1. Extended ACL Configuration
WWW.TCPIPGURU.COM

3. Description
 Extended Inbound ACL for Router 1 to deny telnet
access from 192.168.1.0 to 192.168.2.0 and
172.16.154.0 network.

4. Configuration on Router 1
 R1#config t
 Enter configuration commands, one per line. End with CNTL/Z.
 R1(config)#access-list 110 deny tcp 192.168.1.0 0.0.0.255
192.168.2.2 0.0.0.0 eq 23
 R1(config)# access-list 110 deny tcp 192.168.1.0 0.0.0.255
172.16.154.0 0.0.101.255 eq 23
 R1(config)#access-list 110 permit ip any any
 R1(config)#int fa0/0
 R1(config-if)#ip access-group 110 in
 R1(config-if)#exit

5. R1#show ip access-lists
Extended IP access list 110
10 deny tcp 192.168.1.0 0.0.0.255 host 192.168.2.2 eq telnet
20 deny tcp 192.168.1.0 0.0.0.255 172.16.154.0 0.0.101.255 eq
telnet