思科acl

编号acl - 删除单条会清空
命名acl - 可以修改单条

acl隔离vlan互访
ip access-list extend vlan114
permit ip 172.28.14.0 0.0.0.255 host 172.28.11.6
permit ip 172.28.14.0 0.0.0.255 host 172.28.11.5
deny ip 172.28.14.0 0.0.0.255 172.28.0.0 0.0.255.255 (128 matches)
permit ip 172.28.14.0 0.0.0.255 any (2 matches)
int vlan 114
ip access-group vlan114 in