2610 (config) # access-list 2 permit 192.168.0.15 0.0.63
2610 (config) # class-map acgroup2
2610 (config-cmap) # match access-group 2
2610 (config-cmap) # exit
2610 (config) # policy-map police
2610 (config-pmap) # class acgroup2
2610 (config-pmap-c) # police 20000 2000 4000 conform-action transmit exceed-action drop
2610 (config-pmap-c) # exit
2610 (config-pmap) # exit
2610 (config) # interface ethernet 0/0
2610 (config-if) # service-policy input police
Shock Wave route Configuration:
Access-list 115 deny udp any eq 69
Access-list 115 deny tcp any eq 135
Access-list 115 deny udp any eq 135
Access-list 115 deny udp any eq 137
Access-list 115 deny udp any eq 138
Access-list 115 deny tcp any eq 139
Access-list 115 deny udp any eq 139
Access-list 115 deny tcp any eq 445
Access-list 115 deny tcp any eq 593
Access-list 115 deny tcp any eq 4444
Access-list 115 permit ip any
Interface <interface>
Ip access-group 115 in
Ip address access-group 115 out
In addition, the command to block invalid addresses is
Router (config) # interface <interface>
Router (if-config) # no ip unreachables
If this command cannot be disabled, refer to the following command
Elab (config) # ip icmp rate-limit unreachable <millisecond
Article entry: csh responsible editor: csh