MSR2600+S5500+3100

什么设备的？

1，packet-filter方式过滤

1.       定义一个acl

[H3C]acl number  3000

[H3C-acl-adv-3000]rule  deny tcp destination-port eq  445

[H3C-acl-adv-3000]rule  deny udp destination-port eq  445

这个规则留在最后

[H3C-acl-adv-3000]rule  permit ip

2.       在上行的入接口下进行调用：(或者VLAN虚接口都可以调用)

[S5130]int g1/0/10

[S5130-GigabitEthernet1/0/10]packet-filter  3000 inbound

2、qos policy方式过滤：

#

sys

acl number 3500

rule 0 deny tcp destination-port eq 445

rule 5 deny tcp source-port eq 445

rule 10 deny udp destination-port eq 445

rule 15 deny udp source-port eq 445

#

acl number 3510

rule 0 permit ip

#

traffic classifier port445

 if-match acl 3500

#

traffic classifier allflow

 if-match acl 3510

#

traffic behavior deny

filter deny

#

traffic behavior permit

filter permit

#

qos policy onlydenyport445

classifier port445 behavior deny

classifier allflow  behavior permit

（1）vlan-int虚接口调用

#

interface Vlan-interface10 

 ip address 192.168.10.1 255.255.255.0

qos apply policy onlydenyport445 inbound

 qos apply policy onlydenyport445 outbound