I have three cisco core 4506 and working with 20 different vlans. i am trying to create deny icmp for vlan 67 subnet 192.168.40.0 255.255.255.224. i tried in many way but i am fail. any host can ping to this subnet and this subnet can ping to any host. but i want to deny for both.