Cisco Network Function Virtualization Infrastructure Software Configuration Guide, Release 26.2 and Later

PDF

Cisco Network Function Virtualization Infrastructure Software Configuration Guide, Release 26.2 and Later

Configure the IP receive ACL

Updated: June 29, 2026

Want to summarize with AI?

Log in

Configure IP-receive-ACL to block or allow certain traffic based on the IP address and service ports.

This task configures the IP receive ACL to filter out unwanted traffic by allowing or blocking traffic based on IP addresses and service ports.

Use the IP receive ACL feature to control access to the management interface by specifying which source networks are permitted to connect.

Before you begin

Follow these steps to configure the IP receive ACL:

Procedure

1.

Configure the source network for Access Control List (ACL) access.

Example:

configure terminal
system settings ip-receive-acl 198.0.2.0/24
action accept priority 10
commit
2.

Verify the trusted IP connection using the show running-config system settings IP-receive-ACL command.

This command displays the configured source network for ACL access to the management interface.

Example:

nfvis# show running-config system settings ip-receive-acl 
system settings ip-receive-acl 198.51.100.11/24
service
[ ssh https scpd]
action accept
priority 100

The IP receive ACL is configured and the trusted IP connection settings are verified. Traffic from the specified source network is now allowed based on the configured ACL rules.

Configure port 22222 and management interface ACL

Use this task to configure an IP receive Access Control List (ACL) to filter traffic. This allows you to block or allow specific traffic based on IP addresses and service ports to enhance network security.

The IP receive ACL enables you to control access to the management interface. Note that port 22222, used for the SCP server, is closed by default. You must explicitly open this port if you need to SCP files into NFVIS from an external server.

Note

The SCP command cannot be used to copy files between two NFVIS devices.

Procedure

1.

Configure the source network for ACL access.

Follow these steps to define the source network allowed to access the management interface:

configure terminal
system settings ip-receive-acl 198.0.2.0/24
action accept priority 10
commit
2.

Open port 22222 for SCP access.

If you need to SCP files from an external server, follow these steps to open the port:

Example:


config terminal
system settings ip-receive-acl address/mask_len service scpd priority 2 action accept
commit
Note

The ACL is identified by the address. If you remove this ACL, all other ACLs sharing the same address are also removed. You must reconfigure those ACLs if necessary.
3.

Verify the interface configuration using the show running-config system settings ip-receive-ACL command.

Example:


nfvis# show running-config system settings ip-receive-acl

system settings ip-receive-acl 10.156.0.0/16

 service  [ ssh https scpd ]

 action   accept

 priority 100

!

Port 22222 is now open and configured for SCP file transfer from external servers to the NFVIS system.