ACL的使用

<Huawei>U T M
Info: Current terminal monitor is off.
<Huawei>SY
[Huawei]SY R1
[Huawei]SY R1
[R1]DHCP EN    
[R1]DHCP enable 
Info: The operation may take a few seconds. Please wait for a moment.done.    
[R1]IP pool VLAN100
Info: It's successful to create an IP address pool.    
[R1-ip-pool-VLAN100]network 192.168.1.0 mask  26    
[R1-ip-pool-VLAN100]dns-list 8.8.8.8    
[R1-ip-pool-VLAN100]gateway-list 192.168.1.62
[R1-ip-pool-VLAN100]Q
[R1]IP pool VLAN200    
[R1-ip-pool-VLAN200]network 192.168.1.64 mask 26    
[R1-ip-pool-VLAN200]dns-list 8.8.8.8
[R1-ip-pool-VLAN200]gateway-list 192.168.1.126
[R1-ip-pool-VLAN200]Q
[R1]INT G0/0/2.100    
[R1-GigabitEthernet0/0/2.100]dot1q  termination vid 100    
[R1-GigabitEthernet0/0/2.100]ARP broadcast enable 
[R1-GigabitEthernet0/0/2.100]IP ADD 192.168.1.62 26    
[R1-GigabitEthernet0/0/2.100]DHCP select global 
[R1-GigabitEthernet0/0/2.100]Q
[R1]INT G0/0/2.200    
[R1-GigabitEthernet0/0/2.200]dot1q termination vid 200    
[R1-GigabitEthernet0/0/2.200]ARP broadcast enable 
[R1-GigabitEthernet0/0/2.200]IP ADD 192.168.1.126 26    
[R1-GigabitEthernet0/0/2.200]DHCP select global 
[R1-GigabitEthernet0/0/2.200]Q
[R1]INT G0/0/1
[R1-GigabitEthernet0/0/1]IP ADD 10.1.1.1 24
[R1-GigabitEthernet0/0/1]Q
[R1]ip route-static 0.0.0.0 0.0.0.0 10.1.1.2
[R1]ACL 3000    
[R1-acl-adv-3000]rule deny IP source 192.168.1.0 0.0.0.63 destination 100.1.1.1 0
[R1-acl-adv-3000]Q
[R1]INT G0/0/1    
[R1-GigabitEthernet0/0/1]traffic-filter outbound acl 3000
[R1-GigabitEthernet0/0/1]

<Huawei>U T M
Info: Current terminal monitor is off.
<Huawei>SY
[Huawei]SY R2
[R2]INT G0/0/0
[R2-GigabitEthernet0/0/0]IP ADD 10.1.1.2 24
[R2]IP route-static 192.168.1.0 24 10.1.1.1
[R2]INT G0/0/1
[R2-GigabitEthernet0/0/1]IP ADD 23.1.1.1 24
[R2]IP route-static 0.0.0.0 0.0.0.0 23.1.1.2
[R2]ACL 2000    
[R2-acl-basic-2000]rule  permit source 192.168.1.0 0.0.0.255
[R2-acl-basic-2000]Q
[R2]INT G0/0/1    
[R2-GigabitEthernet0/0/1]NAT outbound 2000
[R2-GigabitEthernet0/0/1]Q
[R2]

<Huawei>U T M
Info: Current terminal monitor is off.
<Huawei>SY
[Huawei]SY R3
[R3]INT G0/0/0
[R3-GigabitEthernet0/0/0]IP ADD 23.1.1.2 24
[R3-GigabitEthernet0/0/0]INT G0/0/1
[R3-GigabitEthernet0/0/1]IP ADD 100.1.1.254 24
 

[Huawei]vlan batch 100 200
[LSW1]INT G0/0/2    
[LSW1-GigabitEthernet0/0/2]port link-type access     
[LSW1-GigabitEthernet0/0/2]port default vlan 100
[LSW1-GigabitEthernet0/0/2]INT G0/0/3    
[LSW1-GigabitEthernet0/0/3]port link-type access     
[LSW1-GigabitEthernet0/0/3]port default vlan 200
[LSW1-GigabitEthernet0/0/3]INT G0/0/10    
[LSW1-GigabitEthernet0/0/10]port link-type trunk 
[LSW1-GigabitEthernet0/0/10]port trunk allow-pass vlan all 
[LSW1-GigabitEthernet0/0/10]INT G0/0/1    
[LSW1-GigabitEthernet0/0/1]port link-type trunk     
[LSW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 200
[LSW1-GigabitEthernet0/0/1]Q

[Huawei]vlan batch 100 200
[Huawei]SY LSW2
[LSW2]INT G0/0/1        
[LSW2-GigabitEthernet0/0/1]port link-type access     
[LSW2-GigabitEthernet0/0/1]port default vlan 100
[LSW2-GigabitEthernet0/0/1]INT G0/0/2    
[LSW2-GigabitEthernet0/0/2]port link-type access     
[LSW2-GigabitEthernet0/0/2]port default vlan 200
[LSW2-GigabitEthernet0/0/2]INT G0/0/10    
[LSW2-GigabitEthernet0/0/10]port link-type trunk     
[LSW2-GigabitEthernet0/0/10]port trunk allow-pass vlan all 
[LSW2-GigabitEthernet0/0/10]Q