Ip/Mac Binding; Chapter 17 Ip/Mac Binding; Ip/Mac Binding Overview; Ip/Mac Binding Commands - ZyXEL Communications UAG Series Cli Reference Manual

17.1 IP/MAC Binding Overview

IP address to MAC address binding helps ensure that only the intended devices get to use privileged
IP addresses. The UAG uses DHCP to assign IP addresses and records to MAC address it assigned
each IP address. The UAG then checks incoming connection attempts against this list. A user
cannot manually assign another IP to his computer and use it to connect to the UAG.
Suppose you configure access privileges for IP address 192.168.1.27 and use static DHCP to assign
it to Tim's computer's MAC address of 12:34:56:78:90:AB. IP/MAC binding drops traffic from any
computer with another MAC address that tries to use IP address 192.168.1.27.

17.2 IP/MAC Binding Commands

The following table lists the ip-mac-binding commands. You must use the
command to enter the configuration mode before you can use these commands.
Table 61 ip-mac-binding Commands
COMMAND
[no] ip ip-mac-binding interface_name
activate
[no] ip ip-mac-binding interface_name
log
ip ip-mac-binding exempt name start-ip
end-ip
no ip ip-mac-binding exempt name
show ip ip-mac-binding interface_name
show ip ip-mac-binding all
show ip ip-mac-binding status
interface_name
show ip ip-mac-binding status all
show ip ip-mac-binding exempt
ip ip-mac-binding clear-drop-count
interface_name
debug ip ip-mac-binding activate
no debug ip ip-mac-binding activate
UAG CLI Reference Guide
C
HAPTER
DESCRIPTION
Turns on IP/MAC binding for the specified interface. The
IP/MAC binding off for the specified interface.
Turns on the IP/MAC binding logs for the specified interface. The
command turns IP/MAC binding logs off for the specified interface.
Adds a named IP range as being exempt from IP/MAC binding.
Deletes the named IP range from the list of addresses that are exempt from

IP/MAC binding.

Shows whether IP/MAC binding is enabled or disabled for the specified
interface.
Shows whether IP/MAC binding is enabled or disabled for all interfaces.
Displays the current IP/MAC bindings for the specified interface.
Displays the current IP/MAC bindings for all interfaces.
Shows the current IP/MAC binding exempt list.
Resets the packet drop counter for the specified interface.
Turns on the IP/MAC binding debug logs.
Turns off the IP/MAC binding debug logs.
IP/MAC Binding
configure terminal
command turns
no
1 7
no
119