acl number 3000
rule 5 permit tcp source 172.16.1.0 0.0.0.255 eq 23
acl number 3300
rule 5 permit tcp source any any eq 23
traffic classifier W3000 operator or precedence 10
if-match acl 3000
traffic classifier W3300 operator or precedence 5
if-match acl 3300
traffic behavior W3000
redirect per
traffic behavior W3300
redirect deny
traffic policy Feiliu
classifier W3300 behavior W3300
classifier W3000 behavior W3000
原文：http://blog.51cto.com/9616635/2133535