---
title: "createNetworkAclDenyAllowGroup"
slug: "cli-vpc-networkacl-createnetworkacldenyallowgroup"
tags: ["VPC"]
updated: 2026-10-08T05:06:38Z
published: 2026-10-08T05:06:38Z
canonical: "cli.ncloud-docs.com/cli-vpc-networkacl-createnetworkacldenyallowgroup"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://cli.ncloud-docs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# createNetworkAclDenyAllowGroup

Available in VPC

Create a network ACL Deny-Allow group by specifying a VPC number.

## Syntax

The `createNetworkAclDenyAllowGroup` syntax is as follows:

```
./ncloud vpc createNetworkAclDenyAllowGroup \
    --vpcNo <vpc-no> \
    [--networkAclDenyAllowGroupName <deny-allow-group-name>] \
    [--networkAclDenyAllowGroupDescription <deny-allow-group-description>] \
    [--regionCode <KR|SGN|JPN>] \
    [--output <json|xml>]
```

## Options

This section describes the options available when running `createNetworkAclDenyAllowGroup`.

### Required options

The following options are required for `createNetworkAclDenyAllowGroup`.

| Options | Type | Required | Description |
| --- | --- | --- | --- |
| `--vpcNo` | String | Required | VPC number - See [getVpcList](/docs/en/cli-vpc-vpcmanagement-getvpclist). |

### Optional options

These are the optional options for `createNetworkAclDenyAllowGroup`. Options that are not specified will use their default values.

| Options | Type | Required | Description |
| --- | --- | --- | --- |
| `--networkAclDenyAllowGroupName` | String | Optional | Network ACL deny-allow group name - Enter 3-30 characters, including lowercase English letters, numbers, and special character `-`. - The string must begin with an English letter and end with an English letter or number. - If not entered, NAVER Cloud Platform will assign one automatically. |
| `--networkAclDenyAllowGroupDescription` | String | Optional | Description for the network ACL deny-allow group (byte) - 0-1000 |

### Common options

For information about the options common to all `vpc` subcommands, see [VPC options](/docs/en/cli-vpc#%EC%98%B5%EC%85%98).

## Examples

If the request to create a network ACL deny-allow group is successful, the group's configuration information and creation status are returned.

### Command

The command example is as follows:

```
./ncloud vpc createNetworkAclDenyAllowGroup \
    --vpcNo 12345678 \
    --networkAclDenyAllowGroupName test-dag-01 \
    --networkAclDenyAllowGroupDescription "Test deny-allow group" \
    --regionCode KR \
    --output json
```

### Output

The output example is as follows:

```
{
  "createNetworkAclDenyAllowGroupResponse": {
    "totalRows": 1,
    "networkAclDenyAllowGroupList": [
      {
        "networkAclDenyAllowGroupNo": "78901234",
        "networkAclDenyAllowGroupName": "test-dag-01",
        "networkAclDenyAllowGroupStatus": {
          "code": "RUN",
          "codeName": "In operation"
        },
        "vpcNo": "12345678",
        "networkAclDenyAllowGroupDescription": "Test deny-allow group",
        "createDate": "2026-07-07T14:41:47+0900",
        "isApplied": false
      }
    ],
    "requestId": "e1f2a3b4-c5d6-7890-efab-123456789012",
    "returnCode": "0",
    "returnMessage": "success"
  }
}
```