ip access group in
ip access-list extended vlan101
A=192.168.1.246
B=192.168.1.249
null(默认pass all)
A ping pass
deny ip any host 192.168.101.236
A ping fail
deny ip any host 192.168.101.236
permit ip host 192.168.1.246 host 192.168.101.236
A ping fail
permit ip host 192.168.1.246 host 192.168.101.236
deny ip any host 192.168.101.236
A ping fail
permit ip host 192.168.1.246 host 192.168.101.236
deny ip any host 192.168.101.236
permit ip any any
A/B ping pass
permit
deny any any