Router(config)# interface
Router(if-config)# no ip unreachables
ICMP unreachable 的补充
如果某些情况,如IP 隧道(tunnel)必须使用ICMP unreachable 命令,则推荐使用
Router(config)# ip icmp rate-limit unreachable
6500 上防御
set security acl ip WORM deny udp any eq 1434 any
set security acl ip WORM deny udp any any eq 1434
set security acl ip WORM permit any
commit security acl WORM
set security acl map WORM
查看
show security acl info all
CatOS SUPII 和 MLS
CatOS SUPII 和 MLS
源码:
switch> (enable) sh mls statistics entry ip
Last Used
Destination IP Source IP Prot DstPrt SrcPrt Stat-Pkts Stat-Bytes