This article explains the use of Static ARP (Address Resolution Protocol) by Binding an IP to a MAC address and ensuring only IP's with static ARP entries are allowed on the network and rest will be blocked. DHCP relay-based leases (SonicWall's - IP Helper).DHCP Server-based leases (SonicWall's - DHCP Server).The MAC-IP Anti-Spoof cache is built through one or more of the following sub-systems: If they are found, the packet is allowed through. An incoming packet's source MAC and IP addresses are looked up in this cache. The MAC-IP Anti-Spoof cache validates incoming packets and determines whether they are to be allowed inside the network. The MAC-IP Anti-Spoof feature lowers the risk of these attacks by providing administrators different ways to control access to a network, and by eliminating spoofing attacks at OSI Layer 2/3.
ALLOW IP ADDRESS THROUGH MAC OS FIREWALL HOW TO HOW TO
This article explains how to restrict traffic initiated from internal network, based on MAC addresses, using MAC-IP Anti-spoof protection.
Next Generation Firewall Next-generation firewall for SMB, Enterprise, and Government.