Ip-Mac-Port Binding Commands - D-Link DES-1228 Reference Manual

The IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address. Binding these two address
types together allows the transmission of data between the layers. The primary purpose of IP-MAC-PORT binding is to restrict the
access to a switch to a number of authorized users. Only the authorized client can access the Switch's port by checking the pair of
IP-MAC addresses with the pre-configured database. If an unauthorized user tries to access an IP-MAC-PORT binding enabled
port, the system will block the access by dropping its packet. The maximum number of IP-MAC binding entries is dependant on
chip capability (e.g. the ARP table size) and storage size of the device. For the DES-1228/ME series, the maximum number of IP-
MAC-PORT Binding ARP mode is 500. The creation of authorized users can be manually configured by CLI or Web. The
function is port-based, meaning a user can enable or disable the function on the individual port.
The IP-MAC-PORT Binding commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters)
in the following table.
Command
create address_binding
ipaddress
config address_binding
ipaddress
config address_binding
ports
show address_binding
delete address_binding
enable address_binding trap_log
disable address_binding trap_log
Each command is listed, in detail, in the following sections.
create address_binding ip_mac ipaddress
Purpose
Syntax
Description
Parameters
Restrictions
Example usage:
To create address binding on the Switch:
DES-1228/ME Layer 2 Metro Ethernet Switch CLI Reference Manual
IP-MAC-PORT B
Parameters
ip_mac <ipaddr> mac_address <macaddr> {ports [<portlist> | all]}
ip_mac <ipaddr> mac_address <macaddr> {ports [<portlist> | all]}
ip_mac [<portlist> | all] state [enable | disable] allow_zeroip [enable | disable]
{[ip_mac [all | ipaddress <ipaddr> mac_address <macaddr> ]|blocked [all |
vlan_name <vlan_name> mac_address <macaddr>] |ports]}
[ip_mac [ipaddress <ipaddr> {mac_address <macaddr>} |all] | blocked [all |
vlan_name <vlan_name> mac_address <macaddr>]]
Used to create an IP-MAC Binding entry.
create address_binding ip_mac ipaddress <ipaddr> mac_address <macaddr> {ports
[<portlist> | all]}
This command will create an IP-MAC Binding entry.
<ipaddr> – The IP address of the device where the IP-MAC binding is made.
<macaddr> – The MAC address of the device where the IP-MAC binding is made.
<portlist> – Specifies a port or range of ports to be configured for address binding.
all – Specifies that all ports on the switch will be configured for address binding.
Only Administrator-level users can issue this command.
273
40
C
INDING OMMANDS