Security and authentication
11.4 IP access control list
SCALANCE XM-400/XR-500 Command Line Interface (CLI)
Configuration Manual, 11/2015, C79000-G8976-C252-10
717
Call up the command with the following parameters:
deny {any | ospf | vrrp | <protocol-type type(1-255)>} {any | host <src-ip> |
<network-src-ip> <mask>} {any | host <dest-ip> | <network-dest-ip> <mask>} [dscp
<value(0-63)>]
or
deny {any | host <src-ip> | <network-src-ip> <mask>} [ { any | host <dest-ip> |
<network-dest-ip> <mask>}]
The parameters have the following meaning:
Blocks OSPF frames. -
Keyword for the protocol type
Blocks all incoming frames
Keyword for a single IP address
Enter a valid IP address.
Enter a valid combination of IP
address and subnet mask.
Corresponding subnet mask
Blocks all outgoing frames
Keyword for a single IP address
Enter a valid IP address.
Network destination address
Enter a valid combination of IP
address and subnet mask.
Corresponding subnet mask
Keyword for the Differentiated Services
-
Value for the Differentiated Services
0 ... 63
For information on names of addresses and interfaces, refer to the section "Interface
identifiers and addresses (Page 39)".