The command performs filtering by use static mapping of IP addresses to MAC addresses in an Ethernet network. It may be useful for service providers when they connect to their network a group of clients (such as individual users in an apartment block) via one common access unit. In this case, clients may be tempted to change their IP address to that of a neighbor, thus deceiving provider's accounting system. Using of "macf" command does not guarantee total protection, however, for the common user it is much more difficult to change the MAC address, than the IP address.
Syntax:
macf IFNAME {MAC|"any"} {IP|"any"} "Comment" macf IFNAME del N macf IFNAME {[-]dhcp [-]strict | [-]reverse | [-]simple | [-]quiet} macf show | clear |
|
Add two filters to the mapping table: to "102030405060" and "203040506070" MAC addresses are assigned "1.1.1.1" and "2.2.2.2" IP addresses. Add comments to label the IP addresses ownership.
| |
Display the mapping table current state.
| |
All local network workstations are connected directly to the subscriber terminal "eth0" interface. In this case, simplest filter version can be used, with the "strict" parameter.
|