MSR830路由器策略配置

在MSR830上想让网段内的一部分电脑不能访问外网，照猫画虎的做了个策略，但不起作用。大神们看看，是那里不对了。

acl number 3000

description int

rule 1 permit ip source 192.168.100.1 0

rule 2 permit ip source 192.168.100.2 0

rule 3 permit ip source 192.168.100.3 0

......

rule 30 permit ip source 192.168.100.30 0

acl number 3001

description int

rule 0 deny ip

traffic classifier PER-A operator and

if-match acl 3000 traffic

classifier DEN-B operator and

if-match acl 3001

traffic behavior aclpermit

filter permit

traffic behavior acldeny

filter deny

qos policy PolicyLimitOut

classifier PER-A behavior aclpermit

classifier DEN-B behavior acldeny

interface GigabitEthernet0/0

port link-mode route

nat outbound ip address 192.168.1.2 255.255.255.0

tcp mss 1024

qos apply policy PolicyLimitOut outbound

dns server 8.8.8.8

dns server 202.99.192.68