DES-3010F/DES-3010FL/DES-3010G/DES-3018/DES-3026 Fast Ethernet Switch Manual
IP-MAC Binding
The IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address. Binding these two
address types together allows the transmission of data between the layers. The primary purpose of IP-MAC binding is to
restrict the access to a switch to a number of authorized users. Only the authorized client can access the Switch’s port by
checking the pair of IP-MAC addresses with the pre-configured database. If an unauthorized user tries to access an IP-
MAC binding enabled port, the system will block the access by dropping its packet. The maximum number of IP-MAC
binding entries is dependant on chip capability (e.g. the ARP table size) and storage size of the device. The maximum
number of IP-MAC Binding entries is 500. The creation of authorized users can be manually configured by CLI or Web.
The function is port-based, this means a user can enable or disable the function on the individual port.
IP-MAC Binding Port
The IP-MAC Ports Settings menu is used to enable IP-MAC binding on a per port basis. Ports that are enabled will apply
the IP-MAC check to ingress packets for the port. The IP-MAC database used for the check must be set up with the
IP-
MAC Binding Table
(see below).
To enable or disable IP-MAC binding on specific ports, click
IP-MAC Binding Port
in the
IP-MAC Binding
folder on
the
Configuration Menu
to open the
IP-MAC Binding Ports
window. Select a port or a range of ports with the
From
and
To
fields. Enable or disable the port with the
State
field. Click
Apply
to save changes.
Figure 6- 29. IP-MAC Binding Ports window
When IP-MAC Binding Ports are enabled, use the IP-MAC Binding menu to configure the IP-MAC binding as applied to
the enabled ports.
55
