Mac Binding with Ip In XG 550

Hello Munish thakur,

Thank you for reaching out to the community, you can follow the KBAs below:
> Sophos Firewall: Bind MAC address to a user - https://support.sophos.com/support/s/article/KB-000035643?language=en_US
> Sophos Firewall: Block internet access based on MAC address - https://support.sophos.com/support/s/article/KB-000035664?language=en_US
On the second KBA all you need to is select the action allow if you want to allow the MAC users to access the internet !!

Dear Vivek  thanks for time

But i know i can create user n provide ip with mac adress to bind with it 

but i have large network 

aprox 3000 user 

i am unable to provide all of them user id ....

what i need is bind mac adress with static ip that i given to user without creating user id .

can i do it with option DOS & Spoof Protection  ,like IP_Mac Pair Filter ..?

Under the Spoof protection you need  to add at least one trusted MAC address. An IP–MAC pair is a trusted MAC address that is bound to an IP address. For a match to occur, both the IP and MAC address of an incoming packet must match an IP–MAC pair. If either the IP or MAC address does not match any pair, the firewall drops the packet. 

Use trusted MAC addresses with the MAC filter setting to allow traffic for specified hosts. When you bind a trusted MAC address to an IP address, the firewall matches traffic with the IP–MAC pairs and filters traffic based on the settings specified for the IP–MAC pair filter.

Under the Spoof protection you need  to add at least one trusted MAC address. An IP–MAC pair is a trusted MAC address that is bound to an IP address. For a match to occur, both the IP and MAC address of an incoming packet must match an IP–MAC pair. If either the IP or MAC address does not match any pair, the firewall drops the packet. 

Use trusted MAC addresses with the MAC filter setting to allow traffic for specified hosts. When you bind a trusted MAC address to an IP address, the firewall matches traffic with the IP–MAC pairs and filters traffic based on the settings specified for the IP–MAC pair filter.