1. Extended ACL Configuration on
Cisco 2611 XM
WWW.TCPIPGURU.COM

3. Description
 Extended Inbound ACL for Router 1 to deny FTP
access from any pc to 192.168.2.2 ip address.

4.  R1#config t
 Enter configuration commands, one per line. End with CNTL/Z.
 R1(config)#access-list 100 deny tcp any host 192.168.2.2 eq 21
 R1(config)#access-list 100 permit ip any any
 R1(config-if)#ip access-group 100 in
 R1#show ip access-lists
 Extended IP access list 100
 10 deny tcp any host 192.168.2.2 eq telnet
 20 deny tcp any host 192.168.2.2 eq ftp
 30 permit ip any any