ZyXEL Communications 1000 User Manual

Page of 1075
ZyWALL USG 1000 User’s Guide
409
C
H A P T E R
 
 2 2  
 IP/MAC Binding
22.1  IP/MAC Binding Overview
IP address to MAC address binding helps ensure that only the intended devices get 
to use privileged IP addresses. The ZyWALL uses DHCP to assign IP addresses and 
records to MAC address it assigned each IP address. The ZyWALL then checks 
incoming connection attempts against this list. A user cannot manually assign 
another IP to his computer and use it to connect to the ZyWALL. 
Suppose you configure access privileges for IP address 192.168.1.27 and use 
static DHCP to assign it to Tim’s computer’s MAC address of 12:34:56:78:90:AB. 
IP/MAC binding drops traffic from any computer trying to use IP address 
192.168.1.27 with another MAC address.
Figure 304   IP/MAC Binding Example 
22.1.1  What You Can Do in this Chapter
• Use  the  Summary and Edit screens (
to bind IP 
addresses to MAC addresses.
• Use  the  Exempt List screen (
to configure ranges of 
IP addresses to which the ZyWALL does not apply IP/MAC binding.
MAC: 12:34:56:78:90:AB
Bob
IP:  192.168.1.27
MAC: AB:CD:EF:12:34:56
Jim
IP:  192.168.1.27