C. Router CLI Commands, Codes, and Designations
C-22 December 2002 9700-A2-GB20-20

[no] ip access-group

access-list-1-199num

[in | out]

Minimum Access Level: Administrator
Command Mode: config-if
Allows you to control access to an interface by allowing you to designate (or delete) a set
of access rules to be applied to either incoming or outgoing packets. By default, no access
lists are applied to interfaces.
Example: ip access-group 17 in
NOTE: A user may specify that an access list is applied to either inbound packets,
outbound packets, or both inbound and outbound packets (two commands). If a
specified access list does not exist, all packets are passed.
access-list-1-199num – The access list number. The valid ranges for access lists are:
1–99 – Standard IP access lists.
100–199 – Extended IP access lists.
in – Specifies that filters will be applied to inbound packets.
out – Specifies that filters will be applied to outbound packets. If no direction (in or out) is
specified, the filter is applies to outbound packets by default.

Table C-11. Filter Commands (4 of 4)