}
(1) If
the
Allow Undefined LAN PCs
check box is selected, the packet is
allowed to pass, and then it will be further processed by the firewall access
control function module.
(2) Else, the packet is dropped.
If you want to block the user who matches the IP/MAC binding from accessing the
Device and Internet, you need unselect
Allow
check box, see the following figure.
Then a packet with IP address 192.168.16.65 and MAC address 00:15:c5:67:41:0f will
be dropped.
Figure 6-5 IP/MAC Binding List - Example Two
Note:
1) If you have added the IP and MAC address pair of a trusted LAN host in the
IP/MAC Binding List
, and later changed this host
’s IP address or MAC address,
you must also change the corresponding binding in the
IP/MAC Binding List
;
otherwise the host cannot access the Device and Internet. If the
Allow
Undefined LAN PCs
check box is unselected, you must also add the IP and
MAC address pair of any new host that you add to your network, and make sure
that its
Allow
check box is selected; otherwise this new host cannot access the
Device and Internet.
2) IP/MAC binding feature can only act on the packets initiated from the LAN hosts
to the Device or outside hosts, but cannot act on the packets within the LAN. If
