H3C交换机高级ACL

172.16.78.69服务器数据库（SQL server）只能通过通过堡垒机及引用发布服务器访问，拒绝其他IP访问1433端口。172.16.100.141为堡垒机地址，172.16.99.70为堡垒机应用发布服务器地址。 

 acl number 3001

rule 10 permit tcp source 172.16.78.69 0 destination 172.16.100.141 0 destination-port eq 1433 

 rule 15 permit tcp source 172.16.78.69 0 destination 172.16.99.70 0 destination-port eq 1433 

 acl number 3002 

rule 1000 deny tcp source 172.16.78.69 0 destination-port eq 1433 

 traffic classifier blj1

 if-match acl 3001 

qu

traffic behavior blj1 

filter permit 

qu

traffic classifier blj2 

if-match acl 3002 

qu 

 traffic behavior blj2 

filter deny 

qu 

 qos policy blj

 classifier blj1 behavior blj1 

classifier blj2 behavior blj2 

qu 

qos vlan-policy blj vlan 78 inbound