D-Link DES-3028 Product Manual - Page 201
IP-MAC-Port Binding, IMP Global Settings - d link cli manual
UPC - 790069305375
View all D-Link DES-3028 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 201 highlights
DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Managed Switch IP-MAC-Port Binding The IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address. Binding these two address types together allows the transmission of data between the layers. The primary purpose of IP-MAC binding is to restrict the access to a switch to a number of authorized users. Only the authorized client can access the Switch's port by checking the pair of IPMAC addresses with the pre-configured database. If an unauthorized user tries to access an IP-MAC binding enabled port, the system will block the access by dropping its packet. The maximum number of IP-MAC binding entries is dependant on chip capability (e.g. the ARP table size) and storage size of the device. For this series of switches, Active and inactive entries use the same database. The maximum entry number is 500. The creation of authorized users can be manually configured by CLI or Web. The function is port-based, meaning a user can enable or disable the function on the individual port. IMP Global Settings This window is used to enable or disable the Trap Log State and DHCP Snoop state on the switch. The Trap/Log field will enable and disable the sending of trap log messages for IP-MAC binding. When enabled, the Switch will send a trap message to the SNMP agent and the Switch log when an ARP packet is received that doesn't match the IP-MAC binding configuration set on the Switch. To view this window click, Security > IP-MAC-Port Binding > IMP Global Settings Figure 10- 4. IMP Global Settings window The following parameters can be set: Parameter Description Trap / Log This field will enable and disable the sending of trap log messages for IP-MAC binding. When enabled, the Switch will send a trap log message to the SNMP agent and the Switch log when an ARP packet is received that doesn't match the IP-MAC binding configuration set on the Switch. DHCP Snoop State Use the pull-down menu to enable or disable the DHCP Snoop State for IP-MAC Binding. Click Apply to implement the settings made. IMP Port Settings Select a port or a range of ports with the From Port and To Port fields. Enable or disable the port with the State, Allow Zero IP and Forward DHCP packet field, and configure the port's Max entry. To view this window click, Security > IP-MAC-Port Binding > IMP Port Settings 187