Siemens SCALANCE XR-500 Configuration Manual

Security and authentication
11.4 IP access control list
SCALANCE XM-400/XR-500 Command Line Interface (CLI)
712 Configuration Manual, 11/2015, C79000-G8976-C252-10
11.4.4
Commands in the Interface configuration mode VLAN
This section describes commands that you can call up for VLAN in the Interface
configuration mode. Depending on the Interface selected, various command sets are
available.
In the Global configuration mode, enter the
interface vlan $$$ command to change to this
mode. When doing this, you need to replace the
$$$ placeholders with the relevant VLAN ID
Commands relating to other topics that can be called in the interface configuration mode can
be found in the relevant sections.
● If you exit the Interface configuration mode with the
exit command, you return to the
Global configuration mode.
● If you exit the Interface configuration mode with the
end command, you return to the
Privileged EXEC mode.
11.4.4.1
ip access-group
Description
With this command, you enable the access control of the packets of a VLAN.
Note
The ACL rule applies to all ports that belong to the VLAN.
Requirement
● An IP access list has been created.
● The VLAN has a layer 3 interface.
● You are in the Interface configuration mode of VLAN
The command prompt is:
cli(config-if-vlan-$$$)#
Syntax
Call up the command with the following parameters:
ip access-group <access-list-number(1-128)> {in|out}
The parameters have the following meaning:
Parameter
Description
Range of values / note
access-list-number
Number of the access control list
1 ... 128
in
Specifies that incoming packets are
filtered
-
out
Specifies that outgoing packets are
filtered
-

Siemens SCALANCE XR-500 Specifications

General

Brand	Siemens
Model	SCALANCE XR-500
Category	Switch
Language	English