Ip interface ethernet0/1

• Ip interface ethernet0/1

• Ip address 2.0.5.1.255.255.255.0

• Ip address-group Internetfilter out

• Ip access-group afnog_group in

• …

• ip access-list standard Internetfilter

• permit 1.2.3.4

• deny any

• ip access-list extended afnog_group

• permit tcp any 171.69.0.0.0.255.255.255 eq telnet

• deny tcp any any

• deny udp any 171.69.0.0.0.255.255.255 lt 1024

• deny ip any log