C
OMMAND
L
INE
I
NTERFACE
3-178
This permits all TCP packets from class C addresses 192.168.1.0 with the
TCP control code set to “SYN.”
Related Commands
access-list ip (3-174)
ip access-group
Use this command to bind a port to an IP ACL. Use the no form to
remove the port.
Syntax
ip access-group acl_name in
no ip access-group acl_name in
• acl_name – Name of the ACL. (Maximum length: 16 characters)
• in – Indicates that this list applies to input packets.
Default Setting
None
Command Mode
Interface Configuration (Ethernet)
Example
Related Commands
show ip access-list (3-180)
Console(config-ext-acl)#permit tcp 192.168.1.0 255.255.255.0 any
control-flag 2 2
Console(config-ext-acl)#
Console(config)#int eth 1/12
Console(config-if)#ip access-group mark in
Console(config-if)#