vLan 110, vLan 109禁止連接192.168.3.0/24, 除了10.20.9.2
access-list 10 deny 192.168.3.0 0.0.0.255
access-list 10 permit any
int vlan 110
ip access-group 10 out
access-list 100 permit ip 192.168.3.0 0.0.0.255 10.20.9.2 0.0.0.0
access-list 100 deny ip 192.168.3.0 0.0.0.255 any
access-list 100 permit ip any any
int vlan 109
ip access-group 100 out