流量攻击限制策略
ip access-list extended name-udp-limit200m
permit udp any 10.191.176.128 0.0.0.31
permit icmp any 10.191.176.128 0.0.0.31
class-map match-all name-udp-limit200m
match access-group name name-udp-limit200m
policy-map name-udp-limit200m
class name-udp-limit200m
police 200000000 bps 50000000 byte conform-action transmit exceed-
action drop
interface Vlan125
ip address 10.135.85.197 255.255.255.252
service-policy output name-udp-limit200m
interface GigabitEthernet6/2
description aaa
switchport access vlan 125
switchport mode access
来自 “ ITPUB博客 ” ,链接:http://blog.itpub.net/778728/viewspace-889102/,如需转载,请注明出处,否则将追究法律责任。
转载于:http://blog.itpub.net/778728/viewspace-889102/