ip access-list extended Guest
permit ip 172.17.2.152 0.0.0.7 host 192.168.1.1
permit ip 172.17.2.152 0.0.0.7 host 192.168.1.2
permit ip 172.17.2.152 0.0.0.7 host 192.168.1.38
permit ip 172.17.2.152 0.0.0.7 host 192.168.1.46
permit ip 172.17.2.152 0.0.0.7 host 192.168.1.47
permit ip 172.17.2.152 0.0.0.7 host 192.168.1.55
deny tcp 172.17.2.152 0.0.0.7 any gt 443
deny tcp 172.17.2.152 0.0.0.7 any lt www
permit ip any any
vlan access-map Guest_Map 17
action forward
match ip address Guest
vlan filter Guest_Map vlan-list 17