h3c交换机限制端口访问_h3c交换机设置限制公司员工访问外网

h3c交换机设置限制公司员工访问外网

使用的环境，把不能访问80端口跟qq服务器的用户划入vlan 50。

acl number 3001设置访问控制列表

rule 100 deny tcp destination-port eq www  设置规则关掉80端口

rule 110 deny ip source 192.168.50.0 0.0.0.255 destination 112.90.0.0 0.0.255.255从规则110-210开始是限制特定网段访问qq服务器.

rule 120 deny ip source 192.168.50.0 0.0.0.255 destination 219.133.0.0 0.0.255.255

rule 130 deny ip source 192.168.50.0 0.0.0.255 destination 58.60.0.0 0.0.255.255

rule 140 deny ip source 192.168.50.0 0.0.0.255 destination 119.147.0.0 0.0.255.255

rule 150 deny ip source 192.168.50.0 0.0.0.255 destination 112.95.0.0 0.0.255.255

rule 160 deny ip source 192.168.50.0 0.0.0.255 destination 222.202.0.0 0.0.255.255

rule 170 deny ip source 192.168.50.0 0.0.0.255 destination 113.108.0.0 0.0.255.255

rule 180 deny ip source 192.168.50.0 0.0.0.255 destination 202.104.0.0 0.0.255.255

rule 190 deny ip source 192.168.50.0 0.0.0.255 destination 58.251.0.0 0.0.255.255

rule 200 deny ip source 192.168.50.0 0.0.0.255 destination 121.90.0.0 0.0.255.255

rule 210 deny ip source 192.168.50.0 0.0.0.255 destination 183.60.0.0 0.0.255.255

rule 220 deny udp destination-port eq 8000 规则220限制用户访问UDP端口8000

interface Vlan-interface50              进入vlan50端口

ip address 192.168.50.1 255.255.255.0

packet-filter 3001 inbound             应用访问控制列表3001