IPv4 access-group (PACL)

Allows for the configuration of an IPv4 ACL on a port to be shared.


ip access-group <ACL-ID> in|out shared
no ip access-group <ACL-ID> in|out shared


Apply the specified IPv4 ACL to inbound or outbound packets on this interface. When ACLs are shared, hardware resource usage is optimized where possible.



Apply the IPv4 ACL so as to share hardware resources.


  • Per application statistics will not be available when ACLs are applied as shared.

  • Connection rate filter ACLs cannot be applied on this interface.

ip access-group my-acl out shared

switch(config)# int a1
switch(eth-a1)# ip access-group my-acl out shared