ip access-group

Applies an access list to the interface.

ip access-group <name> {in | out}
 
no ip access-group [<name>] {in | out}
 

• name--name of the access list to be applied to the interface

Must be in interface configuration mode (config-if), which requires privileged-level access.

Available for use multiple times in the configuration.

No access list.

Use the ip access-group command to apply an access list (use the ip access-list command to create the list).

Use the keyword in if the access list is to be applied to packets inbound to the interface.

Use the keyword out if the access list is to be applied to packets outbound from the interface.

Use the no form of the command to remove the reference to an access list from an interface. If no name argument is specified, then all access list references will be removed from the interface.