ACL可以这样写： acl number 3002 rule 5 permit ip source 192.168.33.0 0.0.0.255 destination 192.168.142.106 0 rule 10 deny ip source 192.168.33.0 0.0.0.255 destination 192.168.142.0 0.0.0.255 rule 15 permit ip
然后在vlan下启用ACL： interface vlan 33（在vlan 接口下，启用上面定义的规则） packet-filter 3002 inbound
