Set Up Ip/Mac Bindings - NETGEAR UTM9S Reference Manual
Prosecure unified threat management (utm) appliance
Hide thumbs
Also See for UTM9S:
- Quick start manual (16 pages) ,
- Integration manual (8 pages) ,
- Installation manual (2 pages)
Table of Contents
Advertisement
To remove one or more entries from the table:
1.
Select the check box to the left of each MAC address that you want to delete, or click
the Select All table button to select all entries.
2.
Click the Delete table button.
Set Up IP/MAC Bindings
IP/MAC binding allows you to bind an IP address to a MAC address and the other way
around. Some PCs or devices are configured with static addresses. To prevent users from
changing their static IP addresses, the IP/MAC binding feature needs to be enabled on the
UTM. If the UTM detects packets with an IP address that matches the IP address in the
IP/MAC Bindings table but does not match the related MAC address in the IP/MAC Bindings
table (or the other way around), the packets are dropped. If you have enabled the logging
option for the IP/MAC binding feature, these packets are logged before they are dropped.
The UTM displays the total number of dropped packets that violate either the IP-to-MAC
binding or the MAC-to-IP binding.
Note:
You can bind IP addresses to MAC addresses for DHCP assignment
on the LAN Groups submenu. See
on page 107.
As an example, assume that three computers on the LAN are set up as follows, and that their
IP and MAC addresses are added to the IP/MAC Bindings table:
•
Host 1. MAC address (00:01:02:03:04:05) and IP address (192.168.10.10)
•
Host 2. MAC address (00:01:02:03:04:06) and IP address (192.168.10.11)
•
Host 3. MAC address (00:01:02:03:04:07) and IP address (192.168.10.12)
There are three possible scenarios in relation to the addresses in the IP/MAC Bindings table:
•
Host 1 has not changed its IP and MAC addresses. A packet coming from Host 1 has IP
and MAC addresses that match those in the IP/MAC Bindings table.
•
Host 2 has changed its MAC address to 00:01:02:03:04:09. The packet has an IP
address that matches the IP address in the IP/MAC Bindings table but a MAC address
that does not match the MAC address in the IP/MAC Bindings table.
•
Host 3 has changed its IP address to 192.168.10.15. The packet has a MAC address that
matches the MAC address in the IP/MAC Bindings table but an IP address that does not
match the IP address in the IP/MAC Bindings table.
In this example, the UTM blocks the traffic coming from Host 2 and Host 3, but allows the
traffic coming from Host 1 to any external network. The total count of dropped packets is
displayed.
ProSecure Unified Threat Management (UTM) Appliance
Firewall Protection
Manage the Network Database
166
Advertisement
Table of Contents
Troubleshooting
