Ip-Mac Binding - D-Link DES-3550 Command Line Interface Reference Manual

The IP-MAC binding feature is a security measure that restricts access to a Switch to authorized users. Only the authorized
client can access a Switch's port by comparing a pre-configured IP/MAC matching database to the IP/MAC match extracted
form ARP request or acknowledgement packets. If the comparison test fails, the user is not authorized, the packet is dropped
and the user is effectively blocked from access. IP-MAC binding may be enabled on a per port basis. IP-MAC binding is
useful for preventing IP spoofing and other abuses.
The IP-MAC Binding commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in
the following table.
Command
create address_binding ip_mac ipaddress
config address_binding ip_mac ipaddress
config address_binding ip_mac ports
show address_binding
delete address-binding
Each command is listed, in detail, in the following sections.
DES-3550 Layer 2 Fast Ethernet Switch
Parameters
<ipaddr> mac_address <macaddr>
<ipaddr> mac_address <macaddr>
[ <portlist> | all ] state [enable | disable]
[ ip_mac { [ all | ipaddress<ipaddr> mac_address<macaddr> ] }
| blocked { [ all |
vlan_name <vlan_name> mac_address<macaddr> ] } | ports ]
[ ip-mac [ ipaddress<ipaddr> mac_address<macaddr> | all ]
| blocked
[ all | vlan_name<vlan_name> mac_address<macaddr> ] ]
225
26
IP-MAC B
INDING