DES-1228/ME Layer 2 Metro Ethernet Switch CLI Reference Manual
273
40
IP-MAC-PORT
B
INDING
C
OMMANDS
The IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address. Binding these two address
types together allows the transmission of data between the layers. The primary purpose of IP-MAC-PORT binding is to restrict the
access to a switch to a number of authorized users. Only the authorized client can access the Switch’s port by checking the pair of
IP-MAC addresses with the pre-configured database. If an unauthorized user tries to access an IP-MAC-PORT binding enabled
port, the system will block the access by dropping its packet. The maximum number of IP-MAC binding entries is dependant on
chip capability (e.g. the ARP table size) and storage size of the device. For the DES-1228/ME series, the maximum number of IP-
MAC-PORT Binding ARP mode is 500. The creation of authorized users can be manually configured by CLI or Web. The
function is port-based, meaning a user can enable or disable the function on the individual port.
The IP-MAC-PORT Binding commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters)
in the following table.
Command
Parameters
create address_binding ip_mac
ipaddress
<ipaddr> mac_address <macaddr> {ports [<portlist> | all]}
config address_binding ip_mac
ipaddress
<ipaddr> mac_address <macaddr> {ports [<portlist> | all]}
config address_binding ip_mac
ports
[<portlist> | all] state [enable | disable] allow_zeroip [enable | disable]
show address_binding
{[ip_mac [all | ipaddress <ipaddr> mac_address <macaddr> ]|blocked [all |
vlan_name <vlan_name> mac_address <macaddr>] |ports]}
delete address_binding
[ip_mac [ipaddress <ipaddr> {mac_address <macaddr>} |all] | blocked [all |
vlan_name <vlan_name> mac_address <macaddr>]]
enable address_binding trap_log
disable address_binding trap_log
Each command is listed, in detail, in the following sections.
create address_binding ip_mac ipaddress
Purpose
Used to create an IP-MAC Binding entry.
Syntax
create address_binding ip_mac ipaddress <ipaddr> mac_address <macaddr> {ports
[<portlist> | all]}
Description
This command will create an IP-MAC Binding entry.
Parameters
<ipaddr>
–
The IP address of the device where the IP-MAC binding is made.
<macaddr>
– The MAC address of the device where the IP-MAC binding is made.
<portlist>
– Specifies a port or range of ports to be configured for address binding.
all
– Specifies that all ports on the switch will be configured for address binding.
Restrictions
Only Administrator-level users can issue this command.
Example usage:
To create address binding on the Switch:
