Network Security, LAN ARP Defense | TP-Link TL-ER5120 specs

Max. Sessions:

250

Status:Activate

Click the <Add> button to apply.

Figure 4-11 Session Limit

4.2.3 Network Security

You can enable the IP-MAC Binding function to defend the ARP attack from local or public network and enable Sending GARP packets function to defend ARP attack. Moreover, you can enable DoS Defense function to implement flood defense and Packet Anomaly Defense. Moreover, you can enable Port Mirror function and Statistics function to monitor the real-time traffic of the local network.

4.2.3.1LAN ARP Defense

You can configure IP-MAC Binding manually or by ARP Scanning. For the first time configuration, please bind most of the ARP information by ARP Scanning. For some special items not bound, you can bind them manually.

1)Scan and import the entries to ARP List

Specify ARP Scanning range.

Choose the menu Firewall→Anti ARP Spoofing→ARP Scanning to load the configuration page. No ARP attack in the local network is the premise of ARP Scanning.

Figure 4-12 ARP Scanning

Turn on all the hosts that need to be bound. Then click the <Scan> button, the scanning result will display as below.

-118-

Image 123

TP-Link TL-ER5120 manual Network Security, LAN ARP Defense, Scan and import the entries to ARP List

Contents

TL-ER5120 Gigabit Load Balance Broadband Router Copyright & Trademarks FCC Statement Contents 111 Application Hardware Specifications 135 136Glossary 138 Package Contents Intended Readers ConventionsOverview of this Guide Page Overview of the Router Basic Functions FeaturesEasy-to-use Hardware LEDs AppearanceFront Panel Security Interface Description Reset buttonPower Socket Rear Panel Please use only the power cord provided with this Router Status Network Status System ModePage NAT Mode ¾ WAN Mode WAN ModeNon-NAT Mode Classic Mode Static IP 3.2 WAN1 ¾ Static IP WAN Static IP Following items are displayed on this screen Bandwidth Dynamic IP¾ Dynamic IP Unicast Connection TypeHost Name Get IP Address by PPPoE IP Address WAN PPPoE Following items are displayed on this screen ¾ PPPoE Settings Service Name PasswordActive Mode Settings Subnet Address Downstream Bandwidth¾ PPPoE Status L2TP 10 WAN L2TP Following items are displayed on this screen ¾ L2TP Settings Connections Default GatewayServer IP Secondary Primary DNS/Secondary DNS Upstream Bandwidth Downstream ¾ L2TP StatusStatus IP Address Primary DNS Secondary DNS 11 WAN Pptp Following items are displayed on this screen ¾ Pptp Settings Account Name BigPond PrimaryDNS/Secondary DNS ¾ Pptp Status ¾ BigPond Settings ¾ BigPond Status 4.1 LAN 4 LAN Dhcp ¾ Dhcp Settings Dhcp Reservation Dhcp Client ¾ List of Reserved Address ¾ Dhcp Reservation 5.1 DMZ 5 DMZ MAC Address ¾ DMZMode ¾ MAC Address Set the MAC Address for LAN portSet the MAC Address for WAN port Set the MAC Address for DMZ port Switch Statistics¾ Statistics Port Mirror ¾ Port Mirror ¾ General Application Example Rate Control ¾ Rate Control Port Config Port Status ¾ Port Config User Group Port Vlan¾ Port Vlan ¾ List of Group ¾ Group ConfigGroup User Group Name Select the name of the desired Group ¾ User ConfigView ¾ List of User NAT Setup Advanced1 NAT DMZ Forwarding One-to-One NATMapping IP Address Interface ¾ Multi-Nets NAT Multi-Nets NAT Application Example Network Requirements Configuration procedure Virtual Server ¾ Virtual ServerProtocol Port Triggering ¾ Port Triggering 1.6 ALG 323 ALG SetupTraffic Control ¾ ALG ¾ Interface Bandwidth Use Bandwidth Control Bandwidth Up Limited Bandwidth GuaranteedDirection Group Session Limit Session Limit ¾ Session Limit ConfigurationLoad Balance Session List 39 Policy Routing Policy Routing WAN Link Backup 40 Link Backup Following items are displayed on this screen Failover BackupProtocol Timing ¾ List of Protocol RoutingStatic Route ¾ Protocol Metric Description Status ¾ Static Route 5.2 RIP 43 RIP Following items are displayed on this screen ¾ List of RIP Route Table Firewall Anti ARP SpoofingIP-MAC Binding ¾ IP-MAC Binding 46 ARP Scanning ARP Scanning ARP List Attack Defense ¾ General MAC Filtering Not sure¾ MAC Filtering URL Filtering Access Control Object ¾ URL Filtering Rule Web Filtering Access Rules ¾ Access Rules ServicePolicy Priority SourceGroup on3.2.1 Group Destination 53 Service Service Dest. Port App ControlControl Rules Name Application ¾ Control Rules Services PPPoE ServerDatabase Max Sessions GeneralPPPoE User Isolation Primary/Secondary IP Address Pool IP Address Range Account¾ IP Address Pool Pool Name Expiration Date ¾ Account ¾ Exceptional IP Status MAC Binding MAC Address Session TimeoutExceptional IP ¾ List of Account Bulletin List of AccountIP Address Range Description Status ¾ E-Bulletin Enable E-BulletinEnable Logs Interval Content Object Effective Time Publisher Description Status Dynamic DNS¾ List of E-Bulletin Domain Name Ddns ServiceDynDNS ¾ Dyndns Ddns No-IP ¾ List of DynDNS Account¾ No-IP Ddns PeanutHull ¾ List of No-IP Account¾ PeanutHull Ddns Comexe ¾ List of PeanutHull Account¾ Comexe Ddns ¾ List of Comexe Account UPnP ¾ List of UPnP Mapping MaintenanceAdmin Setup Administrator ¾ Administrator Login Parameter Application Example Network Requirements ¾ Remote Management Factory DefaultsManagement Remote Management ¾ Export Reboot¾ Configuration Version Export and Import Firmware Upgrade StatisticsInterface Traffic Statistics Interface Displays the interface IP Fragment Rx IP Traffic Statistics¾ Interface Traffic Statistics ¾ Advanced WAN Information Statistics Enable Auto-refresh DiagnosticsDiagnostics Enable IP Traffic ¾ Ping 76 Diagnostics Following items are displayed on this screen Online Detection ¾ TracertDetecting System Time TimePort Displays the detected WAN port Detection WAN Status Display the detecting results Synchronize With LogsGet GMT Manual Level Description Send System Logs Configurations Internet SettingNetwork Requirements Internet Connection System Mode WAN Static IP Group SettingsNetwork Management User Group View App Control App Rules Enable Bandwidth Control Bandwidth Control Rule Interface Bandwidth Network Security LAN ARP DefenseScan and import the entries to ARP List Set Attack Defense Set IP-MAC Binding Entry Manually Attack Defense WAN ARP Defense Port Mirror Traffic Monitoring Statistics 17 Port MirrorPage CLI ConfigurationPage Connection Properties Settings 126 Mode Accessing Path Prompt Logout or Access the next Interface Mode Online Help Admin Get Get the ip configuration Command Introduction Ip-mac 1 ip3 sys TP-LINK # sys restore TP-LINK # sys import config History TP-LINK user set password Enter old password Exit Transmission Medium PowerStandards Ports Appendix B FAQ Page Glossary Description Appendix C Glossary Allows dissimilar communication devices to communicate By the Ieee Glossary Description