ADTRAN 1000R Series

Command Reference Guide VLAN Interface Config Command Set

ip access-group <listname> [in | out]

Use the ip access-group command to create an access list to be used for packets transmitted on or received

from the specified interface. Use the no form of this command to disable this type of control.

Syntax Description

<listname> Assigns an IP access list name.

in Enables access control on packets received on the specified interface.

out Enables access control on packets transmitted on the specified interface.

Default Values

By default, these commands are disabled.

Applicable Platforms

This command applies to the NetVanta 300, 1000R, and 2000 Series units.

Command History

Release 3.1 Command was introduced.

Functional Notes

When this command is enabled , th e IP destinatio n addr ess of each pa cket must b e validated before being

passed through. If the packet is not acceptable per these settings, it is dropped.

Usage Examples

The following example sets up the router to only allow Telnet traffic (as defined in the user- configu red

TelnetOnly IP access list) into the VLAN interface:

(config)#ip access-list extended TelnetOnly

(config-ext-nacl)#permit tcp any any eq telnet

(config-ext-nacl)#interface vlan 1

(config-interface-vlan 1)#ip access-group TelnetOnly in