---
title: "removeNetworkAclInboundRule"
slug: "cli-vpc-networkacl-removenetworkaclinboundrule"
tags: ["VPC"]
updated: 2026-10-08T05:06:41Z
published: 2026-10-08T05:06:41Z
canonical: "cli.ncloud-docs.com/cli-vpc-networkacl-removenetworkaclinboundrule"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://cli.ncloud-docs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# removeNetworkAclInboundRule

Available in VPC

Remove the list of inbound rules from the network ACL.

## Syntax

The `removeNetworkAclInboundRule` syntax is as follows:

```
./ncloud vpc removeNetworkAclInboundRule \
    --networkAclNo <network-acl-no> \
    --networkAclRuleList <rule-list> \
    [--regionCode <KR|SGN|JPN>] \
    [--output <json|xml>]
```

## Options

This section describes the options available when running `removeNetworkAclInboundRule`.

### Required options

The following options are required for `removeNetworkAclInboundRule`.

| Options | Type | Required | Description |
| --- | --- | --- | --- |
| `--networkAclNo` | String | Required | Network ACL number - See [getNetworkAclList](/docs/en/cli-vpc-networkacl-getnetworkacllist). |
| `--networkAclRuleList` | List | Required | Network ACL inbound rule list - For each rule, enter {field='value'} pairs enclosed in quotes and separated by commas. - `priority` (required): Priority of the inbound rule. `0`~`199`. Can't be duplicated with the priorities of other inbound rules. - `protocolTypeCode` (required): Protocol type code. `TCP` \| `UDP` \| `ICMP` - `ipBlock` (conditional): IP address range. Can't be used at the same time with `denyAllowGroupNo`. Example: `0.0.0.0/0`, `100.10.20.0/24`, `192.168.0.10/32` - `denyAllowGroupNo` (conditional): Deny-allow group number. Can be specified instead of the allowed IP address range. Can't be used at the same time with `ipBlock`. See [getNetworkAclDenyAllowGroupList](/docs/en/cli-vpc-networkacl-getnetworkacldenyallowgrouplist). - `portRange` (conditional): Port range. Do not enter if `protocolTypeCode` is `ICMP`. Example: Single port `22`, range `1-65535`. - `ruleActionCode` (required): Whether to allow traffic. `ALLOW` \| `DROP` - See [getNetworkAclRuleList](/docs/en/cli-vpc-networkacl-getnetworkaclrulelist). |

### Common options

For information about the options common to all `vpc` subcommands, see [VPC options](/docs/en/cli-vpc#%EC%98%B5%EC%85%98).

## Examples

If the request to remove an inbound network ACL rule is successful, the configuration information for each remaining rule is returned.

### Command

The command example is as follows:

```
./ncloud vpc removeNetworkAclInboundRule \
    --networkAclNo 34567890 \
    --networkAclRuleList "priority='0', protocolTypeCode='TCP', ipBlock='192.0.2.0/24', portRange='13306', ruleActionCode='ALLOW'" \
    --regionCode KR \
    --output json
```

### Output

The output example is as follows:

```
{
  "removeNetworkAclInboundRuleResponse": {
    "totalRows": 1,
    "networkAclRuleList": [
      {
        "networkAclNo": "34567890",
        "priority": 1,
        "protocolType": {
          "code": "TCP",
          "codeName": "tcp"
        },
        "portRange": "13307",
        "ruleAction": {
          "code": "DROP",
          "codeName": "Drop"
        },
        "createDate": "2026-07-07T14:37:11+0900",
        "ipBlock": "192.0.2.0/24",
        "denyAllowGroupNo": "",
        "networkAclRuleType": {
          "code": "INBND",
          "codeName": "Inbound"
        },
        "networkAclRuleDescription": ""
      }
    ],
    "requestId": "b8c9d0e1-f2a3-4567-bcde-890123456789",
    "returnCode": "0",
    "returnMessage": "success"
  }
}
```