Chapter 14 Network Security; Ip-Mac Binding; Binding Table - TP-Link T3700G-28TQ User Manual

Chapter 14 Network Security

Network Security module is to provide the multiple protection measures for the network
security, including five submenus: IP-MAC Binding, DHCP Snooping, ARP Inspection, IP
Source Guard, DoS Defend and 802.1X. Please configure the functions appropriate to your
need.

14.1 IP-MAC Binding

The IP-MAC Binding function allows you to bind the IP address, MAC address, VLAN ID and the
connected Port number of the Host together. Basing on the IP-MAC binding table, ARP
Inspection and IP Source Guard functions can control the network access and only allow the
Hosts matching the bound entries to access the network.
The following two IP-MAC Binding methods are supported by the switch.
1. Manually: You can manually bind the IP address, MAC address, VLAN ID and the Port
number together in the condition that you have got the related information of the Hosts in
the LAN.
2. DHCP Snooping: You can use DHCP Snooping functions to monitor the process of the
Host obtaining the IP address from DHCP server, and record the IP address, MAC
address, VLAN and the connected Port number of the Host for automatic binding.
The two methods are also considered as the sources of the IP-MAC Binding entries. The
entries from different sources should be different from the other to avoid collision. Only the
entry from the source with the higher priority will take effect. The priority of Manual is higher
than that of Snooping.
The IP-MAC Binding function is implemented on the Binding Table and Manual Binding pages.

14.1.1 Binding Table

On this page, you can view the information of the bound entries.
Choose the menu Network Security→IP-MAC Binding→Binding Table to load the following
page.
Configuration Procedure:
Select a source type and click Search to search the specified type of entry.
Figure 14-1 Binding Table
335