请问这些ACL配置的作用？

# vlan 1 # vlan 2 # dhcp server ip-pool GigabitEthernet0/0 gateway-list 192.168.100.1 network 192.168.100.0 mask 255.255.255.0 address range 192.168.100.130 192.168.100.254 dns-list 192.168.100.1 202.96.128.86 # dhcp server ip-pool Vlan-interface2 # dhcp server ip-pool lan1 gateway-list 192.168.0.1 network 192.168.0.0 mask 255.255.254.0 address range 192.168.1.2 192.168.1.254 dns-list 192.168.0.1 # controller Cellular0/0 # interface Aux0 # interface Virtual-Template0 # interface Virtual-Template1 ppp authentication-mode chap remote address pool l2tp1 ip address 192.168.180.1 255.255.255.0 # interface NULL0 # interface Vlan-interface1 ip address 192.168.100.1 255.255.255.0 tcp mss 1280 nat hairpin enable # interface Vlan-interface2 ip address 192.168.1.1 255.255.255.0 # interface GigabitEthernet0/0 port link-mode route tcp mss 1280 nat hairpin enable # interface GigabitEthernet0/1 port link-mode route description Multiple_Line ip address 61.145.69.66 255.255.255.252 dns server 202.96.128.86 dns server 202.96.128.166 packet-filter name GigabitEthernet0/1 inbound nat outbound 3199 nat server protocol tcp global 61.145.69.66 21 inside 192.168.100.4 21 nat server protocol tcp global 61.145.69.66 23 inside 192.168.100.1 23 nat server protocol tcp global 61.145.69.66 25 inside 192.168.100.3 25 nat server protocol tcp global 61.145.69.66 80 inside 192.168.100.9 9009 nat server protocol tcp global 61.145.69.66 110 inside 192.168.100.3 110 nat server protocol tcp global 61.145.69.66 443 inside 192.168.100.3 443 nat server protocol tcp global 61.145.69.66 1723 inside 192.168.100.1 1723 nat server protocol tcp global 61.145.69.66 6606 inside 192.168.100.5 17951 nat server protocol tcp global 61.145.69.66 6660 inside 192.168.100.2 6660 nat server protocol tcp global 61.145.69.66 6661 inside 192.168.100.2 6661 nat server protocol tcp global 61.145.69.66 6662 inside 192.168.100.2 6662 nat server protocol tcp global 61.145.69.66 6663 inside 192.168.100.2 6663 nat server protocol tcp global 61.145.69.66 8081 inside 192.168.100.1 80 nat server protocol tcp global 61.145.69.66 9001 inside 192.168.100.5 9001 nat server protocol tcp global 61.145.69.66 9002 inside 192.168.100.5 9002 nat server protocol tcp global 61.145.69.66 9003 inside 192.168.100.5 9003 nat server protocol tcp global 61.145.69.66 9005 inside 192.168.100.4 9005 nat server protocol tcp global 61.145.69.66 9006 inside 192.168.100.2 9006 nat server protocol tcp global 61.145.69.66 9009 inside 192.168.100.4 9009 nat server protocol tcp global 61.145.69.66 9010 inside 192.168.100.4 9000 nat server protocol tcp global 61.145.69.66 10326 inside 192.168.100.69 3389 nat server protocol tcp global 61.145.69.66 10367 inside 192.168.100.67 3389 nat server protocol tcp global 61.145.69.66 11432 inside 192.168.100.2 1433 nat server protocol tcp global 61.145.69.66 11435 inside 192.168.100.4 1433 nat server protocol tcp global 61.145.69.66 23389 inside 192.168.100.2 3389 nat server protocol tcp global 61.145.69.66 34434 inside 192.168.100.5 1433 nat server protocol tcp global 61.145.69.66 36500 inside 192.168.100.2 36500 nat server protocol tcp global 61.145.69.66 36501 inside 192.168.100.2 36501 nat server protocol tcp global 61.145.69.66 63389 inside 192.168.100.62 3389 nat server protocol udp global 61.145.69.66 1701 inside 192.168.100.1 1701 ipsec apply policy aa # interface GigabitEthernet2/0 port link-mode bridge port access vlan 2 # interface GigabitEthernet2/1 port link-mode bridge # interface GigabitEthernet2/2 port link-mode bridge # interface GigabitEthernet2/3 port link-mode bridge # security-zone name Local # security-zone name Trust # security-zone name DMZ # security-zone name Untrust # security-zone name Management # scheduler logfile size 16 # line class aux user-role network-admin # line class tty user-role network-operator # line class vty user-role network-operator # line aux 0 user-role network-admin # line vty 0 63 authentication-mode scheme user-role network-operator # ip route-static 0.0.0.0 0 GigabitEthernet0/1 61.145.69.65 # arp static 192.168.100.230 0800-37fb-68f5 arp static 192.168.100.252 0011-e504-fdc0 # ntp-service enable ntp-service unicast-server 192.43.244.18 ntp-service unicast-server 129.6.15.28 # acl advanced 3199 rule 10 deny ip source 192.168.100.0 0.0.0.255 destination 192.168.6.0 0.0.0.255 rule 15 deny ip source 192.168.100.0 0.0.0.255 destination 192.168.9.0 0.0.0.255 rule 20 deny ip source 192.168.100.0 0.0.0.255 destination 192.168.12.0 0.0.0.255 rule 25 deny ip source 192.168.100.0 0.0.0.255 destination 192.168.13.0 0.0.0.255 rule 30 deny ip source 192.168.100.0 0.0.0.255 destination 192.168.14.0 0.0.0.255 rule 35 deny ip source 192.168.100.0 0.0.0.255 destination 192.168.15.0 0.0.0.255 rule 40 deny ip source 192.168.100.0 0.0.0.255 destination 192.168.16.0 0.0.0.255 rule 45 deny ip source 192.168.100.0 0.0.0.255 destination 192.168.17.0 0.0.0.255 rule 50 permit ip rule 55 deny ip source 192.168.1.0 0.0.0.255 destination 192.168.15.0 0.0.0.255 # acl advanced name GigabitEthernet0/1 rule 0 deny tcp destination-port eq 443 rule 5 deny tcp destination-port eq 139 rule 10 deny tcp destination-port eq 138 # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage password hash $h$6$VuaMqTjSeaFikoa1$b6hzZlsI2FsvRYlTQ1JDwPYVB1IC4gXCd0cT+rXyemcRFoBtSmVG8kgcPZ2khhrBZbODyUBY/TZ20N8ZhUFsHg== access-limit 2 service-type ftp service-type ssh telnet terminal http https authorization-attribute user-role network-admin # local-user wabb00 class network password cipher $c$3$U5RZiHgLvenAhXOrlkgtehU9jcxTipSVKhw= access-limit 3 service-type ppp authorization-attribute user-role network-operator description 3?2?ó? # local-user xxwg01 class network password cipher $c$3$FgqVRAdf8SnbJm65h+TFf58EbvM1LB0wswZlGcFnsH0= access-limit 3 service-type ppp authorization-attribute user-role network-operator description 3?2? # local-user xxwgzaojiao class network password cipher $c$3$tDKs/g9/KFV7XCjmNa8nGWj/V0tO294f7dd32hLQDl8= access-limit 3 service-type ppp authorization-attribute user-role network-operator description ???ìó? # ipsec transform-set 1 esp encryption-algorithm 3des-cbc esp authentication-algorithm md5 # ipsec policy-template 1 1 transform-set 1 ike-profile 1 # ipsec policy aa 1 isakmp template 1 # l2tp-group 1 mode lns allow l2tp virtual-template 1 undo tunnel authentication tunnel password cipher $c$3$4rFple5/u3c94dDgjfW3A8QKZFMNs+iOdA== # l2tp enable # ike profile 1 keychain 1 exchange-mode aggressive local-identity fqdn v7 match remote identity fqdn v5 # ike proposal 1 # ike keychain 1 pre-shared-key address 0.0.0.0 0.0.0.0 key cipher $c$3$5STAt3/KHOx16yxJhVmYxnHXWjr5LZVu8A== # ip http enable # wlan global-configuration control-address disable # wlan ap-group default-group # cloud-management server domain oasis.h3c.com # return 我把全部配置命令发上来，能不能帮我看看 嘿嘿

太乱了这个，有IPsec配置。给我刚才说的一致