Ip-Mac-Port Binding; Imp Global Settings; Imp Port Settings - D-Link DGS-3600 Series User Manual

IP-MAC-Port Binding

The IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address. Binding these two address
types together allows the transmission of data between the layers. The primary purpose of IP-MAC-Port binding is to restrict the
access to a switch to a number of authorized users. Only the authorized client can access the Switch's port by checking the pair of
IP-MAC addresses with the pre-configured database. If an unauthorized user tries to access an IP-MAC-Port binding enabled port,
the system will block the access by dropping its packet. The maximum number of IP-MAC-Port binding entries is dependant on
chip capability (e.g. the ARP table size) and storage size of the device. The maximum number of IP-MAC-Port Binding entries is
511. The creation of authorized users can be manually configured by CLI or Web. The function is port-based, meaning a user can
enable or disable the function on the individual port.

IMP Global Settings

This window is used to enable or disable the Trap Log State and DHCP Snoop state on the switch. The Trap/Log field will enable
and disable the sending of trap log messages for IP-MAC-Port binding. When enabled, the Switch will send a trap message to the
SNMP agent and the Switch log when the address binding module detects illegal IP and MAC addresses.
To view this window click, Security > IP-MAC-Port Binding > IMP Global Settings, as shown below.
The following parameters can be set:
Parameter
Trap / Log
DHCP Snoop State
Click Apply to implement the settings made.

IMP Port Settings

Select a port or a range of ports with the From Port and To Port fields. Enable or disable the port with the State, Allow Zero IP
and Forward DHCP packet field, and configure the port's Max entry.
To view this window click, Security > IP-MAC-Port Binding > IMP Port Settings, as shown below.
®
xStack DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch
Figure 11- 4. IMP Global Settings window
Description
This field will enable and disable the sending of trap log messages for IP-MAC binding. When
enabled, the Switch will send a trap log message to the SNMP agent and the Switch log
when address binding module detects illegal IP and MAC addresses.
Use the pull-down menu to enable or disable the DHCP Snoop State for IP-MAC-Port
Binding.
283