- Table of Contents
-
- 09-Configuration Examples
- 01-Web Login Configuration Examples
- 02-Internet Access Through a Static IP Address Configuration Examples
- 03-Internet access through PPPoE configuration examples
- 04-License Configuration Examples
- 05-Signature Library Upgrade Configuration Examples
- 06-Software Upgrade Examples
- 06-Software Upgrade Examples (only for F50X0-D and F5000-AK5X5 firewalls)
- 07-Routing deployment configuration examples
- 08-Transparent deployment configuration examples
- 09-Static routing configuration examples
- 10-RIP configuration examples
- 11-OSPF configuration examples
- 12-BGP configuration examples
- 13-Policy-based routing configuration examples
- 14-Security Policy Configuration Examples
- 15-APR-Based Security Policy Configuration Examples
- 16-Object Group Configuration Examples
- 17-User identification configuration examples
- 18-Attack defense configuration examples
- 19-IPCAR Configuration Examples
- 20-IPS Configuration Examples
- 21-URL Filtering Configuration Examples
- 22-Anti-Virus Configuration Examples
- 23-File Filtering Configuration Examples
- 24-Data Filtering Configuration Examples
- 25-WAF Configuration Examples
- 26-IP Reputation Configuration Examples
- 27-APT Defense Configuration Examples
- 28-NetShare Control Configuration Examples
- 29-Bandwidth Management Configuration Examples
- 30-IPsec configuration examples
- 31-SSL VPN IP access configuration examples
- 31-SSL VPN TCP access configuration examples
- 31-SSL VPN Web access configuration examples
- 32-L2TP Configuration Examples
- 33-NAT configuration examples
- 34-NPTv6 Configuration Examples
- 35-Policy-based NAT configuration examples
- 36-NAT hairpin configuration examples
- 37-NAT Flow Logging Configuration Examples
- 38-Inbound Link Load Balancing Configuration Examples
- 39-Outbound Link Load Balancing Configuration Examples
- 40-Server Load Balancing Configuration Examples
- 41-Transparent DNS Proxy Configuration Examples
- 42-High Availability Group Configuration Examples
- 43-Context Configuration Examples
- 43-Context Configuration Examples(only for F50X0-D and F5000-AK5X5 firewalls)
- 44-IRF configuration examples
- 44-IRF configuration examples(only for F50X0-D and F5000-AK5X5 firewalls)
- 45-DHCP configuration examples
- 46-DNS configuration examples
- 47-Server Connection Detection Configuration Examples
- 48-Connection Limit Configuration Examples
- 49-Public key management configuration examples
- 50-SSL Decryption Configuration Examples
- 51-MAC Address Learning Through a Layer 3 Device Configuration Examples
- 52-4G Configuration Examples
- 53-WLAN Configuration Examples
- Related Documents
-
Title | Size | Download |
---|---|---|
28-NetShare Control Configuration Examples | 98.97 KB |
NetShare control configuration examples
Contents
· General restrictions and guidelines
· Example: Configuring NetShare control
The following information provides NetShare control configuration examples.
This document is not restricted to specific software or hardware versions. Procedures and information in the examples might be slightly different depending on the software or hardware version of the device.
The configuration examples were created and verified in a lab environment, and all the devices were started with the factory default configuration. When you are working on a live network, make sure you understand the potential impact of every command on your network.
The following information is provided based on the assumption that you have basic knowledge of the NetShare control feature.
The device supports only one NetShare control policy.
Network configuration
As shown in Figure 1, the device connects to the LAN and Internet through security zones Trust and Untrust, respectively.
Configure NetShare control on the device to meet the following requirements:
· Monitor the packets sent by the hosts on the LAN to the Internet based on the APR-based packet analysis for network sharing behavior inspection.
· If an IP address is detected to be shared by more than one host for Internet access, NetShare control will freeze the IP address for an hour and logs the event.
Software versions used
This configuration example was created and verified on R8860 of the F1000-AI-55 device.
Procedure
1. Assign IP addresses to interfaces and add the interfaces to security zones:
# On the top navigation bar, click Network.
# From the navigation pane, select Interface Configuration > Interfaces.
# Click the Edit icon for GE 1/0/1.
# In the dialog box that opens, configure the interface:
a. Select the Trust security zone.
b. Click the IPv4 Address tab, and then enter the IP address and mask of the interface. In this example, enter 10.1.1.1/24.
c. Click OK.
# Add GE 1/0/2 to the Untrust security zone and set its IP address to 20.1.1.1./24 in the same way you configure GE 1/0/1.
2. Create a security policy:
# On the top navigation bar, click Policies.
# From the navigation pane, select Security Policies > Security Policies.
# Click Create.
# In the dialog box that opens, configure a security policy:
¡ Enter policy name test-a.
¡ Select source zone Trust.
¡ Select destination zone Untrust.
¡ Select type IPv4.
¡ Select action Permit.
¡ Select source IP address 10.1.1.2/24.
# Click OK.
3. Update the APR signature library to the latest version. (Details not shown.)
4. Configure a NetShare control policy.
# On the top navigation bar, click Policies.
# From the navigation pane, select Netshare Control > Netshare Policy.
# Click Create.
# In the dialog box that appears, configure a NetShare policy:
¡ Enter policy name netsharepolicy.
¡ Select source security zone Trust.
¡ Select destination security zone Untrust.
¡ Enable APP tracking.
¡ Disable IPID trail tracking.
¡ Allow a maximum of one terminal per IP.
¡ Select action Freeze.
¡ Set the freezing times to 60.
¡ Enable logging.
¡ Enable the NetShare policy.
# Cilck OK.
Figure 2 Creating a NetShare policy
5. Click Submit to have the NetShare policy configuration take effect.
Verifying the configuration
If a host on the LAN accesses the Internet by using a shared IP address through a proxy, the device can detect the network sharing behavior and will freeze the shared IP address for an hour and log the event.
To view the IP address with the network sharing behavior, click Policies on the top navigation bar and select Netshare Control > Netshare List from the navigation pane.