3Com Switch 8800 Family Firewall Module Configuration and Command Reference Guide

116 CHAPTER 7: FIREWALL CONFIGURATION
■ Enabling or disabling MAC and IP address binding
Configuring MAC and IP address binding map
Perform the following configuration in system view.
Without the parameter sour-addr, all the current address binding entries are
removed.
c
CAUTION:
■ Address binding is regarded as another kind of expression of static ARP. In the
case of address binding being enabled, the configuration of address binding,
whose IP address has been configured in the static ARP list, will cause deletion
of the corresponding static ARP entry. If identical IP address has been
configured in the address binding, static ARP configuration will fail and receive
prompt information. However, identical IP address can be configured in both
address binding and static ARP if address binding function is disabled.
■ MAC and IP address binding is ineffective to PPPoE addresses, because the
system cannot identify and handle the PPP packets over Ethernet frames.
■ Broadcasting addresses of classes A, B and C cannot be bound. When the
address to be bound is not in the same subnet with the IP address of the
firewall interface, a message appears, prompting "The ip to be bound is not in
the same subnet of the interfaces’ ip".
Enabling/disabling MAC and IP address binding
Perform the following configuration in system view.
By default, MAC and IP address binding is disabled.
Displaying and
Debugging MAC and IP
Address Binding
Execute the display command in all views to display the running of address
binding configuration.
Execute the debugging command in user view to debugging the address binding.
Tabl e 103 Configuring MAC and IP address binding condition
Operation Command
Configure MAC and IP address binding map firewall mac-binding sour-addr mac-addr
Remove MAC and IP address binding map undo firewall mac-binding [ sour-addr ]
Tabl e 104 Enabling or disabling MAC and IP address binding
Operation Command
Enable MAC and IP address binding firewall mac-binding enable
Disable MAC and IP address binding undo firewall mac-binding enable
Tabl e 105 Display and debug MAC and IP address binding
Operation Command
Display the current MAC and IP address
binding map information
display firewall mac-binding item [
sour-addr ]
Display the current running information of
MAC and IP address binding function
display firewall mac-binding enable