interface Vlan2
 ip address 172.16.0.1 255.255.255.0
 ip access-group TVLAND-IN in
 ip access-group TVLAND-OUT out
 ip nat inside
 ip virtual-reassembly

ip access-list extended TVLAND-IN
 permit ip any 172.16.0.0 0.0.255.255

ip access-list extended TVLAND-OUT
 deny ip 172.168.0.0 0.0.255.255 10.10.0.0 0.0.255.255
 permit ip 172.168.0.0 0.0.255.255 any