Siemens SCALANCE XM-400 - Page 840

Security and authentication
11.4 IP access control list
SCALANCE XM-400/XR-500 Command Line Interface (CLI)
840 Configuration Manual, 06/2016, C79000-G8976-C252-11
Note
Processing order of the lists
The access control lists are processed on the interface in the order in which they were
created.
The index number of the access control list is not used
for this.
Requirement
You are in the ACL standard configuration mode.
The command prompt is as follows:
cli(config-std-nacl)#
Syntax
Call up the command with the following parameters:
permit {any | ospf | vrrp | <protocol-type type(1-255)>} {any | host <src-ip> |
<network-src-ip> <mask>} {any | host <dest-ip> | <network-dest-ip> <mask>} [dscp
<value(0-63)>]
or
permit {any | host <src-ip> | <network-src-ip> <mask>} [{any | host <dest-ip> |
<network-dest-ip> <mask>}]
The parameters have the following meaning:
Parameter
Description
Range of values / note
any
Allows all protocols.
-
ospf
Forwarding of OSPF frames.
-
vrrp
Forwarding of VRRP frames.
-
protocol-type
Keyword for the protocol type
-
type
Protocol type
1 ... 255
any
Allows all incoming frames
-
host
Keyword for a single IP address
-
src-ip
Source IP address
Enter a valid IP address.
network-src-ip
Network source address
Enter a valid combination of IP
address and subnet mask.
mask
Corresponding subnet mask
any
Allows all outgoing frames
-
host
Keyword for a single IP address
-
dest-ip
Destination IP address
Enter a valid IP address.
network-dest-ip
Network destination address Enter a valid combination of IP
address and subnet mask.
mask
Corresponding subnet mask