Ip-Mac-Port Binding; Imp Global Settings; Imp Port Settings - D-Link DES-3028 User Manual

DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Managed Switch

IP-MAC-Port Binding

The IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address. Binding these two address
types together allows the transmission of data between the layers. The primary purpose of IP-MAC binding is to restrict the access
to a switch to a number of authorized users. Only the authorized client can access the Switch's port by checking the pair of IP-
MAC addresses with the pre-configured database. If an unauthorized user tries to access an IP-MAC binding enabled port, the
system will block the access by dropping its packet. The maximum number of IP-MAC binding entries is dependant on chip
capability (e.g. the ARP table size) and storage size of the device. For this series of switches, Active and inactive entries use the
same database. The maximum entry number is 500. The creation of authorized users can be manually configured by CLI or Web.
The function is port-based, meaning a user can enable or disable the function on the individual port.

IMP Global Settings

This window is used to enable or disable the Trap Log State and DHCP Snoop state on the switch. The Trap/Log field will enable
and disable the sending of trap log messages for IP-MAC binding. When enabled, the Switch will send a trap message to the
SNMP agent and the Switch log when an ARP packet is received that doesn't match the IP-MAC binding configuration set on the
Switch.
To view this window click, Security > IP-MAC-Port Binding > IMP Global Settings
The following parameters can be set:
Parameter
Trap / Log
DHCP Snoop State
Click Apply to implement the settings made.

IMP Port Settings

Select a port or a range of ports with the From Port and To Port fields. Enable or disable the port with the State, Allow Zero IP
and Forward DHCP packet field, and configure the port's Max entry.
To view this window click, Security > IP-MAC-Port Binding > IMP Port Settings
Figure 10- 4. IMP Global Settings window
Description
This field will enable and disable the sending of trap log messages for IP-MAC binding. When
enabled, the Switch will send a trap log message to the SNMP agent and the Switch log
when an ARP packet is received that doesn't match the IP-MAC binding configuration set on
the Switch.
Use the pull-down menu to enable or disable the DHCP Snoop State for IP-MAC Binding.
187