What kind of LAN needs IP-MAC bindings? Ip-mac the benefits of binding.

1. Why do Ip-mac bindings?

Ip-mac binding is an important means of network management, enabling IP-MAC bindings within a LAN can provide you with the following benefits:

1. Only through the binding device can access the network, thereby effectively preventing the private connection device.

2. Most of the Internet and flow control policies are based on IP address, need to bind IP and Mac to better apply Internet strategy.

3. Achieve effective online logging and online statistics. If you do not bind, record statistics cannot be effectively targeted to a specific user.

4. Conserve IP resources and prevent IP theft.
   

5. Reduce ARP attacks, eliminate IP address collisions, and thus improve network stability.

Therefore, for the enterprise's office LAN, the benefits of IP-MAC binding are obvious. I recommend any conditional LAN to be IP-MAC bound, at least partially bound (such as: office equipment binding, mobile device automatic distribution), which can effectively improve network security and stability.

650) this.width=650; "Src=" http://wiki.imfirewall.com/images/thumb/e/e2/Faq_Ipbound01.png/650px-Faq_ Ipbound01.png "alt=" Faq ipbound01.png "/>

2. Do you want to bind the wireless Internet device?

Mobile phones and other wireless devices, the default is to automatically obtain IP, and mobile phones are private items, network management can not be directly operated. There are two types of requirements.

2.1) Do not restrict access to wireless devices.

To put it simply: a single VLAN is set up for wireless devices, all automatically acquiring IP, and the speed limit on the wireless network segment on the gateway is available. This situation does not require binding, and all wireless device segments are configured with the same Internet behavior policy and flow control policy. The advantage is that the configuration and deployment is convenient, the disadvantage is to achieve one-size-fits-all management, can not control the access of wireless devices, nor can the device set up a separate Internet policy, wireless internet speed and stability is not guaranteed.

2.2) Wireless equipment strict authentication.

Some local area network requirements are more stringent, only the allowed devices can access. In this case, the wireless device needs to be Ip-mac bound, and to configure static address assignment on DHCP (such as the IP-MAC binding function of Wfilter NGF), even if the phone is set to automatically obtain the IP, each time will get the same IP address, You do not need to modify your phone's configuration. This scheme is the advantage of strict access control, Internet policy and record statistics can be mapped to individuals, the disadvantage is the need to register to manage each phone's MAC address and IP address, management trouble.

2.3) Web authentication for wireless devices.

IP-MAC bindings are not performed, but Web authentication is enabled and is managed and counted based on the account. is also an effective way of management.

650) this.width=650; "Src=" Http://www.imfirewall.com/blog/zb_users/upload/2017/06/201706121497243147435218.png " Title= "201706121497243147435218.png" alt= "201706121497243147435218.png" style= "width:800px;" width= "vspace=" 0 "border=" 0 "/>

In general, the equipment has the condition to do ip-mac binding, the recommendations are done. If the device is not supported, the scenario described in "2.1" can be used. Recommended reference: Wfilter LAN Ip-mac binding scheme

What kind of LAN needs IP-MAC bindings? Ip-mac the benefits of binding.