ip access-group

Last Updated : Oct 26, 2015 |
Activates a specific Access Control list for a specific direction, on the current interface. Use no ip access-group to suspend the Access Control list for a specific direction.
Prolog information
Note:
You cannot edit the active Access Control list.

Syntax

ip access-group policy_list_number direction
no ip access-group direction

Parameters

Parameter
Description
Possible Values
Default Value
policy_list_number
The Access Control list number
300-399
300
direction
The direction of the packets to which the policy is applied
in, out

User level

read-write

Context

interface: Loopback (L2, L2-L3), FastEthernet (L2, L2-L3, PPP L2, PPP L2-L3, PPP L3), Tunnel (L2, L2-L3), VLAN (L2, L2-L3), Dialer (L2, L2-L3)

Example

To enable access control list 310 for outbound packets on the FastEthernet interface:
Gxxx-001(if:FastEthernet )# ip access-group 310 out