Configuring Ip/Mac Address Binding - Cisco Small Business RV220W Administration Manual

Configuring the Firewall
Blocking and Filtering Content and Applications
STEP 3
STEP 4
STEP 5
STEP 1
STEP 2
STEP 3
STEP 4
STEP 5
STEP 6
Cisco RV220W Administration Guide
For example, two computers are on the LAN with MAC addresses of
00:01:02:03:04:05 (host1), and 00:01:02:03:04:11 (host2). If the host1 MAC address
is added to the MAC filtering list and the "block and permit the rest" policy is
chosen, when this computer tries to connect to a website, the router will not allow
it to connect. However, host2 is able to connect because its MAC address is not in
the list. If the policy is "permit and block the rest," then host1 is able to connect to a
website, but host2 is blocked because its URL is not in the list. The MAC filtering
policy does not override a firewall rule that directs incoming traffic to a host.
Click Save.
In the MAC Addresses Table, click Add.
Enter the MAC address to add to the table and click Save. Repeat for each address
to permit or block.

Configuring IP/MAC Address Binding

IP/MAC Address Binding allows you to bind IP addresses to MAC address. Some
machines are configured with static addresses. To prevent users from changing
static IP addresses, IP/MAC Binding should be enabled. If the RV220W sees
packets with matching IP address but inconsistent MAC addresses, it drops those
packets.
To configure IP/MAC Address binding:
Choose Firewall > Access Control > IP/MAC Binding. The table lists all the
currently defined IP/MAC binding rules and allows several operations on the rules.
Click Add to add a new rule.
In the Name field, enter the name for this rule.
In the MAC Address field, enter the MAC Address (the physical address of the
piece of hardware) for this rule.
In the IP Address field, enter the IP Address to assign to the piece of hardware.
In the Log Dropped Packets field, choose if you want to log the dropped packets.
Choosing Enable logs the dropped packets; choosing Disable does not log the
dropped packets. Logs can be viewed in Status > View All Logs page.
4
94