addNetworkAclInboundRule

Available in VPC

Add a list of inbound rules for the network ACL.

Syntax

The addNetworkAclInboundRule syntax is as follows:

./ncloud vpc addNetworkAclInboundRule \
    --networkAclNo <network-acl-no> \
    --networkAclRuleList <rule-list> \
    [--regionCode <KR|SGN|JPN>] \
    [--output <json|xml>]

Options

This section describes the options available when running addNetworkAclInboundRule.

Required options

The following options are required for addNetworkAclInboundRule.

Options	Type	Required	Description
`--networkAclNo`	String	Required	Network ACL number See getNetworkAclList.
`--networkAclRuleList`	List	Required	Network ACL inbound rule list For each rule, enter {field='value'} pairs enclosed in quotes and separated by commas. `priority` (required): Priority of the inbound rule. `0`~`199`. Can't be duplicated with the priorities of other inbound rules. `protocolTypeCode` (required): Protocol type code. `TCP` \| `UDP` \| `ICMP` `ipBlock` (conditional): IP address range. Can't be used at the same time with `denyAllowGroupNo`. `denyAllowGroupNo` (conditional): Deny-allow group number. Can be specified instead of the allowed IP address range. Can't be used at the same time with `ipBlock`. See getNetworkAclDenyAllowGroupList. `portRange` (conditional): Port range. Do not enter if `protocolTypeCode` is `ICMP`. Example: Single port `22`, range `1-65535`. `ruleActionCode` (required): Whether to allow traffic. `ALLOW` \| `DROP` `networkAclRuleDescription` (optional): Description of the rule (0-1000 bytes).

Common options

For information about the options common to all vpc subcommands, see VPC options.

Examples

If the request to add an inbound network ACL rule is successful, the configuration information for each rule is returned.

Command

The command example is as follows:

./ncloud vpc addNetworkAclInboundRule \
    --networkAclNo 34567890 \
    --networkAclRuleList "priority='0', protocolTypeCode='TCP', ipBlock='192.0.2.0/24', portRange='13306', ruleActionCode='ALLOW'" "priority='1', protocolTypeCode='TCP', ipBlock='192.0.2.0/24', portRange='13307', ruleActionCode='DROP'" \
    --regionCode KR \
    --output json

Output

The output example is as follows:

{
  "addNetworkAclInboundRuleResponse": {
    "totalRows": 2,
    "networkAclRuleList": [
      {
        "networkAclNo": "34567890",
        "priority": 0,
        "protocolType": {
          "code": "TCP",
          "codeName": "tcp"
        },
        "portRange": "13306",
        "ruleAction": {
          "code": "ALLOW",
          "codeName": "Allow"
        },
        "createDate": "2026-07-07T14:37:11+0900",
        "ipBlock": "192.0.2.0/24",
        "denyAllowGroupNo": "",
        "networkAclRuleType": {
          "code": "INBND",
          "codeName": "Inbound"
        },
        "networkAclRuleDescription": ""
      },
      {
        "networkAclNo": "34567890",
        "priority": 1,
        "protocolType": {
          "code": "TCP",
          "codeName": "tcp"
        },
        "portRange": "13307",
        "ruleAction": {
          "code": "DROP",
          "codeName": "Drop"
        },
        "createDate": "2026-07-07T14:37:11+0900",
        "ipBlock": "192.0.2.0/24",
        "denyAllowGroupNo": "",
        "networkAclRuleType": {
          "code": "INBND",
          "codeName": "Inbound"
        },
        "networkAclRuleDescription": ""
      }
    ],
    "requestId": "a7b8c9d0-e1f2-3456-abcd-789012345678",
    "returnCode": "0",
    "returnMessage": "success"
  }
}