Ip Access-Group - Siemens SCALANCE XM-400 Configuration Manual

11.4.3.1

ip access-group

Description
With this command, you enable the access control of the packets of an interface.
Note
In the internal configuration mode of a VLAN, the ACL rule applies to all ports that belong to
the VLAN.
Requirement
● An IP access list has been created.
● You are in the Interface Configuration mode of a switch port, a router port or a VLAN.
The command prompt is as follows:
– With a switch port:
– With a router port
– With a VLAN
Syntax
Call up the command with the following parameters:
ip access-group <access-list-number(1-128)> {in|out}
The parameters have the following meaning:
Parameter
access-list-number
in
out
Note
Restrictions when filtering layer 2 interfaces
Use an expanded MAC address access control list to filter packets outgoing on layer 2
interfaces.
SCALANCE XM-400/XR-500 Command Line Interface (CLI)
Configuration Manual, 06/2016, C79000-G8976-C252-11
cli(config-if-Gi$-$)#
cli(config-if-Ex$-$)#
cli(config-RPort-Gi$-$)#
cli(config-if-vlan-$$$)#
Description
Number of the access control list
Specifies that incoming packets are
filtered
Specifies that outgoing packets are
filtered
Security and authentication
11.4 IP access control list
Range of values / note
1 ... 128
-
-
837