Port Access Control List Locked Ports; The "Show" Commands; Show Lock Port - Siemens SCALANCE XM-400 Configuration Manual

Security and authentication

11.5 Port Access Control List Locked Ports

Note
Subnet mask for individual hosts
If you create the rule for a single system (one IP address), you will need to specify the
subnet mask "255,255,255,255". As an alternative, you can specify the keyword "host"
followed by the IP address.
Further notes
You delete the IP access control list with the
command.
You display the configuration of the access control list with the
11.5 Port Access Control List Locked Ports
With the Port Access Control List Locked Ports functionality, MAC addresses that do not age
are collected on a port after the
are converted to static entries in the address list and the aging is reactivated for all the
addresses that follow.
If the learning of addresses on this port is then disabled, data packets are only forwarded to
the static addresses entered in the table.
This section describes commands relevant for the configuration of this function.
11.5.1

The "show" commands

This section describes commands with which you display various settings.
11.5.1.1

show lock port

Description
This command shows whether or not the learning of MAC entries is enabled or locked on an
interface.
Requirement
You are in the User EXEC mode or in the Privileged EXEC mode.
The command prompt is as follows:
cli>
730
or
cli#
no ip access-list standard <acl-num>
command. With the
start
SCALANCE XM-400/XR-500 Command Line Interface (CLI)
Configuration Manual, 11/2015, C79000-G8976-C252-10
show access-lists
command, these addresses
stop
command.