1个回答
acl number 3000 rule 1 permit ip source 192.168.5.2 0 interface eth 1/0/1 packet-filter inbound ip-group 3000接下来要把交换机2端口绑定ip为192.168.5.3子网255.255.255.0在这个ACL 3000里面加一个deny any 试试,
因为客户需要，交换机只能做ip+端口的绑定，绑定的端口只准许规定的ip上网。命令如下：system-view首先要把交换机1端口绑定ip为192.168.5.2子网255.255.255