بستن trace روی روتر

Printable View

2013-01-01, 01:44 AM
fashionboy

سوال: روش بستن trace روی روتر و باز بودن ping

[RIGHT][COLOR=#333333]سلام دوستان یه سوال داشتم[/COLOR]
[COLOR=#333333]ما توی شرکت میخوایم ping هر مقصدی که میگیریم داشته باشیم ولی مسیر رسیدن به اون مقصد رو نشون نده یعنی trace بسته باشه.[/COLOR]
[COLOR=#333333]این دستوراتو تاحالا امتحان کردم اما نشده و کلا ping رو میبنده :[/COLOR][/RIGHT]
[LEFT][COLOR=#333333]R5(config)#access-list 100 deny icmp any any traceroute
R5(config)#access-list 100 permit icmp any any
R5(config-if)#ip access-group 100 in

R5(config)#access-list 100 deny icmp any any ttl-exceeded
R5(config)#access-list 100 permit icmp any any
R5(config-if)#ip access-group 100 in

myrtr(config)#IP access-list extended traceroute
myrtr(config-ext-nacl)# deny ip any any option traceroute[/COLOR][/LEFT]

[RIGHT][COLOR=#333333]هیج کدوم از اینا به من جواب نداده و کلا اومده ping و traceرو بسته که این خواسته من نیست. میخوام traceم فقط بسه بشه.[/COLOR]
[COLOR=#333333]کسی میتونه راهنمایی کنه؟ ممنون میشم[/COLOR][/RIGHT]
2013-01-01, 07:59 AM
Sinozit

با سلام

تا اونجایی که علم بنده قد میده همچین کاری بدون بستند ICMP ممکن نیست . حالا چرا ؟

Trace چطور کار می کند ؟

در این روش از Expire TTL سوء استفاده میشه به این روش که برای مثال بنده می خواهم عملیات Trace را تا Forum.persiannetworks.com انجام دهم . به صورت دستی . ابتدا TTL رو روی روی 1 تنظیم می کنم . و اولین Device که بسته را دریافت می کند به دلیل TTL پایین به شما expire TTL می دهد که در اینجا آی پی اولین دستگاه مشخص می شود . حال TTL را بر روی 2 تنظیم می کنم و بسته از اولین Device رد شده و در دومین دستگاه با Expire TTL مواجه می شود که این پیغام را به شما می دهد که آی پی دومین دستگاه هم معلوم میشود . عملیات فوق را دستی انجام داده ام می توانید ببینید :

[QUOTE]C:\Documents and Settings\Administrator>ping forum.persiannetworks.com -i 1

Pinging forum.persiannetworks.com [91.98.96.3] with 32 bytes of data:

Reply from 94.183.36.1: TTL expired in transit.
Reply from 94.183.36.1: TTL expired in transit.
Reply from 94.183.36.1: TTL expired in transit.
Reply from 94.183.36.1: TTL expired in transit.

Ping statistics for 91.98.96.3:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\Documents and Settings\Administrator>ping forum.persiannetworks.com -i 2

Pinging forum.persiannetworks.com [91.98.96.3] with 32 bytes of data:

Reply from 85.15.0.44: TTL expired in transit.
Reply from 85.15.0.44: TTL expired in transit.
Reply from 85.15.0.44: TTL expired in transit.
Reply from 85.15.0.44: TTL expired in transit.

Ping statistics for 91.98.96.3:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\Documents and Settings\Administrator>ping forum.persiannetworks.com -i 3

Pinging forum.persiannetworks.com [91.98.96.3] with 32 bytes of data:

Control-C
^C
C:\Documents and Settings\Administrator>ping forum.persiannetworks.com -i 4

Pinging forum.persiannetworks.com [91.98.96.3] with 32 bytes of data:

Reply from 85.15.0.227: TTL expired in transit.

Ping statistics for 91.98.96.3:
Packets: Sent = 1, Received = 1, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
Control-C
^C
C:\Documents and Settings\Administrator>ping forum.persiannetworks.com -i 5

Pinging forum.persiannetworks.com [91.98.96.3] with 32 bytes of data:

Reply from 82.99.199.61: TTL expired in transit.
Reply from 82.99.199.61: TTL expired in transit.

Ping statistics for 91.98.96.3:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
Control-C
^C
C:\Documents and Settings\Administrator>ping forum.persiannetworks.com -i 6

Pinging forum.persiannetworks.com [91.98.96.3] with 32 bytes of data:

Reply from 10.234.48.129: TTL expired in transit.

Ping statistics for 91.98.96.3:
Packets: Sent = 1, Received = 1, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
Control-C
^C
C:\Documents and Settings\Administrator>ping forum.persiannetworks.com -i 7

Pinging forum.persiannetworks.com [91.98.96.3] with 32 bytes of data:

Reply from 10.234.222.1: TTL expired in transit.
Reply from 10.234.222.1: TTL expired in transit.

Ping statistics for 91.98.96.3:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
Control-C
^C
C:\Documents and Settings\Administrator>ping forum.persiannetworks.com -i 8

Pinging forum.persiannetworks.com [91.98.96.3] with 32 bytes of data:

Reply from 10.234.121.184: TTL expired in transit.
Reply from 10.234.121.184: TTL expired in transit.

Ping statistics for 91.98.96.3:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
Control-C
^C
C:\Documents and Settings\Administrator>ping forum.persiannetworks.com -i 9

Pinging forum.persiannetworks.com [91.98.96.3] with 32 bytes of data:

Reply from 10.199.101.86: TTL expired in transit.
Reply from 10.199.101.86: TTL expired in transit.

Ping statistics for 91.98.96.3:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
Control-C
^C
C:\Documents and Settings\Administrator>ping forum.persiannetworks.com -i 9

Pinging forum.persiannetworks.com [91.98.96.3] with 32 bytes of data:

Reply from 10.199.101.86: TTL expired in transit.

Ping statistics for 91.98.96.3:
Packets: Sent = 1, Received = 1, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
Control-C
^C
C:\Documents and Settings\Administrator>ping forum.persiannetworks.com -i 10

Pinging forum.persiannetworks.com [91.98.96.3] with 32 bytes of data:

Reply from 10.199.50.2: TTL expired in transit.
Reply from 10.199.50.2: TTL expired in transit.

Ping statistics for 91.98.96.3:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
Control-C
^C
C:\Documents and Settings\Administrator>ping forum.persiannetworks.com -i 11

Pinging forum.persiannetworks.com [91.98.96.3] with 32 bytes of data:

Reply from 91.98.96.3: bytes=32 time=40ms TTL=47
Reply from 91.98.96.3: bytes=32 time=40ms TTL=48

Ping statistics for 91.98.96.3:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 40ms, Maximum = 40ms, Average = 40ms
Control-C[/QUOTE]

و با دستور Trace :

[QUOTE]C:\Documents and Settings\Administrator>tracert forum.persiannetworks.com

Tracing route to forum.persiannetworks.com [91.98.96.3]
over a maximum of 30 hops:

1 125 ms 37 ms 53 ms 94-183-36-1.rasana.net [94.183.36.1]
2 60 ms 59 ms 59 ms 85-15-0-44.rasana.net [85.15.0.44]
3 42 ms 60 ms 59 ms 85-15-0-43.rasana.net [85.15.0.43]
4 63 ms 59 ms 58 ms 85-15-0-227.rasana.net [85.15.0.227]
5 61 ms 62 ms 43 ms 82.99.199.61.parsonline.net [82.99.199.61]
6 65 ms 62 ms 61 ms 10.234.48.129
7 262 ms 44 ms 41 ms 10.234.222.1
8 65 ms 45 ms 65 ms 10.234.121.184
9 59 ms 61 ms 67 ms 10.199.101.86
10 * * * Request timed out.
11 63 ms 64 ms 65 ms 91.98.96.3.pol.ir [91.98.96.3]

Trace complete.[/QUOTE]

در نهایت شما می بایستی اگر به ICMP نیاز دارید آن را برای یک آی پی خاص Permit کنید . زیرا کل trace بر مبنای ICMP هستش .

با تشکر
2013-01-01, 09:09 AM
fashionboy

ممنون از بابت وقتی که گذاشتی
خود ICMP انواع مختلفی داره :
[LEFT][URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-types"]ICMP Type Numbers[/URL]

[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes"]Code Fields[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-0"]Type 0 — Echo Reply[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-1"]Type 1 — Unassigned[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-2"]Type 2 — Unassigned[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-3"]Type 3 — Destination Unreachable[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-4"]Type 4 — Source Quench (Deprecated)[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-5"]Type 5 — Redirect[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-6"]Type 6 — Alternate Host Address[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-7"]Type 7 — Unassigned[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-8"]Type 8 — Echo[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-9"]Type 9 — Router Advertisement[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-10"]Type 10 — Router Selection[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-11"]Type 11 — Time Exceeded[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-12"]Type 12 — Parameter Problem[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-13"]Type 13 — Timestamp[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-14"]Type 14 — Timestamp Reply[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-15"]Type 15 — Information Request[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-16"]Type 16 — Information Reply[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-17"]Type 17 — Address Mask Request[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-18"]Type 18 — Address Mask Reply[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-19"]Type 19 — Reserved (for Security)[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-20-29"]Types 20-29 — Reserved (for Robustness Experiment)[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-30"]Type 30 — Traceroute[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-31"]Type 31 — Datagram Conversion Error[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-32"]Type 32 — Mobile Host Redirect[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-33"]Type 33 — IPv6 Where-Are-You[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-34"]Type 34 — IPv6 I-Am-Here[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-35"]Type 35 — Mobile Registration Request[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-36"]Type 36 — Mobile Registration Reply[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-39"]Type 39 — SKIP[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-40"]Type 40 — Photuris[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-41"]Type 41 — ICMP messages utilized by experimental mobility protocols such as Seamoby[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-42-252"]Types 42-252 — Unassigned[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-253"]Type 253 — RFC3692-style Experiment 1[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-254"]Type 254 — RFC3692-style Experiment 2[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-ext-classes-rr"]ICMP Extension Object Classes and Class Sub-types[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-ext-class-1"]Sub-types — Class 1 — MPLS Label Stack Class[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-ext-class-2"]Sub-types — Class 2 — Interface Information Object[/URL]
[URL="http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-ext-class-2-if-roles"]Sub-types — Class 2 — Interface Information Object — Interface Roles[/URL][/LEFT]
که میدونم با کانفیگ خاصی میشه فقط جلوی trace رو گرفت و بقیش باز باشه
من تفاوتای بین tracert و traceroute رو هم میدونم که دومی از udp برای ارسال پکتاش استفاده میکنه.
کسی میتونه راهنمایی کنه؟