IOS安全的补充

ip http prot 8081

access-list 101 permit udp host 192.168.0.10 any eq snmp

no ntp

no cdp run

阻止非信任网络的ICMP重定向

access-list 101 deny icmp any any redirect

阻止组播

access-list 101 deny ip 224.0.0.0 7.255.255.255 any

阻止ping

access-list 101 deny icmp any any echo

阻止Telent

access-list 101 deny tcp any host 200.1.1.1 eq 23