Figure 4-15 IP-MAC Binding

4.2.3.2WAN ARP Defense

To prevent the WAN ARP attack, you can bind the default gateway and IP address of WAN port.

Obtain the MAC address of WAN port by ARP Scanning first.

Choose the menu FirewallAnti ARP SpoofingARP Scanning to load the configuration page. Enter the default gateway of the WAN port such as 58.51.128.254 in the Scanning Range field and click the <Scan> button, the MAC address of the WAN port will display in the Scanning Result table.

After obtaining the MAC address of WAN port from Scanning Result table, select this entry, then click the <Import> button to finish the binding operation.

4.2.3.3Attack Defense

Choose the menu FirewallAttack DefenseAttack Defense to load the configuration page. Select the options desired to be enabled as Figure 4-16shows, and then click the <Save> button.

-120-

Page 125
Image 125
TP-Link TL-ER5120 manual WAN ARP Defense, Attack Defense