Может ли интерфейс иметь в своей конфигурации более одного оператора ip access-group??

In Cisco IOS versions 10.0 и позже, you can have two ip access-groupcommands per interface (one for each direction):

interface ethernet 0 ip access-group 1 in ip access-group 2 out

One access-groupis used for inbound traffic and one for outbound traffic. Refer to Configuring Commonly Used IP ACLsand Configuring IP Access Listsfor more information on ACLs.