Siemens SCALANCE XM-400 Configuration Manual page 830

Security and authentication
11.3 MAC access control list
The access control list contains only one entry. If you want to lock or permit further
addresses, create a new access control list.
Note
Processing order of the lists
The access control lists are processed on the interface in the order in which they were
created.
The index number of the access control list is not used for this.
Requirement
You are in the MAC ACL configuration mode.
The command prompt is as follows:
cli(config-ext-macl)#
Syntax
Call up the command with the following parameters:
permit {any|host<src-mac-address>}{any|host<dest-mac-address>}
The parameters have the following meaning:
Parameter
any
host
src-mac-address
any
host
dest-mac-address
For information on names of addresses and interfaces, refer to the section "Interface
identifiers and addresses (Page 42)".
Note
MAC address input
Use "any", if the rule is to apply to all src and/or dest MAC addresses. This corresponds to
the MAC address "00:00:00:00:00:00".
830
Description
Keyword for "all"
Keyword for the MAC address of an
incoming connection that is permitted
MAC address of the permitted incom-
ing connection
Keyword for "all"
Keyword for the MAC address of an
outgoing connection that is permitted
MAC address of the permitted outgoing
connection
SCALANCE XM-400/XR-500 Command Line Interface (CLI)
Range of values / note
-
-
Specify a valid MAC address.
-
-
Specify a valid MAC address.
Configuration Manual, 06/2016, C79000-G8976-C252-11