What is the function of ip access-group ??? THX~

kitbson

Is a group of access list which are the same access list number ??

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

Webmaster

ip access-group is used to bind an access list to an interface. For example, if you use the following command in interface configuration mode:

ip access-group 2 in

it will bind ip access list 2 to the interface to control incoming traffic.

www.techexams.net/technotes/ccna/accesslists.shtml

kitbson

if number of 10 access-list are using
same access list number(110).
then enter "ip access-group 110 in" in serial interface 1,
10 access-list are exceuted in serial interface 1 ???

gravyjoe

Just because you create an access-list, doesn't mean that it's been applied yet. Unless you use the ip access-group command to apply it to an interface, the access list is not being used.

exkor5000

I got really confused by that stuff at first. The IOS is very very awkward OS to tell you honastly (in comparing with the systems I've worked with). Whenever I login to a router I just keep asking myself... WHY??
They should of went with Unix like design, with afew proprietery changes.
At least make a reasonable filesystem and shell (or CLI).

anywayz, to you quesation:

if number of 10 access-list are using
same access list number(110).

it doesnt matter, each decimal number would represent a differnt list.
so 110 is actually different from 10 or from 1010 or ftom 100.

then enter "ip access-group 110 in" in serial interface 1,
10 access-list are exceuted in serial interface 1 ???

It will not execute in Serial 1, it will be applied onto the Serial 1 internal settings. Internal setting such as IP address, encapsulations... you define all that stuff "in" the interface.

X