Firewall, Anti ARP Spoofing, IP-MAC Binding | TP-Link TL-ER5120

Flags:	The Flags of route entry. The Flags describe certain characteristics of the
	route.
Logical Interface:	The logical interface of route entry.
Physical	The physical interface of route entry.
Interface:
Metric	The Metric of route entry.

3.4 Firewall

3.4.1 Anti ARP Spoofing

ARP (Address Resolution Protocol) is used to analyze and map IP addresses to the corresponding MAC addresses so that packets can be delivered to their destinations correctly.

ARP functions to translate the IP address into the corresponding MAC address and maintain an ARP Table, where the latest used IP address-to-MAC address mapping entries are stored. ARP protocol can facilitate the Hosts in the same network segment to communicate with one another or access to external network via Gateway. However, since ARP protocol is implemented with the premise that all the Hosts and Gateways are trusted, there are high security risks during ARP Implementation Procedure in the actual complex network.

The attacker may send the ARP spoofing packets with false IP address-to-MAC address mapping entries, and then the device will automatically update the ARP table after receiving wrong ARP packets, which results in a breakdown of the normal communication. Thus, ARP defense technology is generated to prevent the network from this kind of attack.

3.4.1.1IP-MAC Binding

IP-MAC Binding functions to bind the IP address, MAC address of the host together and only allows the Hosts matching the bound entries to access the network.

Choose the menu Firewall→Anti ARP Spoofing→IP-MAC Binding to load the following page.

-70-

Image 75

TP-Link TL-ER5120 manual Firewall, Anti ARP Spoofing, IP-MAC Binding

Contents

TL-ER5120 Gigabit Load Balance Broadband Router Copyright & Trademarks FCC Statement Contents 111 Application Hardware Specifications 135 136Glossary 138 Package Contents Intended Readers ConventionsOverview of this Guide Page Overview of the Router Basic Functions FeaturesEasy-to-use Hardware LEDs AppearanceFront Panel Security Interface Description Reset buttonPower Socket Rear Panel Please use only the power cord provided with this Router Status Network Status System ModePage NAT Mode ¾ WAN Mode WAN ModeNon-NAT Mode Classic Mode Static IP 3.2 WAN1 ¾ Static IP WAN Static IP Following items are displayed on this screen Bandwidth Dynamic IP¾ Dynamic IP Unicast Connection TypeHost Name Get IP Address by PPPoE IP Address WAN PPPoE Following items are displayed on this screen ¾ PPPoE Settings Service Name PasswordActive Mode Settings Subnet Address Downstream Bandwidth¾ PPPoE Status L2TP 10 WAN L2TP Following items are displayed on this screen ¾ L2TP Settings Connections Default GatewayServer IP Secondary Primary DNS/Secondary DNS Upstream Bandwidth Downstream ¾ L2TP StatusStatus IP Address Primary DNS Secondary DNS 11 WAN Pptp Following items are displayed on this screen ¾ Pptp Settings Account Name BigPond PrimaryDNS/Secondary DNS ¾ Pptp Status ¾ BigPond Settings ¾ BigPond Status 4.1 LAN 4 LAN Dhcp ¾ Dhcp Settings Dhcp Reservation Dhcp Client ¾ List of Reserved Address ¾ Dhcp Reservation 5.1 DMZ 5 DMZ MAC Address ¾ DMZMode ¾ MAC Address Set the MAC Address for LAN portSet the MAC Address for WAN port Set the MAC Address for DMZ port Switch Statistics¾ Statistics Port Mirror ¾ Port Mirror ¾ General Application Example Rate Control ¾ Rate Control Port Config Port Status ¾ Port Config User Group Port Vlan¾ Port Vlan ¾ List of Group ¾ Group ConfigGroup User Group Name Select the name of the desired Group ¾ User ConfigView ¾ List of User NAT Setup Advanced1 NAT DMZ Forwarding One-to-One NATMapping IP Address Interface ¾ Multi-Nets NAT Multi-Nets NAT Application Example Network Requirements Configuration procedure Virtual Server ¾ Virtual ServerProtocol Port Triggering ¾ Port Triggering 1.6 ALG 323 ALG SetupTraffic Control ¾ ALG ¾ Interface Bandwidth Use Bandwidth Control Bandwidth Up Limited Bandwidth GuaranteedDirection Group Session Limit Session Limit ¾ Session Limit ConfigurationLoad Balance Session List 39 Policy Routing Policy Routing WAN Link Backup 40 Link Backup Following items are displayed on this screen Failover BackupProtocol Timing ¾ List of Protocol RoutingStatic Route ¾ Protocol Metric Description Status ¾ Static Route 5.2 RIP 43 RIP Following items are displayed on this screen ¾ List of RIP Route Table Firewall Anti ARP SpoofingIP-MAC Binding ¾ IP-MAC Binding 46 ARP Scanning ARP Scanning ARP List Attack Defense ¾ General MAC Filtering Not sure¾ MAC Filtering URL Filtering Access Control Object ¾ URL Filtering Rule Web Filtering Access Rules ¾ Access Rules ServicePolicy Priority SourceGroup on3.2.1 Group Destination 53 Service Service Dest. Port App ControlControl Rules Name Application ¾ Control Rules Services PPPoE ServerDatabase Max Sessions GeneralPPPoE User Isolation Primary/Secondary IP Address Pool IP Address Range Account¾ IP Address Pool Pool Name Expiration Date ¾ Account ¾ Exceptional IP Status MAC Binding MAC Address Session TimeoutExceptional IP ¾ List of Account Bulletin List of AccountIP Address Range Description Status ¾ E-Bulletin Enable E-BulletinEnable Logs Interval Content Object Effective Time Publisher Description Status Dynamic DNS¾ List of E-Bulletin Domain Name Ddns ServiceDynDNS ¾ Dyndns Ddns No-IP ¾ List of DynDNS Account¾ No-IP Ddns PeanutHull ¾ List of No-IP Account¾ PeanutHull Ddns Comexe ¾ List of PeanutHull Account¾ Comexe Ddns ¾ List of Comexe Account UPnP ¾ List of UPnP Mapping MaintenanceAdmin Setup Administrator ¾ Administrator Login Parameter Application Example Network Requirements ¾ Remote Management Factory DefaultsManagement Remote Management ¾ Export Reboot¾ Configuration Version Export and Import Firmware Upgrade StatisticsInterface Traffic Statistics Interface Displays the interface IP Fragment Rx IP Traffic Statistics¾ Interface Traffic Statistics ¾ Advanced WAN Information Statistics Enable Auto-refresh DiagnosticsDiagnostics Enable IP Traffic ¾ Ping 76 Diagnostics Following items are displayed on this screen Online Detection ¾ TracertDetecting System Time TimePort Displays the detected WAN port Detection WAN Status Display the detecting results Synchronize With LogsGet GMT Manual Level Description Send System Logs Configurations Internet SettingNetwork Requirements Internet Connection System Mode WAN Static IP Group SettingsNetwork Management User Group View App Control App Rules Enable Bandwidth Control Bandwidth Control Rule Interface Bandwidth Network Security LAN ARP DefenseScan and import the entries to ARP List Set Attack Defense Set IP-MAC Binding Entry Manually Attack Defense WAN ARP Defense Port Mirror Traffic Monitoring Statistics 17 Port MirrorPage CLI ConfigurationPage Connection Properties Settings 126 Mode Accessing Path Prompt Logout or Access the next Interface Mode Online Help Admin Get Get the ip configuration Command Introduction Ip-mac 1 ip3 sys TP-LINK # sys restore TP-LINK # sys import config History TP-LINK user set password Enter old password Exit Transmission Medium PowerStandards Ports Appendix B FAQ Page Glossary Description Appendix C Glossary Allows dissimilar communication devices to communicate By the Ieee Glossary Description