Ipbound

From Wiki of WFilter NG Firewall
(Difference between revisions)
Jump to: navigation, search
 
(14 intermediate revisions by one user not shown)
Line 1: Line 1:
{{DISPLAYTITLE:Ipbound}}
+
{{DISPLAYTITLE:IP-MAC Binding}}
== 介绍 ==
+
== IP-MAC Binding ==
<p>用于IP地址和MAC地址的绑定,更好地管理局域网内的IP地址和MAC地址。</p>
+
<p>在“搜索条件”中可以输入:IP地址,MAC地址,备注。如:输入“192.168”,会搜出192.168.0.0-192.168.255.255网段的所有IP。</p>
+
[[File:Ipbound00.jpg]]
+
  
==配置==
+
This module enables you to bind an ip address to a MAC address. Please notice:
<p>启用“禁止列表外的IP上网”时:只要在IP-MAC列表中的IP(“不论状态是否启用”)均可以上网,而列表外的IP(“不论状态是否启用”)均不可以上网。</p>
+
* When "ip-mac binding" is enabled, WFilter NGF DHCP server will assign static ip addresses to clients.
[[File:Ipbound01.jpg]]
+
* WFilter NGF does not act as a DHCP server when deployed as a network bridge.
==IP-MAC列表==
+
* If you have another dhcp server,  for "ip-mac binding" to work properly, please modify your DHCP server to assign listed static ip addresses to clients.
<p>IP-MAC列表中,状态为启用时,相应的IP和MAC才是绑定的。</p>
+
* If you want to apply binding to clients connected with a three layer switch, you need to enable [[Maccd|"MAC Detector"]].
[[File:Ipbound04.jpg]]
+
==批量操作==
+
  
<p>(1)扫描导入:支持局域网内扫描到的IP导入。</p>
+
== Settings ==
[[File:Ipbound02.jpg]]
+
<p>(1)删除:支持批量删除IP-MAC列表中的IP。</p>
+
[[File:Ipbound03.jpg]]
+
  
==导出==
+
[[File:Ipbound04.png|800px]]
  
<p>导出Excel:将IP-MAC列表中的IP全部导出,导出内容包括(IP,MAC,备注,状态)。</p>
+
* For ubound IPs, you can choose to:
 +
** "Block All". No internet access for ubound IP addresses.
 +
** "Allow All". Allow internet access for ubound IP addresses.
 +
** "Block below IP". Local IP address belongs to the IP ranges will be blocked.
 +
* Static ARP: enable static ARP for listed IP-mac addresses.
 +
* For ubound MAC addresses, you can set each lan subnet to assign IP address or not.
 +
** "Disable". Do not assign IP to unlisted MAC address.
 +
** "Enable". Assign IP to unlisted MAC address.
 +
* Please note: because client will cache the assigned ip for a while, sometimes you can not obtain the new bound ip immediately. For example, in windows system, you need to run command "ipconfig /renew" to force dhcp renew.
 +
 
 +
== IP-MAC List ==
 +
* Click the "state" icon, you can turn on/off the binding.
 +
 
 +
[[File:Ipbound01.jpg|800px]]
 +
 
 +
Please notice: even a binding is in "off" state, static ip address will still be assigned by WFilter's DHCP.
 +
 
 +
== Import & Remove ==
 +
 
 +
* Scan and Import: scan local ip & mac list for importing.
 +
** Without [[Maccd|"MAC Detector"]], only local ARP table will be scanned.
 +
** With [[Maccd|"MAC Detector"]] enabled, it also can import clients detected by [[Maccd|"MAC Detector"]].
 +
 
 +
[[File:Ipbound02.jpg|650px]]
 +
 
 +
* Import List: import a pre-defined IP & mac list.
 +
 
 +
[[File:Ipbound05.png|650px]]
 +
 
 +
* Delete: delete ip-mac list
 +
[[File:Ipbound03.jpg|650px]]
 +
 
 +
= Links =
 +
* [http://blog.wfilterngf.com/?p=394 How to bind ip address with mac address in network?]

Latest revision as of 12:16, 19 April 2023

Contents

[edit] 1 IP-MAC Binding

This module enables you to bind an ip address to a MAC address. Please notice:

  • When "ip-mac binding" is enabled, WFilter NGF DHCP server will assign static ip addresses to clients.
  • WFilter NGF does not act as a DHCP server when deployed as a network bridge.
  • If you have another dhcp server, for "ip-mac binding" to work properly, please modify your DHCP server to assign listed static ip addresses to clients.
  • If you want to apply binding to clients connected with a three layer switch, you need to enable "MAC Detector".

[edit] 2 Settings

Ipbound04.png

  • For ubound IPs, you can choose to:
    • "Block All". No internet access for ubound IP addresses.
    • "Allow All". Allow internet access for ubound IP addresses.
    • "Block below IP". Local IP address belongs to the IP ranges will be blocked.
  • Static ARP: enable static ARP for listed IP-mac addresses.
  • For ubound MAC addresses, you can set each lan subnet to assign IP address or not.
    • "Disable". Do not assign IP to unlisted MAC address.
    • "Enable". Assign IP to unlisted MAC address.
  • Please note: because client will cache the assigned ip for a while, sometimes you can not obtain the new bound ip immediately. For example, in windows system, you need to run command "ipconfig /renew" to force dhcp renew.

[edit] 3 IP-MAC List

  • Click the "state" icon, you can turn on/off the binding.

Ipbound01.jpg

Please notice: even a binding is in "off" state, static ip address will still be assigned by WFilter's DHCP.

[edit] 4 Import & Remove

Ipbound02.jpg

  • Import List: import a pre-defined IP & mac list.

Ipbound05.png

  • Delete: delete ip-mac list

Ipbound03.jpg

[edit] 5 Links

Personal tools
Namespaces

Variants
Actions
Navigation
Tools