通过流量限制防DDOS udp,ICMP攻击防火墙配置

流量攻击限制策略
ip access-list extended name-udp-limit200m
permit udp any 10.191.176.128 0.0.0.31
permit icmp any 10.191.176.128 0.0.0.31

class-map match-all name-udp-limit200m
match access-group name name-udp-limit200m

policy-map name-udp-limit200m
class name-udp-limit200m
police 200000000 bps 50000000 byte conform-action transmit exceed-

action drop

interface Vlan125
ip address 10.135.85.197 255.255.255.252
service-policy output name-udp-limit200m

interface GigabitEthernet6/2
description aaa
switchport access vlan 125
switchport mode access

[@more@]

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/778728/viewspace-889102/，如需转载，请注明出处，否则将追究法律责任。

转载于:http://blog.itpub.net/778728/viewspace-889102/