在思科交换机上配置，限制访问的地址及端口
access-list 150 deny tcp any host 192.168.0.1 eq www access-list 150 deny udp any host 192.168.0.1 eq www access-list 1150 permit ip any any
以下配置将出错，ip 无端口 access-list 150 deny ip any host 192.168.0.1 eq www
ACL应用于端口GigabitEthernet3/1 ip access-group 150 in
