原來ACL這樣安排
怎麼跟我想的都不一樣

我以為一開始先 permit any
Statements A, B, C, and D of ACL 10 have been entered in the shown order and applied to interface E0 inbound, to prevent all hosts (except those whose addresses are the first and last IP of subnet 172.21.1.128/28) from accessing the network. But as is, the ACL does not restrict anyone from the network. How can the ACL statements be re-arranged so that the system works as intended?

permit 172.21.1.129 0.0.0.0
permit 172.21.1.1.142 0.0.0.0
deny 172.21.1.128 0.0.0.15
permit any