ADTRAN AOS Version R10.1.0 Command Reference Manual page 1614

Command Reference Guide
ip access-group <ipv4 acl name>
Use the ip access-group command to apply an Internet Protocol version 4 (IPv4) access control list (ACL)
to be used for IPv4 packets transmitted on or received from the specified interface. Use the no form of this
command to disable this type of control. Variations of this command include:
ip access-group <ipv4 acl name> in
ip access-group <ipv4 acl name> out
Syntax Description
<ipv4 acl name>
in
out
Default Values
By default, these commands are disabled.
Command History
Release 3.1
Release 5.1
Release A4.01
Functional Notes
When this command is enabled, the IPv4 destination address of each packet must be validated before
being passed through. If the packet is not acceptable per these settings, it is dropped.
Usage Examples
The following example configures the router to only allow IPv4 Telnet traffic (as defined in the
user-configured TelnetOnly ACL) into the Ethernet interface:
(config)#ip access-list extended TelnetOnly
(config-ext-nacl)#permit tcp any any eq telnet
(config-ext-nacl)#interface ethernet 0/1
(config-eth 0/1)#ip access-group TelnetOnly in
60000CRG0-35E
Applies the named IPv4 ACL to the interface.
Enables access control on IPv4 packets received on the specified interface.
Enables access control on IPv4 packets transmitted on the specified
interface.
Command was introduced.
Command was expanded to include the Ethernet subinterfaces.
Command was expanded to include the Metro Ethernet Forum (MEF)
Ethernet Interface.
Copyright © 2012 ADTRAN, Inc.
Ethernet Interface Command Set
1614