使用的环境，把不能访问80端口跟qq服务器的用户划入vlan 50。

acl number 3001设置访问控制列表

rule 100 deny tcp destination-port eq www 设置规则关掉80端口

rule 110 deny ip source 192.168.50.0 0.0.0.255 destination 112.90.0.0 0.0.255.255从规则110-210开始是限制特定网段访问qq服务器.

rule 120 deny ip source 192.168.50.0 0.0.0.255 destination 219.133.0.0 0.0.255.255

rule 130 deny ip source 192.168.50.0 0.0.0.255 destination 58.60.0.0 0.0.255.255

rule 140 deny ip source 192.168.50.0 0.0.0.255 destination 119.147.0.0 0.0.255.255

rule 150 deny ip source 192.168.50.0 0.0.0.255 destination 112.95.0.0 0.0.255.255

rule 160 deny ip source 192.168.50.0 0.0.0.255 destination 222.202.0.0 0.0.255.255

rule 170 deny ip source 192.168.50.0 0.0.0.255 destination 113.108.0.0 0.0.255.255

rule 180 deny ip source 192.168.50.0 0.0.0.255 destination 202.104.0.0 0.0.255.255

rule 190 deny ip source 192.168.50.0 0.0.0.255 destination 58.251.0.0 0.0.255.255

rule 200 deny ip source 192.168.50.0 0.0.0.255 destination 121.90.0.0 0.0.255.255

rule 210 deny ip source 192.168.50.0 0.0.0.255 destination 183.60.0.0 0.0.255.255

rule 220 deny udp destination-port eq 8000 规则220限制用户访问UDP端口8000

interface Vlan-interface50 进入vlan50端口

ip address 192.168.50.1 255.255.255.0

packet-filter 3001 inbound 应用访问控制列表3001
————————————————
版权声明：本文为CSDN博主「weixin_39848953」的原创文章，遵循CC 4.0 BY-SA版权协议，转载请附上原文出处链接及本声明。
原文链接：https://blog.csdn.net/weixin_39848953/article/details/111790583