Can an interface have more than one ip access-group statement in its configuration?
A. In Cisco IOS versions 10.0 and later, you can have two ip access-group commands per interface (one for each direction): interface ethernet 0 ip access-group 1 in ip access-group 2 out One access-group is used for inbound traffic and one for outbound traffic. Refer to Configuring Commonly Used IP ACLs and Configuring IP Access Lists for more information on ACLs.