How can I set a vro to prevent the spread of LAN viruses?

In a LAN like an Internet cafe, the most feared is virus infection and transmission. The Internet cafe router virus is often encountered by network administrators. To address this annoyance, anti-virus settings on the internet cafe routers have become a hot topic in Internet cafes. The virus on a client may spread to the entire Internet cafe client.

Can an internet cafe router, as a key device in the network, block virus infection?

The answer is yes. See the following description:

First, create an access list at the egress and ingress of the router to control access to viruses. These access control lists are based on ports (such as 135, 136, 445, and 4444. Generally, administrators can view the number of data packets to adjust their order and put the number of packets to the front to increase the speed.

Router (Config) # Access-list110denytcpanyanyeq135

Router (Config) # Access-list110denyudpanyanyeq135

Router (Config) # Access-list110denytcpanyanyeq136

Router (Config) # Access-list110denyudpanyanyeq136

Router (Config) # Access-list110denytcpanyanyeq445

Router (Config) # Access-list110denyudpanyanyeq445

Router (Config) # Access-list110denytcpanyanyeq4444

Router (Config) # Access-list110denyudpanyanyeq4444

Follow the preceding steps to apply the list to the corresponding port.

Another method is to optimize the vro. The number of services opened by the vro must be as small as possible. You only need to enable the required services and disable unnecessary services. This not only saves memory, but also improves security.

Internet cafe router settings prevent virus transmission and infection, not only to understand the virus characteristics, but also to know how to correctly set.