Hi
first i should say that this kind of access-list is for ASA or PIX,i mean you cant use "object group" and "object port" in your 3550 switch.
so you need to change it to a form which you switch takes and runs your commands.
its a way how to apply it :
first enable ip routing :
switch# Configure terminal
switch (configure) Ip routing
now change your access list to this ,i issue one for you for an example :
access-list 100 permit tcp host 173.0.0.1 host xxx.xxx.xxx.14 range 10111 101113
ok.
then we need apply the access list to interface or vlan ,here is your second answer :
if you want apply it to one interface so you should change the layer 2 behavior to 3 ,i mean should do this :
Example :
interface fa0/10
no switchport
and then assign an ip address :
ip address x.x.x.x x.x.x.x
here is the direction of your access list
ip access-group 100 in or out
by this way you can only assign your access list to one port,another way is to assign an ip address and access list to a SVI or a layer 3 vlan which contains one or two or more ports,i think the second way is better.
its very easy ,just do this :
Interface vlan x
ip address x.x.x.x x.x.x.x
ip access-group 100 in or out
Good Luck and have a Good Configuration.
Please rate helpful messages
Regards B.mozaffari
