Security and authentication
11.4 IP access control list
SCALANCE XM-400/XR-500 Command Line Interface (CLI)
844 Configuration Manual, 06/2016, C79000-G8976-C252-11
You are in the ACL standard configuration mode.
The command prompt is as follows:
cli(config-std-nacl)#
Call up the command with the following parameters:
permit icmp {any | host <src-ip-address> | <src-ip-address> <src-mask>} [{any | host
<dest-ip-address> | <dest-ip-address> <dest-mask>}] [<message-type type(0-255)>]
[<message-code code(0-255)>]
The parameters have the following meaning:
Allows all incoming frames
Keyword for a an individual IPv4 ad-
-
Enter a valid IPv4 address.
Network source address Enter a valid combination of IPv4
address and subnet mask.
Corresponding subnet mask
Allows all outgoing frames
Keyword for a an individual IPv4 ad-
-
Enter a valid IPv4 address.
Network destination address
Enter a valid combination of IPv4
address and subnet mask.
Corresponding subnet mask
Keyword for the ICMP message type
Keyword for the ICMP message code
The IP access list for ICMP messages has been configured.
Note
Subnet mask for individual hosts
If you create the rule for a single system (one IPv4 address), specify the subne
t mask
"255.255.255.255". As an alternative, you can specify the keyword "host" followed by the
IPv4 address.