基于思科路由器的IPS实现

随着网络入侵事件的不断增加和黑客攻击水平的不断提高，传统的防火墙或入侵检测系统（IDS）显得力不从心，这就需要能够检测入侵行为并做出保护的系统来实现网络安全。近年来兴起的入侵防御系统（IPS）就能够实现这样的功能，它根据网络攻击的特征行为定义出相应的特征库，当检测到攻击行为时，便采取定义好的动作来保护网络的安全。低版本的思科路由器不具备IPS功能，高版本的思科路由器IOS中增加了这一功能。文中通过配置思科路由器实现入侵保护，维护网络安全。

Implementation of IPS Based on Cisco Router

With the increasing of network intrusion events and hacker＇s increasing attacks levels, traditional firewalls or intrusion detection system （IDS） becomes powerless, which will need to be able to detect intrusion behavior and make the protection system to realize network security. In recent years, the rise of intrusion prevention system （ IPS ） can realize such function. It defines the corresponding feature library according to the network attack behavior. When detecting the attack behavior, it will take defined action to protect network security. Low version of router does not have IPS, version of Cisco router add IOS to add this function. In this paper, we apply the configuration of Cisco routers to realize intrusion protection and maintenance of network security.