How to do ARP binding on ASA firewall

At present, the network used by my company is all static IP address, inside the company has a ASA5505 firewall, should lead the requirements, in the firewall to limit a part of users can not use certain applications (such as QQ farm, etc.), and the leader of the computer does not make any restrictions. To implement these features, we need to do an ARP binding above the ASA 5505 Firewall and then use the Access control list to restrict these IP addresses and MAC addresses. The specific configuration is very simple, then let's take a look at how to configure the ASA 5500 firewall ARP binding it?

ciscoasa# conf t

Ciscoasa (config) # name 192.168.0.78 liuty-s//Give me a name for this IP address

Ciscoasa (config) # Object-group network inside//set up a pair of image groups

Ciscoasa (config-network) # Network-object Host 192.168.0.78//Add my IP address to the image group

Ciscoasa (config-network) # exit

Ciscoasa (config) # access-list inside line 1 per IP object-group inside any/access control list, allowing IP addresses in Oubject-group in inside to access any address

Ciscoasa (config) # Access-group inside in interface inside//apply access control list inside to the entrance direction of inside

Ciscoasa (config) # arp inside 192.168.0.78 0023.14E7.BD10//Bind the IP address to the MAC address

A very simple few commands, we will implement the following PC's IP address and MAC address binding. Let's take a look at the next test. Just above the IP address and MAC address is my notebook wireless network card IP address and MAC address (as shown below).

We ping 192.168.0.199 (firewall intranet interface address) to see whether normal communication.

From the above we can see that through our wireless network card can be normal to the internal interface with our firewall normal communication. Then I will my wireless network card above the IP address to the wired network card to test, so that my wired network card MAC address can not be set with the firewall above the MAC address matching (pictured below).

This column more highlights: http://www.bianceng.cnhttp://www.bianceng.cn/Network/Firewall/