Cisco IOS in a Nutshell, 2nd Edition

Name

ip access-group — interface

Synopsis

ip access-group access-list [in | out]
no ip access-group access-list [in | out]

Configures

Assigns an access list to an interface

Default

No access lists defined

Description

This command applies the given access list to the interface in the direction specified (in or out). Access-list commands are discussed in Chapter 7. Each interface can support only one access list in either direction.

Example

The following commands apply access list 110 to filter incoming packets on the serial1 interface, and access list 111 to filter outgoing packets:

interface serial1
  ip access-group 110 in
  ip access-group 111 out

To remove an access list from an interface, use the no form of this command:

interface serial1
  no ip access-group 111 out

If you use the no access-list command, your access list will be deleted. Be sure to use no ip access-group when removing lists from interfaces.