ip access-list extended TEST deny ip 10.10.0.0 0.0.255.255 any deny ip 10.10.0.0 0.0.255.255 192.168.1.0 0.0.0.255 permit ip 10.10.7.0 0.0.0.255 any permit ip 10.10.8.0 0.0.0.255 any