D-Link DGS-1210/ME series, Справочное руководство

Страница: 93 / 522

DGS-1210/ME Metro Ethernet Switch CLI Reference Guide
73
14
IP-MAC-PORT BINDING COMMANDS
The IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address. Binding
these two address types together allows the transmission of data between the layers. The primary purpose of IP-
MAC-port binding is to restrict the access to a switch to a number of authorized users. Only the authorized client
can access the Switch’s port by checking the pair of IP-MAC addresses with the pre-configured database. If an
unauthorized user tries to access an IP-MAC-port binding enabled port, the system will block the access by
dropping its packet. The maximum number of IP-MAC-port binding entries is dependant on chip capability (e.g.
the ARP table size) and storage size of the device. For the Switch, the maximum value for the IP-MAC-port
binding ARP mode is 500. The creation of authorized users can be manually configured by CLI or Web. The
function is port-based, meaning a user can enable or disable the function on the individual port.
The IP-MAC-Port Binding commands in the Command Line Interface (CLI) are listed (along with the appropriate
parameters) in the following table:
Command Parameter
create address_binding
ip_mac [ipaddress <ipaddr> | ipv6address <ipv6addr>] mac_address <macaddr> ports
[<portlist> | all]
config address_binding
ip_mac ports
[<portlist> | all] {state [disable | enable] | ip_inspection [disable | enable] |
arp_inspection [loose | strict] | allow_zeroip [enable | disable] | forward_dhcppkt
[enable | disable]}
config address_binding
ip_mac
log [all | disable | ipv4 | ipv6]
show address_binding
ip_mac log
config address_binding
auto_scan
from_ip <ipaddr> to_ip <ipaddr>
config address_binding
auto_scan ipv6address
from_ip <ipv6addr> to_ip <ipv6addr>
delete address_binding
[ip_mac [ipaddress <ipaddr> | ipv6address <ipv6addr> | mac_address
<macaddr> | all] | blocked [all | vlan_name <string 32> mac_address <macaddr>
port <port 1-28>]]
show address_binding
{[ip_mac [all | {ipaddress <ipaddr> | ipv6address <ipv6addr> | mac_address
<macaddr>}] | blocked [all | vlan_name <string 32> mac_address <macaddr>
port <portlist>]}
show address_binding
auto_scan list
enable
address_binding
dhcp_snoop
ports [<portlist> | all]
disable
address_binding
dhcp_snoop
ports [<portlist> | all]
config address_binding
dhcp_snoop max_entry
ports
[<portlist> | all] limit [<int 1-10> | no_limit] {IPv6}
show address_binding
[binding_entry | max_entry] ports <portlist>