WAN ARP Defense, Attack Defense | TP-Link TL-ER5120 manual

Figure 4-15 IP-MAC Binding

4.2.3.2WAN ARP Defense

To prevent the WAN ARP attack, you can bind the default gateway and IP address of WAN port.

Obtain the MAC address of WAN port by ARP Scanning first.

Choose the menu Firewall→Anti ARP Spoofing→ARP Scanning to load the configuration page. Enter the default gateway of the WAN port such as 58.51.128.254 in the Scanning Range field and click the <Scan> button, the MAC address of the WAN port will display in the Scanning Result table.

After obtaining the MAC address of WAN port from Scanning Result table, select this entry, then click the <Import> button to finish the binding operation.

4.2.3.3Attack Defense

Choose the menu Firewall→Attack Defense→Attack Defense to load the configuration page. Select the options desired to be enabled as Figure 4-16shows, and then click the <Save> button.

-120-

Image 125

TP-Link TL-ER5120 manual WAN ARP Defense, Attack Defense

Contents

TL-ER5120 Gigabit Load Balance Broadband Router Copyright & Trademarks FCC Statement Contents 111 Application Glossary 138 Hardware Specifications 135136 Package Contents Overview of this Guide Intended ReadersConventions Page Overview of the Router Easy-to-use FeaturesHardware Basic Functions Front Panel AppearanceSecurity LEDs Power Socket Reset buttonRear Panel Interface Description Please use only the power cord provided with this Router Status Network Status System ModePage NAT Mode Non-NAT Mode WAN ModeClassic Mode ¾ WAN Mode Static IP 3.2 WAN1 ¾ Static IP WAN Static IP Following items are displayed on this screen ¾ Dynamic IP BandwidthDynamic IP Host Name Connection TypeGet IP Address by Unicast PPPoE IP Address WAN PPPoE Following items are displayed on this screen ¾ PPPoE Settings Active Mode PasswordSettings Service Name ¾ PPPoE Status Subnet AddressDownstream Bandwidth L2TP 10 WAN L2TP Following items are displayed on this screen ¾ L2TP Settings Server IP Default GatewaySecondary Connections Status IP Address Primary DNS Secondary DNS Primary DNS/Secondary DNS Upstream Bandwidth Downstream¾ L2TP Status 11 WAN Pptp Following items are displayed on this screen ¾ Pptp Settings Account Name DNS/Secondary DNS Primary¾ Pptp Status BigPond ¾ BigPond Settings ¾ BigPond Status 4.1 LAN 4 LAN Dhcp ¾ Dhcp Settings Dhcp Reservation Dhcp Client ¾ List of Reserved Address ¾ Dhcp Reservation 5.1 DMZ 5 DMZ Mode MAC Address¾ DMZ Set the MAC Address for WAN port Set the MAC Address for LAN portSet the MAC Address for DMZ port ¾ MAC Address ¾ Statistics SwitchStatistics Port Mirror ¾ Port Mirror ¾ General Application Example Rate Control ¾ Rate Control Port Config Port Status ¾ Port Config ¾ Port Vlan User GroupPort Vlan Group ¾ Group ConfigUser ¾ List of Group View ¾ User Config¾ List of User Group Name Select the name of the desired Group 1 NAT NAT SetupAdvanced Mapping IP Address One-to-One NATInterface DMZ Forwarding ¾ Multi-Nets NAT Multi-Nets NAT Application Example Network Requirements Configuration procedure Protocol Virtual Server¾ Virtual Server Port Triggering ¾ Port Triggering 1.6 ALG Traffic Control Setup¾ ALG 323 ALG ¾ Interface Bandwidth Use Bandwidth Control Direction GuaranteedGroup Bandwidth Up Limited Bandwidth Session Limit Session Limit Load Balance ConfigurationSession List ¾ Session Limit 39 Policy Routing Policy Routing WAN Link Backup 40 Link Backup Following items are displayed on this screen Protocol BackupTiming Failover Static Route Routing¾ Protocol ¾ List of Protocol Metric Description Status ¾ Static Route 5.2 RIP 43 RIP Following items are displayed on this screen ¾ List of RIP Route Table IP-MAC Binding FirewallAnti ARP Spoofing ¾ IP-MAC Binding 46 ARP Scanning ARP Scanning ARP List Attack Defense ¾ General ¾ MAC Filtering MAC FilteringNot sure URL Filtering Access Control Object ¾ URL Filtering Rule Web Filtering Access Rules Policy ¾ Access RulesService Group on3.2.1 Group SourceDestination Priority 53 Service Service Control Rules App ControlName Dest. Port Application ¾ Control Rules Database ServicesPPPoE Server PPPoE User Isolation GeneralPrimary/Secondary Max Sessions IP Address Pool ¾ IP Address Pool AccountPool Name IP Address Range Expiration Date ¾ Account Exceptional IP Status MAC Binding MAC Address Session Timeout¾ List of Account ¾ Exceptional IP IP Address Range Description Status BulletinList of Account Enable Logs Enable E-BulletinInterval ¾ E-Bulletin ¾ List of E-Bulletin Content Object Effective Time Publisher Description StatusDynamic DNS DynDNS Ddns Service¾ Dyndns Ddns Domain Name ¾ No-IP Ddns No-IP¾ List of DynDNS Account ¾ PeanutHull Ddns PeanutHull¾ List of No-IP Account ¾ Comexe Ddns Comexe¾ List of PeanutHull Account ¾ List of Comexe Account UPnP Admin Setup MaintenanceAdministrator ¾ List of UPnP Mapping ¾ Administrator Login Parameter Application Example Network Requirements Management Factory DefaultsRemote Management ¾ Remote Management ¾ Configuration Version RebootExport and Import ¾ Export Interface Traffic Statistics Firmware UpgradeStatistics ¾ Interface Traffic Statistics IP Traffic Statistics¾ Advanced WAN Information Interface Displays the interface IP Fragment Rx Diagnostics DiagnosticsEnable IP Traffic Statistics Enable Auto-refresh ¾ Ping 76 Diagnostics Following items are displayed on this screen Detecting Online Detection¾ Tracert Port Displays the detected WAN port Detection TimeWAN Status Display the detecting results System Time Get GMT LogsManual Synchronize With Level Description Send System Logs Network Requirements ConfigurationsInternet Setting Internet Connection System Mode WAN Static IP Network Management SettingsUser Group Group View App Control App Rules Enable Bandwidth Control Bandwidth Control Rule Interface Bandwidth Scan and import the entries to ARP List Network SecurityLAN ARP Defense Set Attack Defense Set IP-MAC Binding Entry Manually Attack Defense WAN ARP Defense Port Mirror Traffic Monitoring Statistics 17 Port MirrorPage CLI ConfigurationPage Connection Properties Settings 126 Mode Accessing Path Prompt Logout or Access the next Interface Mode Online Help Admin Get Get the ip configuration Command Introduction 3 sys Ip-mac1 ip TP-LINK # sys restore TP-LINK # sys import config History TP-LINK user set password Enter old password Exit Standards PowerPorts Transmission Medium Appendix B FAQ Page Glossary Description Appendix C Glossary Allows dissimilar communication devices to communicate By the Ieee Glossary Description