Security

ip access-group <acl> in|out

Apply an ACL to inbound or outbound traffic on this interface.

Works on: RouterMode: iface

Watch out

'in' = traffic arriving on the interface; 'out' = traffic leaving. Apply close to source for blocks.

Run this command live

Don't just read it — type ip access-group <acl> in|out in a real network simulator in your browser and watch it take effect. No install, no account needed to start.

Open the lab

Frequently asked

What does the "ip access-group <acl> in|out" command do?

Apply an ACL to inbound or outbound traffic on this interface.

What's the common gotcha with "ip access-group <acl> in|out"?

'in' = traffic arriving on the interface; 'out' = traffic leaving. Apply close to source for blocks.

More Security commands

access-list <10-99> {permit|deny} <src> <wild>ip access-list extended <name>switchport port-security switchport port-security maximum <n>switchport port-security violation {shutdown|restrict|protect}line vty 0 4 transport input ssh login local crypto key generate rsa

← Back to the full command reference