The simplest and most convenient ip-mac binding, how does a transparent bridge implement IP-MAC bindings?

Ip-mac binding has always been an important part of LAN management. But its implementation is often more complex, the general will have the following problems:

1. The Ip-mac binding function of most routers is relatively limited. It is generally a simple ARP binding. Client to manually modify the IP and other ways to break through.
   

2. Routers due to hardware limitations, the allowable Ip-mac binding entries are relatively small, generally within 256.

3. IP-MAC bindings on the switch, the amount of configuration and maintenance work will be relatively large.

4. IP-MAC bindings for layer three switches often require professional technicians to operate.
   

Today, I would like to introduce a very simple and convenient ip-mac binding method, without modifying the switch and router, without changing the current network structure and configuration, Plug and Play, Web interface configuration. It is very simple and convenient to implement the IP-MAC binding to the client in the LAN. The details are as follows:

1. Transparent Bridge deployment

Use a WSG device (Wfilter NGF) to make a transparent bridge, threaded between the router and the switch. Network structure such as:

The bridge is completely transparent, connected in the network, no need to make any changes to the LAN's IP configuration, network structure, etc. Can play a role.

2. Configuring Ip-mac bindings via the Web interface

WSG in the bridge mode, the same can achieve the full network behavior management and auditing functions. In this case, we are only concerned with the configuration of the "Ip-mac binding".

The local area network client can either scan the import directly or bulk import the text.

For unbound clients, you can disable or allow Internet access.

In gateway mode, you can choose whether to assign an IP to an unbound device (you need to enable DHCP in Wfilter's interface settings). In the case of bridge mode, the DHCP service is not started by default, if you want to automatically assign the IP address of the binding to the client, then this option is as follows:

Of course, when you enable this DHCP option, you need to shut down your existing DHCP service, or DHCP will conflict.

3. Summarize the specific steps

Use transparent bridge to implement IP-MAC binding, the following steps:

1. Bridge mode to deploy a WSG device.
   

2. Imports a list of Ip-mac bindings.

3. Ip-mac bound configuration, the Internet is forbidden for unbound IPs.

4. Enable the bridge DHCP service (optional)

Through the transparent bridge to Ip-mac binding, really do not modify the existing network parameters, do not change the existing network architecture, is it simple enough?

The simplest and most convenient ip-mac binding, how does a transparent bridge implement IP-MAC bindings?