User's Manual
UTT Technologies Chapter 12 Security
http://www.uttglobal.com Page 315
Figure 12-3 IP/MAC Binding List - Example One
Then, when receiving a packet initiated from LAN, the Device will process it according to
the following cases:
1. A packet with IP address 192.168.16.65 and MAC address 00:15:c5:67:41:0f is
allowed to pass, and then it will be further processed by the firewall access control
function module.
2. A packet with IP address 192.168.16.65 but with a different MAC address is dropped
immediately to prevent IP spoofing.
3. A packet with a different IP address but with MAC address 00:15:c5:67:41:0f is
dropped immediately to prevent IP spoofing.
4. A packetΒΆs IP address and MAC address both are not defined in the IP/MAC Binding
List:
1) If the Allow Undefined LAN PCs check box is selected, the packet is allowed to
pass, and then it will be further processed by the firewall access control function
module.
2) Else, the packet is dropped.
If you want to block the user who matches the IP/MAC binding from accessing the Device
and Internet, you need unselect
Allow Internet Access check box, see Figure 12-4. Then a
packet
with IP address 192.168.16.65 and MAC address 00:15:c5:67:41:0f will be
dropped.