ADTRAN AOS Version R10.1.0 Command Reference Manual page 2109

Command Reference Guide
ip access-policy <ipv4 acp name>
Use the ip access-policy command to assign a specified Internet Protocol version 4 (IPv4) access control
policy (ACP) to an interface. ACPs are applied to traffic entering an interface. Use the no form of this
command to remove an ACP association. For more information on using ACPs, refer to
<ipv4 acp name> on page
Configured ACPs will only be active if the ip firewall command has been entered at the
Global Configuration mode prompt to enable the AOS security features. All configuration
parameters are valid, but no security data processing will be attempted unless the security
features are enabled.
Syntax Description
<ipv4 acp name>
Default Values
By default, there are no configured ACPs associated with an interface.
Command History
Release 2.1
Release 5.1
Release 6.1
Release 15.1
Release 17.9
Functional Notes
To assign an ACP to an interface, enter the interface configuration mode for the desired interface and enter
ip access-policy <ipv4 acp name>.
Usage Examples
The following example associates the ACP PRIVATE (to allow inbound traffic to the Web server) to the
demand interface 1:
Enable the AOS security features:
(config)#ip firewall
Associate the access policy with the demand interface 1:
(config)#interface demand 1
(config-demand 1)#ip access-policy PRIVATE
60000CRG0-35E
1058.
Identifies the configured IPv4 ACP by alphanumeric descriptor (all ACP
descriptors are case sensitive).
Command was introduced.
Command was expanded to include the Ethernet subinterfaces.
Command was expanded to include the virtual local area network (VLAN)
interfaces.
Command was expanded to include the bridged virtual interfaces (BVIs).
Command was changed to require the ip keyword.
Copyright © 2012 ADTRAN, Inc.
Demand Interface Command Set
ip policy-class
2109