D-Link DES-3350SR User Manual - page 76
D-Link DES-3350SR Standalone Layer 3 Switch
66
Figure 7 - 49. Access Rule Display window (Packet Content Mask)
IP-MAC Binding
The IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address. Binding these two address
types together allows the transmission of data between the layers. The primary purpose of IP-MAC binding is to restrict the access
to a switch to a number of authorized users. Only the authorized client can access the Switch’s port by checking the pair of IP-
MAC addresses with the pre-configured database. If an unauthorized user tries to access an IP-MAC binding enabled port, the
system will block the access by dropping its packet. The maximum number of IP-MAC binding entries is dependant on chip
capability (e.g. the ARP table size) and storage size of the device. For DES-3350SR, the maximum number of IP-MAC Binding
entries is 512. The creation of authorized users can be manually configured by CLI or Web. The function is port-based, this means
a user can enable or disable the function on the individual port.
IP-MAC Binding Port
To enable or disable IP-MAC binding on specific ports, click IP-MAC Binding Port in the IP-MAC Binding folder on the
Configuration Menu to open the IP-MAC Binding Ports Setting window. Select a port or a range of ports with the From and To
fields. Enable or disable the port with the State field. Click Apply to save changes.