{"id":19760,"date":"2024-07-22T15:05:32","date_gmt":"2024-07-22T08:05:32","guid":{"rendered":"https:\/\/thegioifirewall.com\/?p=19741"},"modified":"2025-03-24T07:27:23","modified_gmt":"2025-03-24T07:27:23","slug":"cach-chan-truy-cap-internet-dua-tren-dia-chi-mac-tren-thiet-bi-tuong-lua-sophos-xgs","status":"publish","type":"post","link":"https:\/\/vacif.com\/en\/cach-chan-truy-cap-internet-dua-tren-dia-chi-mac-tren-thiet-bi-tuong-lua-sophos-xgs\/","title":{"rendered":"C\u00c1CH CH\u1eb6N TRUY C\u1eacP INTERNET D\u1ef0A TR\u00caN \u0110\u1ecaA CH\u1ec8 MAC TR\u00caN THI\u1ebeT B\u1eca T\u01af\u1edcNG L\u1eecA SOPHOS XGS"},"content":{"rendered":"
\n
\"\"<\/figure>\n<\/div>\n\n\n
    \n
  1. Overview\u00a0<\/strong><\/li>\n<\/ol>\n\n\n\n

    + L\u1ecdc \u0111\u1ecba ch\u1ec9 MAC an to\u00e0n h\u01a1n l\u1ecdc \u0111\u1ecba ch\u1ec9 IP, v\u00ec \u0111\u1ecba ch\u1ec9 MAC hi\u1ebfm khi \u0111\u01b0\u1ee3c thay \u0111\u1ed5i. Trong m\u00f4i tr\u01b0\u1eddng c\u00f3 DHCP, \u0111\u1ecba ch\u1ec9 IP c\u1ee7a m\u00e1y ch\u1ee7 thay \u0111\u1ed5i linh ho\u1ea1t, do \u0111\u00f3, vi\u1ec7c l\u1ecdc \u0111\u1ecba ch\u1ec9 MAC \u0111\u00e1ng tin c\u1eady v\u00e0 kh\u1ea3 thi h\u01a1n \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh v\u00e0 l\u1ecdc ngu\u1ed3n v\u00e0 \u0111\u00edch c\u1ee7a l\u01b0u l\u01b0\u1ee3ng m\u1ea1ng.<\/p>\n\n\n\n

    + L\u1ecdc \u0111\u1ecba ch\u1ec9 MAC l\u00e0 bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt ph\u1ed5 bi\u1ebfn nh\u1ea5t \u0111\u1ec3 ng\u0103n ch\u1eb7n truy c\u1eadp m\u1ea1ng kh\u00f4ng mong mu\u1ed1n trong m\u00f4i tr\u01b0\u1eddng m\u1ea1ng kh\u00f4ng d\u00e2y. T\u01b0\u1eddng l\u1eeda \u0111\u01b0\u1ee3c c\u1ea5u h\u00ecnh \u0111\u1ec3 ch\u1ec9 ch\u1ea5p nh\u1eadn l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp t\u1eeb c\u00e1c \u0111\u1ecba ch\u1ec9 MAC c\u1ee5 th\u1ec3 v\u00e0 c\u00e1c thi\u1ebft b\u1ecb \u0111\u01b0\u1ee3c ph\u00e9p s\u1ebd nh\u1eadn \u0111\u1ecba ch\u1ec9 IP m\u1edbi th\u00f4ng qua DHCP. \u0110i\u1ec1u n\u00e0y c\u00f3 ngh\u0129a l\u00e0 c\u00e1c thi\u1ebft b\u1ecb v\u1eabn c\u00f3 th\u1ec3 giao ti\u1ebfp v\u1edbi m\u1ea1ng. M\u1ecdi n\u1ed7 l\u1ef1c li\u00ean l\u1ea1c b\u1eb1ng c\u00e1ch gi\u1ea3 m\u1ea1o \u0111\u1ecba ch\u1ec9 IP \u0111\u1ec1u b\u1ecb ch\u1eb7n do \u0111\u1ecba ch\u1ec9 MAC kh\u00f4ng kh\u1edbp v\u1edbi \u0111\u1ecba ch\u1ec9 MAC \u0111\u01b0\u1ee3c ph\u00e9p.<\/p>\n\n\n\n

      \n
    1. H\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh<\/strong><\/li>\n<\/ol>\n\n\n\n
        \n
      • \u1ede \u0111\u00e2y m\u00ecnh ch\u1ecdn port 5 LAN <\/strong>\u0111\u00e3 c\u1ea5p DHCP<\/strong> cho c\u00e1c m\u00e1y t\u00ednh v\u00e0 m\u00ecnh s\u1ebd ch\u1eb7n c\u00e1c m\u00e1y t\u00ednh c\u00f3 ip c\u1ee7a port 5 n\u00e0y.<\/li>\n<\/ul>\n\n\n
        \n
        \"\"<\/figure>\n<\/div>\n\n\n
          \n
        • Ti\u1ebfp theo m\u00ecnh chuy\u1ec3n qua m\u00e1y t\u00ednh \u0111\u00e3 c\u1ea5p dhcp t\u1eeb port 5 v\u00e0 xem \u0111\u1ecba ch\u1ec9 MAC v\u00e0 \u0111\u1ecba ch\u1ec9 dhcp c\u1ea5p xu\u1ed1ng. B\u1ea5m window + R \u0111\u1ec3 m\u1edf run >> g\u00f5 ncpa.cpl >> ch\u1ecdn k\u1ebft n\u1ed1i ethernet (v\u00ec m\u00ecnh \u0111\u00e3 k\u1ebft n\u1ed1i b\u1eb1ng d\u00e2y v\u1eadt l\u00fd n\u00ean c\u1ed5ng s\u1ebd hi\u1ec7n k\u1ebft n\u1ed1i)<\/strong><\/li>\n<\/ul>\n\n\n
          \n
          \"\"<\/figure>\n<\/div>\n\n
          \n
          \"\"<\/figure>\n<\/div>\n\n\n
            \n
          • Sau khi nh\u1ea5p v\u00e0o ethernet s\u1ebd hi\u1ec7n b\u1ea3ng n\u00e0y v\u00e0 ch\u00fang ta nh\u1ea5p v\u00e0o ph\u1ea7n detail\u00a0<\/strong><\/li>\n<\/ul>\n\n\n
            \n
            \"\"<\/figure>\n<\/div>\n\n\n
              \n
            • \u1ede \u0111\u00e2y ch\u00fang ta s\u1ebd \u0111\u1ec3 \u00fd Physical Address: 48-2A-E3-0F-EF-1F >> ipv4 Address: 50.0.0.13 <\/strong>(c\u1ea5p dhcp t\u1eeb port 5) >> default Gateway: 50.0.0.1<\/strong> (tr\u1ecf v\u1ec1 t\u1eeb port 5)<\/li>\n<\/ul>\n\n\n
              \n
              \"\"<\/figure>\n<\/div>\n\n\n
                \n
              • \u00a0V\u00e0o firewall sophos, v\u00e0o ph\u1ea7n Host and services >> MAC host >> add <\/strong>(\u0111\u1ec3 t\u1ea1o service MAC)<\/li>\n<\/ul>\n\n\n
                \n
                \"\"<\/figure>\n<\/div>\n\n\n
                  \n
                • Name* MAC_host >> Type* MAC address >> MAC address*<\/strong> \u0111\u1ecba ch\u1ec9 MAC b\u1ea1n t\u00ecm \u1edf b\u01b0\u1edbc 2, \u1edf \u0111\u00e2y m\u00ecnh c\u00f3 \u0111\u1ecba ch\u1ec9 MAC c\u1ee7a m\u00e1y m\u00ecnh l\u00e0 48:2A:E3:0F:EF:1E >> <\/strong>Nh\u1ea5n Save <\/strong>\u0111\u1ec3 th\u00eam \u0111\u1ecba ch\u1ec9 MAC v\u1eeba nh\u1eadp v\u00e0o danh s\u00e1ch.<\/li>\n<\/ul>\n\n\n
                  \n
                  \"\"<\/figure>\n<\/div>\n\n\n
                    \n
                  • Ti\u1ebfp theo v\u00e0o ph\u1ea7n Rules and policies >> Firewall rules >> Add firewall rule.<\/strong><\/li>\n<\/ul>\n\n\n
                    \n
                    \"\"<\/figure>\n<\/div>\n\n\n
                      \n
                    • Rule name* Block_MAC >> Rule group<\/strong> m\u00ecnh ch\u1ecdn None <\/strong>v\u00ec kh\u00f4ng c\u1ea7n ph\u1ea3i trong group >> Action ch\u1ecdn Drop<\/strong> (v\u00ec drop s\u1ebd gi\u00fap ta l\u1ecdc c\u00e1c g\u00f3i ph\u00f9 h\u1ee3p v\u1edbi quy t\u1eafc m\u00ecnh \u0111\u00e3 t\u1ea1o n\u00e0y sau \u0111\u00f3 s\u1ebd lo\u1ea1i b\u1ecf 1 c\u00e1ch \u00e2m th\u1ea7m) >> Tick firewall traffic<\/strong> (\u0111\u1ec3 ghi l\u1ea1i nh\u1eadt k\u00fd l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp).<\/li>\n<\/ul>\n\n\n
                      \n
                      \"\"<\/figure>\n<\/div>\n\n\n
                        \n
                      • Ti\u1ebfp theo \u0111\u1ebfn ph\u1ea7n Source. Source zones*<\/strong> ch\u1ecdn LAN <\/strong>v\u00e0 Destination zones* <\/strong>ch\u1ecdn WAN<\/strong> (m\u1ea1ng n\u1ed9i b\u1ed9 \u0111i ra ngo\u00e0i internet) >> Source networks and devices*<\/strong> ch\u1ecdn MAC_host <\/strong>(m\u00ecnh \u0111\u00e3 t\u1ea1o \u1edf ph\u1ea7n host and services, \u0111\u00e2y l\u00e0 \u0111\u1ecba ch\u1ec9 m\u00e1y t\u00ednh m\u00ecnh mu\u1ed1n ch\u1eb7n v\u00e0 n\u1eb1m trong n\u1ed9i b\u1ed9 LAN) >> Destination networks*<\/strong> ch\u1ecdn Any<\/strong> (m\u00ecnh mu\u1ed1n cho m\u1ea1ng n\u1ed9i b\u1ed9 c\u00f3 th\u1ec3 ra ngo\u00e0i b\u1ea5t k\u00ec m\u1ea1ng) >> Service* <\/strong>ch\u1ecdn Any (v\u00ec ch\u01b0a c\u00f3 d\u1ecbch v\u1ee5 n\u00e0o m\u00ecnh c\u1ea7n d\u00f9ng) >> <\/strong>sau \u0111\u00f3 b\u1ea5m Save <\/strong>\u0111\u1ec3 l\u01b0u c\u1ea5u h\u00ecnh\u00a0<\/li>\n<\/ul>\n\n\n
                        \n
                        \"\"<\/figure>\n<\/div>\n\n\n
                          \n
                        • C\u1ea5u h\u00ecnh th\u00e0nh c\u00f4ng s\u1ebd hi\u1ec7n<\/li>\n<\/ul>\n\n\n
                          \n
                          \"\"<\/figure>\n<\/div>\n\n\n
                            \n
                          • Ti\u1ebfp theo ra ngo\u00e0i v\u00e0 enable rule m\u00ecnh m\u1edbi t\u1ea1o >> khi enable xong ch\u00fang ta s\u1ebd ch\u1eb7n \u0111\u01b0\u1ee3c m\u00e1y c\u00f3 \u0111\u1ecba ch\u1ec9 MAC m\u00ecnh \u0111\u00e3 g\u1eafn truy c\u1eadp v\u00e0o trang thegioifirewall<\/li>\n<\/ul>\n\n\n
                            \n
                            \"\"<\/figure>\n<\/div>\n\n
                            \n
                            \"\"<\/figure>\n<\/div>\n\n\n
                              \n
                            • \u0110\u1ec3 truy c\u1eadp v\u00f4 internet l\u1ea1i \u0111\u01b0\u1ee3c th\u00ec enable l\u1ea1i rule<\/li>\n<\/ul>\n\n\n
                              \n
                              \"\"<\/figure>\n<\/div>\n\n\n
                                \n
                              • \u0110\u1ec3 ki\u1ec3m tra c\u00e1ch th\u1ee9c ho\u1ea1t \u0111\u1ed9ng c\u1ee7a rule, ch\u00fang ta v\u00e0o log viewer<\/strong><\/li>\n<\/ul>\n\n\n
                                \n
                                \"\"<\/figure>\n<\/div>\n\n\n
                                  \n
                                • Ch\u00fang ta c\u00f3 th\u1ec3 th\u1ea5y khi enable rule<\/strong> th\u00ec s\u1ebd denied <\/strong>internet v\u00e0 khi disable<\/strong> th\u00ec s\u1ebd allowed<\/strong> cho m\u00e1y ra internet.<\/li>\n<\/ul>\n\n\n
                                  \n
                                  \"\"<\/figure>\n<\/div>","protected":false},"excerpt":{"rendered":"

                                  + L\u1ecdc \u0111\u1ecba ch\u1ec9 MAC an to\u00e0n h\u01a1n l\u1ecdc \u0111\u1ecba ch\u1ec9 IP, v\u00ec \u0111\u1ecba ch\u1ec9 MAC hi\u1ebfm khi \u0111\u01b0\u1ee3c thay \u0111\u1ed5i. Trong m\u00f4i tr\u01b0\u1eddng c\u00f3 DHCP, \u0111\u1ecba ch\u1ec9 IP c\u1ee7a m\u00e1y ch\u1ee7 thay \u0111\u1ed5i linh ho\u1ea1t, do \u0111\u00f3, vi\u1ec7c l\u1ecdc \u0111\u1ecba ch\u1ec9 MAC \u0111\u00e1ng tin c\u1eady v\u00e0 kh\u1ea3 thi h\u01a1n \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh v\u00e0 l\u1ecdc […]<\/p>\n","protected":false},"author":8,"featured_media":20127,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"","ocean_second_sidebar":"","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"","ocean_custom_header_template":"","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"","ocean_menu_typo_font_family":"","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"on","ocean_gallery_id":[],"footnotes":""},"categories":[80],"tags":[450,451,452],"class_list":["post-19760","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-huong-dan-tai-lieu","tag-chan-truy-cap","tag-mac","tag-sophos-xgs","entry","has-media"],"_links":{"self":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/19760","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/comments?post=19760"}],"version-history":[{"count":1,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/19760\/revisions"}],"predecessor-version":[{"id":20097,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/19760\/revisions\/20097"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media\/20127"}],"wp:attachment":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media?parent=19760"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/categories?post=19760"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/tags?post=19760"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}