ip access-group
Usage
ACLs must be applied per routing interface. An entry (rule) can be applied to inbound frames
only.
Example
This example shows how to apply access list 1 for all inbound frames on the VLAN 1 interface.
Through the definition of access list 1, only frames with a source address on the 192.5.34.0/24
network will be routed. All the frames with other source addresses received on the VLAN 1
interface are dropped:
C2(su)->router(Config)#access-list 1 permit 192.5.34.0 0.0.0.255
C2(su)->router(Config)#interface vlan 1
C2(su)->router(Config-if(Vlan 1))#ip access-group 1 in
18-80 Security Configuration