接上篇文章 RT1配置新增 acl basic 2000 rule deny source 192.168.0.2 0.0.0.0 quit interface g0/0 packet-filter 2000 outbound ---