User's Manual

402
53.2.4 Applying the Access List to the Global Mode
After the access list is created, you can apply it to the routing interface in the global configuration mode
including ingress and egress.
Run the following command in global mode:
Command Purpose
[no] {ip|ipv6} access-group name [egress |
vlan {word | add word | remove word]
Applies the established ip access list to an
interface or cancels it on the interface in the
global configuration mode.
name Name of the IP access control list
egress The access list is applied in egress.
Vlan The access list is applied in ingress.
Word vlan range table
Add add vlan range table
Remove delete vlan range table
If the designated access control list does not exist, all packets are allowed to pass through.
53.2.5 Applying the Access List to the Physical Interface
After the access list is created, you can apply it to the routing interface including ingress and egress.
Run the following command in physical interface configuration mode.
Command Purpose
[no] {ip|ipv6} access-group name
[egress]
Applies the established ip access list to an interface
or cancels it on the interface in the global
configuration mode, run the following command:
name Name of the IP access control list
egress Applies access list on the egress direction.
The default is the ingress direction.
If the designated access control list does not exist, all packets are allowed to pass through.
53.2.6 Extensible Access List Example
In the following example, the first line allows any new TCP to connect the destination port after port 1023. The