Adding Ip/Mac Binding Addresses; Enabling Ip/Mac Binding; Traffic Shaping; Adding Traffic Shaping To A Policy - D-Link DFL-500 User Manual

Adding IP/MAC binding addresses

·
Go to Firewall > IP/MAC Binding > IP MAC .
·
Select New to add an IP address/MAC address pair.
·
Add the IP address and the MAC address.
· Select Enable to enable IP/MAC binding for this address pair.
·
Select OK to save the IP/MAC binding pair.

Enabling IP/MAC binding

· Go to Firewall > IP/MAC Binding > Setting .
·
Select Enable IP/MAC.
·
Select one of the following.
Allow traffic when
not defined in the
table
Block traffic when
not defined in the
table
·
Select Apply to save your changes.

Traffic shaping

Traffic Shaping makes it possible to control which policies have the highest priority when large amounts of
data are moving through the DFL-500. For example, the policy for the corporate web server might be given
higher priority than the policies for most employees' computers. An employee who needs unusually high
speed Internet access could have a special outgoing policy set up with higher bandwidth.
You can use traffic shaping to guarantee the amount of bandwidth available through the firewall for a policy.
Guarantee bandwidth to make sure that there is enough bandwidth available for a high-priority service.
You can also use traffic shaping to limit the amount of bandwidth available through the firewall for a policy.
Limit bandwidth to keep less important services from using bandwidth needed for more important services.

Adding traffic shaping to a policy

You can add traffic shaping to any type of policy. To add traffic shaping:
· Go to Firewall > Policy .
·
Select the tab containing the policy to which you want to add traffic shaping.
· Choose a policy to which to add traffic shaping and select Edit
·
Select traffic shaping.
·
Configure traffic shaping for the policy:
Guaranteed
Available in a future release.
bandwidth
Maximum
Available in a future release.
bandwidth
Traffic Priority Select high, medium, or low. Select traffic priority so that the DFL-500 manages the relative
DFL-500 User Manual
The DFL-500 lets traffic with a source address not found in the IP/MAC binding table pass
through the firewall. Any traffic with a source address that is defined in the IP/MAC binding table
must have the correct MAC address or it is blocked.
The DFL-500 blocks all traffic with a source address that is not found in the IP/MAC binding table.
Any traffic with a source address that is defined in the IP/MAC binding table must have the
correct MAC address or it is also blocked.
.
46