ну межсетевого экрана в Cisco Packet Tracer нет:

access-list 100 deny ip any 192.168.0.0 0.0.3.255
access-list 100 permit ip any any

access-list 104 permit tcp 192.168.0.0 0.0.3.255 host 192.168.4.2 eq ftp
access-list 104 permit ip host 192.168.10.4 host 192.168.4.2

на каждый VLAN (192.168.0.1 до 192.168.3.0)
ip access-group 100 in

и на выход к FTP
ip access-group 104 out