例题中市场部不允许访问外网
[ar2]acl 2000
[ar2-acl-basic-2000]dis th
[V200R003C00]
#
acl number 2000
rule 0 deny source 192.168.10.0 0.0.0.255
#
return
[ar2-acl-basic-2000]rul
[ar2-acl-basic-2000]rule per
[ar2-acl-basic-2000]rule permit
[ar2-acl-basic-2000]dis th
//acl number 2000
//rule 0 deny source 192.168.10.0 0.0.0.255
//rule 5 permit
访问外网时
设置静态路由
ip route-static 0.0.0.0 0 111.111.111.50
下放缺省路由
ospf 1
default-route-advertise always
area 0.0.0.0