先配置跨网段互通
LSW1
inter g 0/0/1
por link -typ acc
port de vlan 10
inte g 0/0/2
port link -type acc
port de vlan 20
inte g 0/0/4
port link -ty acc
port de vlan 30
inter g 0/0/3
por link-typ trunk
por trun all vlan all
LSW2
inter g 0/0/1
port link-ty trunk
port trunk all vlan all
inter vlanif 10
ip add 192.168.1.254 24
inter vlanif 20
ip add 192.168.2.254 24
inter vlanif 30
ip add 192.168.3.254 24
创建ACL设置规则
LSW2
acl name xuexi
rule deny ip sou 192.168.1.0 0.0.0.255 des 192.168.3.0 0.0.0.255
rule per ip sou any des any
qu
inter g 0/0/1
tra inb acl name xuexi