Manage Ip/Mac Bindings For Ipv4 Traffic - NETGEAR FVS336Gv3 Reference Manual

ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3
detects packets with an IP address that matches the IP address in the IP/MAC Bindings table
but does not match the related MAC address in the IP/MAC Bindings table (or the other way
around), the packets are dropped. If you enable the logging option for the IP/MAC binding
feature, the VPN firewall logs these packets before they are dropped. The VPN firewall
displays the total number of dropped packets that violate either the IP-to-MAC binding or the
MAC-to-IP binding.
Note: You can also bind IP addresses to MAC addresses for DHCP
assignment on the LAN Groups submenu. See
Database on page 134.
As an example, assume that three computers on the LAN are set up as follows, and that their
IPv4 and MAC addresses are added to the IP/MAC Bindings table:
• Host 1. MAC address (00:01:02:03:04:05) and IP address (192.168.10.10)
• Host 2. MAC address (00:01:02:03:04:06) and IP address (192.168.10.11)
• Host 3. MAC address (00:01:02:03:04:07) and IP address (192.168.10.12)
Three possible scenarios can occur in relation to the addresses in the IP/MAC Bindings
table:
• Host 1 has not changed its IP and MAC addresses. A packet coming from Host 1 has IP
and MAC addresses that match those in the IP/MAC Bindings table.
• Host 2 has changed its MAC address to 00:01:02:03:04:09. The packet has an IP
address that matches the IP address in the IP/MAC Bindings table but a MAC address
that does not match the MAC address in the IP/MAC Bindings table.
• Host 3 has changed its IP address to 192.168.10.15. The packet has a MAC address that
matches the MAC address in the IP/MAC Bindings table but an IP address that does not
match the IP address in the IP/MAC Bindings table.
In this example, the VPN firewall blocks the traffic coming from Host 2 and Host 3 but allows
the traffic coming from Host 1 to any external network. The total count of dropped packets is
displayed.

Manage IP/MAC Bindings for IPv4 Traffic

The following sections provide information about managing IP/MAC bindings for IPv4 traffic:
• View and Set Up an IPv4/MAC Binding
• Change an IPv4/MAC Binding
• Remove One or More IPv4/MAC Bindings
• Change the IP/MAC Binding Polling Interval for IPv4 Traffic and View the Number of
Dropped Packets
Protect Your Network
317
Manage the Network