need to add single server to access list.

I have an access list below, that has subnets rejected. i need to allow one ip in one of the declined subnets (it is a printer). 172.16.2.120.

Current list

Extended IP access list vlan105-acl
    10 deny ip any 10.1.89.0 0.0.0.255 (3 matches)
    11 deny ip any 10.1.92.0 0.0.0.255 (98 matches)
    12 deny ip any 172.16.2.0 0.0.0.255
    13 deny ip any 172.16.4.0 0.0.0.255
    14 deny ip any 10.10.89.0 0.0.0.255
    15 deny ip any 10.10.92.0 0.0.0.255
    16 deny ip any 10.10.133.0 0.0.0.255
    17 deny ip any 10.1.133.0 0.0.0.255
    19 deny ip any 10.20.89.0 0.0.0.255
    20 deny ip any 10.20.92.0 0.0.0.255
    21 deny ip any 10.20.133.0 0.0.0.255
    50 permit ip any any (993 matches)
cj_cbAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

moorenetworkCommented:
First you need to re-order the access list
ip access-list resequence vlan105-acl 10 10  
#the above command will renumber the ACL
#now to add the permit statement before the subnet deny
ip access-list extended vlan105-acl
28 permit ip host 172.16.2.120
end
wr
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
cj_cbAuthor Commented:
Thanks for the response, but not able to get to the 172.16.2.120 address. the command 28 permit ip host 172.16.2.120 was not complete. I added host.

Extended IP access list vlan105-acl
    10 deny ip any 10.1.89.0 0.0.0.255 (3 matches)
    20 deny ip any 10.1.92.0 0.0.0.255 (102 matches)
    28 permit ip host 172.16.2.120 any
    30 deny ip any 172.16.2.0 0.0.0.255 (420 matches)
    40 deny ip any 172.16.4.0 0.0.0.255 (8516 matches)
    50 deny ip any 10.10.89.0 0.0.0.255
    60 deny ip any 10.10.92.0 0.0.0.255
    70 deny ip any 10.10.133.0 0.0.0.255
    80 deny ip any 10.1.133.0 0.0.0.255
    90 deny ip any 10.20.89.0 0.0.0.255
    100 deny ip any 10.20.92.0 0.0.0.255
    110 deny ip any 10.20.133.0 0.0.0.255
    120 permit ip any any (61150 matches)
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking

From novice to tech pro — start learning today.