IP-MAC Binding

System supports IP-MAC binding, MAC-Port binding and IP-MAC-Port binding to reinforce network security control. The bindings obtained from ARP/MAC learning and ARP scan are known as dynamic bindings, and those manually configured are known as static bindings.

This section describes how to configure an IP-MAC binding.

Adding a Static IP-MAC Binding

To add a static IP-MAC binding, take the following steps:

  1. On the Navigation pane, click Configure > Security > ARP Defense to visit the ARP Defense page.
  2. Click New. In the Add IP-MAC Binding dialog, configure options.
    • MAC: Specifies a MAC address.
    • IP: Specifies an IP address.
    • Port: Select the Enable check box to enable port binding, and then select a port from the drop-down list behind.
    • VLAN ID: If port binding is enabled, select a VLAN ID from the drop-down list.
    • Description: Type the description for the IP-MAC binding.
    • Authenticated ARP: Select the Enable check box to enable this function.
  3. Click OK to save your changes and return to the ARP Defense page.

Obtaining a Dynamic IP-MAC Binding

System can obtain dynamic IP-MAC-Port binding information from:

To configure ARP/MAC learning, take the following steps:

  1. On the Navigation pane, click Configure > Security > ARP Defense to visit the ARP Defense page.
  2. Select ARP/MAC Learning from the Others drop-down list.
  3. In the ARP/MAC Learning Configuration dialog, select the Enable check box(es) for the interface(s) you want to enable ARP/MAC learning.
  4. Click OK to save your settings and return to the ARP Defense page.

To configure ARP scan, take the following steps:

  1. On the Navigation pane, click Configure > Security > ARP Defense to visit the ARP Defense page.
  2. Select IP-MAC Scan from the Binding Configuration drop-down list.
  3. In the IP-MAC Scan dialog, type the start IP and end IP into the Start IP and End IP box respectively.
  4. Click OK to scan the specified IP range. The scan result will be displayed in the binding list of the ARP Defense page.

Configuring an IP-MAC-Port Binding

To configure an IP-MAC-Port binding, take the following steps:

  1. On the Navigation pane, click Configure > Security > ARP Defense to visit the ARP Defense page.
  2. Select Bind All from the Binding Configuration drop-down list.
  3. In the Bind All dialog, click a binding type and click OK to save your settings.

To unbind an IP-MAC-Port binding, take the following steps:

  1. On the Navigation pane, click Configure > Security > ARP Defense to visit the ARP page.
  2. Select Unbind All from the Binding Configuration drop-down list.
  3. In the Unbind All dialog, click an unbinding type and click OK to save your settings.

Deleting a Binding

To delete a binding, take the following steps:

  1. On the Navigation pane, click Configure > Security > ARP Defense to visit the ARP Defense page.
  2. Select the binding you want to delete from the binding list, and click Delete.

Importing/Exporting a Binding

To import a binding, take the following steps:

  1. On the Navigation pane, click Configure > Security > ARP Defense to visit the ARP Defense page.
  2. Select Import from the Others drop-down list.
  3. In the Import dialog, click Browse to select an IP-MAC binding file (UTF-8 encoding).
  4. Click OK to save your settings.

To export a binding, take the following steps:

  1. On the Navigation pane, click Configure > Security > ARP Defense to visit the ARP Defense page.
  2. Select Export from the Others drop-down list.
  3. In the Export dialog, click a binding information type.
  4. Click OK to save your settings.