关于H3C 模拟器 ACL 的问题, 模拟器版本 HCL v2.1.1

想用ACL 实现局域网内 6段可以访问全网, 3,4,5网段之间不能互访, 请求大神给个思路, 能贴出配置命令最好(就acl那几条就行 谢谢啊)

我把交换机2 的配置 ,导出来了 ,以文档的形式放在附件里,求大神帮忙 改正一下

关于H3C 模拟器 ACL 的问题, 模拟器版本 HCL v2.1.1

想用ACL 实现局域网内 6段可以访问全网, 3,4,5网段之间不能互访, 请求大神给个思路, 能贴出配置最好

我把交换机2 的配置 ,导出来了 ,以文档的形式放在附件里,求大神帮忙 改正一下,

有人说模拟器下 不能做acl,  做了也不成功.  我想求证一下  

我还复制了一份

[R2]dis cu # version 7.1.075, Alpha 7571 # sysname R2 # irf mac-address persistent timer irf auto-update enable undo irf link-delay irf member 1 priority 1 # packet-filter default deny # dhcp enable dhcp server forbidden-ip 192.168.3.241 192.169.3.253 dhcp server forbidden-ip 192.168.4.241 192.169.4.253 dhcp server forbidden-ip 192.168.5.241 192.168.5.253 dhcp server forbidden-ip 192.168.6.241 192.168.6.253 # lldp global enable # system-working-mode standard xbar load-single password-recovery enable lpu-type f-series # vlan 1 # vlan 3 to 6 # vlan 100 # stp global enable # dhcp server ip-pool vlan3 gateway-list 192.168.3.254 network 192.168.3.0 mask 255.255.255.0 dns-list 222.172.200.68 114.114.114.114 # dhcp server ip-pool vlan4 gateway-list 192.168.4.254 network 192.168.4.0 mask 255.255.255.0 dns-list 222.172.200.68 114.114.114.114 # dhcp server ip-pool vlan5 gateway-list 192.168.5.254 network 192.168.5.0 mask 255.255.255.0 dns-list 222.172.200.68 114.114.114.114 # dhcp server ip-pool vlan6 gateway-list 222.172.200.68 114.114.114.114 192.168.6.254 network 192.168.6.0 mask 255.255.255.0 dns-list 222.172.200.68 114.114.114.114 # interface NULL0 # interface Vlan-interface3 ip address 192.168.3.254 255.255.255.0 packet-filter 3000 inbound packet-filter 3000 outbound # interface Vlan-interface4 ip address 192.168.4.254 255.255.255.0 packet-filter 3000 inbound packet-filter 3000 outbound # interface Vlan-interface5 ip address 192.168.5.254 255.255.255.0 packet-filter 3000 inbound packet-filter 3000 outbound # interface Vlan-interface6 ip address 192.168.6.254 255.255.255.0 packet-filter 3000 inbound packet-filter 3000 outbound # interface Vlan-interface100 ip address 172.16.99.100 255.255.255.0 # interface FortyGigE1/0/53 port link-mode bridge # interface FortyGigE1/0/54 port link-mode bridge # interface GigabitEthernet1/0/1 port link-mode bridge port access vlan 100 combo enable fiber # interface GigabitEthernet1/0/2 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/3 port link-mode bridge port access vlan 3 combo enable fiber packet-filter 3000 inbound # interface GigabitEthernet1/0/4 port link-mode bridge port access vlan 4 combo enable fiber packet-filter 3000 inbound # interface GigabitEthernet1/0/5 port link-mode bridge port access vlan 5 combo enable fiber packet-filter 3000 inbound # interface GigabitEthernet1/0/6 port link-mode bridge port access vlan 6 combo enable fiber packet-filter 3000 inbound # interface GigabitEthernet1/0/7 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/8 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/9 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/10 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/11 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/12 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/13 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/14 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/15 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/16 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/17 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/18 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/19 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/20 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/21 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/22 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/23 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/24 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/25 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/26 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/27 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/28 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/29 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/30 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/31 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/32 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/33 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/34 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/35 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/36 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/37 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/38 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/39 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/40 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/41 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/42 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/43 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/44 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/45 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/46 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/47 port link-mode bridge combo enable fiber # interface GigabitEthernet1/0/48 port link-mode bridge combo enable fiber # interface M-GigabitEthernet0/0/0 # interface Ten-GigabitEthernet1/0/49 port link-mode bridge combo enable fiber # interface Ten-GigabitEthernet1/0/50 port link-mode bridge combo enable fiber # interface Ten-GigabitEthernet1/0/51 port link-mode bridge combo enable fiber # interface Ten-GigabitEthernet1/0/52 port link-mode bridge combo enable fiber # scheduler logfile size 16 # line class aux user-role network-operator # line class console user-role network-admin # line class tty user-role network-operator # line class vty user-role network-operator # line aux 0 user-role network-operator # line con 0 user-role network-admin # line vty 0 63 user-role network-operator # acl basic 2000 # acl advanced 3000 rule 0 permit ip source 192.168.6.0 0.0.0.255 destination 192.168.0.0 0.0.255.255 rule 1 permit ip source 192.168.0.0 0.0.255.255 destination 192.168.6.0 0.0.0.255 rule 2 deny ip source 192.168.0.0 0.0.255.255 destination 0.0.0.0 255.255.0.0 rule 3 permit ip source 192.168.0.0 0.0.255.255 # radius scheme system user-name-format without-domain # domain name system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # return