ip default-gateway 10.17.0.1
sntp server 10.17.1.2
ip routing
snmp-server community "public" Operator
snmp-server community "fullmoon" Unrestricted
vlan 1
   name "DEFAULT_VLAN"
   untagged 1-2,4,6-24
   ip address 10.17.1.1 255.255.255.0
   no untagged 3,5
   exit
vlan 2
   name "X"
   untagged 5
   ip address 10.17.2.1 255.255.255.0
   exit
vlan 3
   name "Y"
   untagged 3
   ip address 10.17.3.1 255.255.255.0
   exit
 
client1, port 3
ip address      10.17.3.10
gateway         10.17.3.1
 
 
client2, port 5
ip address      10.17.2.10
gateway         10.17.2.1
 
client3, port 5
ip address      10.17.2.11
gateway         10.17.2.1
 
i want client3 to talk with client1
client 2 block access to client1