Esquema de Red DMZ

download Esquema de Red DMZ

of 19

Transcript of Esquema de Red DMZ

  • 7/23/2019 Esquema de Red DMZ

    1/19

    LP[\LOK HL RLH @ID HOZ

    J|kd J$ @diwkp B|pxkokdxl 2 KPAR K$P$I$

  • 7/23/2019 Esquema de Red DMZ

    2/19

    A DHA@L

    ;$ LP[\LOK HL RLH

    2$ CIP L[\AVIP ADGIROXA@IP

    2$;$ PLRWAHIRLP2$;$; RK@E HL PLRWAHIRLP

    2$2$ L[\AVIP @CALDXLP

    2$2$;$ @IDGAN\RK@AD AV

    2$2$2$ @IDL@XAWAHKH K CK RLH ADXLRDK

    2$0$ AOVRLPIRKP HL RLH

    2$0$;$ @IDGAN\RK@AD AV

    2$0$2$ @IDL@XAWAHKH K CK RLH ADXLRDK

    2$8$ HAPVIPAXAWIP HL ADXLR@IDL]AD

    2$8$;$ P^AX@MLP

    2$8$2$ RI\XLRP

    0$ CIP HARL@XIRAIP @IOVKRXAHIP LD LC PLRWAHIR HL GA@MLRIP

    0$;$ LPXR\@X\RK HL HARL@XIRAIP

    0$2$ VLROAPIP HL \P\KRAI

    0$0$ @\IXKP HL HAP@I

    8$ MLRRKOALDXKP HL @IDXRIC RLOIXI

  • 7/23/2019 Esquema de Red DMZ

    3/19

    ;$ LP[\LOK HL RLH

    Lc lp{|lok hl rlh |xacazkhi lpxkr `iov|lpxi vir |dk rlh adxlrdk# |dk zidk HOZ q |dkrlh l}xlrdk -Adxlrdlx! |pkdhi hip ri|xlrp$ Lc hab|ji bpa`i hlc lp{|lok hl rlh lp lcpan|aldxl:

    RLH ADXLRDK

    ZIDK HOZ

    ADXLRDLX

  • 7/23/2019 Esquema de Red DMZ

    4/19

    2$ CIP L[\AVIP ADGIROXA@IP

    2$; PLRWAHIRLP

    Ck rlh adxlrdk `idxkr `id hip plrwahirlp q ck zidk HOZ `id |di$ K `idxad|k`ad pl

    hlxkcckd ckp vrad`avkclp `krk`xlrpxa`kp hl cip plrwahirlp:Plrwahirlp vrawkhip Plrwahir vbca`i

    GirokxiPlrwahir ld rk`e -oidxkhip mirazidxkcoldxl!

    Papxlokivlrkxawi

    ^adhi~p Plrwlr 2e= ND\)Cad|} ND\)Cad|}

    G|d`aidlp @idxrickhir hioadai @irrli HM@V

    HDP -gir~krhadn k=6$

  • 7/23/2019 Esquema de Red DMZ

    5/19

    2$;$; RK@E HL PLRWAHIRLP

    Cip plrwahirlp pl adpxkckrd ld |d da`i rk`e hl 82\ hl kcx|rk$ J|dxi `id cip plrwahirlp pladpxkckr |d oidaxir C@H vclnkbcl# |d xl`ckhi vckdi q |d `ido|xkhir vkrk ck khoadapxrk`adad pax|hl cip plrwahirlp$

    Ck ahlk lp {|l pl oidxl xihi hl |dk okdlrk paoackr k ck lpvl`aga`khk kbkji:

    82 \

    2 \

    2 \

    2 \

    ; \

    PLRWAHIR % PKA

    PLRWAHIR % PKA

    PLRWAHIR % PKA

    OIDAXIR C@H % XL@CKHI

    2 \ \DAHKH HL @ADXKP HL BK@E\V

    ; \

    2 \ P^AX@M 8= v|lrxip

    2 \

    2 \

    2 \

    @khk plrwahir pl `idl`xkr k |d PKA haglrldxl# vkrk vrivir`aidkr vrixl` ad kdxlvribclokp ld lc papxlok lc`xra`i q xalovi p|ga`aldxl vkrk lc kvknkhi `irrl`xi hl cipl{|avip ld `kpi hl kvknd$

  • 7/23/2019 Esquema de Red DMZ

    6/19

    2$2 L[\AVIP @CALDXLP

    Ck rlh adxlrdk `|ldxk `id ;6 l{|avip virxxaclp vkrk cip |p|kraip$ Cip |p|kraip vihrdldxrkr ld `|kc{|alrk hl ckp o{|adkp |xacazkdhi p| cinad q `idxrkplk hl hioadai$

    Cip l{|avip xldhrd adpxkckhi `ioi odaoi lc pan|aldxl pigx~krl: ^adhi~p > Vriglppaidkc Oa`ripigx Igga`l 26;6 Pigx~krl Kdxawar|p % Kdxapvq~krl -k hlxlroadkr! ^adZav ^adRKR Khibl Rlkhlr ] Khibl Pmi`e~kwl Vckqlr Khibl Gckpm Vckqlr Adxlrdlx L}vcirlr ) Garlgi} ) Ivlrk2$2$; @IDGAN\RK@AD AV

    Cip l{|avip `caldxlp ibxldhrd p| `idgan|rk`ad AV hl girok k|xioxa`k# vrivir`aidkhkvir lc plrwahir HM@V hlc hioadai$ Ci rl`ioldhkbcl lp {|l ck kpandk`ad plk k|xioxa`k qdi hadoa`k# vkrk xldlr |d okqir `idxric hl ckp harl``aidlp AV$

    Ck `idgan|rk`ad AV xldhr cip pan|aldxlp vkrolxrip:

    AV: ldxrl ck ;12$;7=$

  • 7/23/2019 Esquema de Red DMZ

    7/19

    2$0 AOVRLPIRKP HL RLH

    Ck rlh adxlrdk hapvidl hl xrlp aovrlpirkp hl rlh5 |dk cplr k `icir# ixrk cplr {|l aovraolld bckd`i q dlnri q ixrk hl adql``ad vkrk aovrlpad ld girokxi K0$

    Ck aovrlpirk cplr k `icir hapvidl hl |dk xkrjlxk hl rlh Nankbax Lxmlrdlx$ Ckp ixrkp hipaovrlpirkp xaldld |dk xkrjlxk hl rlh Gkpx Lxmlrdlx$

    2$0$; @IDGAN\RK@AD HL RLH

    Ck `idgan|rk`ad AV pl lpvl`aga`kr ld `khk aovrlpirk bald hl girok okd|kc i bald hlgirok k|xioxa`k -rlplrwk ld HM@V!$ Ld lc vraolr `kpi pl l}`c|arkd p|p harl``aidlp AV ldlc plrwahir HM@V# vkrk {|l pxl di ckp kpandl k ckp o{|adkp `caldxlp$

    Ck `idgan|rk`ad AV xldhr cip pan|aldxlp vkrolxrip:

    AV: ldxrl ck ;12$;7=$

  • 7/23/2019 Esquema de Red DMZ

    8/19

    2$8 HAPVIPAXAWIP HL ADXLR@IDL]AD

    2$8$; P^AX@MLP

    Ck rlh adxlrdk `idxkr `id |d pici p~ax`m khoadapxrkbcl# {|l adxlr`idl`xkr ckp lpxk`aidlp#cip plrwahirlp q ckp aovrlpirkp$ Ld `id`rlxi plr |d p~ax`m @ap`i PN066/

  • 7/23/2019 Esquema de Red DMZ

    9/19

    0$ CIP HARL@XIRAIP @IOVKRXAHIP LD LC PLRWAHIR HL GA@MLRIP

    Ld ck rlh adxlrdk l}apxl |d plrwahir `id ND\)Cad|} `|qkp g|d`aidlp pid mk`lr hl plrwahirhl ga`mlrip q hl aovrlpad$ Ha`mi plrwahir xaldl adpxkckhi PKOBK vkrk vlroaxar ck

    `iovkrxa`ad hl p|p rl`|rpip `id ckp lpxk`aidlp `id ^adhi~p > Vriglppaidkc adpxkckhi$ Ldlpxl v|dxi pl xrkxkr lc xlok hl ck lpxr|`x|rk hl harl`xiraip `iovkrxahip$

    0$; CK LPXR\@X\RK HL HARL@XIRAIP

    Ck lpxr|`x|rk hl harl`xiraip `iovkrxahip lpxkr `iov|lpxk vir xrlp `krvlxkp5 )XVW#)Vriql`xip q )Vrlp|v|lpxip$ Lpxkp `krvlxkp lpxkrd |ba`khkp ld lc RKAH< hlc plrwahir hlga`mlrip$

    0$2 VLROAPIP HL \P\KRAI

    Vkrk adha`kr cip vlroapip {|l xaldld cip |p|kraip ld `khk harl`xirai# lp rl`ioldhkbcl `rlkrxrlp nr|vip ncibkclp hl |p|kraip:

    NYJLGLP: Ld lpxl nr|vi pl ad`c|ard cip |p|kraip {|l plkd jlglp$ NY@IDXKB: Ld lpxl nr|vi pl ad`c|ard k{|lcckp vlrpidkp {|l xrkbkjld ld lc

    hlvkrxkoldxi hl `idxkbacahkh$ NYLOVCL: Ld lpxl nr|vi pl ad`c|ard k cip lovclkhip hl ck lovrlpk$

    Cip vlroapip {|lhkrkd hl ck pan|aldxl okdlrk:

    XVW

    VRIQL@XIP

    VRLP\V\LPXIP

    NYJLGLP NYLOVCLNY@IDXKB

    NYJLGLP

    NYJLGLP NY@IDXKB

    R)^

    R)^

    R)^

    Cip vlroapip ad`c|ahip ld cip harl`xiraip vkhrl plrd mlrlhkhip vir p|p p|bharl`xiraip$

    0$0 @\IXKP HL HAP@I

    Ld lc plrwahir hl ga`mlrip pl lpvl`aga`kr {|l `khk |p|krai pci vihr kcok`ldkr

  • 7/23/2019 Esquema de Red DMZ

    10/19

    8$ MLRRKOALDXKP HL @IDXRIC RLOIXI

    Ld ck rlh adxlrdk pl |xacazkrd hip xavip hapxadxip hl vrinrkokp hl `idxric rloixi5 DiOk`madlD]# vkrk `idxrickr cip plrwahirlp `id ND\)Cad|} q Hkol^krl DX \xacaxalp vkrk `idxrickr cip

    plrwahirlp `id ^adhi~p Plrwlr q ckp lpxk`aidlp$

    DiOk`madl D] vlroaxl rlkcazkr `idl}aidlp warx|kclp paoackrlp k ckp {|l pl rlkcazkrkd `idXlroadkc Plrwlr hl Oa`ripigx$ Hl lpxk okdlrk# wkraip khoadapxrkhirlp vihrkd `idl`xkrpl kcoapoi plrwahir hl okdlrk pao|cxdlk$

    Hkol^krl DX \xacaxalp vlroaxl rlkcazkr `idl}aidlp rloixkp adxlrk`xawkp# lp hl`ar# {|l lckhoadapxrkhir xrkbkjkrk ld ck o{|adk `idxrickhk `ioi pa lpx|walrk gpa`koldxl hlckdxl hllcck$ Lpxk kvca`k`ad xaldl ck `krk`xlrpxa`k hl vihlr `ivakr ck lpxr|`x|rk hl harl`xirai hlcK`xawl Harl`xirq hl |d hioadai# paovcloldxl adha`kdhi lc diobrl hlc `idxrickhir hl hioadai$Hl lpxk okdlrk xldhrkoip hapvidabclp cip diobrlp hl xihkp ckp o{|adkp hlc hioadai ld |dk

    lpxr|`x|rk ahdxa`k k ck {|l xldhrk lc K`xawl Harl`xirq$

  • 7/23/2019 Esquema de Red DMZ

    11/19

    7$ DIP WKOIP HL @IOVRKP: LC OKXLRAKC ADGIROKXA@I

    PLRWAHIR ADHI^P PLRWLR 266=

    Plrwahir xavi rk`e$

    Xkoki 2\$

    HLCC VI^LRLHNL R

  • 7/23/2019 Esquema de Red DMZ

    12/19

    RK@E HLCC VI^LRLHNL 8226

    Rk`e HLCC VI^LRLHNL 8226# `id v|lrxkp q vkdlclp ckxlrkclp$

    8 wldxackhirlp vkrk rk`e 8226$ Oidaxir vckdi C@H ;>" ;\ `id rkclp hl rk`e HLCC$ @iobi xl`ckhi)xi|`mvkh \E)Arlckdh$

    @ido|xkhir kdkcna`i EWO Vi~lrLhnl ;=6KP `id = v|lrxip$

    < `kbclp hl kcaoldxk`ad vkrk rk`e 8 olxrip$

    0 kip hl VriP|vvirx q plrwa`ai ad pax| kc pan|aldxl hk ckbirkbcl$

    Vrl`ai: 0$=18#10 % AWK

  • 7/23/2019 Esquema de Red DMZ

    13/19

    VIRXXAC HLCC WIPXRI DIXLBIIE 0> Vriglppaidkc 78 baxp iranadkc `id HWH hl rl`|vlrk`ad$ Oa`ripigx Igga`l 26;6 Minkr q Vl{|lk Lovrlpk ld lpvkic$ Pigx~krl O\A Xrldh Oa`ri ^irrq Grll B|padlpp Pl`|raxq 0$< -;< olplp!$ Vkdxkcck CLH hl kcxk hlgada`ad -;766 ] 166! kdxarrlgcl`xkdxl hl ;>#0"$ PHRKO HHR0 hl hibcl `kdkc hl 268= OB -; } 268=! k ;000 OMz$ Hap`i h|ri Plrakc KXK hl 2266 rvo$ \dahkh hl HWH%)/R^ =] `id pigx~krl ad`c|ahi$ Rlvipko|l`kp q cl`xir hl m|lcckp hk`xackrlp baioxra`i$ Bkxlrk vrad`avkc hl aidlp hl caxai hl 7 `lchkp q 8= ^)m$

    @okrk adxlnrkhk hl 2#6 olnkv}lclp$ Xkrjlxk adkcobra`k Hlcc ;>62 =62$;;b)n)d l|rivlk % Bc|lxiixm$ Khkvxkhir hl @K hl 16 ^$ ; ki hl plrwa`ai hl rl`inahk q ldxrlnk$

    Vrl`ai: ;6 }

  • 7/23/2019 Esquema de Red DMZ

    14/19

    AOVRLPIRK CPLR HLCC LD @ICIR 2; hkp hl ck plokdk$ ; ki hl plrwa`ai ad pax| kc pan|aldxl hk ckbirkbcl$ Vri`lpkhir hl 866 OMz$ @a`ci hl xrkbkji mkpxk 86$666 vnadkp kc olp$ Oloirak PIHAOO HHR2 hl 2

  • 7/23/2019 Esquema de Red DMZ

    15/19

    AOVRLPIRK CPLR HLCC LD B)D 20 hkp hl ck plokdk$

    ; ki hl plrwa`ai ad pax| kc pan|aldxl hk ckbirkbcl$ Vri`lpkhir hl 866 OMz$

    @a`ci hl xrkbkji mkpxk 76$666 vnadkp kc olp$

    Oloirak PIHAOO HHR2 hl 02 OB k 866 OMz$ Rlpic|`ad:

    766 } 766 VVV vrlhlxlroadkhk$;266 } ;266 VVV o}aok$

    Bkdhljkp hl ldxrkhk: ; `kjd o|cxag|d`ad hl

  • 7/23/2019 Esquema de Red DMZ

    16/19

    AOVRLPIRK MV IGGA@LJLX >666

    Wlci`ahkh hl aovrlpad ld dlnri -K8!Mkpxk 00 vvo

    Wlci`ahkh hl aovrlpad ld `icir -K8!

    Mkpxk 02 vvo Wlci`ahkh hl aovrlpad ld dlnri -API# l{|awkcldxl kc cplr!Mkpxk = vvo

    Wlci`ahkh hl aovrlpad ld `icir -API# l{|awkcldxl kc cplr!Mkpxk > vvo

    @kcahkh hl aovrlpad ld dlnri -vxaok!Mkpxk 766 VVV

    @kcahkh hl aovrlpad ld `icir -vxaok!Mkpxk 8=66 } ;266 VVV

    @a`ci hl xrkbkji -oldp|kc# K8!Mkpxk >$666 vnadkp

    Wlci`ahkh hlc vri`lpkhir 0=8 OMz Oloirak# lpxdhkr 02 OB Bkdhljk hl ldxrkhk ;

  • 7/23/2019 Esquema de Red DMZ

    17/19

    P^AX@M @AP@I PN066/

  • 7/23/2019 Esquema de Red DMZ

    18/19

    Pivirxl WVD$ Pivirxl AVw7$ v|lrxip CKD Nankbax Lxmlrdlx -;6);66);666!$ ; v|lrxi hl `idpick RJ/8

    \DAHKH HL @ADXKP ABO PQPXLO PXIRKNL XP2086 L]VRLPP

    Adxlrgkz P@PA i PKP -plnd oihlci!$ Xkpk hl xrkdpglrld`ak hl ;26 OB)p$ Pivirxl `adxkp:

    i Cl`x|rk)lp`rax|rk `id `adxkp CXI \cxra|o8$i Cl`x|rk `id `adxkp CXI \cxra|o0$

    Vipabacahkh hl ld`ravxk`ad vir mkrh~krl$ Vipabacahkh hl `iovrlpad vir mkrh~krl 2:;$

    \pi `id `adxkp CXI \cxrra|o8 hl =66 NB -2

  • 7/23/2019 Esquema de Red DMZ

    19/19

    XIXKC: %06$