ip port access-group
To apply an IPv4 access control list (ACL) to an interface as a port ACL, use the ip port access-group
command. To remove an IPv4 ACL from an interface, use the no form of this command.
ip port access-group access-list-name in
no ip port access-group access-list-name in
Syntax Description
Name of the IPv4 ACL, which can be up to 64
alphanumeric, case-sensitive characters.
access-list-name
Specifies that the ACL applies to inbound traffic.in
Command Default
in
Command Modes
Interface configuration
Command History
ModificationRelease
This command was introduced.4.0(1)
Usage Guidelines
By default, no IPv4 ACLs are applied to an interface.
You can use the ip port access-group command to apply an IPv4 ACL as a port ACL to the following interface
types:
•
Layer 2 Ethernet interfaces
•
Layer 2 Ethernet port-channel interfaces
You can also use the ip port access-group command to apply an IPv4 ACL as a port ACL to the following
interface types:
•
VLAN interfaces
You must enable VLAN interfaces globally before you can configure a VLAN interface. For more
information, see the feature interface-vlan command in the Cisco Nexus 7000 Series NX-OS Interfaces
Command Reference.
Note
•
Layer 3 Ethernet interfaces
Cisco Nexus 7000 Series Security Command Reference
419
I Commands
ip port access-group