创建VLAN接口并进入VLAN接口视图
interface Vlan-interface10
ip address 192.168.10.1 255.255.252.0
packet-filter 3000 inbound
创建acl规则
acl number 3000
rule 0 permit ip source 192.168.10.0 0.0.0.255 destination 192.168.10.0 0.0.0.255
rule 5 deny ip source 192.168.10.0 0.0.0.255 destination 192.168.0.0 0.0.255.255
rule 10 permit ip