Introduction to Bind IP to MAC

While being the DHCP server for the LAN network, Vigor Router provides Bind-IP-to-MAC for DHCP Reservation. If you reserve an IP address, it will be excluded from the DHCP pool, and only the device (MAC address) binding to it can obtain the that IP address from the router. The feature allows Network Administrator to give some devices a specific IP address while using DHCP for the network IP configuration, especially for the devices that are often accessed by other LAN clients, such as a printer, network storage, or servers. Also, it enables the Network Administrator to manage the IP address of each LAN client, without the need for configuration on each device individually.

an illustration of DHCP reservation

This article is going to introduce how to use Bind IP to MAC in normal mode and Strict Mode, and also Exporting the IP Bind List

Set up Bind IP to MAC

1. Go to LAN >> Bind IP to MAC, select Enable.

2. Add an input to the IP-MAC bind list. The ARP table shows the devices that are connecting the router and their current IP address. You may add a MAC address from the ARP table by selecting a device from the ARP table then click Add.

a screenshot of DHCP Reservation setup on DrayOS

Or manually enter a pair of IP address and a MAC address, then click Add.

a screenshot of DHCP Reservation setup on DrayOS

3. Finally, click OK to apply the settings.  

a screenshot of DHCP Reservation setup on DrayOS

Strict Mode

When Bind-IP-to MAC works in the normal mode, a device in the list will always get the assigned IP address every time it sends a DHCP discover. As for the unlisted devices, it will get an IP address from the IP Pool but out of the IP Bind List. However, if you check Strict Mode, only the devices on the IP Bind List will be allowed to access the network. The router will block access from devices NOT on the list. Since only registered devices can have access, Strict Mode can add a layer of security to your network.

a screenshot of DHCP Reservation setup on DrayOS
Strict Bind for Some Subnet Only

Since firmware version 3.8.5, Strict Bind can apply to the specific subnet only so that you can use Strict Bind for the subnet requires higher security, while the other IP subnet can still use DHCP.
NOTICE: If none of the LAN subnets is selected in the "Apply Strict Bind to Subnet" settings, then the strict mode works as before and will apply to the entire LAN network.

a screenshot of DHCP Reservation setup on DrayOS

Copy and Backup the IP Bind List

Since firmware version 3.7.4.2, you can download the MAC-IP Bind List and restore it to other DrayTek routers which supports this feature.

Backup IP Bind List

Set up Bind IP to MAC

1. Go to LAN >> Bind IP to MAC, select Enable for Mode.

2. Add an input to the IP-MAC bind list. The ARP table shows the devices that are connecting the router and their current IP address. You may add a MAC address from the ARP table by selecting a device from the ARP table then click Move.

Or click Add at the Bind Table and manually enter a pair of IP address and a MAC address.

3. Finally, click Apply to save the settings.

Strict Mode

When Bind-IP-to MAC works in the normal mode, a device in the list will always get the assigned IP address every time it sends a DHCP discover. As for the unlisted devices, it will get an IP address from the IP Pool but out of the IP Bind List. However, if you check Strict Mode, only the devices on the IP Bind List will be allowed to access the network. The router will block access from devices NOT on the list. Since only registered devices can have access, Strict Mode can add a layer of security to your network.

To use Strict Bind, choose "Strict Bind" for Mode, and check the subnet to apply the restriction.

Copy and Backup the IP Bind List

We can download the Bind Table from the router for backup or importing to other Vigor Router Click the Export button to save the Bind list into a .cfg file named "ipbindmacs.cfg"

NOTE: The exported list can be restored to Vigor3900, Vigor2960, Vigor300B and the Vigor router with firmware version 3.7.4.2 or later. Due to the configuration difference on each model, the exported bind list will not contain the profile name; you will find the profile name become default name as "1_192_168_1_10" after importing to other devices. If you want to keep the profile name, go to System Maintenance >> Configuration Backup, select "Bind IP to MAC" for Select Config File and download the whole configuration.

Published On: 2017-09-26 

Was this helpful?