Access Control List Learning - Siemens SCALANCE X-300 Configuration Manual

Configuration using Web Based Management and Command Line Interface
4.5 The Switch menu
4.5.6.2

Access Control List Learning

Start Learning / Stop Learning
Figure 4-62
With the aid of the automatic learning function, all devices connected to the IE switch can be
entered automatically in the Access Control List (see section "Current Unicast-Filter (Access
Control List) menu item)". As long as this function is enabled, all learned unicast addresses
are created immediately as static unicast entries. Learning stops only after selecting on Stop
Learning. With this method, learning can take a few minutes or several hours in larger
networks before all nodes have really been learned. Only nodes that send packets during the
learning phase can be found.
By enabling the Access Control function, the only packets accepted on the relevant ports are
those from nodes known on completion of the learning phase (static unicast entries).
Note
If the Access Control function was already active on individual ports prior to the automatic
learning phase, no addresses will be learned on these ports. This makes it possible to
restrict learning to certain ports. If you do not want a port to learn addresses, simply enable
access control on it before enabling learning.
Clear all static unicast addresses
In large networks with lots of nodes, automatic learning may lead to a large number of
unwanted static entries. To avoid having to delete these individually, this button can be used
to delete all static entries. This function is disabled during automatic learning.
Note
Depending on the number of entries involved, deleting may take some time.
164
Access Control List Learning
Configuration Manual, 10/2014, C79000-G8976-C187-22
SCALANCE X-300 / X-400