Security and authentication
11.3 MAC access control list
SCALANCE XM-400/XR-500 Command Line Interface (CLI)
830 Configuration Manual, 06/2016, C79000-G8976-C252-11
The access control list contains only one entry. If you want to lock or permit further
addresses, create a new access control list.
Note
Processing order of the lists
The access control lists are processed on the interface in the order in which they were
created.
The index number of the access control list is not used for this.
You are in the MAC ACL configuration mode.
The command prompt is as follows:
cli(config-ext-macl)#
Call up the command with the following parameters:
permit {any|host<src-mac-address>}{any|host<dest-mac-address>}
The parameters have the following meaning:
Keyword for the MAC address of an
incoming connection that is permitted
-
MAC address of the permitted incom-
Specify a valid MAC address.
Keyword for the MAC address of an
outgoing connection that is permitted
-
MAC address of the permitted outgoing
Specify a valid MAC address.
For information on names of addresses and interfaces, refer to the section "Interface
identifiers and addresses (Page 42)".
Note
MAC address input
Use "any", if the rule is to apply to all src and/or dest MAC a
ddresses. This corresponds to
the MAC address "00:00:00:00:00:00".