H3C三层交换机配置ACL:

2025-03-09 22:41:07
推荐回答(1个)
回答1:

ACL可以这样写:
acl number 3000
rule 5 permit ip source 192.168.33.0 0.0.0.255 destination 192.168.142.106 0
rule 10 deny ip source 192.168.33.0 0.0.0.255 destination 192.168.142.0 0.0.0.255
rule 15 permit ip
然后在vlan下启用ACL:
interface vlan 33(192.168.33.0/24所在的vlan接口,在vlan 接口下,启用上面定义的规则)
packet-filter inbound ip-group 3000