Sha$S5 CSE ch0ng thPc m $
-
8/12/2019 n chuyn ngnh ---- ASA FW
19/85
TM HIU V TRIN KHAI ASA FIREWALL
thi7t thPc v hiUu qu in hnh l [a ti,u chun cZn /c V-c ?nh $
-
8/12/2019 n chuyn ngnh ---- ASA FW
20/85
TM HIU V TRIN KHAI ASA FIREWALL
Jik mi l/u l/ng qun ls Ri$Sall /c [; mFt.
Sm l)i c-c quE t{c t/ng l@a ?nh Cy.
SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng2
-
8/12/2019 n chuyn ngnh ---- ASA FW
21/85
TM HIU V TRIN KHAI ASA FIREWALL
//. RaAiu8
1. T#ng $uan %& RaAiu8:
1.1. """:
1.1.1. X4c (hc Y"u(h=n(ica(inZ
-c thPc l qu- t$nh V-c minh 5anh tnh c&a m
-
8/12/2019 n chuyn ngnh ---- ASA FW
22/85
TM HIU V TRIN KHAI ASA FIREWALL
m
-
8/12/2019 n chuyn ngnh ---- ASA FW
23/85
TM HIU V TRIN KHAI ASA FIREWALL
mi t$/ng cj E,u cZu ng/i @ 5ng Ch-c nhau v u thaE i thi7t C7 m)ng. "j
m
-
8/12/2019 n chuyn ngnh ---- ASA FW
24/85
TM HIU V TRIN KHAI ASA FIREWALL
P hiUn 5iUn v nhkng m-E au j gia; ti7 v\i c-c thi7t [? HA9 thch h t)i c-c
(9 nhY hn.
M-E Ch-ch E,u cZu 5?ch v v ngun ti nguE,n t m
-
8/12/2019 n chuyn ngnh ---- ASA FW
25/85
TM HIU V TRIN KHAI ASA FIREWALL
:nh 2f1*Mi quan hU tin t/ng
-
8/12/2019 n chuyn ngnh ---- ASA FW
26/85
TM HIU V TRIN KHAI ASA FIREWALL
4AD(89 w chnh th0c /c gia; cng 8D 112 ch; 4AD(89 AuthSnticati;n
v 113 ch; 4AD(89 Acc;unting [i (ntS$nSt AignS5 Hum[S$ Auth;$itE
G(AHAI. TuE nhi,n t$/\c Chi (AHA hWn [ c-c cng 112 v 113 cng 1'= v
1'=' GV-c thPc v C7 t;-n t/ng 0ngI w /c @ 5ng Chng chnh th0c v t$thnh c-c cng moc ?nh 5; nhiu m-E ch& v m-E Ch-ch 4AD(89 t$in Chai t$;ng
thi gian nE. T$uEn thng c&a viUc @ 5ng 1'= v 1'=' ti7 tc t/ng thch
ng/c t$ l)i ch; 7n ngE naE. X ls 5; nE nhiu m-E ch& 4AD(89 t$in Chai
gi-m -t c hai [< cng 8D ch; c-c E,u cZu 4AD(89. "-c m-E ch& 4AD(89
Mic$;;Rt moc ?nh 112 v 113 nh/ng moc ?nh c-c thi7t [? "ic; l cng t$uEn
thng1'= v 1'='. "-c m-E ch& 4AD(89 uniS$ HSt;$C l{ng nghS t$,n c hai
cng chnh th0c v Chng chnh th0c 1'= 112 1'=' v 113 moc ?nh nh/ng cj
th /c c#u hnh v\i c-c cng [#t Cy.
Bi v\i E,u cZu h;)t " 4AD(89 m t l tt nh#t* T)i m
-
8/12/2019 n chuyn ngnh ---- ASA FW
27/85
TM HIU V TRIN KHAI ASA FIREWALL
v#n hjc [%a nE v nj ch; h m
-
8/12/2019 n chuyn ngnh ---- ASA FW
28/85
-
8/12/2019 n chuyn ngnh ---- ASA FW
29/85
TM HIU V TRIN KHAI ASA FIREWALL
3.3.1. M
T$/ng mw 5i m
-
8/12/2019 n chuyn ngnh ---- ASA FW
30/85
TM HIU V TRIN KHAI ASA FIREWALL
"-c oc im C thuFt 4>" Qi hYi nhkng h;)t
-
8/12/2019 n chuyn ngnh ---- ASA FW
31/85
TM HIU V TRIN KHAI ASA FIREWALL
AccSf4SSct
AccSf"hallSngS
Acc;untingf4SquSt
Acc;untingf4S;nS
3.;.1. "cc=88ER=$u=8(:
"-c gji tin AccSf4SquSt /c @ 5ng [i ng/i ti,u 5zng 5?ch v Chi /c
ngh? m" ch; th#E c-c gji t$ li hi /c g@i 7n t#t c
c-c gji E,u cZu h lU t$ li l V-c thPc haE t chi.
"-c ti t$ng c&a gji tin AccSf4SquSt n,n [a; gm c-c thu
-
8/12/2019 n chuyn ngnh ---- ASA FW
32/85
TM HIU V TRIN KHAI ASA FIREWALL
3.;.3. "cc=88E"cc=5(:
"-c gji tin AccSfAccSt /c g@i [i m-E ch& 4AD(89 t\i m-E Ch-ch
V-c nhFn $xng E,u cZu c&a m-E Ch-ch /c ch# nhFn. H7u t#t c c-c E,u cZu t$;ngc-c ti t$ng AccSf4SquSt /c ch# nhFn au j c-c m-E ch& 4AD(89 hi
thi7t lF t$/ng mFt mw gji tin t$ li l 2. "-c m-E Ch-ch Chi nhFn /c gji ch#
nhFn hz h nj v\i c-c gji tin t$ li [xng c-ch @ 5ng t$/ng nhFn 5)ng. "-c
gji Chng thS; ti,u chun nE /c [Y i.
T#t nhi,n m [; $xng c-c gji tin E,u cZu v ch# nhFn hz h nh/ w
nji m [; c-c - t$ ch# nhFn /c g@i t$;ng c-c gji tin t$ li E,u cZu
t/ng 0ng t$/ng ?nh 5anh t$;ng ti,u gji AccSfAccSt hi cj m
-
8/12/2019 n chuyn ngnh ---- ASA FW
33/85
TM HIU V TRIN KHAI ASA FIREWALL
c-c thPc hiUn c- nhWn. Jji AccSf4SSct cj th /c g@i t)i [#t Cy thi gian t$;ng
m
-
8/12/2019 n chuyn ngnh ---- ASA FW
34/85
-
8/12/2019 n chuyn ngnh ---- ASA FW
35/85
TM HIU V TRIN KHAI ASA FIREWALL
n,n ch0a m
-
8/12/2019 n chuyn ngnh ---- ASA FW
36/85
TM HIU V TRIN KHAI ASA FIREWALL
Jji tin Acc;untingf4S;nS /c g@i [i m-E ch& C7 t;-n 4AD(89 ch; m-E
Ch-ch V-c nhFn $xng c-c Acc;untingf4SquSt w /c nhFn v ghi nhFn thnh
cng. H7u Acc;untingf4SquSt w /c ghi l)i thnh cng au j m-E ch& C7 t;-n
4AD(89 hi chuEn m
-
8/12/2019 n chuyn ngnh ---- ASA FW
37/85
TM HIU V TRIN KHAI ASA FIREWALL
chS gi#u. Ji\i h)n C thuFt 5uE nh#t l nhkng [ mFt chia hi cj chiu 5i l\n
hn nh/ng 4>" ChuE7n c-; $xng c-c [ mFt t nh#t l 1' ;ctSt. M
-
8/12/2019 n chuyn ngnh ---- ASA FW
38/85
TM HIU V TRIN KHAI ASA FIREWALL
cj th t$;ng Ch;ng 1f2 v\i m
-
8/12/2019 n chuyn ngnh ---- ASA FW
39/85
TM HIU V TRIN KHAI ASA FIREWALL
"huKi Cs tP G9T4(HJI* "huKi Cs tP th/ng /c V-c ?nh l chuKi in 8T>f cj
th /c c thS; gi- t$?. Dk liUu /c t$uEn 5/\i 5)ng mI
B< 5iX
Ji- t$?k XA9 [,n t$;ng
ti t$ng
Ti t$ng gji4AD(89
-
8/12/2019 n chuyn ngnh ---- ASA FW
40/85
TM HIU V TRIN KHAI ASA FIREWALL
"-c /c g-n. " th hn c-c nh cung c# c- nhWn /c mw h;- v\i c;n
5uE nh#t /c gi l mw 5;anh nghiU t/ nhWn qun ls m)ng h;oc HM".
Th0 tP c&a c-c n
-
8/12/2019 n chuyn ngnh ---- ASA FW
41/85
TM HIU V TRIN KHAI ASA FIREWALL
Chi&u A)i
T$/ng nE l m
-
8/12/2019 n chuyn ngnh ---- ASA FW
42/85
TM HIU V TRIN KHAI ASA FIREWALL
g;;glS.c;m
B?a ch (
G(ADD4I
= 32 [it
V>>>>>
V"A12
V1N=>>VA
HgE th-ng
GDATI
= 32 [it
6hng 5#u
V"A12
V>>>>>
VA
V1N=>>Hh? hWn
G!(HA4I
1 1 [it
1
!ng 2.1 MKi thu" 4AD(89.
;. H0( 'bng:
;.1. u4 (,nh (,uy cQ5:
6hi m
-
8/12/2019 n chuyn ngnh ---- ASA FW
43/85
TM HIU V TRIN KHAI ASA FIREWALL
mFt /c chia hi /c Wm thZm [Y i. H7u m-E Ch-ch l h lU m-E ch&
4AD(89 t$a c0u m
-
8/12/2019 n chuyn ngnh ---- ASA FW
44/85
'
1 2
3
TM HIU V TRIN KHAI ASA FIREWALL
v Gv 5* 9L( ng/i 5zng Ong nhFI v t#t c c-c gi- t$? cZn thi7t cung
c# c-c 5?ch v m;ng mun. Bi v\i 9L( v iu nE cj th [a; gm gi- t$?
nh/ ?a ch ( u[nSt maC MT8 nn m;ng mun v nhFn 5)ng lc gji m;ng
mun. Bi v\i nhkng ng/i 5zng ch7 < Cs tP iu nE cj th [a; gm gi- t$? nh/gia; th0c v m-E ch& m;ng mun.
T$;ng V-c thPc th-ch th0c hn hi ng/i @ 5ng /c ch; m
-
8/12/2019 n chuyn ngnh ---- ASA FW
45/85
TM HIU V TRIN KHAI ASA FIREWALL
4AD(89 m-E ch& 4AD(89 g@i gji AccSfAccSt v ch; "ic; A9A n7u
thng ng/i 5zng nhF Chng cj th m-E ch& 4AD(89 g@i gji AccSf4SSct
v ch; cic; A9A.
'I "ic; A9A hn hi v ch; m-E Ch-ch [i7t /c h haE Chng /ch t$uE cF v; 1 5?ch v c th.
3.2. Qu trnh k ton:
6hi m
-
8/12/2019 n chuyn ngnh ---- ASA FW
46/85
TM HIU V TRIN KHAI ASA FIREWALL
>. RoC8:
4.1. Ngun gc:
4AD(89 [an Zu /c quE ?nh t$;ng m( [i MS$it HSt;$C v; nOm1NN1 Cim ;-t t$uE cF quaE t\i H9>HT. Livingt;n ntS$$iS t$ li ch;
4>( v\i m t c&a m" 2 v 4>" 2N Ghi,n [n hiUn t)i l 4>" 2' v 4>" 2''I.
!WE gi tn t)i m.3. *ng RoC8:
RoC Ti2u '& Ng)y4>"
2=
Mic$;;Rt XSn5;$fSciRic 4AD(89 Att$i[utS 31NNN
4>"
2'
4Sm;tS AuthSnticati;n Dial (n 8S$ 9S$vicS G4AD(89I '2
4>"
2''
4AD(89 Acc;unting '2
4>"
2'+
4AD(89 Acc;unting M;5iRicati;n R;$ TunnSl $;t;c;l
9u;$t
'2
4>" 4AD(89 Att$i[utS R;$ TunnSl $;t;c;l 9u;$t '2
SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng='
-
8/12/2019 n chuyn ngnh ---- ASA FW
47/85
TM HIU V TRIN KHAI ASA FIREWALL
2'4>"
2'N
4AD(89 VtSni;n '2
4>"
31'2
4AD(89 an5 (v' 21
4>"
3+N
4AD(89 9u;$t R;$ A N23
4>"
";mm;n 4AD(89 (mlSmSntati;n (uS an5 9uggStS5
>iVS
122+
4>"
NN+
8S ;R 9tatuf9S$vS$ acCSt in thS 4AD(89 $;t;c;l 21
4.3. ! "#$c %& '()*+ ',Cs:
>.;.1. RoC 3K:
4>" 2' 4Sm;tS AuthSnticati;n Dial (n 8S$ 9S$vicS* ch& E7u m t v c
ch7 V-c thPc v &E quEn Chi ng/i 5zng mun t$uE cF.
T$;ng 4>" cj gi\i thiUu c#u t$%c c-c gji tin cZn 5zng thPc hiUn V-c thPc v&E quEn ch; ng/i 5zng t$uE cF v c-c thu
-
8/12/2019 n chuyn ngnh ---- ASA FW
48/85
TM HIU V TRIN KHAI ASA FIREWALL
Ji- t$? thSm v; ch; 9S$vicSfTES L;ginf9S$vicS >$amS5f$;t;c;l
>$amS5f";m$Si;n v HA9f;$tfTES.
HA9f;$t cj th @ 5ng t#t c 32 [it.
"-c v 5 hiUn naE [a; gm hin th? hU thF lc hWn c&a c-c gji 5k liUu. "ng 8D ngun hi /c @ 5ng C7t h v\i [< nhFn 5)ng E,u cZu Chi
V-c ?nh c-c [n a;.
Hhiu thu" 2'.
"ng nh/ 4>" 2' 4>" 2'' cng gi\i thiUu v c-c gji tin /c 5zng t$;ng
qu- t$nh C7 t;-n v c-c thu
-
8/12/2019 n chuyn ngnh ---- ASA FW
49/85
TM HIU V TRIN KHAI ASA FIREWALL
M" 213N*
ThaE th7 89fA9"(( [xng 8T>f.
Th,m ghi ch% t$;ng $;VE.
>$amS5f(fA55$S n,n ch0a ?a ch ( thPc t7 c&a ng/i @ 5ng.
H7u Acctf9Si;nf(D w /c g@i t$;ng m
-
8/12/2019 n chuyn ngnh ---- ASA FW
50/85
TM HIU V TRIN KHAI ASA FIREWALL
thu
-
8/12/2019 n chuyn ngnh ---- ASA FW
51/85
-
8/12/2019 n chuyn ngnh ---- ASA FW
52/85
TM HIU V TRIN KHAI ASA FIREWALL
T#t c c-c thu
-
8/12/2019 n chuyn ngnh ---- ASA FW
53/85
TM HIU V TRIN KHAI ASA FIREWALL
r "ic; >9MG>i$Sall 9S$vicS M;5ulSI
r "ic; (9 >i$Sall.
;. i&u ^hiWn (,uy cQ5 m0ng YN"CZ"ic; A5ativS 9Scu$itE AliancS GA9AI cj th gi% [; vU m
-
8/12/2019 n chuyn ngnh ---- ASA FW
54/85
TM HIU V TRIN KHAI ASA FIREWALL
t$uEn i. H7u m
-
8/12/2019 n chuyn ngnh ---- ASA FW
55/85
TM HIU V TRIN KHAI ASA FIREWALL
"j nOm l;)i A"L Ch-c nhau w cung c# m
-
8/12/2019 n chuyn ngnh ---- ASA FW
56/85
TM HIU V TRIN KHAI ASA FIREWALL
S[XH A"L* MiltS$ing
84L >iltS$ing
;.3.1. Cn(=n( oi(=,ing
XiUc Cch h;)t ava h;oc ActivS t$;ng mi t$/ng lm viUc cj th Chi7n ng/i5zng ngWE th ti v tF tin thPc thi
-
8/12/2019 n chuyn ngnh ---- ASA FW
57/85
TM HIU V TRIN KHAI ASA FIREWALL
Chng tin cFE. "ic; A9A cj th hWn [iUt gika c-c alSt tin cFE v alSt Chng
tin cFE. H7u m
-
8/12/2019 n chuyn ngnh ---- ASA FW
58/85
TM HIU V TRIN KHAI ASA FIREWALL
>i$Sall nj gi% 5#u t#t c ( [,n t$;ng LAH v\i th7 gi\i [,n ng;i t$-nh
P 5Qm ngj c&a hacCS$.
Tnh linh h;)t v P 5| 5ng t$;ng viUc qun ls
HAT gi% ch; c-c h;mS uS$ v c-c 5;anh nghiU nhY cj th t); C7t ni v\i
intS$nSt m
-
8/12/2019 n chuyn ngnh ---- ASA FW
59/85
TM HIU V TRIN KHAI ASA FIREWALL
Auth;$iati;n GE quEnI* L h/ng h- m m
-
8/12/2019 n chuyn ngnh ---- ASA FW
60/85
-
8/12/2019 n chuyn ngnh ---- ASA FW
61/85
TM HIU V TRIN KHAI ASA FIREWALL
4.1. R=m(= "u(h=n(ica(in DiaE/n _8=, S=,%ic= Y'-ius.
4AD(89 l munC 9tSSl !SltS5.
Mic$;;Rt (ntS$nSt AuthSnticati;n 9S$vS$.
Bi v\i m)ng V-c thPc m
-
8/12/2019 n chuyn ngnh ---- ASA FW
62/85
TM HIU V TRIN KHAI ASA FIREWALL
li,n quan 7n m-E ch& n ng h-t l)i v h7t gi /c V@ ls t$,n thi7t [? ch0
Chng hi l gia; th0c t$uEn ti. "h0c nOng nE Ch-c v\i TA"A"9 r < tin cFE
t$;ng gia; th0c h thu
-
8/12/2019 n chuyn ngnh ---- ASA FW
63/85
TM HIU V TRIN KHAI ASA FIREWALL
"-c m-E ch& 4AD(89 nhFn /c E,u cZu V-c thPc ng/i 5zng v au j t$ v
thng tin c#u hnh cZn thi7t ch; Ch-ch hng hK t$ c-c 5?ch v c th ch; ng/i
5zng. "-c m-E ch& 4AD(89 thPc hiUn iu nE [xng c-ch g@i (ntS$nSt nginSS$ing
TaC >;$cS G(T>I h;oc c-c thu
-
8/12/2019 n chuyn ngnh ---- ASA FW
64/85
TM HIU V TRIN KHAI ASA FIREWALL
>.3. Bnh A0ng T"C"CS %) c4c gi4 (,B (i2u '&
"-c (D TA"A"9 ?nh ngh}a mlag
9Si;ni5LSngth
:nh 3f=* B?nh 5)ng gji tin
Ma;$vS$i;n BWE l hi,n [n chnh c&a TA"A"9. gi- t$? Vu#t hiUn t$;ng
ti,u nh/ TA"L89MA4X4 Vc.
Min;$vS$i;n*cung c# S$ial ch; gia; th0c TA"A"9. Hj cng cung c#
ch; Ch nOng t/ng thch c&a gia; th0c. M
-
8/12/2019 n chuyn ngnh ---- ASA FW
65/85
TM HIU V TRIN KHAI ASA FIREWALL
rTA"L899(HJL"HH"T>LAJ*-c ?nh gh h;oc Chng gh
c-c hi,n tacac t$,n m
-
8/12/2019 n chuyn ngnh ---- ASA FW
66/85
TM HIU V TRIN KHAI ASA FIREWALL
$a Chi ng/i 5zng nhF v; in v /c ng [< hja v\i m-E ch& cung c#
c ch7 V-c thPc. M-E ch& 9D( cj th /c c#u hnh E,u cZu ng/i 5zng nhF
v; [in m\i Chi ang V-c thPc.
" ch7 V-c thPc j /c th hiUn hnh 3f*
:nh 3f* " ch7 V-c thPc
1.Hg/i 5zng thPc hiUn C7t ni v\i thi7t [? [; mFt "ic; A9A.
2."ic; A9A [{t Zu thPc hiUn c ch7 V-c thPc.
3.Hg/i @ 5ng cung c# thng tin 8S$namS an5 a;$5.
=."ic; A9A chuEn ti7 c-c E,u cZu V-c thPc 7n m-E ch& 9D(.
.H7u nh/ mw [in m\i /c ch# thuFnm-E ch& 9D( V-c thPc ng/i 5ung v
E,u cZu m
-
8/12/2019 n chuyn ngnh ---- ASA FW
67/85
TM HIU V TRIN KHAI ASA FIREWALL
iu hnh 8niV h;oc LinuV ch)E m-E ch& V-c thPc 6S$[S$;.B/c hK t$ V-c
thPc c-c m-E Ch-ch XH."ic; A9A gia; ti7 v\i th/ mc tch cPc vh;oc m-E
ch& 6S$[S$; @ 5ng 8D cng .
>.. Ligh(=igh( Di,=c(,y "cc=88 J,(c YLD"JZ
"ic; A9A hK t$ gia; th0c LDA &E quEn C7t ni t$uE cF t Va XH.Jia;
th0c V-c thPc LDA /c $~ t$;ng 4>" 33++ v 4>" 3++1.LDA cung c# c-c
5?ch v &E quEn Chi t$uE cF 7n c 5k liUu c&a ng/i 5zng v\i thng tin cWE
th/ mc."ic; A9A gia; ti7 v\i m-E ch& LDA thng qua T" cng 3N. LDA
ch cung c# c-c 5?ch v &E quEn.X vFE m
-
8/12/2019 n chuyn ngnh ---- ASA FW
68/85
-
8/12/2019 n chuyn ngnh ---- ASA FW
69/85
TM HIU V TRIN KHAI ASA FIREWALL
+. "liSnt h-t $a E,u cZu un[in5 v\i E,u cZu nE S$vS$ [i7t $xng cliSnt mun hu [Y
C7t ni.
. 9S$vS$ jng C7t ni
. ]iWm (,a 6ng Ang
" ch7 Cim t$a 0ng 5ng c&a "ic; @ 5ng Cim t$a < an ninh c&a c-c
0ng 5ng v 5?ch v t$;ng hU thng. "-c cng c Cim t$a t$)ng th-i thng tin v
mKi C7t ni i qua c-c intS$RacS c&a thi7t [? an ninh v m [; ch%ng l h lU.
T$)ng th-i 0ng 5ng Cim t$a VSm Vt Chng ch c-c ti,u gji tin m cQn lc n
-
8/12/2019 n chuyn ngnh ---- ASA FW
70/85
TM HIU V TRIN KHAI ASA FIREWALL
:nh 3f+*minh ha li,n C7t ch?u lKi
.3. i&u ^ivn ^ch h0( ^h nOng chBu fi
6h nOng ch?u lKi VE $a
6hi ng/i qun t$? thi7t lF chuEn i t ch7 < ch&
-
8/12/2019 n chuyn ngnh ---- ASA FW
71/85
TM HIU V TRIN KHAI ASA FIREWALL
6im t$a P h;)t
-
8/12/2019 n chuyn ngnh ---- ASA FW
72/85
-
8/12/2019 n chuyn ngnh ---- ASA FW
73/85
TM HIU V TRIN KHAI ASA FIREWALL
$a th c-c gji tin t$;ng hng i /c chuEn Vung hng i /u ti,n th# ch; t\i
Chi gji tin hng i /u ti,n ca; t$ngn7u hng i /u ti,n ca; cj l/u l/ng t$uE
cF th /c hc v t$/\c.Thng qua viUc gi\i h)n l/u l/ng thi7t [? an ninh
thPc hiUn m
-
8/12/2019 n chuyn ngnh ---- ASA FW
74/85
TM HIU V TRIN KHAI ASA FIREWALL
gim chi h thiUt h)i v P gi-n ;)n c&a hU thng thi7t [? t/ng l@a aa c&a cic;
hK t$ hai l;)i Ch-c nhau c&a hU thng h-t hiUn VWm nhF*
HSt;$Cf[aS5 int$ui;n 5StScti;n EtSm GH(D9I.
:;tf[aS5 int$ui;n 5StScti;n EtSmG:(D9I.
K.1. N=(,^Ea8=A in(,u8in A=(=c(in 8y8(=m8 YN/DSZ
Bi hU thng m)ng c-c hU thng h-t hiUn VWm nhF /c thi7t C7 V-c ?nh
chnh V-c hWn l;)i v [; vU chng l)i mi S 5a w v ch/a [i7t nh{m mc ti,u
m
-
8/12/2019 n chuyn ngnh ---- ASA FW
75/85
TM HIU V TRIN KHAI ASA FIREWALL
K.1.1. Lsi (h ca N=(,^E*a8=A /DS8
pun ls /c c m
-
8/12/2019 n chuyn ngnh ---- ASA FW
76/85
TM HIU V TRIN KHAI ASA FIREWALL
hacCS$ c g{ng ngOn chon h-t hiUn [xng c-ch gi nhiu gji 5k liUu hWn mnh
chng ch;. M
-
8/12/2019 n chuyn ngnh ---- ASA FW
77/85
-
8/12/2019 n chuyn ngnh ---- ASA FW
78/85
TM HIU V TRIN KHAI ASA FIREWALL
hZn mm gi lF JH93.>i55S$
T;;l A9DMXH cliSnt c&a cic;.
M-E " hi ci gji ava h< t$ ch; A9DM.
;. C4c c gi Q5 "S" (,2n GNS;
M JH93 v; 5it$SRS$SncS v chn pSmu
Ta ch;n Ta[ A9A [,n hi mn hnh
Ta c#u hnh ta[ nE nh/ au
f"h;n (nit$i5 * 0ng v\i RilS Aa.g
f6S$nSl*vmlinu
SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng+
-
8/12/2019 n chuyn ngnh ---- ASA FW
79/85
-
8/12/2019 n chuyn ngnh ---- ASA FW
80/85
TM HIU V TRIN KHAI ASA FIREWALL
f Ta nhF c-c lUnh au v; c@a c;n;lS
m;5$;[S S1
iRc;nRig Sth u
iRc;nRig Sth1 uiRc;nRig Sth2 u
iRc;nRig Sth3 u iRc;nRig
Sth= u iRc;nRig
Sth u c
aa[inlina mnt5iClina c
aa[inlinam;nit;$
mnt5iClinam;nit;$ c5 mnt5iC mnt5iClinam;nit;$
f B7n WE th ta w lm V;ng v ang t$;ng gia; 5iUn c;n;lS c&a Ri$Sall A9A.
Ta cj th 5zng lUnh Sna[lS a;$5 Chng cj ta SntS$ ti7 tc
SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng
-
8/12/2019 n chuyn ngnh ---- ASA FW
81/85
-
8/12/2019 n chuyn ngnh ---- ASA FW
82/85
TM HIU V TRIN KHAI ASA FIREWALL
SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng2
-
8/12/2019 n chuyn ngnh ---- ASA FW
83/85
-
8/12/2019 n chuyn ngnh ---- ASA FW
84/85
TM HIU V TRIN KHAI ASA FIREWALL
T)i ivu (ham ^h:
Ting Viv( 1
3 ;Ting "nh
> DavS :uca[E Ci8c "S" anA J/X oi,=a HanA^ u[lihS$* "ic;$S +12 ai[ >$ahim ma$ 9ant; Ci8c "S": "EinEn= oi,=a /JS anA VJN"Aa5(i%= S=cu,i(y u[lihS$* "ic; $S 2112 ai[ >$ahim ma$ 9ant; Ci8c "S": "EinEn= oi,=a /JS "n(iEXanA VJN "Aa5(i%= S=cu,i(y "55ianc= YS=cnA Ai(inZ u[lihS$* "ic;$S 2112
9=8iA=I htt*R;$um.athSna.S5u.vncic;fccnafccnfcciS1'3fgiaflafRi$Sallfaaft$Snfgn3.htmlK htt*nhatnghS.c;mR;$umh;th$Sa5.ht332+
SVTH: Nguyn Thanh Sn GVHD: ThS. ng Ngc Cng=
http://forum.athena.edu.vn/cisco-ccna-ccnp-ccie/1653-gia-lap-firewall-asa-tren-gns3.htmlhttp://forum.athena.edu.vn/cisco-ccna-ccnp-ccie/1653-gia-lap-firewall-asa-tren-gns3.htmlhttp://nhatnghe.com/forum/showthread.php?t=83327 -
8/12/2019 n chuyn ngnh ---- ASA FW
85/85