配置：  
 #
 time-range zdnnb 08:30 to 12:00 working-day
 time-range zdnnb 14:00 to 18:00 working-day 
 #
 acl number 3001
 rule 0 deny ip time-range zdnnb
 rule 1 permit ip destination 221.237.165.0 0.0.0.255
 rule 2 permit ip destination 202.103.224.68 0
 rule 3 permit ip destination 219.133.0.25 0
 rule 4 permit ip destination 219.133.0.61 0
 rule 5 permit ip destination 211.100.23.226 0
 rule 6 permit ip destination 202.153.119.231 0
 rule 7 permit ip destination 219.133.0.36 0
 rule 8 permit ip destination 219.133.0.13 0
 rule 9 permit ip destination 211.94.161.2 0
 rule 10 permit ip destination 221.10.45.196 0
 rule 11 permit ip destination 61.129.48.158 0
 rule 12 permit ip destination 202.98.134.71 0
 rule 13 permit ip destination 202.98.96.68 0 
#  
 interface Vlan-interface1
     ip address 192.168.3.254 255.255.255.0
  #
 packet-filter ip-group 3001 rule 0
 packet-filter ip-group 3001 rule 1
 packet-filter ip-group 3001 rule 2
 packet-filter ip-group 3001 rule 3
 packet-filter ip-group 3001 rule 4
 packet-filter ip-group 3001 rule 5
 packet-filter ip-group 3001 rule 6
 packet-filter ip-group 3001 rule 7      
 packet-filter ip-group 3001 rule 8
 packet-filter ip-group 3001 rule 9
 packet-filter ip-group 3001 rule 10
 packet-filter ip-group 3001 rule 11
 packet-filter ip-group 3001 rule 12
 packet-filter ip-group 3001 rule 13