核心交换机，三层acl，svi配置（10.60.200.1）

vlan 16

acl advanced 3002

 rule 5 permit ip destination 10.1.29.10 0

 rule 100 deny ip

interface Vlan-interface16

 ip address 10.60.16.1 255.255.255.248

 packet-filter 3002 inbound



接入交换机，接口配置，绑定ip跟mac（10.60.200.30）

vlan 16

interface GigabitEthernet1/0/25

 port access vlan 16

 ip verify source ip-address mac-address

 ip source binding ip-address 10.60.16.5 mac-address 047c-162b-4280