This object enables/disables IP-MAC binding on all the system ports. This action is only applicable when users have write privileges, and can only be viewed when users have read privileges. Note: enable-strict (2): This means strict mode (SW learning). In this mode all packets will be sent to the CPU. The user can choose if the port will check the ARP packets and IP packets of the IP-MAC-PORT Binding entries. If the MAC address can be found or not found by the entry, the MAC address will be set as a dynamic learned or blocked entry, respectively. Other packets will be sent to the CPU and dropped. enable-loose (4) : This means loose mode (HW learning): Only ARP packets and IP broadcast packets will be sent to the CPU. If the user chooses , the port will directly learn MAC addresses on non-ARP and non-IP broadcast packets, so these packets will be bypassed. However, if the switch receives ARP or IP broadcast packets and cannot bypass the IP MAC Binding checks, the switch will set this MAC address as blocked and all packets from this MAC address will be dropped.