IP MAC Binding

Information About IP MAC Binding

The wireless device tracking features, such as, theft detection, proxy, DHCP relay, gleaning, and suppression are enabled with IP MAC address binding configuration.


Note

The IP MAC address binding is enabled by default in the policy profile.

No IP MAC Binding

It disables all the wireless device tracking features for wireless clients' IPv4 address.


Note

It is not normally necessary to disable IP MAC binding, except for the following scenarios:

  • When you have a single wireless station with multiple IP addresses.

  • When you intentionally have duplicate IP addresses across clients.

  • When you are using ARP-spoofing Network Access Control (NAC) devices.

Use Cases for No IP MAC Binding

The following are the use cases for No IP MAC binding:

  • Disabling IP Learning in FlexConnect Mode

  • Disabling Device Tracking to Support NAC Devices

  • Disabling IP Learning in FlexConnect Mode

Disabling IP MAC Binding (CLI)

Procedure

  Command or Action Purpose

Step 1

configure terminal

Example:

Device# configure terminal

Enters global configuration mode.

Step 2

wireless profile policy profile-policy-name

Example:

Device(config)# wireless profile policy test-profile-policy

Configures the wireless profile policy.

Step 3

shutdown

Example:

Device(config-wireless-policy)# shutdown

Disables the wireless policy profile.

Note

 

Disabling policy profile results in associated AP and client to rejoin.

Step 4

no ip mac-binding

Example:

Device(config-wireless-policy)# no ip mac-binding

Disables IP MAC binding.

Step 5

no shutdown

Example:

Device(config-wireless-policy)# no shutdown

Enables the wireless policy profile.

Step 6

exit

Example:

Device(config-wireless-policy)# exit

Returns to privileged EXEC mode.

Verifying IP MAC Binding

To verify if the IP MAC binding is disabled or not, use the following command:


Device# show run | b wireless profile policy test-profile-policy
wireless profile policy test-profile-policy
 no ip mac-binding
 vlan VLAN0169