R1(config)# interface tunnel 0 R1(config-if)# ip access-group outgoing_traffic_tun0 out