Siemens SCALANCE XM-400 Configuration Manual page 507

Note
Processing order of the lists
The access control lists are processed on the interface in the order in which they were
created.
The index number of the access control list is not used for this.
Requirement
You are in the ACL standard configuration mode.
The command prompt is as follows:
cli(config-std-nacl)#
Syntax
Call up the command with the following parameters:
permit tcp {any | host <src-ip> | <network-src-ip> <mask>} [{ gt <port-number(1-
65535)> | lt <port-number(1-65535)> | eq <port-number(1-65535)> | range <port-number
(1-65535)> <port-number (1-65535)>}] [{any | host <dest-ip> | <network-dest-ip>
<mask>}] [{ gt <port-number(1-65535)> | lt <port-number(1-65535)> | eq <port-
number(1-65535)> | range <port-number (1-65535)> <port-number (1-65535)>}]
[dscp<value(0-63)>] [{ack | rst}]
The parameters have the following meaning:
Parameter
any
host
src-ip
network-src-ip
mask
port-number
gt
lt
eq
range
any
host
dest-ip
network-dest-ip
SCALANCE XM-400/XR-500 Command Line Interface
Configuration Manual, 05/2014, C79000-G8976-C252-07
Description
Forwards all incoming TCP segments.
Keyword for a 32 bit long subnet mask.
Source IP address
Network source address
Corresponding subnet mask
Port number
Keyword for port numbers higher than the
specified number (gt: greater than).
Keyword for port numbers lower than the
specified number (lt: less than).
Keyword for a specific port number (eq:equal).
Keyword for a range of port numbers.
Following this, the first and last port number of
the range is specified.
Forwards all outgoing TCP segments.
Keyword for a 32 bit long subnet mask.
Destination IP address
Network destination address
Security and authentication
11.4 IP access control list
Values
-
-
enter a valid IP address.
enter a valid combination of
IP address and subnet mask.
1 ... 65535
-
-
-
-
-
-
enter a valid IP address.
enter a valid combination of
507