Manuals / TP-Link / Computer Equipment / Network Router

TP-Link TL-ER604W manual Attack Defense

Models: TL-ER604W

1 159

Page 85

Figure 3-52 ARP List

The configurations for the entries is the same as the configuration of List of Scanning Result on 3.5.1.2 ARP Scanning page.

The unbound IP-MAC information will be replaced by new IP-MAC information or be automatically removed from the list if it has not been communicated with others for a long time. This period is regarded as the aging time of the ARP information.

3.5.2 Attack Defense

With Attack Defense function enabled, the Router can distinguish the malicious packets and prevent the port scanning from external network, so as to guarantee the network security.

Choose the menu Firewall→Attack Defense→Attack Defense to load the following page.

-80-

Page 85

Image 85

Contents

Wireless N Gigabit Broadband VPN Router TL-ER604WFCC STATEMENT COPYRIGHT & TRADEMARKSCE Mark Warning Chapter 1 About this Guide CONTENTSAdvanced Chapter 4 Application Hardware SpecificationsGlossary Appendix A One TL-ER604W Router  One Power Adapter  One RJ45 Ethernet Cable Package Contents Quick Installation Guide  Resource CD The following items should be found in your packageChapter 1 About this Guide Symbol1.1 Intended Readers 1.2 Conventions Wireless Feature  Powerful Data Processing Capability Powerful Firewall Chapter 2 Introduction Flexible Traffic Control 2.2 Features Dual-WAN Ports  Easy-to-useTraffic Control WirelessSecurity 2.3.1 Front Panel 2.3 Appearance LEDs Status Wifi button  Reset button Power 2.3.2 Rear Panel3.1.2 System Mode Chapter 3 Configuration3.1 Network 3.1.1 StatusFigure 3-3 Network Topology - Non-NAT Mode Figure 3-2 Network Topology - NAT ModeFigure 3-4 Network Topology - Classic Mode Choose the menu Network→System Mode to load the following page NAT Mode 3.1.3.1 WAN Mode Non-NAT Mode  Classic Mode3.1.3.2 WAN1  WAN ModeTips 1 Static IP Static IP  Dynamic IP 2 Dynamic IPConnection Type Host NameUnicast Get IP Address byUse the following DNS ServerGateway Address Displays the Gateway Address assigned by your ISP 3 PPPoEPrimary DNS Displays the IP address of your ISP’s Primary DNS Secondary DNS Displays the IP address of your ISP’s Secondary DNSPassword  PPPoE SettingsActive Mode SettingsISP Address Service NameSecondary Connection Subnet Address4 L2TP Gateway AddressIP Address Primary DNS L2TP Settings Secondary Default GatewayConnection the obtained DNS is displayed5 PPTP  L2TP StatusStatus IP AddressServer IP  PPTP SettingsPassword Connection TypeActive Mode Default Gateway Primary DNS Secondary DNS Upstream BandwidthSecondary Connection Connection Type6 BigPond  PPTP StatusStatus IP Address BigPond Settings Default Gateway  BigPond StatusStatus IP Address3.1.4.1 LAN 3.1.4 LAN3.1.4.2 DHCP  LAN DHCP Settings 3.1.4.4 DHCP Reservation 3.1.4.3 DHCP Client DHCP Reservation  List of Reserved Address 3.1.5 MAC AddressSet the MAC Address for LAN port Set the MAC Address for WAN port3.1.6.1 Statistics 3.1.6 Switch MAC Address Port Statistics 3.1.6.2 Port MirrorTips General Enable Port MirrorMode Port MirrorApplication Example 3.1.6.3 Rate Control Rate Control  Port Config 3.1.6.4 Port ConfigPort 3.1.6.6 Port VLAN 3.1.6.5 Port Status Port VLAN 3.2.1 Wireless Setting 3.2 Wireless3.2.1.1 Wireless Setting  Wireless SettingMode  Wireless ParameterDescription SSIDSSID Broadcast AP IsolationGroup or above. Enter 0 to disable the updatePeriod 2 WPA/WPA2or above. Enter 0 to disable the update 3 WEPGroup PeriodKey Format 3.2.1.2 Multi-SSIDHexadecimal and ASCII formats are Tips General  Multi-SSID ConfigSpecify a name for the wireless network SSIDGuest Network Enable/DisableAP Isolation SSIDGroup Key EncryptionPassword PeriodHexadecimal and ASCII formats are provided . Hexadecimal format Auth Typeor above. Enter 0 to disable the update Group List of Group 3.2.1.3 WDSTips Tips Parameter ScanBSSIDto be bridged Key Type Wireless Advanced 3.2.1.4 Wireless AdvancedKey ： Short GIBeacon Interval 3.2.2 MAC FilteringRTS Threshold Fragmentation Filtering Rules 3.2.3 Host Status Rule List  General3.3.1 Group 3.3 User Group Host Status  General User Config  Group Config3.3.2 User  List of Group3.3.3 View  View Config List of User View3.4 Advanced 3.4.1.1 NAT Setup3.4.1 NAT  NAPT One-to-One NAT 3.4.1.2 One-to-One NAT List of Rules 3.4.1.3 Multi-Nets NAT Multi-Nets NAT  list of RulesApplication Example Network Requirements Configuration procedure3.4.1.4 Virtual Server Interface  Virtual ServerProtocol Status Port Triggering 3.4.1.5 Port Triggering List of Rules Status 3.4.1.6 ALG List of Rules 3.4.2 Traffic Control 3.4.2.1 Setup ALG FTP ALGControl Default LimitControl all the time Limited3.4.2.2 Bandwidth Control Guaranteed Bandwidth Bandwidth Control Rule Direction3.4.3.1 Session Limit 3.4.3 Session LimitLimited Bandwidth Effective TimeCheck here to enable Session Limit, otherwise all the Session Limit Enable Sessionentries will be disabled 3.4.3.2 Session List3.4.4 Load Balance 3.4.4.1 Configuration3.4.4.2 Policy Routing Select the WAN port for transmitting packets  General List of Rules 3.4.4.3 Link Backup General 3.4.4.4 Protocol WAN ConfigTiming Failover3.4.5.1 Static Route 3.4.5 Routing Protocol  List of Protocol List of Rules  Static RouteApplication Example 3.4.5.2 RIPChoose the menu Advanced→Routing→RIP to load the following page  List of RIP General Destination 3.4.5.3 Route TableThe Destination of route entry Gateway3.5.1 Anti ARP Spoofing 3.5 Firewall3.5.1.1 IP-MAC Binding  General IP-MAC Binding 3.5.1.2 ARP ScanningIP Address Status3.5.1.3 ARP List 3.5.2 Attack Defense Flood Defense Enable AttackPacket Anomaly Defense3.5.3 MAC Filtering 3.5.4 Access Control3.5.4.1 URL Filtering  MAC FilteringObject  URL Filtering Rule General ModeConfiguration Procedure 3.5.4.3 Access Rules3.5.4.2 Web Filtering Application Example Network RequirementsService  Access RulesPolicy Sourcegroup on 3.3.1 Group 3.5.4.4 ServicePriority Destination List of Service  ServiceName Dest. Port3.5.5.1 Control Rules 3.5.5 App Control Control Rules Application3.5.5.2 Database 3.6 VPN List of Rules 3.6.1.1 IKE Policy 3.6.1 IKE IKE Policy Local ID 3.6.1.2 IKE ProposalRemote ID Type Remote ID IKE Proposal 3.6.2.1 IPsec Policy 3.6.2 IPsec List of IKE Proposal Policy Name  IPsec PolicyLocal Subnet  General IKE Mode Policy ModeRemote Subnet Remote GatewayAH Authentication Key-In  Manual ModeESP Authentication Key-In AH Authentication Key-Out List of IPsec Policy IPsec 3.6.2.2 IPsec Proposal IPsec Proposal Tips List of IPsec Proposal 3.6.3 L2TP/PPTP Authentication3.6.2.3 IPsec SA Protocol L2TP/PPTP Tunnel 3.6.3.1 L2TP/PPTP Tunnel General ProtocolMax Connections TunnelL2TP/PPTP Server Pre-shard Key3.6.3.2 IP Address Pool  List of Configurations3.6.3.3 List of L2TP/PPTP Tunnel  IP Address Pool3.7.1 PPPoE Server 3.7 Services3.7.1.1 General  General Figure 3-70 General The following items are displayed on this screen IP Address Pool 3.7.1.2 IP Address Pool Account 3.7.1.3 AccountIP Address Assigned Static IP Address3.7.1.4 Exceptional IP is 48. If Enable Advanced Account Features is not selected, the List of Account Status3.7.1.5 List of Account 3.7.2 E-Bulletin Exceptional IP Status E-Bulletin IntervalTitle  GeneralPublisher 3.7.3 Dynamic DNS List of E-Bulletin Object Dyndns DDNS 3.7.3.1 DynDNS List of DynDNS Account 3.7.3.2 No-IP No-IP DDNS  List of No-IP Account 3.7.3.3 PeanutHull PeanutHull DDNS  List of PeanutHull Account 3.7.3.4 Comexe Comexe DDNS 3.7.4 UPnP List of Comexe Account 3.8.1 Admin Setup 3.8 Maintenance3.8.1.1 Administrator  List of UPnP Mapping Administrator 3.8.1.2 Login Parameter Remote Management 3.8.1.3 Remote Management General 3.8.2 Management 3.8.2.1 Factory Defaults List of Subnet Configuration Procedure Configuration Version 3.8.2.3 Reboot3.8.2.2 Export and Import  Export3.8.3 License 3.8.2.4 Firmware Upgrade3.8.4.1 Interface Traffic Statistics 3.8.4 Statistics Interface Traffic Statistics Displays the interfacePackets Rx 3.8.4.2 IP Traffic StatisticsDisplays the number of packets received on the interface Packets Tx3.8.5.1 Diagnostics 3.8.5 Diagnostics Traffic Statistics  IP Traffic Statistics Ping 3.8.5.2 Online Detection Tracert  GeneralPing 3.8.6 TimeDNS Lookup  List of WAN status3.8.7 Logs ConfigCurrent Time System Time List of Logs  ConfigSeverity Send System Logs4.1 Network Requirements Chapter 4 Application4.3.1 Internet Setting 4.2 Network Topology 4.3 Configurations4.3.1.1 System Mode Tips4.3.1.2 Internet Connection 4.3.1.3 Link Backup1 IKE Setting 4.3.2 VPN SettingSettings 4.3.2.1 IPsec VPNSettings  IKE PolicyClick the Add button to apply Figure 4-4 IKE Proposal  IPsec Proposal 2 IPsec SettingSettings TipsSettings  IPsec PolicyproposalIPsec1 you just created  IP Address Pool 4.3.2.2 PPTP VPN SettingTips Settings  L2TP/PPTP TunnelL2TP/PPTPEnable ProtocolPPTP ModeServer UsernamePPTP Passwordabcdefg 4.3.3.1 User Group 4.3.3 Network Management Group  User View 4.3.3.2 App ControlSettings 4.3.3.3 Bandwidth Control 1 Enable Bandwidth Control2 Interface Bandwidth 3 Bandwidth Control Rule 4.3.3.4 Session LimitSettings Settings4.3.4.1 LAN ARP Defense 4.3.4 Network Security1 Scan and import the entries to ARP List 2 Set IP-MAC Binding Entry Manually 4.3.4.2 WAN ARP Defense3 Set Attack Defense Settings4.3.4.3 Attack Defense 1 Port Mirror 4.3.4.4 Traffic Monitoring2 Statistics Figure 4-23 IP Traffic Statistics Environmental and Physical Appendix A Hardware SpecificationsWireless GeneralAppendix B FAQ 4. Make sure that the NAT DMZ service is disabled Glossary Appendix C GlossaryAH （Authentication Header ） data authentication, and anti-replay services. ESP encapsulatesGlossary for services such as IPSec that require keys. Before any IPSecDescription Description GlossaryDescription Glossaryenterprise