DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch
116
IP-MAC-Port Binding
The IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address. Binding these two address
types together allows the transmission of data between the layers. The primary purpose of IP-MAC binding is to restrict the access
to a switch to a number of authorized users. Only the authorized client can access the Switch’s port by checking the pair of IP-
MAC addresses with the pre-configured database. If an unauthorized user tries to access an IP-MAC binding enabled port, the
system will block the access by dropping its packet. The maximum number of IP-MAC binding entries is dependant on chip
capability (e.g. the ARP table size) and storage size of the device. For the DGS-3200-10, the maximum number of IP-MAC
Binding entries is 512. The creation of authorized users can be manually configured by CLI or Web. The function is port-based,
meaning a user can enable or disable the function on the individual port.
The IP-MAC-Port Binding folder contains three windows: IP-MAC Binding Port Settings, IP-MAC Binding Settings, and
IP-MAC Binding Blocked.
IP-MAC Binding Port Settings
To enable or disable IP-MAC binding on specific ports, select a port or a range of ports with the From Port and To Port drop-
down menus. Enable or disable the port with the State drop-down menu. Enable or disable the Allow Zero IP feature. Click Apply
to save changes.
Click Security > IP-MAC Port Binding > IP-MAC Binding Port Settings to open the IP-MAC Binding Port Settings
window:
Figure 9- 4. IP-MAC Binding Port Settings window
To Next Page
Loading...
