Commands In The Interface Configuration Mode Vlan; Ip Access-Group - Siemens SCALANCE XM-400 Configuration Manual

Security and authentication
11.4 IP access control list
11.4.4

Commands in the Interface configuration mode VLAN

This section describes commands that you can call up for VLAN in the Interface
configuration mode. Depending on the Interface selected, various command sets are
available.
In the Global configuration mode, enter the
mode. When doing this, you need to replace the
Commands relating to other topics that can be called in the interface configuration mode can
be found in the relevant sections.
● If you exit the Interface configuration mode with the
Global configuration mode.
● If you exit the Interface configuration mode with the
Privileged EXEC mode.
11.4.4.1

ip access-group

Description
With this command, you enable the access control of the packets of a VLAN.
Note
The ACL rule applies to all ports that belong to the VLAN.
Requirement
● An IP access list has been created.
● The VLAN has a layer 3 interface.
● You are in the Interface configuration mode of VLAN
The command prompt is:
cli(config-if-vlan-$$$)#
Syntax
Call up the command with the following parameters:
ip access-group <access-list-number(1-128)> {in|out}
The parameters have the following meaning:
Parameter
access-list-number
in
out
712
interface vlan $$$
Description
Number of the access control list
Specifies that incoming packets are
filtered
Specifies that outgoing packets are
filtered
SCALANCE XM-400/XR-500 Command Line Interface (CLI)
command to change to this
placeholders with the relevant VLAN ID
$$$
command, you return to the
exit
command, you return to the
end
Range of values / note
1 ... 128
-
-
Configuration Manual, 11/2015, C79000-G8976-C252-10