限制服务器访问IP

使用高级ACL以及在接口启用IP地址与MAC地址绑定

以华为千兆交换机为例，步骤如下

1、设置高级ACL

acl  number 3000
rule 9 permit ip source 20.20.50.35 0 destination 10.10.30.4 0
rule 10 deny ip source 20.20.50.35 0 destination 10.10.0.0 0.0.255.255
rule 12 deny ip source 20.20.50.35 0 destination 20.20.0.0 0.0.255.255
rule 30 deny ip source 20.20.50.35 0 destination 10.20.0.0 0.0.1.255
rule 40 deny ip source 20.20.50.35 0 destination 10.30.0.0 0.0.1.255

2、绑定MAC地址与IP地址

在这之前需要先确认需要绑定的MAC地址与IP

user-bind static ip-address 20.20.50.35 mac-address c81f-66f3-a437 interface GigabitEthernet0/0/32 vlan 1

3、在接口下应用ACL与MAC绑IP

interface GigabitEthernet0/0/32

traffic-filter inbound acl 3000
traffic-filter outbound acl 3000
ip source check user-bind enable