Sorry, the options are numerous, but if you can explain what you are trying to achieve maybe we can whittle it down a bit. That will prevent any rogue mapping from getting outside the VLAN, but does nothing for the switching within the VLAN. You can set a static ARP entry in your routers. If you don't use DHCP, you can still do things that prevent users from abusing an IP address. But again that could be a maintenance overhead, depending on how dynamic your environment is. You could put an IP access list on the port (yes, even on some layer-2 switches), as well as implementing static port-security, which binds the MAC address to the switchport (but only within the single switch). If you want to bind an IP address to a switchport, then that is tricky. Also, you should consider how much maintenance burden you want to give yourself. If your hosts are configured using DHCP, then you can make static bindings on the DHCP server, although I have to say that if you have a large number hosts then it is easier on a Microsoft server than it is to do it on a router. ![]() ![]() Setting a static mapping between IP address and MAC address depends on what you want to achieve. You may add a MAC address from the ARP table by selecting a device from the ARP table then click Add. The ARP table shows the devices that are connecting the router and their current IP address. ![]() Sam, I'm sorry to contradict, but the mac-address-table static will make a static binding between MAC address and a port, but not between a MAC address and an IP address. Go to LAN > Bind IP to MAC, select Enable.
0 Comments
Leave a Reply. |