{"id":1301,"date":"2011-04-07T13:35:22","date_gmt":"2011-04-07T04:35:22","guid":{"rendered":"http:\/\/www.itbook.info\/web\/2011\/04\/%e3%83%ab%e3%83%bc%e3%82%bf%e3%81%ae%e3%82%b3%e3%83%b3%e3%83%88%e3%83%ad%e3%83%bc%e3%83%ab%e3%83%97%e3%83%ac%e3%83%bc%e3%83%b3%e3%82%92%e9%98%b2%e5%be%a1%e3%81%99%e3%82%8b%e6%89%8b%e6%b3%95%e3%81%8crf.html"},"modified":"2011-04-07T13:35:22","modified_gmt":"2011-04-07T04:35:22","slug":"%e3%83%ab%e3%83%bc%e3%82%bf%e3%81%ae%e3%82%b3%e3%83%b3%e3%83%88%e3%83%ad%e3%83%bc%e3%83%ab%e3%83%97%e3%83%ac%e3%83%bc%e3%83%b3%e3%82%92%e9%98%b2%e5%be%a1%e3%81%99%e3%82%8b%e6%89%8b%e6%b3%95%e3%81%8crf","status":"publish","type":"post","link":"https:\/\/www.itbook.info\/web\/2011\/04\/%e3%83%ab%e3%83%bc%e3%82%bf%e3%81%ae%e3%82%b3%e3%83%b3%e3%83%88%e3%83%ad%e3%83%bc%e3%83%ab%e3%83%97%e3%83%ac%e3%83%bc%e3%83%b3%e3%82%92%e9%98%b2%e5%be%a1%e3%81%99%e3%82%8b%e6%89%8b%e6%b3%95%e3%81%8crf.html","title":{"rendered":"\u30eb\u30fc\u30bf\u306e\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30d7\u30ec\u30fc\u30f3\u3092\u9632\u5fa1\u3059\u308b\u624b\u6cd5\u304cRFC6192\u3068\u3057\u3066\u6a19\u6e96\u5316"},"content":{"rendered":"<aside class=\"row veu_insertAds before\"><div class=\"col-md-12\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script>\r\n                        <!-- cat_\u4e0a\u90e8 -->\r\n                        <ins class=\"adsbygoogle\" style=\"display:block\" data-ad-client=\"ca-pub-6102004203189610\" data-ad-slot=\"9628163001\" data-ad-format=\"auto\"><\/ins>\r\n                        <script>\r\n                        (adsbygoogle = window.adsbygoogle || []).push({});\r\n                        <\/script><\/div><\/aside><p>\u60aa\u610f\u306e\u3042\u308b\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u304b\u3089\u30eb\u30fc\u30bf\u306e\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30d7\u30ec\u30fc\u30f3\u3092\u4fdd\u8b77\u3059\u308b\u305f\u3081\u306e\u624b\u6cd5\u304cRFC6192\u3068\u3057\u3066\u6a19\u6e96\u5316\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n<blockquote title=\"RFC 6192 - Protecting the Router Control Plane\" cite=\"http:\/\/tools.ietf.org\/html\/rfc6192\">\n<p>This memo provides a method for protecting a router&#8217;s control plane<br \/>\n from undesired or malicious traffic.  In this approach, all<br \/>\n legitimate router control plane traffic is identified.  Once<br \/>\n legitimate traffic has been identified, a filter is deployed in the<br \/>\n router&#8217;s forwarding plane.  That filter prevents traffic not<br \/>\n specifically identified as legitimate from reaching the router&#8217;s<br \/>\n control plane, or rate-limits such traffic to an acceptable level.<\/p>\n<p><cite>via: <a href=\"http:\/\/tools.ietf.org\/html\/rfc6192\" target=\"_blank\">RFC 6192 &#8211; Protecting the Router Control Plane<\/a><\/cite><\/p>\n<\/blockquote>\n<p>RFC\u306e\u4e2d\u306b\u306f\u3001\u5b9f\u969b\u306bCisco\u3068Juniper\u306e\u8a2d\u5b9a\u4f8b\u304c\u8a18\u8f09\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<p>Cisco IOS\u306e\u5834\u5408\u306f\u3001CoPP (Control Plane Policing)\u3092\u4f7f\u3063\u3066\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30d7\u30ec\u30fc\u30f3\u5b9b\u306e\u30d1\u30b1\u30c3\u30c8\u3092\u5236\u5fa1\u3057\u307e\u3059\u3002<\/p>\n<blockquote title=\"RFC 6192 - Protecting the Router Control Plane\" cite=\"http:\/\/tools.ietf.org\/html\/rfc6192\">\n<p>!Start: Protecting The Router Control Plane<br \/>\n !<br \/>\n !Control Plane Policing (CoPP) Configuration<br \/>\n !<br \/>\n !Access Control List Definitions<br \/>\n !<br \/>\n ip access-list extended ICMP<br \/>\n permit icmp any any<br \/>\n ipv6 access-list ICMPv6<br \/>\n permit icmp any any<br \/>\n ip access-list extended OSPF<br \/>\n permit ospf 192.0.2.0 0.0.0.255 any<br \/>\n ipv6 access-list OSPFv3<br \/>\n permit 89 FE80::\/10 any<br \/>\n ip access-list extended IBGP<br \/>\n permit tcp 192.0.2.0 0.0.0.255 eq bgp any<br \/>\n permit tcp 192.0.2.0 0.0.0.255 any eq bgp<br \/>\n ipv6 access-list IBGPv6<br \/>\n permit tcp 2001:DB8:1::\/48 eq bgp any<br \/>\n permit tcp 2001:DB8:1::\/48 any eq bgp<br \/>\n ip access-list extended EBGP<br \/>\n permit tcp host 198.51.100.25 eq bgp any<br \/>\n permit tcp host 198.51.100.25 any eq bgp<br \/>\n permit tcp host 198.51.100.27 eq bgp any<br \/>\n permit tcp host 198.51.100.27 any eq bgp<br \/>\n permit tcp host 198.51.100.29 eq bgp any<br \/>\n permit tcp host 198.51.100.29 any eq bgp<br \/>\n permit tcp host 198.51.100.31 eq bgp any<br \/>\n permit tcp host 198.51.100.31 any eq bgp<\/p>\n<p><cite>via: <a href=\"http:\/\/tools.ietf.org\/html\/rfc6192\" target=\"_blank\">RFC 6192 &#8211; Protecting the Router Control Plane<\/a><\/cite><\/p>\n<\/blockquote>\n<aside class=\"row veu_insertAds after\"><div class=\"col-md-12\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script>\r\n                        <!-- cat_\u4e0a\u90e8 -->\r\n                        <ins class=\"adsbygoogle\" style=\"display:block\" data-ad-client=\"ca-pub-6102004203189610\" data-ad-slot=\"9628163001\" data-ad-format=\"auto\"><\/ins>\r\n                        <script>\r\n                        (adsbygoogle = window.adsbygoogle || []).push({});\r\n                        <\/script><\/div><\/aside>","protected":false},"excerpt":{"rendered":"<p>\u60aa\u610f\u306e\u3042\u308b\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u304b\u3089\u30eb\u30fc\u30bf\u306e\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30d7\u30ec\u30fc\u30f3\u3092\u4fdd\u8b77\u3059\u308b\u305f\u3081\u306e\u624b\u6cd5\u304cRFC6192\u3068\u3057\u3066\u6a19\u6e96\u5316\u3055\u308c\u307e\u3057\u305f\u3002 This memo provides a method for protecting a router&#038; [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[38],"tags":[66,42,65],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v15.0 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u30eb\u30fc\u30bf\u306e\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30d7\u30ec\u30fc\u30f3\u3092\u9632\u5fa1\u3059\u308b\u624b\u6cd5\u304cRFC6192\u3068\u3057\u3066\u6a19\u6e96\u5316 - \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a8\u30f3\u30b8\u30cb\u30a2\u304c\u65e5\u3005\u306e\u51fa\u6765\u4e8b\u3092\u8a9e\u308b<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.itbook.info\/web\/2011\/04\/\u30eb\u30fc\u30bf\u306e\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30d7\u30ec\u30fc\u30f3\u3092\u9632\u5fa1\u3059\u308b\u624b\u6cd5\u304crf.html\" \/>\n<meta property=\"og:locale\" content=\"ja_JP\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u30eb\u30fc\u30bf\u306e\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30d7\u30ec\u30fc\u30f3\u3092\u9632\u5fa1\u3059\u308b\u624b\u6cd5\u304cRFC6192\u3068\u3057\u3066\u6a19\u6e96\u5316 - \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a8\u30f3\u30b8\u30cb\u30a2\u304c\u65e5\u3005\u306e\u51fa\u6765\u4e8b\u3092\u8a9e\u308b\" \/>\n<meta property=\"og:description\" content=\"\u60aa\u610f\u306e\u3042\u308b\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u304b\u3089\u30eb\u30fc\u30bf\u306e\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30d7\u30ec\u30fc\u30f3\u3092\u4fdd\u8b77\u3059\u308b\u305f\u3081\u306e\u624b\u6cd5\u304cRFC6192\u3068\u3057\u3066\u6a19\u6e96\u5316\u3055\u308c\u307e\u3057\u305f\u3002 This memo provides a method for protecting a router&amp; [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.itbook.info\/web\/2011\/04\/\u30eb\u30fc\u30bf\u306e\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30d7\u30ec\u30fc\u30f3\u3092\u9632\u5fa1\u3059\u308b\u624b\u6cd5\u304crf.html\" \/>\n<meta property=\"og:site_name\" content=\"\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a8\u30f3\u30b8\u30cb\u30a2\u304c\u65e5\u3005\u306e\u51fa\u6765\u4e8b\u3092\u8a9e\u308b\" \/>\n<meta property=\"article:published_time\" content=\"2011-04-07T04:35:22+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.itbook.info\/web\/#website\",\"url\":\"https:\/\/www.itbook.info\/web\/\",\"name\":\"\\u30cd\\u30c3\\u30c8\\u30ef\\u30fc\\u30af\\u30a8\\u30f3\\u30b8\\u30cb\\u30a2\\u304c\\u65e5\\u3005\\u306e\\u51fa\\u6765\\u4e8b\\u3092\\u8a9e\\u308b\",\"description\":\"\\u30cd\\u30c3\\u30c8\\u30ef\\u30fc\\u30af\\u30cd\\u30bf\\u3068\\u304b\\u3092\\u9069\\u5f53\\u306b\\u66f8\\u304d\\u6563\\u3089\\u304b\\u3059\\u30d6\\u30ed\\u30b0\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":\"https:\/\/www.itbook.info\/web\/?s={search_term_string}\",\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"ja\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.itbook.info\/web\/2011\/04\/%e3%83%ab%e3%83%bc%e3%82%bf%e3%81%ae%e3%82%b3%e3%83%b3%e3%83%88%e3%83%ad%e3%83%bc%e3%83%ab%e3%83%97%e3%83%ac%e3%83%bc%e3%83%b3%e3%82%92%e9%98%b2%e5%be%a1%e3%81%99%e3%82%8b%e6%89%8b%e6%b3%95%e3%81%8crf.html#webpage\",\"url\":\"https:\/\/www.itbook.info\/web\/2011\/04\/%e3%83%ab%e3%83%bc%e3%82%bf%e3%81%ae%e3%82%b3%e3%83%b3%e3%83%88%e3%83%ad%e3%83%bc%e3%83%ab%e3%83%97%e3%83%ac%e3%83%bc%e3%83%b3%e3%82%92%e9%98%b2%e5%be%a1%e3%81%99%e3%82%8b%e6%89%8b%e6%b3%95%e3%81%8crf.html\",\"name\":\"\\u30eb\\u30fc\\u30bf\\u306e\\u30b3\\u30f3\\u30c8\\u30ed\\u30fc\\u30eb\\u30d7\\u30ec\\u30fc\\u30f3\\u3092\\u9632\\u5fa1\\u3059\\u308b\\u624b\\u6cd5\\u304cRFC6192\\u3068\\u3057\\u3066\\u6a19\\u6e96\\u5316 - \\u30cd\\u30c3\\u30c8\\u30ef\\u30fc\\u30af\\u30a8\\u30f3\\u30b8\\u30cb\\u30a2\\u304c\\u65e5\\u3005\\u306e\\u51fa\\u6765\\u4e8b\\u3092\\u8a9e\\u308b\",\"isPartOf\":{\"@id\":\"https:\/\/www.itbook.info\/web\/#website\"},\"datePublished\":\"2011-04-07T04:35:22+00:00\",\"dateModified\":\"2011-04-07T04:35:22+00:00\",\"author\":{\"@id\":\"https:\/\/www.itbook.info\/web\/#\/schema\/person\/3707482c5270f902ec5d92dba1db0920\"},\"inLanguage\":\"ja\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.itbook.info\/web\/2011\/04\/%e3%83%ab%e3%83%bc%e3%82%bf%e3%81%ae%e3%82%b3%e3%83%b3%e3%83%88%e3%83%ad%e3%83%bc%e3%83%ab%e3%83%97%e3%83%ac%e3%83%bc%e3%83%b3%e3%82%92%e9%98%b2%e5%be%a1%e3%81%99%e3%82%8b%e6%89%8b%e6%b3%95%e3%81%8crf.html\"]}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.itbook.info\/web\/#\/schema\/person\/3707482c5270f902ec5d92dba1db0920\",\"name\":\"na3620\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.itbook.info\/web\/#personlogo\",\"inLanguage\":\"ja\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/1e7e7f8079aa707666c2a1069de805ef?s=96&d=mm&r=g\",\"caption\":\"na3620\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","_links":{"self":[{"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/posts\/1301"}],"collection":[{"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/comments?post=1301"}],"version-history":[{"count":0,"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/posts\/1301\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/media?parent=1301"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/categories?post=1301"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.itbook.info\/web\/wp-json\/wp\/v2\/tags?post=1301"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}