需求10.101.0.0/24到10.0.130.0/24 能互通,10.101.0.0/24到172.22.1.11能互通,DHCP能通;
ip access-list extended test
permit ip any host 172.22.1.11
permit ip any 10.0.130.0 0.0.0.255
permit ip any 10.101.0.0 0.0.0.255
permit udp any any eq bootpc
permit udp any any eq bootps
============================================
interface Vlan4000
ip address 10.101.0.254 255.255.255.0
ip access-group test in
ip helper-address 10.10.1.5
============================================
show ip acces
Extended IP access list Techain_ALC
10 permit ip any host 172.22.1.11 (2 matches)
20 permit ip any 10.0.130.0 0.0.0.255 (15 matches)
30 permit ip any 10.101.0.0 0.0.0.255 (90 matches)
40 permit udp any any eq bootpc
50 permit udp any any eq bootps (2 matches)
============================================
10.101.0.20 到10.0.130.22 能ping通
10.101.0.20 到172.22.1.11 能ping通
但是10.0.130.22到10.101.0.20 ping不通,172.22.1.11到10.101.0.20 也ping不通