User's Manual

UTT Technologies Chapter 12 Security
http://www.uttglobal.com Page 320
Step 2 There are two methods to add IP/MAC bindings:
1) Method One: Click the Scan button to learn current dynamic ARP
information (that is, IP and MAC address pairs) of the LAN hosts, and then
click the Bind button to bind all the valid IP and MAC address pairs in the
list box.
2) Method Two: You can manually add one or more IP/MAC address pairs in
the list box, and then click the Bind button to bind these IP/MAC address
pairs. Refer to section 12.2.2 IP/MAC Binding Settings for more
information.
Step 3 After you have created some IP/MAC bindings, you can view them in the
IP/MAC Binding List.
Step 4 If you want to block the undefined LAN hosts from accessing the Device and
Internet, please unselect the Allow Undefined LAN PCs check box; else, the
undefined LAN hosts are allowed to access the Device and Internet.
Step 5 If you want to temporarily block a user matching an IP/MAC binding from
accessing the Device and Internet, please unselect its Allow Internet Access
check box.
After you have finished configuring IP/MAC binding feature, when receiving a packet
initiated from LAN, the Device will firstly compare the packet with the bindings in the
IP/MAC Binding List, and then process the packet according to the related configuration.
The packet will be allowed to pass or be dropped immediately. If it is allowed to pass, the
packet will be further processed by the firewall access control function module.
12.2.6 Internet Whitelist and Blacklist
12.2.6.1 Introduction to Internet Whitelist and Blacklist Based
on IP/MAC Binding
By utilizing IP/MAC binding feature, you can flexibly configure an Internet whitelist or blacklist
for the LAN users.
If you want to allow only a small number of LAN users to access the Internet, you can
configure an Internet whitelist for these users. Then only the users that belong to the
whitelist can access the Internet, and all the other users can not access.
If you want to block only a small number of LAN users from accessing the Internet, you