Ip Access-Group - Cisco ME 3800X Command Reference Manual

ip access-group

ip access-group
To control access to a Layer 2 or Layer 3 interface, use the ip access-group command in interface
configuration mode.To remove all access groups or the specified access group from the interface, use the
no form of this command.
You cannot attach an ACL to a Layer 2 port that has an Ethernet flow point (EFP) service instance
Note
configured on it. The ip access-group command is rejected on these ports.
Syntax Description access-list-number
name
in
out
Defaults
No access list is applied to the interface.
Command Modes Interface configuration
Command History Release
12.2(52)EY
Usage Guidelines
You can apply named or numbered standard or extended IP access lists to an interface. To define an
access list by name, use the ip access-list global configuration command. To define a numbered access
list, use the access list global configuration command. You can used numbered standard access lists
ranging from 1 to 99 and 1300 to 1999 or extended access lists ranging from 100 to 199 and 2000 to
2699.
Cisco ME 3800X and ME 3600X Switch Command Reference
2-96
ip access-group {access-list-number | name} {in | out}
no ip access-group [access-list-number | name] {in | out}
The number of the IP access control list (ACL). The range is 1 to 199 or
1300 to 2699.
The name of an IP ACL, specified in the ip access-list global configuration
command.
Specifies filtering on inbound packets.
Specifies filtering on outbound packets. This keyword is valid only on
Layer 3 interfaces.
Modification
This command was introduced.
Chapter 2 Cisco ME 3800X and ME 3600X Switch Cisco IOS Commands
OL-28238-01