ip access-group

Last Updated : Oct 26, 2015 |

Activates a specific Access Control list for a specific direction, on the current interface. Use no ip access-group to suspend the Access Control list for a specific direction.

Note:

You cannot edit the active Access Control list.

Syntax

ip access-group policy_list_number direction

no ip access-group direction

Parameters

Parameter

Description

Possible Values

Default Value

policy_list_number

The Access Control list number

300-399

300

direction

The direction of the packets to which the policy is applied

in, out

User level

read-write

Context

interface: Serial (DS1 PPP L2-L3, DS1 PPP L3, DS1 FR-SUB L2-L3, DS1 FR-SUB L3, USP PPP L2-L3, USP PPP L3), Loopback (L2, L2-L3), FastEthernet (L2, L2-L3, PPP L2, PPP L2-L3, PPP L3), Tunnel (L2, L2-L3), VLAN (L2, L2-L3), Dialer (L2, L2-L3)

Example

To enable access control list 310 for outbound packets on the FastEthernet interface:

Gxxx-001(if:FastEthernet 10/3)# ip access-group 310 out