Configuring Ip/Mac Address Binding - Cisco RV120W Administration Manual

Configuring the Firewall
Configuring Advanced Firewall Settings
STEP 1
STEP 2
STEP 3
STEP 4
STEP 5
Cisco RV120W Administration Guide
To enable MAC address filtering:
Choose Firewall > Advanced Settings > MAC Filtering.
Check the Enable box to enable MAC Address Filtering for this device. Uncheck
the box to disable this feature.
If you enable MAC filtering, in the Policy for MAC Address listed below field,
choose one of the following options:
• Block and Allow the Rest—Choose this option to block the traffic from the
specified MAC addresses and to allow traffic from all other addresses.
• Allow and Block the Rest—Choose this option to allow the traffic from the
specified MAC addresses and to block traffic from all other machines on
the LAN side of the router.
For example, two computers are on the LAN with MAC addresses of
00:01:02:03:04:05 (host1), and 00:01:02:03:04:11 (host2). If the host1 MAC address
is added to the MAC filtering list and the "block and allow the rest" policy is
chosen, when this computer tries to connect to a website, the router will not allow
it to connect. However, host2 is able to connect because its MAC address is not in
the list. If the policy is "allow and block the rest," then host1 is able to connect to a
website, but host2 is blocked because its URL is not in the list. The MAC filtering
policy does not override a firewall rule that directs incoming traffic to a host.
In the MAC Addresses table, click Add.
Enter the MAC address and description to add to the table and click Save. Repeat
for each address to allow or block.
Click Save.

Configuring IP/MAC Address Binding

IP/MAC Binding allows you to bind IP addresses to MAC address. Some machines
are configured with static addresses. To prevent users from changing static IP
addresses, IP/MAC Binding should be enabled. If the Cisco RV120W sees packets
with matching IP address but inconsistent MAC addresses, it drops those packets.
4
82