Documentation Index

Fetch the complete documentation index at: https://cli.ncloud-docs.com/llms.txt

Use this file to discover all available pages before exploring further.

removeAccessControlGroupInboundRule

Prev Next

Available in VPC

Delete an inbound rule from an ACG.

Syntax

The removeAccessControlGroupInboundRule syntax is as follows:

./ncloud vserver removeAccessControlGroupInboundRule \
    --vpcNo <vpc-no> \
    --accessControlGroupNo <acg-no> \
    --accessControlGroupRuleList <rule-config> \
    [--regionCode <KR|SGN|JPN>] \
    [--output <json|xml>]

Options

This section describes the options available when running removeAccessControlGroupInboundRule.

Required options

The following options are required for removeAccessControlGroupInboundRule.

Options Type Required Description
--vpcNo String Required VPC number
--accessControlGroupNo String Required ACG number
--accessControlGroupRuleList List Required List of ACG inbound rules
  • For each rule, enter {field=‘value’} pairs enclosed in quotes, separated by commas.
    • protocolTypeCode (required): Protocol type code. TCP | UDP | ICMP | 1~254 (See Protocol number)
    • ipBlock (conditional): Source IP address block. Can't be used at the same time with accessControlGroupSequence. Example: 0.0.0.0/0, 100.10.20.0/24
    • accessControlGroupSequence (conditional): Source ACG number. Can't be used at the same time with ipBlock. See getAccessControlGroupList.
    • portRange (conditional): Allowed ports. Enter a single port or a port range. Required if protocolTypeCode is TCP (6) or UDP (17). Example: 22, 1-65535

Common options

For information about the options common to all vserver subcommands, see Server (VPC) options.

Examples

If the request to delete an inbound rule from an ACG is successful, the protocol information and access source of the remaining rules are returned.

Command

The command example is as follows:

./ncloud vserver removeAccessControlGroupInboundRule \
    --vpcNo 12345678 \
    --accessControlGroupNo 67890123 \
    --accessControlGroupRuleList "protocolTypeCode='TCP', ipBlock='192.0.2.0/24', portRange='80'" \
    --regionCode KR \
    --output json

Output

The output example is as follows:

{
  "removeAccessControlGroupInboundRuleResponse": {
    "totalRows": 1,
    "accessControlGroupRuleList": [
      {
        "accessControlGroupNo": "67890123",
        "protocolType": {
          "code": "TCP",
          "codeName": "tcp",
          "number": 6
        },
        "ipBlock": "192.0.2.0/24",
        "accessControlGroupSequence": "",
        "portRange": "22",
        "accessControlGroupRuleType": {
          "code": "INBND",
          "codeName": "Inbound"
        },
        "accessControlGroupRuleDescription": "SSH from office"
      }
    ],
    "requestId": "07890123-4567-89ab-0123-789012345678",
    "returnCode": "0",
    "returnMessage": "success"
  }
}