Siemens SCALANCE XM-400 Configuration Manual page 16

Table of contents
11.3.4.1 mac access-group ..................................................................................................................... 490
11.3.4.2 no mac access-group ................................................................................................................ 491
11.3.5 Commands in the MAC ACL configuration mode ..................................................................... 491
11.3.5.1 permit ........................................................................................................................................ 492
11.3.5.2 deny ........................................................................................................................................... 493
11.4 IP access control list ................................................................................................................. 495
11.4.1 Commands in the Global Configuration mode .......................................................................... 495
11.4.1.1 ip access-list .............................................................................................................................. 495
11.4.1.2 no ip access-list ......................................................................................................................... 496
11.4.2 Commands in the Interface Configuration mode ...................................................................... 497
11.4.2.1 ip access-group ......................................................................................................................... 497
11.4.2.2 no ip access-group .................................................................................................................... 498
11.4.3 Commands in the ACL standard configuration mode ............................................................... 499
11.4.3.1 permit ........................................................................................................................................ 499
11.4.3.2 deny ........................................................................................................................................... 501
11.4.3.3 permit icmp ................................................................................................................................ 503
11.4.3.4 deny icmp .................................................................................................................................. 505
11.4.3.5 permit tcp................................................................................................................................... 506
11.4.3.6 deny tcp ..................................................................................................................................... 508
11.4.3.7 permit udp ................................................................................................................................. 510
11.4.3.8 deny udp.................................................................................................................................... 512
11.5 Port Access Control List Locked Ports ...................................................................................... 514
11.5.1 show lock port ........................................................................................................................... 514
11.5.2 Commands in the Global configuration mode ........................................................................... 515
11.5.2.1 clear-all-static-unicast ............................................................................................................... 515
11.5.2.2 auto-learn .................................................................................................................................. 515
11.5.3 Commands in the interface configuration mode ....................................................................... 516
11.5.3.1 switchport lock ........................................................................................................................... 516
11.5.3.2 no switchport lock ...................................................................................................................... 517
11.5.4 Commands in the AUTOLEARN mode ..................................................................................... 518
11.5.4.1 start ........................................................................................................................................... 518
11.5.4.2 stop ............................................................................................................................................ 519
11.6 Management Access Control List ............................................................................................. 520
11.6.1 show authorized-managers ....................................................................................................... 520
11.6.2 Commands in the Global configuration mode ........................................................................... 521
11.6.2.1 authorized-manager .................................................................................................................. 521
11.6.2.2 no authorized-manager ............................................................................................................. 522
11.6.2.3 authorized-manager ip-source .................................................................................................. 522
11.6.2.4 no authorized-manager ip-source ............................................................................................. 524
11.7 Port Based Network Access Control ......................................................................................... 526
11.7.1 show dot1x ................................................................................................................................ 526
11.7.2 show dot1x guest-vlan mac-info ............................................................................................... 527
11.7.3 show dot1x mac-auth mac-info ................................................................................................. 527
11.7.4 Commands in the global configuration mode............................................................................ 528
11.7.4.1 dot1x guest-vlan ........................................................................................................................ 528
11.7.4.2 no dot1x guest-vlan ................................................................................................................... 528
11.7.4.3 dot1x mac-auth ......................................................................................................................... 529
11.7.4.4 no dot1x mac-auth .................................................................................................................... 530
11.7.5 Commands in the interface configuration mode ....................................................................... 530
11.7.5.1 dot1x guest-vlan ........................................................................................................................ 530
16
SCALANCE XM-400/XR-500 Command Line Interface
Configuration Manual, 05/2014, C79000-G8976-C252-07