---
title: "addAccessControlGroupOutboundRule"
slug: "cli-vserver-acg-addaccesscontrolgroupoutboundrule"
tags: ["ACG", "VPC", "Server"]
updated: 2026-09-17T10:08:33Z
published: 2026-09-17T10:08:33Z
canonical: "cli.ncloud-docs.com/cli-vserver-acg-addaccesscontrolgroupoutboundrule"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://cli.ncloud-docs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# addAccessControlGroupOutboundRule

Available in VPC

Add an outbound rule to an ACG.

## Syntax

The `addAccessControlGroupOutboundRule` syntax is as follows:

```
./ncloud vserver addAccessControlGroupOutboundRule \
    --vpcNo <vpc-no> \
    --accessControlGroupNo <acg-no> \
    --accessControlGroupRuleList <rule-config> \
    [--regionCode <KR|SGN|JPN>] \
    [--output <json|xml>]
```

## Options

This section describes the options available when running `addAccessControlGroupOutboundRule`.

### Required options

The following options are required for `addAccessControlGroupOutboundRule`.

| Options | Type | Required | Description |
| --- | --- | --- | --- |
| `--vpcNo` | String | Required | VPC number - See [getVpcList](/docs/en/cli-vpc-vpcmanagement-getvpclist). |
| `--accessControlGroupNo` | String | Required | ACG number - See [getAccessControlGroupList](/docs/en/cli-vserver-acg-getaccesscontrolgrouplist). |
| `--accessControlGroupRuleList` | List | Required | List of ACG outbound rules - For each rule, enter {field=‘value’} pairs enclosed in quotes, separated by commas. - `protocolTypeCode` (required): Protocol type code. `TCP` \| `UDP` \| `ICMP` \| `1`~`254` (See [Protocol number](https://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml)) - `ipBlock` (conditional): Destination IP address block. Can't be used at the same time with `accessControlGroupSequence`. Example: `0.0.0.0/0`, `100.10.20.0/24` - `accessControlGroupSequence` (conditional): Destination ACG number. Can't be used at the same time with `ipBlock`. See [getAccessControlGroupList](/docs/en/cli-vserver-acg-getaccesscontrolgrouplist). - `portRange` (conditional): Allowed ports. Enter a single port or a port range. Required if `protocolTypeCode` is `TCP` (`6`) or `UDP` (`17`). Example: `22`, `1-65535` - `accessControlGroupRuleDescription` (optional): ACG outbound rule description (0-1000 bytes) |

### Common options

For information about the options common to all `vserver` subcommands, see [Server (VPC) options](/docs/en/cli-vserver#%EC%98%B5%EC%85%98).

## Examples

If the request to add an outbound rule to an ACG is successful, the protocol information and destination for each rule are returned.

### Command

The command example is as follows:

```
./ncloud vserver addAccessControlGroupOutboundRule \
    --vpcNo 12345678 \
    --accessControlGroupNo 67890123 \
    --accessControlGroupRuleList "protocolTypeCode='TCP', ipBlock='0.0.0.0/0', portRange='443', accessControlGroupRuleDescription='HTTPS egress'" \
    --regionCode KR \
    --output json
```

### Output

The output example is as follows:

```
{
  "addAccessControlGroupOutboundRuleResponse": {
    "totalRows": 1,
    "accessControlGroupRuleList": [
      {
        "accessControlGroupNo": "67890123",
        "protocolType": {
          "code": "TCP",
          "codeName": "tcp",
          "number": 6
        },
        "ipBlock": "0.0.0.0/0",
        "accessControlGroupSequence": "",
        "portRange": "443",
        "accessControlGroupRuleType": {
          "code": "OTBND",
          "codeName": "Outbound"
        },
        "accessControlGroupRuleDescription": "HTTPS egress"
      }
    ],
    "requestId": "d4e5f678-9012-3456-def0-456789012345",
    "returnCode": "0",
    "returnMessage": "success"
  }
}
```