D-Link DES-1210-52/ME - Ip-Mac-Port Binding Commands

DES-1210-52/ME L2 Metro Ethernet Switch CLI Reference Guide
63
13
IP-MAC-PORT BINDING COMMANDS
The IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address.
Binding these two address types together allows the transmission of data between the layers. The
primary purpose of IP-MAC-port binding is to restrict the access to a switch to a number of authorized
users. Only the authorized client can access the Switch’s port by checking the pair of IP-MAC addresses
with the pre-configured database. If an unauthorized user tries to access an IP-MAC-port binding
enabled port, the system will block the access by dropping its packet. The maximum number of IP-MAC-
port binding entries is dependant on chip capability (e.g. the ARP table size) and storage size of the
device. For the Switch, the maximum value for the IP-MAC-port binding ARP mode is 500. The creation
of authorized users can be manually configured by CLI or Web. The function is port-based, meaning a
user can enable or disable the function on the individual port.
The IP-MAC-Port Binding commands in the Command Line Interface (CLI) are listed (along with the
appropriate parameters) in the following table:
Command
Parameter
create address_binding
ip_mac
[ipaddress <ipaddr> | ipv6address <ipv6addr>] mac_address <macaddr> port
<port 1-52>
config address_binding
ip_mac ports
[<portlist> | all] {state [disable | enable] | ip_inspection [disable | enable] |
arp_inspection [loose | strict] | allow_zeroip [enable | disable] | forward_dhcppkt
[enable | disable]}
config address_binding
ip_mac log
[ all | disable | ipv4 | ipv6]
show address_binding
ip_mac log
config address_binding
auto_scan
from_ip <ipaddr> to_ip <ipaddr>
config address_binding
auto_scan ipv6address
from_ip <ipv6addr> to_ip <ipv6addr>
delete address_binding
[ip_mac [ipaddress <ipaddr> | ipv6address <ipv6addr> | mac_address
<macaddr> | all] | blocked [all | vlan_name <string 32> mac_address
<macaddr>]]
show address_binding
{[ip_mac [all | {ipaddress <ipaddr> | ipv6address <ipv6addr> | mac_address
<macaddr>}] | blocked [all | vlan_name <string 32> mac_address <macaddr>
port <port 1-52>] | ports]}
show address_binding
auto_scan list
enable
address_binding
dhcp_snoop
ports [<portlist> | all]
disable
address_binding
dhcp_snoop
ports [<portlist> | all]
config address_binding
dhcp_snoop max_entry
ports
[<portlist> | all] limit [<int 1-10> | no_limit] {IPv6}