3.3 IP/MAC binding

The DHCP server automatically allocates IP addresses of internal network users. You do not need to manually set IP addresses. However, DHCP is not easy to manage. You can add a user to the internal network to obtain a valid IP address within the DHCP range by Automatically Obtaining the IP address. Some attackers may access the enterprise LAN through a wireless network. Or in the case of static IP Address Allocation, some employees will change to the IP address of executives or leaders on their own to avoid control. These functions can be addressed through the IP/MAC binding function provided by the Qno no router product, and achieve security management.
To bind an IP address or MAC address to a CEN instance, you must enter the MAC address of the enterprise intranet computer to the vro and create a table with the IP address. If the MAC address of the computer that the router finds to request an IP address from the DHCP server is not listed in the table, no response will be given. Therefore, the network management can bind MAC of computers in the enterprise, so that external computers cannot enter the enterprise network, and internal employees can avoid modifying their own IP addresses to avoid control measures.
The IP binding function is very simple. The "IP and MAC binding" on the "DHCP configuration" page of the "DHCP function" of the Sino-Russian Router ", click "show new IP Address" to add the IP address/MAC address of the internal network to the IP address and MAC binding list. You can also manually add the IP address or MAC address.

Figure 4

Figure 4:The IP address is bound to the MAC address. You can check "Block IP addresses in the corresponding list with incorrect MAC addresses" to prevent internal network users from modifying IP addresses to avoid network management. For example, check "Block MAC addresses not in the corresponding list ", it can prevent Internet users that have not been approved by the network administrator in the internal network.
The IP/MAC binding function solves the problems of Intranet users evading management and managing new Internet users that may be added. It is also a necessary means of security management.

Related Articles]

• Security router configuration and management for SMEs

• Log Management for security routers of Small and Medium Enterprises

• Vro Remote Management Configuration for Small and Medium-sized Enterprises