ACL可以这样写:
acl number 3000
rule 5 permit ip source 192.168.33.0 0.0.0.255 destination 192.168.142.106 0
rule 10 deny ip source 192.168.33.0 0.0.0.255 destination 192.168.142.0 0.0.0.255
rule 15 permit ip
然后在vlan下启用ACL:
interface vlan 33(192.168.33.0/24所在的vlan接口,在vlan 接口下,启用上面定义的规则)
packet-filter inbound ip-group 3000