en conf t access-list 1 deny host 192.168.1.2 access-list 1 permit any do show access-list int g0/1 ip access-group 1 out exit ------------------------------------ !! now ping from 1.2 -> 2.2 | 1.2 -> 4.2 | 1.3 -> 2.2 do show access-list !! solve the remaining task yourself