最佳答案
可以配置包过滤 实现。
# acl advanced 3333
rule 0 permit tcp source 1.1.1.1 0 destination-port eq 445
rule 5 deny tcp destination-port eq 445
#
进入接口下
packet-filter 3333 inbound
(0)
acl advanced 3000
rule 10 deny tcp source-port eq 445 counting
rule 13 deny udp source-port eq netbios-ns counting
rule 14 deny tcp source-port eq 137 counting
rule 15 deny udp source-port eq 445 counting
rule 20 deny tcp destination-port eq 445 counting
rule 23 deny udp destination-port eq netbios-ns counting
rule 24 deny tcp destination-port eq 137 counting
rule 25 deny udp destination-port eq 445 counting
rule 30 deny tcp source-port eq 139 counting
rule 33 deny udp source-port eq 136 counting
rule 34 deny tcp source-port eq 136 counting
rule 35 deny udp source-port eq netbios-ssn counting
rule 40 deny tcp destination-port eq 135 counting
rule 43 deny udp destination-port eq 136 counting
rule 44 deny tcp destination-port eq 136 counting
rule 45 deny udp destination-port eq 135 counting
rule 100 permit ip
quit
inter g 1/0/1
packet-filter 3000 inbound
好像全局没法调用,在物理接口上面调用才生效
(0)
暂无评论
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论