Specifications

3-597
Cisco Wide Area Application Services Command Reference
OL-16451-01
Chapter 3 CLI Commands
(config-if) ip access-group
(config-if) ip access-group
To control connections on a specific interface of a WAAS device by applying a predefined access list,
use the ip access-group interface configuration command. To disable an access list, use the no form of
this command.
ip access-group {acl-name | acl-num} {in | out}
no ip access-group {acl-name | acl-num} {in | out}
Syntax Description
Defaults No default behavior or values.
Command Modes interface configuration
Device Modes application-accelerator
central-manager
Usage Guidelines Use the ip access-group interface configuration command to activate an access list on a particular
interface. You can use one outbound access list and one inbound access list on each interface.
Before entering the ip access-group command, enter interface configuration mode for the interface to
which you want to apply the access list. Define the access list to apply using the ip access-list command.
Examples The following example shows how to apply the access list named acl-out to outbound traffic on the
interface Gigabit Ethernet 1/2:
WAE(config)# interface GigabitEthernet 1/2
WAE(config-if)# ip access-group acl-out out
Related Commands clear arp-cache
(config) ip access-list
show ip access-list
acl-name Alphanumeric identifier of up to 30 characters, beginning with a letter that
identifies the ACL to apply to the current interface.
acl-num Numeric identifier that identifies the access list to apply to the current
interface. For standard access lists, the valid range is 1 to 99; for extended
access lists, the valid range is 100 to 199.
in Applies the specified access list to inbound packets on the current interface.
out Applies the specified access list to outbound packets on the current
interface.