August 2005
Intermediate to advanced
798 pages
31h 12m
English
ip access-group — interface
ip access-groupaccess-list[in | out] no ip access-groupaccess-list[in | out]
Assigns an access list to an interface
No access lists defined
This command applies the given access list to the interface in the direction specified (in or out). Access-list commands are discussed in Chapter 7. Each interface can support only one access list in either direction.
The following commands apply access list 110 to filter incoming packets on the serial1 interface, and access list 111 to filter outgoing packets:
interface serial1 ip access-group 110 in ip access-group 111 out
To remove an access list from an interface, use the no form of this command:
interface serial1 no ip access-group 111 out
If you use the no access-list command, your access list will be deleted. Be sure to use no ip access-group when removing lists from interfaces.