ZyWALL ATP Series User’s Guide
362
C
HAPTER
16
IP/MAC Binding
16.1 IP/MAC Binding Overview
IP address to MAC address binding helps ensure that only the intended devices get to use privileged IP
addresses. The Zyxel Device uses DHCP to assign IP addresses and records the MAC address it assigned
to each IP address. The Zyxel Device then checks incoming connection attempts against this list. A user
cannot manually assign another IP to his computer and use it to connect to the Zyxel Device.
Suppose you configure access privileges for IP address 192.168.1.27 and use static DHCP to assign it to
Tim’s computer’s MAC address of 12:34:56:78:90:AB. IP/MAC binding drops traffic from any computer
trying to use IP address 192.168.1.27 with another MAC address.
Figure 251
IP/MAC Binding Example
16.1.1 What You Can Do in this Chapter
• Use the
Summary
and
Edit
screens (
) to bind IP addresses to MAC addresses.
• Use the
Exempt List
) to configure ranges of IP addresses to which
the Zyxel Device does not apply IP/MAC binding.
16.1.2 What You Need to Know
DHCP
IP/MAC address bindings are based on the Zyxel Device’s dynamic and static DHCP entries.
MAC: 12:34:56:78:90:AB
Tim
IP: 192.168.1.27
MAC: AB:CD:EF:12:34:56
Jim
IP: 192.168.1.27
