交换机等保 禁用病毒端口配置

H3C 接入交换机(针对 H3C s5120-EI 系列)
通过 telnet（需要设备用户名和密码）或 Console 线登录：
<H3C> //进入用户视图界面
<H3C>system //进入系统视图界面
[H3C]

[H3C-acl-3999] rule deny udp destination-port eq 137 //创建规则拒绝 tcp 137 端口
[H3C-acl-3999] rule deny udp destination-port eq 138 //创建规则拒绝 tcp 138 端口
[H3C-acl-3999] rule deny udp destination-port eq 139 //创建规则拒绝 tcp 139 端口
[H3C-acl-3999] rule permit ip //创建规则允许其他通行
[H3C-acl-3999] quit //输入 quit 回车键退出
[H3C]

The current configuration will be written to the device. Are you sure? [Y/N]:Y
//输入 Y 回车键
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
Validating file. Please wait...
Saved the current configuration to mainboard device successfull