Siemens SCALANCE XM-400 Configuration Manual page 502

Security and authentication
11.4 IP access control list
Requirement
You are in the ACL standard configuration mode.
The command prompt is as follows:
cli(config-std-nacl)#
Syntax
Call up the command with the following parameters:
deny {any | host <src-ip> | <network-src-ip> <mask>} [ { any | host <dest-ip> |
<network-dest-ip> <mask>}]
or
deny {any | ospf | vrrp | <protocol-type type(1-255)>} {any | host <src-ip> |
<network-src-ip> <mask>} {any | host <dest-ip> | <dest-ip> <mask>} [dscp <value(0-
63)>]
The parameters have the following meaning:
Parameter
any
ospf
vrrp
protocol-type
type
any
host
src-ip
network-src-ip
mask
any
host
dest-ip
network-dest-ip
mask
value
dscp
value
Result
The IP access list has been configured.
502
Description
Blocks all protocols.
Blocks OSPF frames.
Blocks VRRP frames.
Keyword for the protocol type
Protocol type
Blocks all incoming frames
Keyword for a 32 bit long subnet mask.
Source IP address
Network source address
Corresponding subnet mask
Blocks all outgoing frames
Keyword for a 32 bit long subnet mask.
Destination IP address
Network destination address
Corresponding subnet mask
Value
Keyword for the Differentiated Services
Codepoint
Value for the Differentiated Services Codepoint 0 ... 63
Values
-
-
-
-
1 ... 255
-
-
enter a valid IP address.
enter a valid combination of
IP address and subnet mask.
-
-
enter a valid IP address.
enter a valid combination of
IP address and subnet mask.
0 ... 63
-
SCALANCE XM-400/XR-500 Command Line Interface
Configuration Manual, 05/2014, C79000-G8976-C252-07