The network topology is
we use interface dhcp in S7703 , vlan 100 and vlan 200 is interworking, so we use taffice policy to solve this problem.
[S7700]acl number 3002
[S7700-acl-adv-3002]rule 5 deny ip source 192.168.1.0 0.0.0.255 destination 192.
168.2.0 0.0.0.255
[S7700]traffic classifier 1 operator and
[S7700-classifier-1]if-match acl 3002
[S7700-classifier-1]if-match vlan-id 100
[S7700]traffic behavior 1
[S7700-behavior-1]de
[S7700-behavior-1]deny
[S7700]traffic behavior 1
[S7700-behavior-1]deny
[S7700]traffic behavior 1
[S7700-trafficpolicy-1]classifier 1 behavior 1
[S7700]traffic-policy 1 global inbound

