Cisco3560配置Acl访问控制列表禁止VLAN299与VLAN205、VLAN210之间互访。 禁止VLAN2

ip access-list ex XXX 10 deny ip x.x.x.x 0.0.0.15 x.x.x.x 0.0.0.15 20 deny ip x.x.x.x 0.0.0.15 x.x.x.x 0.0.0.15 100 permit ip any any inter vlanXXX ip access-group XXX in