ip access-list extended dmz permit tcp any host 10.15.89.254 eq 22 permit udp any host 10.15.89.254 eq 5060 permit tcp any host 10.15.89.254 eq 5060 permit udp any host 10.15.89.254 range 10048 19968 ip access-list extended nat-inbound permit udp host 10.15.89.254 range 10048 19968 any