An access-list applied outbound to a vlan interface filters traffic going TO machines on that vlan. An access-list applied inbound to a vlan interface filters traffic coming FROM machines on that vlan.
总结：
IN 和 OUT 都是相对于交换机而言的
参考： https://community.cisco.com/t5/switching/acl-direction-when-applied-to-a-vlan-on-a-switch/td-p/1423652
permit 允许 deny 拒绝 permit 匹配 deny 不匹配
No comments:
Post a Comment