一、在NE40和NE80上配置如下
1、rule-map
rule-map intervlan vir-1 tcp any any eq 4444
rule-map intervlan vir-2 udp any any eq 69
rule-map intervlan vir-3 tcp any any eq 135
rule-map intervlan vir-4 udp any any eq 135
rule-map intervlan vir-5 tcp any any eq 139
rule-map intervlan vir-6 udp any any eq 139
rule-map intervlan vir-7 tcp any any eq 445
rule-map intervlan vir-8 udp any any eq 445
rule-map intervlan vir-9 tcp any any eq 593
rule-map intervlan vir-10 udp any any eq 593
rule-map intervlan vir-12 udp any any eq 1434
rule-map intervlan vir-13 tcp any any eq 5554
rule-map intervlan vir-14 tcp any any eq 9995
rule-map intervlan vir-15 tcp any any eq 9996
rule-map intervlan vir-normal ip any any
2、编写eacl
eacl anti-vir vir-1 deny
eacl anti-vir vir-2 deny
eacl anti-vir vir-3 deny
eacl anti-vir vir-4 deny
eacl anti-vir vir-5 deny
eacl anti-vir vir-6 deny
eacl anti-vir vir-7 deny
eacl anti-vir vir-8 deny
eacl anti-vir vir-9 deny
eacl anti-vir vir-10 deny
eacl anti-vir vir-11 deny
eacl anti-vir vir-12 deny
eacl anti-vir vir-13 deny
eacl anti-vir vir-14 deny
eacl anti-vir vir-15 deny
eacl anti-vir vir-normal permit
更多内容请看PCdog.com--Cisco IOS技术手册 Cisco交换机 Cisco路由器配置手册专题
