Build access rules from structured fields and emit them in each vendor's syntax. Rules are evaluated top to bottom, and an explicit deny-all is always appended.
! Cisco IOS / IOS-XE — access control list, generated by NetField
! 3 rules, evaluated top to bottom
! An explicit deny-all is appended. Verify rule order before applying.
configure terminal
!
ip access-list extended CLINICAL_OUT
remark Clinical workstations to app servers
10 permit tcp 10.20.0.0 0.0.0.255 10.30.0.0 0.0.0.255 eq 443
remark Allow ping for troubleshooting
20 permit icmp 10.20.0.0 0.0.0.255 10.30.0.0 0.0.0.255
remark Block everything else outbound
30 deny ip 10.20.0.0 0.0.0.255 any log
40 deny ip any any log
!
interface GigabitEthernet0/1
ip access-group CLINICAL_OUT in
!
end