Siemens SCALANCE XM-400 Projektierungshandbuch Seite 19

11.4.5.4 deny icmp .............................................................................................................................. 635
11.4.5.5 permit tcp .............................................................................................................................. 637
11.4.5.6 deny tcp ................................................................................................................................ 639
11.4.5.7 permit udp ............................................................................................................................. 642
11.4.5.8 deny udp ............................................................................................................................... 644
11.5 Port Access Control List Locked Ports ................................................................................. 647
11.5.1 show lock port ....................................................................................................................... 647
11.5.2 Befehle im globalen Konfigurationsmodus ........................................................................... 648
11.5.2.1 clear-all-static-unicast ........................................................................................................... 648
11.5.2.2 auto-learn .............................................................................................................................. 648
11.5.3 Befehle im Interface Konfigurationsmodus ........................................................................... 649
11.5.3.1 switchport lock ...................................................................................................................... 649
11.5.3.2 no switchport lock ................................................................................................................. 650
11.5.4 Befehle im AUTOLEARN-Modus .......................................................................................... 651
11.5.4.1 start ....................................................................................................................................... 651
11.5.4.2 stop ....................................................................................................................................... 651
11.6 Management Access Control List ......................................................................................... 653
11.6.1 show authorized-managers .................................................................................................. 653
11.6.2 Befehle im globalen Konfigurationsmodus ........................................................................... 653
11.6.2.1 authorized-manager .............................................................................................................. 654
11.6.2.2 no authorized-manager ......................................................................................................... 654
authorized-manager ip-source .............................................................................................. 655
11.6.2.3
11.6.2.4 no authorized-manager ip-source ......................................................................................... 657
11.7 Port-Based Network Access Control .................................................................................... 659
11.7.1 Die "show"-Befehle ............................................................................................................... 659
11.7.1.1 show dot1x ............................................................................................................................ 659
11.7.1.2 show dot1x guest-vlan mac-info ........................................................................................... 660
11.7.1.3 show dot1x mac-auth mac-info ............................................................................................. 660
11.7.2 Befehle im globalen Konfigurationsmodus ........................................................................... 661
11.7.2.1 dot1x guest-vlan .................................................................................................................... 661
11.7.2.2 no dot1x guest-vlan ............................................................................................................... 662
11.7.2.3 dot1x mac-auth ..................................................................................................................... 662
11.7.2.4 no dot1x mac-auth ................................................................................................................ 663
11.7.3 Befehle im Interface Konfigurationsmodus ........................................................................... 663
11.7.3.1 dot1x guest-vlan .................................................................................................................... 664
11.7.3.2 no dot1x guest-vlan ............................................................................................................... 664
11.7.3.3 dot1x guest-vlan vlan-id ........................................................................................................ 665
11.7.3.4 no dot1x guest-vlan vlan-id ................................................................................................... 665
11.7.3.5 dot1x guest-vlan reset........................................................................................................... 666
11.7.3.6 set dot1x guest-vlan mac-addr count .................................................................................... 667
11.7.3.7 dot1x mac-auth ..................................................................................................................... 667
11.7.3.8 no dot1x mac-auth ................................................................................................................ 668
11.7.3.9 dot1x mac-auth port reset ..................................................................................................... 668
11.7.3.10 dot1x mac-auth vlan-assign .................................................................................................. 669
11.7.3.11 no dot1x mac-auth vlan-assign ............................................................................................. 669
11.7.3.12 dot1x port-control .................................................................................................................. 670
11.7.3.13 no dot1x port-control ............................................................................................................. 671
11.7.3.14 set dot1x mac-auth mac-addr count ..................................................................................... 672
11.7.3.15 dot1x reauthentication........................................................................................................... 672
11.7.3.16 no dot1x reauthentication ..................................................................................................... 673
SCALANCE XM-400/XR-500 Command Line Interface
Projektierungshandbuch, 03/2015, C79000-G8900-C252-09
Inhaltsverzeichnis
19