ip access-list group outip access list extend vlan101permit ip host 192.168.1.246 host 192.168.101.236deny ip any host 192.168.101.236permit any any