DES-1228/ME Metro Ethernet Managed Switch CLI Reference Guide
340
41
IP-MAC-P
ORT
B
INDING
C
OMMANDS
The IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address. Binding these two address
types together allows the transmission of data between the layers. The primary purpose of IP-MAC-port binding is to restrict the
access to a switch to a number of authorized users. Only the authorized client can access the Switch’s port by checking the pair of
IP-MAC addresses with the pre-configured database. If an unauthorized user tries to access an IP-MAC-port binding enabled port,
the system will block the access by dropping its packet. The maximum number of IP-MAC-port binding entries is dependant on
chip capability (e.g. the ARP table size) and storage size of the device. For the Switch, the maximum value for the IP-MAC-port
binding ARP mode is 500. The creation of authorized users can be manually configured by CLI or Web. The function is port-
based, meaning a user can enable or disable the function on the individual port.
The IP-MAC-Port Binding commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in
the following table:
Command
Parameters
create address_binding ip_mac
ipaddress
<ipaddr> mac_address <macaddr> {ports [<portlist> | all]}
config address_binding ip_mac
ipaddress
<ipaddr> mac_address <macaddr> {ports [<portlist> | all]}
config address_binding ip_mac
ports
[<portlist> | all] {state [enable | disable ] | allow_zeroip [enable | disable] | (1)
show address binding
{[ip_mac [all | ipaddress <ipaddr> mac_address <macaddr> ]|blocked [all
| vlan_name <vlan_name> mac_address <macaddr>] |ports]}
delete address_binding
[ip_mac [ipaddress <ipaddr> {mac_address <macaddr>} | all] | blocked [all |
vlan_name <vlan_name> mac_address <macaddr>]]
enable address_binding trap_log
disable address_binding trap_log
Each command is listed, in detail, in the following sections:
