ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual
Firewall Security and Content Filtering
5-25
v1.0, July 2008
4.
Enter your list of source MAC addresses to be blocked in the
MAC Address
field in the form
01:23:45:67:89:AB, using colon-separated hexadecimal characters (0-9, A-F).
5.
Click the
Add
icon
.
The MAC address is added to the
MAC Addresses
table where it will be blocked.
6.
Click
Apply
to save your settings.
To remove an entry from the table, select the MAC address entry and click
Delete
.
IP/MAC Binding Tab
The IP/MAC Binding feature allows the VPN firewall to bind IP to MAC address and vice-versa.
Some PCs or decvies are configured with static (fixed) addresses. To prevent users from changing
static IP addresses, the VPN firewall needs to enable IP/MAC Binding.
If VPN firewall detects packets with matching IP addresses but inconsistent MAC addresses or
vice-versa, it will drop such packets. If users have enabled the logging option for IP/MAC Binding
on their PCs or devices, these packets will be logged before being droped. The VPN firewall
displays the total count of dropped packets, which violated either IP to MAC Binding, or MAC to
IP Binding.
To enable IP/MAC Binding and add IP and MAC address for binding:
1.
Select
Security > Address Filter
from the main/submenu.
Figure 5-12
Need new screenshot
