ip access-list extended nat-list
 $permitLanAnyCli
 $denyCli
 $denyAnyCli