Shulou(Shulou.com)06/01 Report--

IP-MAC binding has always been an important part of LAN management. However, its implementation is often complex, and there are generally the following problems:

Most routers have limited IP-MAC binding capabilities. It is usually a simple ARP binding. The client manually modifies the IP and other ways to break through.

Due to hardware limitations, routers allow fewer IP-MAC binding entries, generally less than 256entries.

The workload of configuration and maintenance of IP-MAC binding on the switch will be relatively large.

The IP-MAC binding of layer 3 switches often requires professional and technical personnel to operate.

Today, I would like to introduce a very simple and convenient way to bind IP-MAC, no need to modify the switch and router, do not change the current network structure and configuration, plug and play, web interface configuration. It is very simple and convenient to achieve IP-MAC binding to clients in the local area network. The details are as follows:

1. Transparent bridge deployment

A WSG device (WFilter NGF) is used as a transparent bridge, connected in series between the router and the switch. The network structure is shown below:

The bridge is completely transparent and connected in series in the network. There is no need to make any changes to the IP configuration and network structure of the LAN. It can make a difference.

two。 Configure IP-MAC binding through the Web interface

In the bridge mode, WSG can also achieve complete online behavior management and audit functions. In this case, we are only concerned with the configuration of the "IP-MAC binding". As shown in the figure:

Clients in the local area network can scan and import directly, or import text in bulk. As shown in the figure:

For unbound clients, Internet access can be disabled or allowed.

In gateway mode, you can choose whether or not to assign IP to unbound devices (you need to enable DHCP in the interface settings of WFilter). In bridge mode, the DHCP service is not started by default. If you want to automatically assign a bound IP address to the client, this option looks like this, as shown below:

Of course, when you enable this DHCP option, you need to shut down your existing DHCP service, otherwise DHCP will conflict.

3. Summarize the specific steps

Use transparent bridges to implement IP-MAC binding. The specific steps are as follows:

Deploy a WSG device in bridge mode.

Import the list of IP-MAC bindings.

In the configuration of IP-MAC binding, Internet access is prohibited for unbound IP.

Enable the bridge DHCP service (optional)

Is it simple enough to bind IP-MAC through a transparent bridge without modifying the existing network parameters or changing the existing network architecture?

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.