华为的命令不太熟,提供给你参考:acl 3000rule 5 deny ip source 192.168.1.0 0.0.0.255 destination 192.168.3.0 0.0.0.255rule 10 permit ip source any