Access Groups

Access Groups
Access groups do not filter routes; they are used to filter packets traversing a device. An access
group is applied to an interface in order to allow and/or deny certain information from entering
or leaving a device. You can actually think of access groups as a security measure.
Access groups apply standard or extended IP access lists to an interface. In order to configure
an access group, the following command needs to be entered on the interface you want the
access group to apply to:
ip access-group
number
[
in
|
out
]
number
- the number of the access list to apply to the access group.
Now would be a good time to look at Figure 10.1.