addNetworkAclOutboundRule

Available in VPC

Add a list of outbound rules for the network ACL.

Syntax

The addNetworkAclOutboundRule syntax is as follows:

./ncloud vpc addNetworkAclOutboundRule \
    --networkAclNo <network-acl-no> \
    --networkAclRuleList <rule-list> \
    [--regionCode <KR|SGN|JPN>] \
    [--output <json|xml>]

Options

This section describes the options available when running addNetworkAclOutboundRule.

Required options

The following options are required for addNetworkAclOutboundRule.

Options	Type	Required	Description
`--networkAclNo`	String	Required	Network ACL number See getNetworkAclList.
`--networkAclRuleList`	List	Required	Network ACL outbound rule list For each rule, enter {field='value'} pairs enclosed in quotes and separated by commas. `priority` (required): Priority of the outbound rule. `0`~`199`. Can't be duplicated with the priorities of other outbound rules. `protocolTypeCode` (required): Protocol type code. `TCP` \| `UDP` \| `ICMP` `ipBlock` (conditional): IP address range. Can't be used at the same time with `denyAllowGroupNo`. Example: `0.0.0.0/0`, `100.10.20.0/24`, `192.168.0.10/32` `denyAllowGroupNo` (conditional): Deny-allow group number. Can be specified instead of the allowed IP address range. Can't be used at the same time with `ipBlock`. See getNetworkAclDenyAllowGroupList. `portRange` (conditional): Port range. Do not enter if `protocolTypeCode` is `ICMP`. Example: Single port `22`, range `1-65535`. `ruleActionCode` (required): Whether to allow traffic. `ALLOW` \| `DROP` `networkAclRuleDescription` (optional): Description of the rule (0-1000 bytes).

Common options

For information about the options common to all vpc subcommands, see VPC options.

Examples

If the request to add an outbound network ACL rule is successful, the configuration information for each rule is returned.

Command

The command example is as follows:

./ncloud vpc addNetworkAclOutboundRule \
    --networkAclNo 34567890 \
    --networkAclRuleList "priority='0', protocolTypeCode='TCP', ipBlock='192.0.2.0/24', portRange='13306', ruleActionCode='ALLOW'" "priority='1', protocolTypeCode='TCP', ipBlock='192.0.2.0/24', portRange='13307', ruleActionCode='DROP'" \
    --regionCode KR \
    --output json

Output

The output example is as follows:

{
  "addNetworkAclOutboundRuleResponse": {
    "totalRows": 2,
    "networkAclRuleList": [
      {
        "networkAclNo": "34567890",
        "priority": 0,
        "protocolType": {
          "code": "TCP",
          "codeName": "tcp"
        },
        "portRange": "13306",
        "ruleAction": {
          "code": "ALLOW",
          "codeName": "Allow"
        },
        "createDate": "2026-07-07T14:37:34+0900",
        "ipBlock": "192.0.2.0/24",
        "denyAllowGroupNo": "",
        "networkAclRuleType": {
          "code": "OTBND",
          "codeName": "Outbound"
        },
        "networkAclRuleDescription": ""
      },
      {
        "networkAclNo": "34567890",
        "priority": 1,
        "protocolType": {
          "code": "TCP",
          "codeName": "tcp"
        },
        "portRange": "13307",
        "ruleAction": {
          "code": "DROP",
          "codeName": "Drop"
        },
        "createDate": "2026-07-07T14:37:34+0900",
        "ipBlock": "192.0.2.0/24",
        "denyAllowGroupNo": "",
        "networkAclRuleType": {
          "code": "OTBND",
          "codeName": "Outbound"
        },
        "networkAclRuleDescription": ""
      }
    ],
    "requestId": "c9d0e1f2-a3b4-5678-cdef-901234567890",
    "returnCode": "0",
    "returnMessage": "success"
  }
}