Siemens SCALANCE XR-500 Configuration Manual

Security and authentication
11.4 IP access control list
SCALANCE XM-400/XR-500 Command Line Interface (CLI)
Configuration Manual, 11/2015, C79000-G8976-C252-10
715
Syntax
Call up the command with the following parameters:
permit {any | ospf | vrrp | <protocol-type type(1-255)>} {any | host <src-ip> |
<network-src-ip> <mask>} {any | host <dest-ip> | <network-dest-ip> <mask>} [dscp
<value(0-63)>]
or
permit {any | host <src-ip> | <network-src-ip> <mask>} [{any | host <dest-ip> |
<network-dest-ip> <mask>}]
The parameters have the following meaning:
Parameter
Description
Range of values / note
any
Allows all protocols.
-
ospf
Forwarding of OSPF frames. -
vrrp
Forwarding of VRRP frames.
-
protocol-type
Keyword for the protocol type
-
type
Protocol type
1 ... 255
any
Allows all incoming frames
-
host
Keyword for a single IP address
-
src-ip
Source IP address
Enter a valid IP address.
network-src-ip
Network source address
Enter a valid combination of IP
address and subnet mask.
mask
Corresponding subnet mask
any
Allows all outgoing frames
-
host
Keyword for a single IP address
-
dest-ip
Destination IP address
Enter a valid IP address.
network-dest-ip
Network destination address
Enter a valid combination of IP
address and subnet mask.
mask
Corresponding subnet mask
dscp
Keyword for the Differentiated Services
Codepoint
-
value
Value for the Differentiated Services
Codepoint
0 ... 63
For information on names of addresses and interfaces, refer to the section "Interface
identifiers and addresses (Page 39)".
Result
The IP access list has been configured.
Note
Subnet mask for individual hosts
If you create the rule for a single system (one IP address), you will need to specify the
subnet mask "255,255,
255,255". As an alternative, you can specify the keyword "host"
followed by the IP address.

Siemens SCALANCE XR-500 Specifications

General

Brand	Siemens
Model	SCALANCE XR-500
Category	Switch
Language	English