Parameter
Description
Range of values / note
src-port-number
port-number
Port number
1 ... 65535
gt
Keyword for port numbers higher than
the specified number (gt: greater than).
-
lt
Keyword for port numbers lower than
the specified number (lt: less than).
-
eq
Keyword for a specific port number
(eq:equal).
-
range
Keyword for a range of port numbers.
Following this, the first and last port
number of the range is specified.
-
any
Blocks all outgoing TCP segments
-
host
Keyword for a an individual IPv4 ad‐
dress
-
dest-ip-address
Destination IPv4 address
Enter a valid IPv4 address.
dest-ip-address
Network destination address
Enter a valid combination of IPv4
address and subnet mask.
mask
Corresponding subnet mask
dscp
Keyword for the Differentiated Services
Codepoint
-
value
Value for the Differentiated Services Co‐
depoint
0 ... 63
For information on names of addresses and interfaces, refer to the section "Interface identifiers
Result
The IP access list for TCP segments has been configured.
Note
Subnet mask for individual hosts
If you create the rule for a single system (one IPv4 address), specify the subnet mask
"255.255.255.255". As an alternative, you can specify the keyword "host" followed by the IPv4
address.
Further notes
You delete an IP access control list with the
no ip access-list standard <acl-
num>
command.
You display the configuration of the access control list with the
show access-lists
command.
Security and authentication
11.5 IP access control list
SCALANCE W770/W730 acc. to IEEE 802.11n Command Line Interface
572
Configuration Manual, 09/2017, C79000-G8976-C324-08