Enterasys Matrix 2G4072-52 Configuration Manual page 1379

14.3.12.4 ip access-group
Use this command to apply access restrictions to inbound or outbound frames on an interface when
operating in router mode.
ip access-group access-list-number {in | out}
NOTE: ACLs must be applied per routing interface. An entry (rule) can either be applied
to inbound or outbound frames.
Syntax Description
access-list-number
in
out
Command Syntax of the "no" Form
The "no" form of this command removes the specified access list:
no ip access-group access-list-number {in | out}
Command Type
Router command.
Command Mode
Interface configuration: Matrix>Router1(config-if(Vlan <vlan_id>))#
Command Defaults
None.
Example
This example shows how to apply access list 1 for all inbound frames on VLAN 1. Through the
definition of access list 1, only frames with destination 192.5.34.0 will be routed. All the frames
with other destination received on VLAN 1 are dropped:
Matrix>Router1(config)#access-list 1 permit 192.5.34.0 0.0.0.255
Matrix>Router1(config)#interface vlan 1
Matrix>Router1(config-if(Vlan 1))#ip access-group 1 in
Specifies the number of the access list to be applied to the
access list. This is a decimal number from 1 to 199.
Filters inbound frames.
Filters outbound frames.
Matrix DFE-Platinum and Diamond Series Configuration Guide
Security Configuration Command Set
Configuring Access Lists
14-169