Siemens SCALANCE XM-400 Configuration Manual page 719

Syntax
Call up the command with the following parameters:
permit icmp {any | host <src-ip> | <network-src-ip> <mask>} [{any | host <dest-ip> |
<network-dest-ip> <mask>}] [<message-type type(0-255)>] [<message-code code(0-255)>]
The parameters have the following meaning:
Parameter
any
host
src-ip
network-src-ip
mask
any
host
dest-ip
network-dest-ip
mask
message-type
type
message-code
code
Result
The IP access list for ICMP messages has been configured.
Note
Subnet mask for individual hosts
If you create the rule for a single system (one IP address), you will need to specify the
subnet mask "255,255,255,255". As an alternative, you can specify the keyword "host"
followed by the IP address.
Further notes
You delete an IP access control list with the
command.
You display the configuration of the access control list with the
SCALANCE XM-400/XR-500 Command Line Interface (CLI)
Configuration Manual, 11/2015, C79000-G8976-C252-10
Description
Allows all incoming frames
Keyword for a single IP address
Source IP address
Network source address
Corresponding subnet mask
Allows all outgoing frames
Keyword for a single IP address
Destination IP address
Network destination address
Corresponding subnet mask
Keyword for the ICMP message type
ICMP message type
Keyword for the ICMP message code
ICMP message code
no ip access-list standard <acl-num>
Security and authentication
11.4 IP access control list
Range of values / note
-
-
Enter a valid IP address.
Enter a valid combination of IP
address and subnet mask.
-
-
Enter a valid IP address.
Enter a valid combination of IP
address and subnet mask.
-
0 ... 255
-
0 ... 255
command.
show access-lists
719