---
title: "addNetworkAclOutboundRule"
slug: "cli-vpc-networkacl-addnetworkacloutboundrule"
tags: ["VPC"]
updated: 2026-10-08T05:06:31Z
published: 2026-10-08T05:06:31Z
canonical: "cli.ncloud-docs.com/cli-vpc-networkacl-addnetworkacloutboundrule"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://cli.ncloud-docs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# addNetworkAclOutboundRule

Available in VPC

Add a list of outbound rules for the network ACL.

## Syntax

The `addNetworkAclOutboundRule` syntax is as follows:

```
./ncloud vpc addNetworkAclOutboundRule \
    --networkAclNo <network-acl-no> \
    --networkAclRuleList <rule-list> \
    [--regionCode <KR|SGN|JPN>] \
    [--output <json|xml>]
```

## Options

This section describes the options available when running `addNetworkAclOutboundRule`.

### Required options

The following options are required for `addNetworkAclOutboundRule`.

| Options | Type | Required | Description |
| --- | --- | --- | --- |
| `--networkAclNo` | String | Required | Network ACL number - See [getNetworkAclList](/docs/en/cli-vpc-networkacl-getnetworkacllist). |
| `--networkAclRuleList` | List | Required | Network ACL outbound rule list - For each rule, enter {field='value'} pairs enclosed in quotes and separated by commas. - `priority` (required): Priority of the outbound rule. `0`~`199`. Can't be duplicated with the priorities of other outbound rules. - `protocolTypeCode` (required): Protocol type code. `TCP` \| `UDP` \| `ICMP` - `ipBlock` (conditional): IP address range. Can't be used at the same time with `denyAllowGroupNo`. Example: `0.0.0.0/0`, `100.10.20.0/24`, `192.168.0.10/32` - `denyAllowGroupNo` (conditional): Deny-allow group number. Can be specified instead of the allowed IP address range. Can't be used at the same time with `ipBlock`. See [getNetworkAclDenyAllowGroupList](/docs/en/cli-vpc-networkacl-getnetworkacldenyallowgrouplist). - `portRange` (conditional): Port range. Do not enter if `protocolTypeCode` is `ICMP`. Example: Single port `22`, range `1-65535`. - `ruleActionCode` (required): Whether to allow traffic. `ALLOW` \| `DROP` - `networkAclRuleDescription` (optional): Description of the rule (0-1000 bytes). |

### Common options

For information about the options common to all `vpc` subcommands, see [VPC options](/docs/en/cli-vpc#%EC%98%B5%EC%85%98).

## Examples

If the request to add an outbound network ACL rule is successful, the configuration information for each rule is returned.

### Command

The command example is as follows:

```
./ncloud vpc addNetworkAclOutboundRule \
    --networkAclNo 34567890 \
    --networkAclRuleList "priority='0', protocolTypeCode='TCP', ipBlock='192.0.2.0/24', portRange='13306', ruleActionCode='ALLOW'" "priority='1', protocolTypeCode='TCP', ipBlock='192.0.2.0/24', portRange='13307', ruleActionCode='DROP'" \
    --regionCode KR \
    --output json
```

### Output

The output example is as follows:

```
{
  "addNetworkAclOutboundRuleResponse": {
    "totalRows": 2,
    "networkAclRuleList": [
      {
        "networkAclNo": "34567890",
        "priority": 0,
        "protocolType": {
          "code": "TCP",
          "codeName": "tcp"
        },
        "portRange": "13306",
        "ruleAction": {
          "code": "ALLOW",
          "codeName": "Allow"
        },
        "createDate": "2026-07-07T14:37:34+0900",
        "ipBlock": "192.0.2.0/24",
        "denyAllowGroupNo": "",
        "networkAclRuleType": {
          "code": "OTBND",
          "codeName": "Outbound"
        },
        "networkAclRuleDescription": ""
      },
      {
        "networkAclNo": "34567890",
        "priority": 1,
        "protocolType": {
          "code": "TCP",
          "codeName": "tcp"
        },
        "portRange": "13307",
        "ruleAction": {
          "code": "DROP",
          "codeName": "Drop"
        },
        "createDate": "2026-07-07T14:37:34+0900",
        "ipBlock": "192.0.2.0/24",
        "denyAllowGroupNo": "",
        "networkAclRuleType": {
          "code": "OTBND",
          "codeName": "Outbound"
        },
        "networkAclRuleDescription": ""
      }
    ],
    "requestId": "c9d0e1f2-a3b4-5678-cdef-901234567890",
    "returnCode": "0",
    "returnMessage": "success"
  }
}
```