ip access-list group out ip access list extend vlan101 permit ip host 192.168.1.246 host 192.168.101.236 deny ip any host 192.168.101.236 permit any any