Configuring traffic that will be permitted: enable config t interface ethernet0 ip access-group 101 in access-list 101 permit ip 172.16.0.0 255.255.0.0