Applying an Extended ACL to an Interface

Router(config)#int fa0/0 Router(config-if)#ip access-group 110 out

Takes all access list lines that are defined as being part of group 110 and applies them in an out-bound manner. Packets going out FA0/0 will be checked

Tip:

Access lists can be applied in either an inbound direction (keyword in) or in an outbound direction (keyword out).

Tip:

Only one access list can be applied per interface, per direction.