D-Link DGS-1210-28/FL 24xGE, 2xSFP, L2 - Инструкция по эксплуатации - Страница 370

DGS-1210 Series Ethernet Managed Switch CLI Reference Guide 

355 

48

IP-MAC-PORT BINDING COMMANDS 

The

IP network layer uses a four-byte address. The Ethernet link layer uses a six-byte MAC address. Binding 

these two address types together allows the transmission of data between the layers. The primary purpose of IP-

MAC-port binding is to restrict the access to a switch to a number of authorized users. Only the authorized client 

can access the Switch’s port by checking the pair of IP-MAC addresses with the pre-configured database. If an 

unauthorized user tries to access an IP-MAC-port binding enabled port, the system will block the access by 

dropping its packet. The maximum number of IP-MAC-port binding entries is dependant on chip capability (e.g. 

the ARP table size) and storage size of the device. For the Switch, the maximum value for the IP-MAC-port 

binding ARP mode is 500. The creation of authorized users can be manually configured by CLI or Web. The 

function is port-based, meaning a user can enable or disable the function on the individual port.

The IP-MAC-Port Binding commands in the Command Line Interface (CLI) are listed (along with the 

appropriate parameters) in the following table: 
 

Command 

Parameter 

create address_binding 

ip_mac 

[ipaddress  <ipaddr> | ipv6address <ipv6addr>] mac_address <macaddr> ports 

[<portlist> | all]   

config address_binding 

ip_mac ports 

[<portlist> | all] {state [disable | enable] | ip_inspection [disable | enable] | 

arp_inspection [loose | strict] | allow_zeroip [enable | disable] | forward_dhcppkt 

[enable | disable] | protocol [ipv4 | ipv6 | all]} 

config address_binding 

auto_scan 

from_ip <ipaddr> to_ip <ipaddr> 

config address_binding 

auto_scan ipv6address  from_ip <ipv6addr> to_ip <ipv6addr> 

delete address_binding 

[ip_mac [ipaddress <ipaddr> | ipv6address <ipv6addr> | mac_address 

<macaddr> | all] | blocked [all | vlan_name <string 32> mac_address <macaddr> 

port <port 1-28>]] 

show address_binding  {[ip_mac [all | {ipaddress <ipaddr> | ipv6address <ipv6addr> | mac_address 

<macaddr>}] } 

show address_binding 

auto_scan list 

enable 

address_binding 

dhcp_snoop 

ports {<portlist> | all} [vlan <vidlist>] [{ipv6 | all}] 

disable 

address_binding 

dhcp_snoop 

ports {<portlist> | all} [{ipv6 | all}] 

config address_binding 

dhcp_snoop 

{max_entry ports [<portlist> | all] limit [<int 1-10> | no_limit] {IPv6}} | 

{flush_on_port_down ports <portlist> | all] [enable | disable]} 

show address_binding  

dhcp_snoop 

[binding_entry | flust_status | max_entry | vlan_list] ports <portlist> 

Each command is listed in detail, as follows: 
 

create address_binding ip_mac 

Purpose 

Used to create an IP-MAC-port binding entry.