![dc1:
en
config
access-list 1 deny 172.16.10.0 0.0.0.255
filewall enable
filewall default prmit
int e0/0/24
ip access-group 1 in 
exit
ip access list exterded acl-vlan40
permit icmp 172.16.40.0 0.0.0.255 host-destination 172.16.10.10
permit tcp 172.16.40.0 0.0.0.255 host-destination 172.16.10.10 d-port 23
deny ip 172.16.40.0 0.0.0.255 host-destination 172.16.10.10
exit
int e0/0/24
ip access-group acl-vlan40 in
no ip access-group 1 in
ip access-group acl-vlan40 in
exit
sh access-lists][1]