D-Link DES-3528 - xStack Switch - Stackable, User Manual, Page: 176 / 322

xStack
®
DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual
175
IMP Binding Port Settings
Select a port or a range of ports with the From Port and To Port fields. Enable or disable the port with the State, Allow
Zero IP and Forward DHCP packet field, and configure the port’s Max entry.
To view this window click,
Security > IP-MAC-Port Binding > IMP Binding Port Settings
Figure 6 - 5 IMP Binding Port Settings window
The following fields can be set or modified:
Parameter Description
From Port…To Port
Select a port or range of ports to set for IP-MAC Binding.
State
Use the pull-down menu to Enable or Disable these ports for IP-MAC Binding.
Enabled (Strict) – This mode provides a stricter method of control. If the user selects this
mode, all packets will be sent to the CPU, thus all packets will not be forwarded by the
hardware until the S/W learns the entries for the ports. The port will check ARP packets and IP
packets by IP-MAC-PORT Binding entries. When the packet is found by the entry, the MAC
address will be set to dynamic. If the packet is not found by the entry, the MAC address will be
set to block. Other packets will be dropped. The default mode is strict if not specified. The
ports with strict mode will capture unicast DHCP packets through the ACL module. If
configuring IP-MAC binding port enable in strict mode, and IP-MAC binding ACL mode is
enabled, it will create an ACL profile and the rules according to the ports. If there is not enough
profile or rule space for ACL profile or rule table, it will return a warning message and will not
create ACL profile and rules to capture unicast DHCP packets.
Enabled (Loose) – This mode provides a looser way of control. If the user selects loose mode,
ARP packets and IP Broadcast packets will be sent to the CPU. The packets will still be
forwarded by the hardware until a specific source MAC address is blocked by the software.
The port will check ARP packets and IP Broadcast packets by IP-MAC-PORT Binding entries.
When the packet is found by the entry, the MAC address will be set to dynamic. If the packet is
not found by the entry, the MAC address will be set to block. Other packets will be bypassed.
Zero IP
Use the pull-down menu to enable or disable this feature. Zero IP configures the state which
allows ARP packets with 0.0.0.0 source IP to bypass.