Cisco 2621 端口限速配置實例
2610(config)# access-list 2 permit 192.168.0.15 0.0.0.63
2610(config)# class-map acgroup2
2610(config-cmap)# match access-group 2
2610(config-cmap)# exit
2610(config)# policy-map police
2610(config-pmap)# class acgroup2
2610(config-pmap-c)# police 20000 2000 4000 conform-action transmit exceed-action drop
2610(config-pmap-c)# exit
2610(config-pmap)# exit
2610(config)# interface ethernet 0/0
2610(config-if)# service-policy input police
沖擊波路由配置:
access-list 115 deny udp any any eq 69
access-list 115 deny tcp any any eq 135
access-list 115 deny udp any any eq 135
access-list 115 deny udp any any eq 137
access-list 115 deny udp any any eq 138
access-list 115 deny tcp any any eq 139
access-list 115 deny udp any any eq 139
access-list 115 deny tcp any any eq 445
access-list 115 deny tcp any any eq 593
access-list 115 deny tcp any any eq 4444
access-list 115 permit ip any any
interface <interface>
ip access-group 115 in
ip access-group 115 out
另外，阻止非法地址的命令是
Router(config)# interface <interface>
Router(if-config)# no ip unreachables
如果此命令不能禁止，可參考下面這個命令
Elab(config)# ip icmp rate-limit unreachable <millisecond
相關(guān)文章
Windows Xp修復(fù)控制臺詳細用法...2007-09-09
玩轉(zhuǎn)網(wǎng)絡(luò)MAC地址...2007-09-09
catalyst 5000系列交換機的端口分析...2007-09-09
菜鳥裝機教程XP測試版正文分析錯誤...2007-09-09
Linux轉(zhuǎn)移開辟第二戰(zhàn)場 WINDOWS風(fēng)光不再
Linux轉(zhuǎn)移開辟第二戰(zhàn)場 WINDOWS風(fēng)光不再...2007-09-09
中、日、歐IPv6應(yīng)用新進展二...2007-09-09
路由器網(wǎng)絡(luò)接口解析大全二...2007-09-09
配置ipsec...2007-09-09
Cisco設(shè)備IOS的恢復(fù)方法...2007-09-09
關(guān)于待機，休眠的經(jīng)典問答正文分析錯誤
關(guān)于待機，休眠的經(jīng)典問答正文分析錯誤...2007-09-09