透過流量限制防DDOS udp,ICMP攻擊防火牆配置

流量攻擊限制策略
ip access-list extended name-udp-limit200m
permit udp any 10.191.176.128 0.0.0.31
permit icmp any 10.191.176.128 0.0.0.31

class-map match-all name-udp-limit200m
match access-group name name-udp-limit200m

policy-map name-udp-limit200m
class name-udp-limit200m
police 200000000 bps 50000000 byte conform-action transmit exceed-

action drop

interface Vlan125
ip address 10.135.85.197 255.255.255.252
service-policy output name-udp-limit200m

interface GigabitEthernet6/2
description aaa
switchport access vlan 125
switchport mode access

[@more@]