D-Link DSR-250N, User Manual

Page: 85 / 221

Unified Services Router
User Manual
83
Fig ur e 49: T wo k ey words added to the bl ock list
5.9 IP/MAC Binding
Advanced > IP/MAC Binding
Another available security measure is to only allow outbound traffic (from the LAN to
WAN) when the LAN node has an IP address matching the MAC address bound to it.
This is IP/MAC Binding, and by enforcing the gateway to validate the source traffic‘s
IP address with the unique MAC Address of the configured LAN node, the
administrator can ensure traffic from that IP address is not spoofed. In the event of a
violation (i.e. the traffic‘s source IP address doesn‘t match up with the expected MAC
address having the same IP address) the packets will be dropped and can b e logged for
diagnosis.