Configuration Guide Configuring Global IP-MAC Binding
7 Configuring Global IP-MAC Binding
7.1 Overview
Enable the global IP-MAC binding function manually to verify the input packets. If a specified IP address is bound with a MAC
address, the device receives only the IP packets containing matched IP address and MAC address. The other packets are
discarded.
The address bounding feature is used to verify the input packets. Note that the address binding feature takes precedence
over the 802.1X authentication, port security, and access control list (ACL).
7.2 Applications
Only hosts with the specified IP addresses can access the network, and the hosts
connected to a device can move freely.
7.2.1 Global IP-MAC Binding
Scenario
The administrator assigns a fixed IP address for each host to facilitate management.
Only hosts with the specified IP addresses can access the external network, which prevents IP address embezzlement
by unauthorized hosts.
Hosts can move freely under the same device.
Figure 7-1
A is an access device.
A user is a host configured with a static IP address.