An ingress-group is used to link tap interfaces to the specified route-map, which defines actions to be taken on packets at ingress.
