限制只有192.168.1.100和192.168.1.200可以访问192.168.1.10的22号端口
access-list 101 permit tcp host 192.168.1.10 eq 22 host 192.168.1.100
access-list 101 permit tcp host 192.168.1.10 eq 22 host 192.168.1.200
access-list 101 deny tcp host 192.168.1.10 eq 22 any
access-list 101 permit ip host 192.168.1.10 any
interface GigabitEthernet0/17
switchport access vlan 10
switchport mode access
ip access-group 101 in
spanning-tree portfast