WFilter IPBound
From WFilter Documents and Tutorials
(Difference between revisions)
| Line 16: | Line 16: | ||
* Do not enable IP-mac binding in WFilter in a DHCP network. Otherwise, clients will be blocked on ip changing. | * Do not enable IP-mac binding in WFilter in a DHCP network. Otherwise, clients will be blocked on ip changing. | ||
* In a multiple-segment network, [[WFilter_Maccd|MAC address collector]] is required for ip-mac binding of multiple subnets. | * In a multiple-segment network, [[WFilter_Maccd|MAC address collector]] is required for ip-mac binding of multiple subnets. | ||
| − | * For a better IP-mac binding solution, please check: [http://wiki. | + | * For a better IP-mac binding solution, please check: [http://wiki.wfilterngf.com/Ipbound IP-mac binding module of WFilter NG Firewall] |
= Links = | = Links = | ||
| − | * [http://blog. | + | * [http://blog.wfilterngf.com/?p=394 How to bind ip address with mac address in network?] |
[[Category:Solutions]] | [[Category:Solutions]] | ||
[[Category:Deployment]] | [[Category:Deployment]] | ||
Latest revision as of 14:14, 12 July 2019
IP and mac binding is important to business networks. Without ip-mac binding, you can not identify clients or deploy internet access policies to correct clients.
You can do ip-mac binding in various ways:
- Configure static ip addresses in client devices, and forbid modifying.
- Assign static ip address in the DHCP server. Please note: clients can modify ip address manually.
- Configure port-based mac binding in switch.
The "ip-mac binding" feature of WFilter Enterprise can help you to check ip-mac binding. Clients will be blocked when ip-mac binding relationship is violated. This feature can work together with above solutions to prevent IP modifying.
However, because WFilter Enterprise does not provide DHCP service. Please note:
- Do not enable IP-mac binding in WFilter in a DHCP network. Otherwise, clients will be blocked on ip changing.
- In a multiple-segment network, MAC address collector is required for ip-mac binding of multiple subnets.
- For a better IP-mac binding solution, please check: IP-mac binding module of WFilter NG Firewall
