華為交換機透過ACL控制VLAN間互訪

#
vlan batch 10 20

#
interface Vlanif10
ip address 192.168.10.1 255.255.255.0
#
interface Vlanif20
ip address 192.168.20.1 255.255.255.0
#
#
interface GigabitEthernet0/0/1
port link-type access
port default vlan 10
#
interface GigabitEthernet0/0/2
port link-type access
port default vlan 20
#

#
acl number 3001
rule 5 deny ip source 192.168.20.0 0.0.0.255
#
traffic-filter vlan 10 outbound acl 3001