华为访问列表traffic-policy案例

小程序：扫一扫查出行
【扫一扫了解最新限行尾号】
复制小程序

1,最近某公司有个需求

2，配置为重点--在于思路

需求：192.168.1 3 5 8网段不能访问2.x网段

仅允许财务2.x访问1.253打印机。

acl name permit_printer 3989

 rule 10 permit ip source 192.168.1.253 0.0.0.0 destination 192.168.2.0 0.0.0.255

acl name deny 3999

 rule 1 deny ip source 192.168.3.0 0.0.0.255 destination 192.168.2.0 0.0.0.255

 rule 2 deny ip source 192.168.1.0 0.0.0.255 destination 192.168.2.0 0.0.0.255

 rule 4 deny ip source 192.168.5.0 0.0.0.255 destination 192.168.2.0 0.0.0.255

 rule 5 deny ip source 192.168.8.0 0.0.0.255 destination 192.168.2.0 0.0.0.255

#

traffic classifier permit_printer operator or

 if-match acl permit_printer

traffic classifier deny operator or

 if-match acl deny

#

traffic behavior a_permit

 permit

traffic behavior a_deny

 deny

#

traffic policy P_deny match-order config

 classifier permit_printer behavior a_permit

 classifier deny behavior a_deny

#接口调用即可 

interface GigabitEthernet0/0/8

 port link-type access

 port default vlan 12

 traffic-policy P_deny outbound