Table of Contents
Advertisement
Security and authentication
11.5 IP access control list
Parameter
src-ip-address
src-ip-address
src-mask
src-port-number
port-number
gt
lt
eq
range
any
host
dest-ip-address
dest-ip-address
dest-mask
dscp
value
For information on names of addresses and interfaces, refer to the section "Interface identifiers
and addresses (Page 29)".
Result
The IP access list for TCP segments has been configured.
Note
Subnet mask for individual hosts
If you create the rule for a single system (one IPv4 address), specify the subnet mask
"255.255.255.255". As an alternative, you can specify the keyword "host" followed by the IPv4
address.
Further notes
You delete an IP access control list with the no ip access-list standard <acl-
num> command.
You display the configuration of the access control list with the show access-lists
command.
570
Description
Source IPv4 address
Network source address
Corresponding subnet mask
Port number
Keyword for port numbers higher than
the specified number (gt: greater than).
Keyword for port numbers lower than
the specified number (lt: less than).
Keyword for a specific port number
(eq:equal).
Keyword for a range of port numbers.
Following this, the first and last port
number of the range is specified.
Forwards all outgoing TCP segments.
Keyword for a an individual IPv4 ad‐
dress
Destination IPv4 address
Network destination address
Corresponding subnet mask
Keyword for the Differentiated Services
Codepoint
Value for the Differentiated Services Co‐
depoint
SCALANCE W770/W730 acc. to IEEE 802.11n Command Line Interface
Range of values / note
Enter a valid IPv4 address.
Enter a valid combination of IPv4
address and subnet mask.
1 ... 65535
-
-
-
-
-
-
Enter a valid IPv4 address.
Enter a valid combination of IPv4
address and subnet mask.
-
0 ... 63
Configuration Manual, 09/2017, C79000-G8976-C324-08
Hide quick links:
Advertisement
Table of Contents
