配置:
#
time-range zdnnb 08:30 to 12:00 working-day
time-range zdnnb 14:00 to 18:00 working-day
#
acl number 3001
rule 0 deny ip time-range zdnnb
rule 1 permit ip destination 221.237.165.0 0.0.0.255
rule 2 permit ip destination 202.103.224.68 0
rule 3 permit ip destination 219.133.0.25 0
rule 4 permit ip destination 219.133.0.61 0
rule 5 permit ip destination 211.100.23.226 0
rule 6 permit ip destination 202.153.119.231 0
rule 7 permit ip destination 219.133.0.36 0
rule 8 permit ip destination 219.133.0.13 0
rule 9 permit ip destination 211.94.161.2 0
rule 10 permit ip destination 221.10.45.196 0
rule 11 permit ip destination 61.129.48.158 0
rule 12 permit ip destination 202.98.134.71 0
rule 13 permit ip destination 202.98.96.68 0
#
interface Vlan-interface1
ip address 192.168.3.254 255.255.255.0
#
packet-filter ip-group 3001 rule 0
packet-filter ip-group 3001 rule 1
packet-filter ip-group 3001 rule 2
packet-filter ip-group 3001 rule 3
packet-filter ip-group 3001 rule 4
packet-filter ip-group 3001 rule 5
packet-filter ip-group 3001 rule 6
packet-filter ip-group 3001 rule 7
packet-filter ip-group 3001 rule 8
packet-filter ip-group 3001 rule 9
packet-filter ip-group 3001 rule 10
packet-filter ip-group 3001 rule 11
packet-filter ip-group 3001 rule 12
packet-filter ip-group 3001 rule 13
#
time-range zdnnb 08:30 to 12:00 working-day
time-range zdnnb 14:00 to 18:00 working-day
#
acl number 3001
rule 0 deny ip time-range zdnnb
rule 1 permit ip destination 221.237.165.0 0.0.0.255
rule 2 permit ip destination 202.103.224.68 0
rule 3 permit ip destination 219.133.0.25 0
rule 4 permit ip destination 219.133.0.61 0
rule 5 permit ip destination 211.100.23.226 0
rule 6 permit ip destination 202.153.119.231 0
rule 7 permit ip destination 219.133.0.36 0
rule 8 permit ip destination 219.133.0.13 0
rule 9 permit ip destination 211.94.161.2 0
rule 10 permit ip destination 221.10.45.196 0
rule 11 permit ip destination 61.129.48.158 0
rule 12 permit ip destination 202.98.134.71 0
rule 13 permit ip destination 202.98.96.68 0
#
interface Vlan-interface1
ip address 192.168.3.254 255.255.255.0
#
packet-filter ip-group 3001 rule 0
packet-filter ip-group 3001 rule 1
packet-filter ip-group 3001 rule 2
packet-filter ip-group 3001 rule 3
packet-filter ip-group 3001 rule 4
packet-filter ip-group 3001 rule 5
packet-filter ip-group 3001 rule 6
packet-filter ip-group 3001 rule 7
packet-filter ip-group 3001 rule 8
packet-filter ip-group 3001 rule 9
packet-filter ip-group 3001 rule 10
packet-filter ip-group 3001 rule 11
packet-filter ip-group 3001 rule 12
packet-filter ip-group 3001 rule 13
转载于:https://blog.51cto.com/39078/91424