Security and authentication
11.4 IP access control list
SCALANCE XM-400/XR-500 Command Line Interface (CLI)
842
Configuration Manual, 06/2016, C79000-G8976-C252-11
Note
Processing order of the lists
The access control lists are processed on the interface in the order in which they were
created.
The index number of the access control list is not used for this.
Requirement
You are in the ACL standard configuration mode.
The command prompt is as follows:
cli(config-std-nacl)#
Syntax
Call up the command with the following parameters:
deny {any | ospf | vrrp | <protocol-type type(1-255)>} {any | host <src-ip> |
<network-src-ip> <mask>} {any | host <dest-ip> | <network-dest-ip> <mask>} [dscp
<value(0-63)>]
or
deny {any | host <src-ip> | <network-src-ip> <mask>} [ { any | host <dest-ip> |
<network-dest-ip> <mask>}]
The parameters have the following meaning:
Parameter
Description
Range of values / note
any
Blocks all protocols.
-
ospf
Blocks OSPF frames.
-
vrrp
Blocks VRRP frames.
-
protocol-type
Keyword for the protocol type
-
type
Protocol type
1 ... 255
any
Blocks all incoming frames
-
host
Keyword for a single IP address
-
src-ip
Source IP address
Enter a valid IP address.
network-src-ip
Network source address
Enter a valid combination of IP
address and subnet mask.
mask
Corresponding subnet mask
any
Blocks all outgoing frames
-
host
Keyword for a single IP address
-
dest-ip
Destination IP address
Enter a valid IP address.
network-dest-ip
Network destination address
Enter a valid combination of IP
address and subnet mask.
mask
Corresponding subnet mask
value
Value
0 ... 63
