初歩的なことですいません。
interface GigabitEthernet0/1
switchport access vlan 64
switchport mode access
ip access-group 110 in
interface GigabitEthernet0/2
switchport access vlan 66
switchport mode access
ip access-group 120 in
interface GigabitEthernet0/3
switchport access vlan 65
switchport mode access
ip access-group 100 in
interface Vlan64
ip addres 192.168.16.223 255.255.255.0
no ip redirects
interface Vlan65
ip addres 128.1.7.223 255.255.255.0
no ip redirects
interface Vlan66
ip addres 192.168.0.223 255.255.255.0
no ip redirects
access-list 100 permit ip host 172.21.28.2 192.168.16.0 0.0.0.255
access-list 100 permit ip 128.1.7.0 0.0.0.255 192.168.16.0 0.0.0.255
access-list 100 permit ip 128.1.7.0 0.0.0.255 128.1.7.0 0.0.0.255
access-list 100 deny ip any any
access-list 110 permit ip 192.168.16.0 0.0.0.255 host 172.21.28.2
access-list 110 permit ip 192.168.16.0 0.0.0.255 192.168.0.0 0.0.0.255
access-list 110 permit ip 192.168.16.0 0.0.0.255 128.1.7.0 0.0.0.255
access-list 110 permit ip 192.168.16.0 0.0.0.255 192.168.16.0 0.0.0.255
access-list 110 deny ip any any
access-list 120 permit ip 192.168.0.0 0.0.0.255 192.168.16.0 0.0.0.255
access-list 120 permit ip 192.168.0.0 0.0.0.255 192.168.0.0 0.0.0.255
access-list 120 deny ip any any
hostC(192.168.16.3)からhostB(172.21.28.2)へのpingはOKなのですが、hostA(128.1.7.161)からhostB(172.21.28.2)へのpingがNGになります。
ACLにどう設定すればpingがOKになりますか?