ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
4-46 Firewall Protection
v1.0, April 2010
3. In the same section, below the radio buttons, select one of the following options from the drop-
down list:
• Block. Traffic coming from all addresses in the MAC Addresses table is blocked.
• Permit. Traffic coming from all addresses in the MAC Addresses table is permitted.
4. Below Add Source MAC Address, build your list of source MAC addresses to be permitted or
blocked by entering the first MAC address in the MAC Address field. A MAC address must
be entered in the form xx:xx:xx:xx:xx:xx, where x is a numeric (0 to 9) or a letter between and
a and f (inclusive), for example: aa:11:bb:22:cc:03.
5. Click the Add table button. The MAC address is added to the MAC Addresses table.
6. Click Apply to save your settings.
To remove one or more entries from the table:
1. Select the check box to the left of the MAC address that you want to delete, or click the Select
All table button to select all entries.
2. Click the Delete table button.
Setting Up IP/MAC Bindings
IP/MAC binding allows you to bind an IP address to a MAC address and vice versa. Some PCs or
devices are configured with static addresses. To prevent users from changing their static IP
addresses, the IP/MAC binding feature must be enabled on the VPN firewall. If the VPN firewall
detects packets with a matching IP address but with the inconsistent MAC address (or vice versa),
the packets are dropped. If you have enabled the logging option for the IP/MAC binding feature,
these packets are logged before they are dropped. The VPN firewall displays the total number of
dropped packets that violate either the IP-to-MAC binding or the MAC-to-IP binding.
As an example, assume that three computers on the LAN are set up as follows:
• Host1. MAC address (00:01:02:03:04:05) and IP address (192.168.10.10)
• Host2. MAC address (00:01:02:03:04:06) and IP address (192.168.10.11)
• Host3. MAC address (00:01:02:03:04:07) and IP address (192.168.10.12)
Note: You can bind IP addresses to MAC addresses for DHCP assignment on the LAN
Groups submenu. See “Managing the Network Database” on page 3-15.
To Next Page
Loading...
