华为路由器创建acl
1.创建acl
acl name test advance (先要返回到根目录,删除undo acl name test)
2.创建规则
创建拒绝规则:
rule deny ip source 1.1.1.0 0.0.0.255 destination 3.3.3.0 0.0.0.255
创建放行规则:
rule permit ip source any destination any
3. 把这个规则应用到G0/0/0端口
interface GigabitEthernet 0/0/0
traffic-filter inbound acl name test (进入端口,删除命令undo traffic-filter inbound)
4.save