Deny Icmp - Siemens SCALANCE XM-400 Configuration Manual

Simatic net industrial ethernet switches command line interface (cli)
Hide thumbs Also See for SCALANCE XM-400:
Table of Contents

Advertisement

Further notes
You delete an IP access control list with the
command.
You display the configuration of the access control list with the
11.4.4.4

deny icmp

Description
With this command, you configure an IP access control list for ICMP messages.
You have the following options:
● All incoming and/or outgoing ICMP messages are not forwarded.
● Incoming and/or outgoing ICMP messages of a specific host are not forwarded.
● Incoming and/or outgoing ICMP messages of hosts of a specific subnet are not
forwarded.
Note
Processing order of the lists
The access control lists are processed on the interface in the order in which they were
created.
The index number of the access control list is not used for this.
Requirement
You are in the ACL standard configuration mode.
The command prompt is as follows:
cli(config-std-nacl)#
Syntax
Call up the command with the following parameters:
deny icmp {any | host <src-ip-address> | <src-ip-address> <src-mask>} [{any | host
<dest-ip-address> | dest-ip-address> <dest-mask>}] [<message-type type(0-255)>]
[<message-code code(0-255)>]
The parameters have the following meaning:
Parameter
any
host
SCALANCE XM-400/XR-500 Command Line Interface (CLI)
Configuration Manual, 06/2016, C79000-G8976-C252-11
no ip access-list standard <acl-num>
Description
Blocks all incoming frames
Keyword for a an individual IPv4 ad-
dress
Security and authentication
11.4 IP access control list
command.
show access-lists
Range of values / note
-
-
845

Advertisement

Table of Contents
loading

Table of Contents