h3c交换机设置限制公司员工访问外网
使用的环境，把不能访问80端口跟qq服务器的用户划入vlan 50。
acl number 3001设置访问控制列表
rule 100 deny tcp destination-port eq www 设置规则关掉80端口
rule 110 deny ip source 192.168.50.0 0.0.0.255 destination 112.90.0.0 0.0.255.255从规则110-210开始是限制特定网段访问qq服务器.
rule 120 deny ip source 192.168.50.0 0.0.0.255 destination 219.133.0.0 0.0.255.255
rule 130 deny ip source 192.168.50.0 0.0.0.255 destination 58.60.0.0 0.0.255.255
rule 140 deny ip source 192.168.50.0 0.0.0.255 destination 119.147.0.0 0.0.255.255
rule 150 deny ip source 192.168.50.0 0.0.0.255 destination 112.95.0.0 0.0.255.255
rule 160 deny ip source 192.168.50.0 0.0.0.255 destination 222.202.0.0 0.0.255.255
rule 170 deny ip source 192.168.50.0 0.0.0.255 destination 113.108.0.0 0.0.255.255
rule 180 deny ip source 192.168.50.0 0.0.0.255 destination 202.104.0.0 0.0.255.255
rule 190 deny ip source 192.168.50.0 0.0.0.255 destination 58.251.0.0 0.0.255.255
rule 200 deny ip source 192.168.50.0 0.0.0.255 destination 121.90.0.0 0.0.255.255
rule 210 deny ip source 192.168.50.0 0.0.0.255 destination 183.60.0.0 0.0.255.255
rule 220 deny udp destination-port eq 8000 规则220限制用户访问UDP端口8000
interface Vlan-interface50 进入vlan50端口
ip address 192.168.50.1 255.255.255.0
packet-filter 3001 inbound 应用访问控制列表3001
