h3c交换机设置限制公司员工访问外网

h3c交换机设置限制公司员工访问外网

使用的环境，把不能访问80端口跟qq服务器的用户划入vlan 50。
acl number 3001设置访问控制列表
 rule 100 deny tcp destination-port eq www  设置规则关掉80端口
 rule 110 deny ip source 192.168.50.0 0.0.0.255 destination 112.90.0.0 0.0.255.255从规则110-210开始是限制特定网段访问qq服务器.
 rule 120 deny ip source 192.168.50.0 0.0.0.255 destination 219.133.0.0 0.0.255.255
 rule 130 deny ip source 192.168.50.0 0.0.0.255 destination 58.60.0.0 0.0.255.255
 rule 140 deny ip source 192.168.50.0 0.0.0.255 destination 119.147.0.0 0.0.255.255
 rule 150 deny ip source 192.168.50.0 0.0.0.255 destination 112.95.0.0 0.0.255.255
 rule 160 deny ip source 192.168.50.0 0.0.0.255 destination 222.202.0.0 0.0.255.255
 rule 170 deny ip source 192.168.50.0 0.0.0.255 destination 113.108.0.0 0.0.255.255
 rule 180 deny ip source 192.168.50.0 0.0.0.255 destination 202.104.0.0 0.0.255.255
 rule 190 deny ip source 192.168.50.0 0.0.0.255 destination 58.251.0.0 0.0.255.255
 rule 200 deny ip source 192.168.50.0 0.0.0.255 destination 121.90.0.0 0.0.255.255
 rule 210 deny ip source 192.168.50.0 0.0.0.255 destination 183.60.0.0 0.0.255.255
 rule 220 deny udp destination-port eq 8000 规则220限制用户访问UDP端口8000

interface Vlan-interface50              进入vlan50端口
 ip address 192.168.50.1 255.255.255.0 
 packet-filter 3001 inbound             应用访问控制列表3001
 

本文出自 “shiquanxiaopang” 博客，转载请与作者联系！