ip http prot 8081
access-list 101 permit udp host 192.168.0.10 any eq snmp
no ntp
no cdp run
阻止非信任网络的ICMP重定向
access-list 101 deny icmp any any redirect
阻止组播
access-list 101 deny ip 224.0.0.0 7.255.255.255 any
阻止ping
access-list 101 deny icmp any any echo
阻止Telent
access-list 101 deny tcp any host 200.1.1.1 eq 23