D-Link DES-3552 [123/260] Ip mac binding

DES-3550 Fast Ethernet Layer 2 Switch

IP-MAC Binding

The IP-MAC binding feature is a security measure that restricts access to a Switch to authorized users. Only the authorized

client can access a Switch’s port by comparing a pre-configured IP/MAC matching database to the IP/MAC match extracted

form ARP request or acknowledgement packets. If the comparison test fails, the user is not authorized, the packet is dropped

and the user is effectively blocked from access. IP-MAC binding may be enabled on a per port basis. IP-MAC binding is

useful for preventing IP spoofing and other abuses.

IP-MAC Binding per Port

The IP-MAC Ports Settings menu is used to enable IP-MAC binding on a per port basis. Ports that are enabled will apply the

IP-MAC check to ingress packets for the port. The IP-MAC database used for the check must be set up with the IP-MAC

Binding Table (see below).

To enable or disable IP-MAC binding on specific ports, click IP-MAC Binding Port in the IP-MAC Binding folder on the

Configuration Menu to open the IP-MAC Binding Ports Setting window. Select a port or a range of ports with the From

and To fields. Enable or disable the port with the State field. Click Apply to save changes.

Figure 6- 82. IP-MAC Binding Ports window

109