config-view
    acl-view
        port-group tcp.in.port
            port 445/445
            port 137/139
            port 20/22
            port 80/80
            port 443/443
            port 3389/3389
            port 5900/5900
            quit
        port-group udp.in.port
            port 5900/5900
            port 445/445
            port 137/139
            quit
        ip-acl xnetc.input
            rule 5 permit --protocol 1
            rule 10 permit --protocol 6 --dport tcp.in.port
            rule 15 permit --protocol 17 --dport udp.in.port
            default action deny
            description "入方向访问控制"
            quit
        ip-acl xnetc.output
            default action permit
            description "出方向访问控制"
            quit
        quit
    quit
