acl 允许同网段访问_华为模拟器ACL配置实例（允许两网段访问服务器，其它都拒绝）...

dis cur

#

sysname huiju2

#

vlan batch 11 21 1721 1921

#

cluster enable

ntdp enable

ndp enable

#

drop illegal-mac alarm

#

diffserv domain default

#

acl number 3001

rule 5 permit ip source 192.168.1.0

0.0.0.255 destination 172.0.1.2 0

rule 10 permit ip source 192.168.0.0

0.0.0.255 destination 172.0.1.2 0

acl number 3002

rule 10 deny ip source 192.0.0.0

0.255.255.255 destination 172.0.1.2 0

rule 15 deny ip source 172.0.0.0

0.255.255.255 destination 172.0.1.2 0

#

traffic classifier 3001_permit operator and

if-match acl 3001

traffic classifier 3002_deny operator and

if-match acl 3002

#

traffic behavior vlan_deny

deny

traffic behavior vlan_permit

permit

#</