Ip-Mac Binding; Ip-Mac Binding Per Port - D-Link DGS-3427 User Manual

xStack DGS-3400 Series Fast Ethernet Switch

IP-MAC Binding

The IP-MAC binding feature is a security measure that restricts access to a Switch to authorized users. Only the authorized
client can access a Switch's port by comparing a pre-configured IP/MAC matching database to the IP/MAC match
extracted form ARP request or acknowledgement packets. If the comparison test fails, the user is not authorized, the packet
is dropped and the user is effectively blocked from access. IP-MAC binding may be enabled on a per port basis. IP-MAC
binding is useful for preventing IP spoofing and other abuses.

IP-MAC Binding per Port

The IP-MAC Ports Settings menu is used to enable IP-MAC binding on a per port basis. Ports that are enabled will apply
the IP-MAC check to ingress packets for the port. The IP-MAC database used for the check must be set up with the IP-
MAC Binding Table (see below).
To enable or disable IP-MAC binding on specific ports, click IP-MAC Binding Port in the IP-MAC Binding folder on
the Administration Menu to open the IP-MAC Binding Ports Setting window. Select a port or a range of ports with the
From and To fields. Enable or disable the port with the State field. Click Apply to save changes.
Figure 6- 44. IP-MAC Binding Ports
66