ip access-list extended LAN
permit udp any eq bootpc any eq bootps
permit ip 10.2.171.0 0.0.0.255 172.0.0.0 0.31.255.255
permit ip 10.2.171.0 0.0.0.255 10.2.0.0 0.0.255.255
permit tcp 10.2.171.0 0.0.0.255 host 78.136.60.154 eq 80
deny ip any any log