Siemens SCALANCE XR-500

Security and authentication
11.4 IP access control list
SCALANCE XM-400/XR-500 Command Line Interface (CLI)
Configuration Manual, 11/2015, C79000-G8976-C252-10
717
Syntax
Call up the command with the following parameters:
deny {any | ospf | vrrp | <protocol-type type(1-255)>} {any | host <src-ip> |
<network-src-ip> <mask>} {any | host <dest-ip> | <network-dest-ip> <mask>} [dscp
<value(0-63)>]
or
deny {any | host <src-ip> | <network-src-ip> <mask>} [ { any | host <dest-ip> |
<network-dest-ip> <mask>}]
The parameters have the following meaning:
Parameter
Description
Range of values / note
any
Blocks all protocols.
-
ospf
Blocks OSPF frames. -
vrrp
Blocks VRRP frames.
-
protocol-type
Keyword for the protocol type
-
type
Protocol type
1 ... 255
any
Blocks all incoming frames
-
host
Keyword for a single IP address
-
src-ip
Source IP address
Enter a valid IP address.
network-src-ip
Network source address
Enter a valid combination of IP
address and subnet mask.
mask
Corresponding subnet mask
any
Blocks all outgoing frames
-
host
Keyword for a single IP address
-
dest-ip
Destination IP address
Enter a valid IP address.
network-dest-ip
Network destination address
Enter a valid combination of IP
address and subnet mask.
mask
Corresponding subnet mask
value
Value
0 ... 63
dscp
Keyword for the Differentiated Services
Codepoint
-
value
Value for the Differentiated Services
Codepoint
0 ... 63
For information on names of addresses and interfaces, refer to the section "Interface
identifiers and addresses (Page 39)".