网络异常IP自动截断设计与实现

DESIGN AND REALIZATION OF BLOCKING ABNORMAL IP IN NETWORK AUTOMATICALLY

介绍了基于Expect语言对网络异常IP自动截断设计与实现,把sFlow流量监控技术结合起来,利用sFlow流量分析发现网络异常的IP地址,使用Expect语言模拟仿真Telnet的方式,传送ACL控制命令至网络异常IP连接相应的网络设备,从而实现对网络异常IP进行自动截断处理的目的.网络异常IP自动截断设计与实现增强了网络对异常行为的控制,提高了网络正常运行的稳定性,减少了网络管理的工作量.

This article introduces the designs and realizations to block the abnormal IP in network automatically base on Expect language, By combining sFlow monitor technology,the sFlow network analysis is used to find the network abnormal IP address, and the Expect language is used to simulate the artificial Telnet way, to convey ACL, to control the order and connect corresponding network equipment to the network abnormal IP. After the above procedures, the network abnormal IP has blocked and the abnormally behavior - control of network is strengthened automatically. Therefore the stability and the management of the network are improved.