IP/MAC Binding

IP/MAC Binding Overview

IP address to MAC address binding helps ensure that only the intended devices get to use privileged IP addresses. The Zyxel Device uses DHCP to assign IP addresses and records the MAC address it assigned to each IP address. The Zyxel Device then checks incoming connection attempts against this list. A user cannot manually assign another IP to his computer and use it to connect to the Zyxel Device.

Suppose you configure access privileges for IP address 192.168.1.27 and use static DHCP to assign it to Tim’s computer’s MAC address of 12:34:56:78:90:AB. IP/MAC binding drops traffic from any computer trying to use IP address 192.168.1.27 with another MAC address.

What You Need to Know

DHCP

IP/MAC address bindings are based on the Zyxel Device’s dynamic and static DHCP entries.

Interfaces Used With IP/MAC Binding

IP/MAC address bindings are grouped by interface. You can use IP/MAC binding with Ethernet, bridge, VLAN interfaces. You can also enable or disable IP/MAC binding and logging in an interface’s configuration screen.

IP/MAC Binding Summary

This screen lists the total number of IP to MAC address bindings for devices connected to each supported interface.

Configuration > Network > IP/MAC Binding > Summary
Label	Description
Edit	Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.
Activate	To turn on an entry, select it and click Activate.
Inactivate	To turn off an entry, select it and click Inactivate.
#	This field is a sequential value, and it is not associated with a specific entry.
Status	This icon is lit when the entry is active and dimmed when the entry is inactive.
Interface	This is the name of an interface that supports IP/MAC binding.
Number of Binding	This field displays the interface’s total number of IP/MAC bindings and IP addresses that the interface has assigned by DHCP.
Apply	Click Apply to save your changes back to the Zyxel Device.
Reset	Click Reset to return the screen to its last-saved settings.

IP/MAC Binding Edit

Use this screen to configure an interface’s IP to MAC address binding settings.

Configuration > Network > IP/MAC Binding > Edit
Label	Description
IP/MAC Binding Settings
Interface Name	This field displays the name of the interface within the Zyxel Device and the interface’s IP address and subnet mask.
Enable IP/MAC Binding	Select this option to have this interface enforce links between specific IP addresses and specific MAC addresses. This stops anyone else from manually using a bound IP address on another device connected to this interface. Use this to make use only the intended users get to use specific IP addresses.
Enable Logs for IP/MAC Binding Violation	Select this option to have the Zyxel Device generate a log if a device connected to this interface attempts to use an IP address not assigned by the Zyxel Device.
Static DHCP Bindings	This table lists the bound IP and MAC addresses. The Zyxel Device checks this table when it assigns IP addresses. If the computer’s MAC address is in the table, the Zyxel Device assigns the corresponding IP address. You can also access this table from the interface’s edit screen.
Add	Click this to create a new entry.
Edit	Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.
Remove	To remove an entry, select it and click Remove. The Zyxel Device confirms you want to remove it before doing so.
#	This is the index number of the static DHCP entry.
IP Address	This is the IP address that the Zyxel Device assigns to a device with the entry’s MAC address.
MAC Address	This is the MAC address of the device to which the Zyxel Device assigns the entry’s IP address.
Description	This helps identify the entry.
OK	Click OK to save your changes back to the Zyxel Device.
Cancel	Click Cancel to exit this screen without saving.

Static DHCP Edit

Use this screen to configure an interface’s IP to MAC address binding settings.

Configuration > Network > IP/MAC Binding > Edit > Add
Label	Description
Interface Name	This field displays the name of the interface within the Zyxel Device and the interface’s IP address and subnet mask.
IP Address	Enter the IP address that the Zyxel Device is to assign to a device with the entry’s MAC address.
MAC Address	Enter the MAC address of the device to which the Zyxel Device assigns the entry’s IP address.
Description	Enter up to 64 printable ASCII characters to help identify the entry. For example, you may want to list the computer’s owner.
OK	Click OK to save your changes back to the Zyxel Device.
Cancel	Click Cancel to exit this screen without saving.

IP/MAC Binding Exempt List

Use this screen to configure ranges of IP addresses to which the Zyxel Device does not apply IP/MAC binding.

Configuration > Network > IP/MAC Binding > Exempt List
Label	Description
Add	Click this to create a new entry.
Edit	Click an entry or select it and click Edit to modify the entry’s settings.
Remove	To remove an entry, select it and click Remove. The Zyxel Device confirms you want to remove it before doing so.
#	This is the index number of the IP/MAC binding list entry.
Name	Enter a name to help identify this entry.
Start IP	Enter the first IP address in a range of IP addresses for which the Zyxel Device does not apply IP/MAC binding.
End IP	Enter the last IP address in a range of IP addresses for which the Zyxel Device does not apply IP/MAC binding.
Add icon	Click the Add icon to add a new entry. Click the Remove icon to delete an entry. A window displays asking you to confirm that you want to delete it.
Apply	Click Apply to save your changes back to the Zyxel Device.