object-group service mgmt
 tcp eq telnet
 tcp eq www
object-group network rtr
 host 192.168.1.196
 host 10.6.100.1
ip access-list extended fw
 permit object-group mgmt any object-group rtr
 deny   ip any object-group rtr
 permit ip any any
interface FastEthernet0/0
 ip access-group fw in