To enable access control for the packets on the interface and control access to a Layer 2 or Layer 3 interface, use the command ip access-group in Interface Configuration Mode. The no form of this command removes all access groups or the specified access group from the interface. The direction of filtering is specified using the token in or out.
| Parameter | Type | Description |
|---|---|---|
<access‑list‑number(1-65535)> |
Enter a value to specify the IP access control list number which is to be enabled on the interface. This value ranges from 1 to 65535. | |
in |
Enter to configure the packets as Inbound packets. | |
out |
Enter to configure the packets as Outbound packets. Note:
Redirect Filter is not applicable for out bound packets. |
Interface Configuration Mode
This command executes only if IP access list with the same number has been created
iS5comm(config)# ip access-list standard 100
iS5comm(config-std-nacl)# exit
iS5comm(config)# int gi 0/1
is5comm (config-if)# ip access-group 100 in
iS5comm(config-if)# ip access-group 100 out