拓扑:
S1:
添加vl10
添加vl20
all:所有
<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]un in e
Info: Information center is disabled.
[Huawei]int e0/0/2
[Huawei-Ethernet0/0/2]po
[Huawei-Ethernet0/0/2]port li
[Huawei-Ethernet0/0/2]port link-t
[Huawei-Ethernet0/0/2]port link-type a
[Huawei-Ethernet0/0/2]port link-type access
[Huawei-Ethernet0/0/2]po
[Huawei-Ethernet0/0/2]portde
[Huawei-Ethernet0/0/2]port de
[Huawei-Ethernet0/0/2]port default v
[Huawei-Ethernet0/0/2]port default vlan 10
[Huawei-Ethernet0/0/2]int e0/0/3
[Huawei-Ethernet0/0/3]port link-type access
[Huawei-Ethernet0/0/3]port default vlan 20
[Huawei-Ethernet0/0/3]int e0/0/4
[Huawei-Ethernet0/0/4]port link-type trunk
[Huawei-Ethernet0/0/4]port trunk allow-pass vlan all
[Huawei-Ethernet0/0/4]int e0/0/5
[Huawei-Ethernet0/0/5]port link-type access
[Huawei-Ethernet0/0/5]port default vlan 30
[Huawei-Ethernet0/0/5]tr
[Huawei-Ethernet0/0/5]traffic-filterou
[Huawei-Ethernet0/0/5]traffic-filter ou
[Huawei-Ethernet0/0/5]traffic-filter outbound acl 2000
R1:
查看命令:ensp 查看配置命令
R2:
<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]un in e
Info: Information center is disabled.
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip a
[Huawei-GigabitEthernet0/0/0]ip add
[Huawei-GigabitEthernet0/0/0]ip address 10.1.1.2 255.255.255.0
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip address 10.1.2.1 255.255.255.0
pc1正常访问,pc2被acl拦截: