1.配置举例,限制测试环境50段(10.1.50.0/24)与正式网络(10.1.40.0/24)互访。测试环境和正式环境网关均在同一交换机上。  

acl number 3002 name limitv50_other
 rule 10 permit ip source 10.1.50.0 0.0.0.255 destination 10.1.40.200 0
 rule 21 deny ip source 10.1.50.0 0.0.0.255 destination 10.1.40.0 0.0.0.255
 rule 100 permit ip

acl number 3003 name limitother_v50
 rule 10 permit ip source 10.1.40.200 0 destination 10.1.50.0 0.0.0.255
 rule 21 deny ip source 10.1.40.0 0.0.0.255 destination 10.1.50.0 0.0.0.255
 rule 100 permit ip

interface Vlan-interface50
 ip address 10.1.50.1 255.255.255.0
 packet-filter 3002 inbound
 packet-filter 3003 outbound

 

posted on 2024-02-20 10:07  星痕1216  阅读(173)  评论(0编辑  收藏  举报