Siemens SCALANCE XM-400 - Page 844

Security and authentication
11.4 IP access control list
SCALANCE XM-400/XR-500 Command Line Interface (CLI)
844 Configuration Manual, 06/2016, C79000-G8976-C252-11
Requirement
You are in the ACL standard configuration mode.
The command prompt is as follows:
cli(config-std-nacl)#
Syntax
Call up the command with the following parameters:
permit icmp {any | host <src-ip-address> | <src-ip-address> <src-mask>} [{any | host
<dest-ip-address> | <dest-ip-address> <dest-mask>}] [<message-type type(0-255)>]
[<message-code code(0-255)>]
The parameters have the following meaning:
Parameter
Description
Range of values / note
any
Allows all incoming frames
-
host
Keyword for a an individual IPv4 ad-
dress
-
src-ip-address
Source IPv4 address
Enter a valid IPv4 address.
src-ip-address
Network source address Enter a valid combination of IPv4
address and subnet mask.
src-mask
Corresponding subnet mask
any
Allows all outgoing frames
-
host
Keyword for a an individual IPv4 ad-
dress
-
dest-ip-address
Destination IPv4 address
Enter a valid IPv4 address.
dest-ip-address
Network destination address
Enter a valid combination of IPv4
address and subnet mask.
dest-mask
Corresponding subnet mask
message-type
Keyword for the ICMP message type
-
type
ICMP message type
0 ... 255
message-code
Keyword for the ICMP message code
-
code
ICMP message code
0 ... 255
Result
The IP access list for ICMP messages has been configured.
Note
Subnet mask for individual hosts
If you create the rule for a single system (one IPv4 address), specify the subne
t mask
"255.255.255.255". As an alternative, you can specify the keyword "host" followed by the
IPv4 address.