removeNetworkAclInboundRule

Available in VPC

Remove the list of inbound rules from the network ACL.

Syntax

The removeNetworkAclInboundRule syntax is as follows:

./ncloud vpc removeNetworkAclInboundRule \
    --networkAclNo <network-acl-no> \
    --networkAclRuleList <rule-list> \
    [--regionCode <KR|SGN|JPN>] \
    [--output <json|xml>]

Options

This section describes the options available when running removeNetworkAclInboundRule.

Required options

The following options are required for removeNetworkAclInboundRule.

Options	Type	Required	Description
`--networkAclNo`	String	Required	Network ACL number See getNetworkAclList.
`--networkAclRuleList`	List	Required	Network ACL inbound rule list For each rule, enter {field='value'} pairs enclosed in quotes and separated by commas. `priority` (required): Priority of the inbound rule. `0`~`199`. Can't be duplicated with the priorities of other inbound rules. `protocolTypeCode` (required): Protocol type code. `TCP` \| `UDP` \| `ICMP` `ipBlock` (conditional): IP address range. Can't be used at the same time with `denyAllowGroupNo`. Example: `0.0.0.0/0`, `100.10.20.0/24`, `192.168.0.10/32` `denyAllowGroupNo` (conditional): Deny-allow group number. Can be specified instead of the allowed IP address range. Can't be used at the same time with `ipBlock`. See getNetworkAclDenyAllowGroupList. `portRange` (conditional): Port range. Do not enter if `protocolTypeCode` is `ICMP`. Example: Single port `22`, range `1-65535`. `ruleActionCode` (required): Whether to allow traffic. `ALLOW` \| `DROP` See getNetworkAclRuleList.

Common options

For information about the options common to all vpc subcommands, see VPC options.

Examples

If the request to remove an inbound network ACL rule is successful, the configuration information for each remaining rule is returned.

Command

The command example is as follows:

./ncloud vpc removeNetworkAclInboundRule \
    --networkAclNo 34567890 \
    --networkAclRuleList "priority='0', protocolTypeCode='TCP', ipBlock='192.0.2.0/24', portRange='13306', ruleActionCode='ALLOW'" \
    --regionCode KR \
    --output json

Output

The output example is as follows:

{
  "removeNetworkAclInboundRuleResponse": {
    "totalRows": 1,
    "networkAclRuleList": [
      {
        "networkAclNo": "34567890",
        "priority": 1,
        "protocolType": {
          "code": "TCP",
          "codeName": "tcp"
        },
        "portRange": "13307",
        "ruleAction": {
          "code": "DROP",
          "codeName": "Drop"
        },
        "createDate": "2026-07-07T14:37:11+0900",
        "ipBlock": "192.0.2.0/24",
        "denyAllowGroupNo": "",
        "networkAclRuleType": {
          "code": "INBND",
          "codeName": "Inbound"
        },
        "networkAclRuleDescription": ""
      }
    ],
    "requestId": "b8c9d0e1-f2a3-4567-bcde-890123456789",
    "returnCode": "0",
    "returnMessage": "success"
  }
}