Siemens SCALANCE W770 Series Configuration Manuals page 568

Security and authentication
11.5 IP access control list
Syntax
Call up the command with the following parameters:
deny icmp {any | host <src-ip-address> | <src-ip-address> <src-
mask>} [{any | host <dest-ip-address> | dest-ip-address> <dest-
mask>}] [<message-type type(0-255)>] [<message-code code(0-255)>]
The parameters have the following meaning:
Parameter
any
host
src-ip-address
src-ip-address
src-mask
any
host
dest-ip-address
dest-ip-address
dest-mask
message-type
type
message-code
code
For information on names of addresses and interfaces, refer to the section "Interface identifiers
and addresses (Page 29)".
Result
The IP access control list for ICMP messages has been configured.
Note
Subnet mask for individual hosts
If you create the rule for a single system (one IPv4 address), specify the subnet mask
"255.255.255.255". As an alternative, you can specify the keyword "host" followed by the IPv4
address.
Further notes
You delete an IP access control list with the no ip access-list standard <acl-
num> command.
568
Description
Blocks all incoming frames
Keyword for a an individual IPv4 ad‐
dress
Source IPv4 address
Network source address
Corresponding subnet mask
Blocks all outgoing frames
Keyword for a an individual IPv4 ad‐
dress
Destination IPv4 address
Network destination address
Corresponding subnet mask
Keyword for the ICMP message type
ICMP message type
Keyword for the ICMP message code
ICMP message code
SCALANCE W770/W730 acc. to IEEE 802.11n Command Line Interface
Range of values / note
-
-
Enter a valid IPv4 address.
Enter a valid combination of IPv4
address and subnet mask.
-
-
Enter a valid IPv4 address.
Enter a valid combination of IPv4
address and subnet mask.
-
0 ... 255
-
0 ... 255
Configuration Manual, 09/2017, C79000-G8976-C324-08