MSR36-20路由器端口加ACL控制问题

子接口上配了几段地址

dhcp server ip-pool dhcp_wire

gateway-list 10.50.2.1

network 10.50.2.0 mask 255.255.255.0

dns-list 183.221.253.100 211.137.96.205

expired day 0 hour 8

#

interface GigabitEthernet0/1.3 

description Wire 

ip address 10.50.2.1 255.255.255.0

ip address 10.254.3.1 255.255.255.0 sub

ip address 172.24.81.1 255.255.255.128 sub

vlan-type dot1q vid 192

dhcp server apply ip-pool dhcp_wire

#

acl basic 2002 

 rule 0 permit source 192.168.48.0 0.0.0.255 

 rule 5 permit source 10.254.3.0 0.0.0.255 

 rule 10 permit source 10.50.2.0 0.0.0.255 

 rule 15 permit source 172.24.81.2 0 

 rule 16 permit source 172.24.81.3 0 

 rule 17 permit source 172.24.81.4 0 

 rule 18 permit source 172.24.81.5 0 

 rule 19 permit source 172.24.81.6 0 

 rule 20 permit source 172.24.81.7 0 

 rule 21 permit source 172.24.81.8 0

 rule 22 permit source 172.24.81.9 0

 rule 23 permit source 172.24.81.10 0 

 rule 145 deny

 #

如何把acl 2002加到interface GigabitEthernet0/1.3 上去，实现允许ACL里的IP可以上网的效果？