Ip-Mac Binding; Ip-Mac Binding Port - D-Link DES-3010F Manual

DES-3010F/DES-3010FL/DES-3010G/DES-3018/DES-3026 Fast Ethernet Switch Manual

IP-MAC Binding

The IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address. Binding these two
address types together allows the transmission of data between the layers. The primary purpose of IP-MAC binding is to
restrict the access to a switch to a number of authorized users. Only the authorized client can access the Switch's port by
checking the pair of IP-MAC addresses with the pre-configured database. If an unauthorized user tries to access an IP-
MAC binding enabled port, the system will block the access by dropping its packet. The maximum number of IP-MAC
binding entries is dependant on chip capability (e.g. the ARP table size) and storage size of the device. The maximum
number of IP-MAC Binding entries is 500. The creation of authorized users can be manually configured by CLI or Web.
The function is port-based, this means a user can enable or disable the function on the individual port.

IP-MAC Binding Port

The IP-MAC Ports Settings menu is used to enable IP-MAC binding on a per port basis. Ports that are enabled will apply
the IP-MAC check to ingress packets for the port. The IP-MAC database used for the check must be set up with the IP-
MAC Binding Table (see below).
To enable or disable IP-MAC binding on specific ports, click IP-MAC Binding Port in the IP-MAC Binding folder on
the Configuration Menu to open the IP-MAC Binding Ports window. Select a port or a range of ports with the From
and To fields. Enable or disable the port with the State field. Click Apply to save changes.
Figure 6- 29. IP-MAC Binding Ports window
When IP-MAC Binding Ports are enabled, use the IP-MAC Binding menu to configure the IP-MAC binding as applied to
the enabled ports.
55