You can create standard and extended Layer 3 (IPv4 and IPv6) ACLs, and define permit and deny rules within them.
See also Advanced Layer 3 ACL rules and features.
