en conf t ip access-list extended NGACL deny ip host 192.168.1.2 192.168.2.0 0.0.0.255 deny ip host 192.168.1.2 192.168.4.0 0.0.0.255 permit ip any any exit do show access-list int g0/0 ip access-group NGACL in exit -------------------------------------- !! now revised task ip access-list extended NGACL 5 permit ip host 192.168.1.2 host 192.168.2.2 15 permit ip host 192.168.1.2 host 192.168.4.2 do show access-list --------------------------------------------- ip access-list resequence NGACL 50 100 --------------------------------------------- !! now ping 1.2 -> 2.2 | 1.2 -> 2.3 | 1.2 -> 4.2 | 1.2 -> 5.2