}
allowed to pass, and then be further processed by the firewall access control
function module.
(2) Else, the packet will be dropped immediately.
For example, if the IP/MAC address pair IP 192.168.16.65 and 00:15:c5:67:41:0f is
added to the
IP/MAC Binding List
, and its
Allow
check box is selected, see the
following figure.
Figure 6-4 IP/MAC Binding List - Example One
Then, when receiving a packet initiated from LAN, the Device will process it according
to the following cases:
1) A packet with IP address 192.168.16.65 and MAC address 00:15:c5:67:41:0f is
allowed to pass, and then it will be further processed by the firewall access
control function module.
2) A packet with IP address 192.168.16.65 but with a different MAC address is
dropped immediately to prevent IP spoofing.
3) A packet with a different IP address but with MAC address 00:15:c5:67:41:0f is
dropped immediately to prevent IP spoofing.
4) A packet
’s IP address and MAC address both are not defined in the
IP/MAC
Binding List
:
