Ip-Mac-Port Binding Commands - D-Link DES-3028 Cli Reference Manual

DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
The IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address. Binding these two address
types together allows the transmission of data between the layers. The primary purpose of IP-MAC-PORT binding is to restrict the
access to a switch to a number of authorized users. Only the authorized client can access the Switch's port by checking the pair of
IP-MAC addresses with the pre-configured database. If an unauthorized user tries to access an IP-MAC-PORT binding enabled
port, the system will block the access by dropping its packet. The maximum number of IP-MAC binding entries is dependant on
chip capability (e.g. the ARP table size) and storage size of the device. For the DES-3028/28P/28G/52/52P series, the maximum
number of IP-MAC-PORT Binding ARP mode is 500. The creation of authorized users can be manually configured by CLI or
Web. The function is port-based, meaning a user can enable or disable the function on the individual port.
The IP-MAC-PORT Binding commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters)
in the following table.
Command
create
ip_mac ipaddress
config
ip_mac ipaddress
config
ip_mac ports
config
ip_mac ports
config
ip_mac ports
show address_binding
delete address_binding
enable
trap_log
disable
trap_log
show
dhcp_snoop
enable
dhcp_snoop
disable
dhcp_snoop
clear
dhcp_snoop binding_entry
IP-MAC-PORT B
Parameters
address_binding <ipaddr> mac_address <macaddr> {ports [<portlist> | all]}
address_binding <ipaddr> mac_address <macaddr> {ports [<portlist> | all]}
address_binding [<portlist> | all] state [enable {[strict | loose]} | disable ]
address_binding [<portlist> | all] allow_zeroip [enable|disable]
address_binding [<portlist> | all] forward_dhcppkt [enable | disable]
[ip_mac
<macaddr>]} | blocked {[all | vlan_name <vlan_name>
mac_address <macaddr>]} | ports]
[ip-mac [ipaddress <ipaddr> {mac_address <macaddr>}
|all] | blocked [all | vlan_name <vlan_name> mac_address
<macaddr>]]
address_binding
address_binding
address_binding {[max_entry {ports <portlist> | binding_entry {port <port>}]}
address_binding
address_binding
address_binding [<portlist> | all]
{[all | ipaddress <ipaddr>
316
45
C
INDING OMMANDS
mac_address