In Cisco IOS versions 10.0 and later, you can have two ip access-groupcommands per interface (one for each direction):
interfaccia ethernet 0 ip access-group 1 in ip access-group 2 out
One access-groupis used for inbound traffic and one for outbound traffic. Refer to Configuring Commonly Used IP ACLsand Configuring IP Access Listsfor more information on ACLs.