ARP Defend, Network Security→ARP | TP-Link TL-SL5428E specs

Configuration Procedure:

Step	Operation	Description

1	Bind the IP address, MAC	Required. On the IP-MAC Binding page, bind the IP
	address, VLAN ID and the	address, MAC address, VLAN ID and the connected Port
	connected Port number of	number of the Host together via Manual Binding, ARP
	the Host together.	Scanning or DHCP Snooping.

2	Enable the protection for the	Required. On the Network Security→IP-MAC
	bound entry.	Binding→Binding Table page, specify a protect type for
		the corresponding bound entry.

3	Specify the trusted port.	Required.	On	the	Network	Security→ARP
		Inspection→ARP Detect page, specify the trusted port.
		The specific ports, such as up-linked port, routing port
		and LAG port, should be set as Trusted Port.

4	Enable ARP Detect feature.	Required.	On	the	Network	Security→ARP
		Inspection→ARP Detect page, enable the ARP Detect
		feature.

11.2.2 ARP Defend

With the ARP Defend enabled, the switch can terminate receiving the ARP packets for 300 seconds when the transmission speed of the legal ARP packet on the port exceeds the defined value so as to avoid ARP Attack flood.

Choose the menu Network Security→ARP Inspection→ARP Defend to load the following page.

Figure 11-14 ARP Defend

170

Image 178

TP-Link TL-SL5428E manual ARP Defend, Required. On the Network Security→IP-MAC, Network Security→ARP

Contents

Rev 1910010529 Copyright & Trademarks Contents Gvrp TC Protect 101 11.4.1 11.4.2 Ntdp VII Package Contents Conventions About this GuideIntended Readers Overview of This Guide Path Switch, which facilitates you to monitor the Igmp messages Return to Contents Main Features Overview of the SwitchIntroduction Front Panel Appearance Description¾ LEDs Name Status Indication Rear Panel Login Login to the SwitchConfiguration Return to Contents System Summary SystemSystem Info ¾ Port Status Type ¾ Port InfoPort Rate ¾ Bandwidth Utilization Device Description¾ Device Description System Time ¾ Time Config¾ Time Info System IP User Manage User Table User Config ¾ User Info Confirm Password Retype the password Config RestorePassword User ID, Name, Access Level and status Operation Firmware Upgrade Config Backup¾ Config Backup System Reboot System Reset Access Security Access Control IP Address&Mask ¾ Access Control Config¾ Session Config MAC Address SSL Config ¾ Access User Number ¾ Certificate Download SSH Config¾ Global Config ¾ Key Download Protocol Idle TimeoutMax Connect Download ¾ Configuration ProcedureKey Type ¾ Network Requirements Application Example 2 for SSH Page Return to Contents Port SwitchingPort Config Port Select Speed and Duplex Port MirrorDescription Flow Control Ingress ¾ Mirroring Port¾ Mirrored Port Egress Port Security ¾ Port Security Max Learned MAC Port IsolationLearned Num ¾ Port Isolation List ¾ Port Isolation ConfigForward Portlist Select the port that to be forwarded to Forward Portlist Display the forwardlist LAG LAG Table Group Number Aggregate Arithmetic¾ LAG Table Member ¾ LAG Config Static LAG Lacp Config LAG will delete this LAG System Priority ¾ Lacp ConfigAdmin Key Port Priority Traffic Summary Traffic Monitor¾ Auto Refresh Traffic Statistics MAC Address Bound Type Configuration Way Aging outRelationship Address and the port ¾ Search Option ¾ Address Table Displays the corresponding Vlan ID of the MAC address MAC Address Displays the MAC address learned by the switchStatic Address ¾ Create Static Address Dynamic Address ¾ Static Address Table ¾ Aging Config ¾ Dynamic Address Table Filtering Address Bind ¾ Create Filtering Address ¾ Filtering Address Table Vlan Vlan implementation 802.1Q Vlan ¾ Link Types of ports Vlan Config ¾ Pvid Description ： ¾ Vlan TableVlan ID Select Members Operation ： Is valid or not ¾ Vlan ConfigEnter the ID number of Vlan ¾ Vlan Members ¾ Vlan Port Config Port Displays the port number ¾ Vlan of Port Required. On the VLAN→802.1Q VLAN→Port Config page, setRequired. On the VLAN→802.1Q VLAN→VLAN Config Vlan Description Optional. On the VLAN→802.1Q VLAN→VLAN Config MAC Vlan ¾ MAC Vlan Table Port EnableMAC Select Required. On the VLAN→MAC VLAN→Port Enable Protocol Vlan ¾ Create Protocol Vlan Protocol VlanProtocol Template ¾ Protocol Vlan Table ¾ Create Protocol Template ¾ Protocol Template Table Application Example for 802.1Q Vlan Application Example for MAC Vlan Required. On VLAN→802.1Q VLAN→Port Config page, configureRequired. On VLAN→802.1Q VLAN→VLAN Config page, create a Operation Description ¾ Network Diagram ¾ Configuration Procedure Application Example for Protocol Vlan Required. On VLAN→Protocol VLAN→Protocol Template On VLAN→Protocol VLAN→Protocol Vlan page, create protocol Protocol type Value Vlan Mapping VPN Config¾ VPN Up-link Ports ¾ Vlan Mapping Config ¾ Vlan Mapping Table Required. On the VLAN→VLAN VPN→Port Enable Required. On the VLAN→VLAN VPN→VPN ConfigOptional. On the VLAN→VLAN VPN→VPN Config Required. On the VLAN→VLAN VPN→VLAN Mapping Gvrp ¾ Garp ¾ Gvrp ¾ Port Config Select Port Status Registration Mode Configuration Procedure Private Vlan ¾ The Elements of a Private Vlan ¾ Features of Private Vlan¾ Private Vlan Implementation Pvid ¾ Packet forwarding in Private Vlan Pvlan Primary Vlan ¾ Create Private Vlan¾ Private Vlan Table Secondary Vlan ¾ Private Vlan Port Table Port Select the desired port for configuration Port TypeRequired. On the VLAN→Private VLAN→Port Configure Required. On the VLAN→Private VLAN→PVLAN Application Example for Private Vlan Required. On the VLAN→802.1Q VLAN→VLAN Config page, click Spanning Tree ¾ STP Elements ¾ STP Timers ¾ Bpdu Comparing Principle in STP mode ¾ STP Generation Step Operation ¾ Rstp Elements Tips：¾ Mstp Elements ¾ Port States ¾ Port Roles STP Config STP Config Hello Time Forward DelayVersion Max Age STP Summary Port Config STP Summary IntPath PriorityExtPath Edge Port Port Role Region ConfigMstp Instance Port Status Instance Config ¾ Region Config Instance Instance Port Config¾ Instance Table Clear Instance ID Path Cost STP Security Port Protect ¾ Bpdu Protect ¾ TC Protect¾ Bpdu Filter TC Protect Loop ProtectRoot Protect Bpdu Protect TC Protect 11 TC Protect Application Example for STP Function On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→STP Config→Port Config On Spanning Tree→MSTP Instance→Instance Bridge of Instance Configure Switch D ¾ Suggestion for Configuration ¾ Multicast Overview Multicast¾ Multicast Address ¾ Multicast Address Table Multicast IP Port ¾ Igmp Snooping Process Igmp Snooping¾ Igmp Snooping ¾ Igmp Messages Snooping Config ¾ Igmp Snooping Fundamentals ¾ Igmp Snooping Status Description Displays Igmp Snooping status Member Igmp Snooping Fast Leave Leave Time Router Port TimeMember Port Time Static Router Port Multicast Vlan Snooping→Snooping Config and Port ConfigMulticast→IGMP Snooping→VLAN Config Router Port ¾ Multicast Vlan Vlan On the Multicast→IGMP Snooping→Snooping ConfigApplication Example for Multicast Vlan Multicast→IGMP Snooping→Multicast Vlan Snooping→Snooping Config ¾ Configuration Procedure Step Operation DescriptionSnooping→Port Config Multicast IP Multicast IP Table Static Multicast IP ¾ Create Static Multicast ¾ Static Multicast IP Table Multicast Filter IP-Range ¾ Port Filter Config Port Filter Multicast→Multicast Filter→IP-Range Packet StatisticsMulticast→Multicast Filter→Port Filter ¾ Igmp Statistics QoS ¾ Priority Mode¾ QoS ¾ Schedule Mode 802.1Q frame SP-Mode Port Priority ¾ Port Priority ConfigDiffServ Displays the LAG number which the port belongs to Schedule Mode ¾ Schedule Mode Config 3 802.1P Priority ¾ 802.1P Priority Config¾ Priority Level Dscp Priority Priority Level ¾ Dscp Priority ConfigIt ranges from 0 to Priority levels are labeled as TC0, TC1, TC2 and TC3 Bandwidth Control ¾ Rate Limit ConfigRate Limit Ingress Rate bps Storm ControlEgress Ratebps Bps ¾ Storm Control ConfigBroadcast Rate Multicast Rate Voice Vlan ¾ Port Voice Vlan ModeNumber OUI Address Vendor ¾ Security Mode of Voice Vlan Packet Type Processing Mode Global Config 12 Global Configuration Port Mode 13 Port Config OUI Config Required. On QoS→Voice VLAN→Port Config Required. On VLAN→802.1Q VLAN→Port ConfigOptional. On QoS→Voice VLAN→OUI Config page, you Required. On QoS→Voice VLAN→Global Config Time-Range Summary ACLTime-Range Index Time-Range Create ¾ Create Holiday ACL ConfigHoliday Config ¾ Holiday Table ¾ Rule Table ACL SummaryACL Create ¾ Create ACL Rule ID MAC ACL¾ Create MAC ACL EtherType Fragment Standard-IP ACL¾ Create Standard-IP ACL Mask Extend-IP ACL ¾ Create Extend-IP ACL Policy Config Policy Summary Select Policy Policy CreateAction Create Desired policy, please click the Delete button 11 Action Create ¾ Create Action Port Binding Policy BindingBinding Table ¾ Policy Bind Table Direction Displays the binding direction Vlan BindingEnter the ID of the Vlan you want to bind Application Example for ACL ¾ VLAN-Bind Table On ACL→ACL Config→ACL Create page, create ACL On ACL→ACL Config→Standard-IP ACL page, select ACL Network Security IP-MAC Binding Manual Binding Protect Type Select the Protect Type for the entry ¾ Manual Binding OptionEnter the Vlan ID ¾ Manual Binding Table ARP Scanning End IP Address Dhcp SnoopingStart IP Address Scan Network diagram for DHCP-snooping implementation ¾ Dhcp Working Principle ¾ Option Dhcp Cheating Attack Implementation Procedure ¾ Dhcp Cheating Attack 163 Decline Threshold Decline Flow Control ¾ Option 82 Config¾ Port Config Port Select Customization Circuit ID Remote ID ¾ Imitating Gateway ARP Inspection¾ Cheating Gateway 10 ARP Attack Cheating Gateway ¾ Cheating Terminal Hosts ¾ Man-In-The-Middle Attack ¾ ARP Flooding Attack ¾ ARP Detect ARP Detect¾ Trusted Port Required. On the Network Security→IP-MAC ARP DefendNetwork Security→ARP Defend ARP Statistics¾ ARP Defend Speed IP Source Guard ¾ Illegal ARP Packet ¾ IP Source Guard Config DoS Defend DoS Attack Type Description DoS Defend DoS Detect Detect 11.5Detect Time Attack Type ¾ The Mechanism of an 802.1X Authentication System ¾ 802.1X Authentication Procedure 178 179 ¾ 802.1X Timer ¾ Guest Vlan Guest Vlan Authentication Method802.1X Guest Vlan ID Server Timeout Supplicant TimeoutRetry Times Control Type Control ModeRadius Server Authorized Required. On the Network Security→802.1X→Radius On the Network Security→802.1X→Global Config802.1X Client Software Required. On the Network Security→802.1X→Port ¾ Snmp Management Frame Snmp¾ Snmp Overview ¾ Snmp Versions ¾ Snmp Configuration Outline ¾ MIB Introduction ¾ Local Engine Snmp Config¾ Remote Engine View Type Snmp ViewMIB Object ID View Name ¾ Group Config Snmp Group Snmp User ¾ Group Table Privacy Mode Auth ModeAuth Password Privacy Password Access ¾ Community ConfigSnmp Community MIB View Required. On the SNMP→SNMP Config→GlobalRequired. On the SNMP→SNMP Config→SNMP ¾ Community Table On the SNMP→SNMP Config→SNMP Notification User TimeoutUDP Port Retry ¾ Rmon Group RmonRmon Group Function History Control Event Config¾ History Control Table Alarm Config ¾ Event Table Rising Threshold VariableSample Type Rising Event 200 Cluster ¾ Cluster Role Neighbor Info 13.1 NDP¾ Introduction to Cluster ¾ Neighbor NDP Summary¾ Neighbor Info ¾ Port Status Displays the port number of the switch NDP Detail ： NDP ConfigAging Time Device Table Port Displays the port number of the switchNtdp Displays NDP status of the current port Ntdp Summary Ntdp Summary Ntdp Interval Time Ntdp ConfigNtdp Hops Cluster EnableCluster Summary ¾ Global Cluster ¾ Global Config Cluster¾ Cluster Config ¾ Member Info Switch 11 Cluster Summary for Member Switch ¾ Current Role Cluster Config¾ Role Change 14 Cluster Configuration for Commander Switch Member Config 16 Cluster Configuration for Individual Switch Device Name Cluster Topology¾ Create Member Member MAC 18 Collect Topology ¾ Graphic Show Application Example for Cluster Function On Cluster→NDP→NDP Config page, enable NDP On Cluster→NTDP→NTDP Config page, enable 220 System Monitor MaintenanceCPU Monitor Memory Monitor 14.2 Log Time ContentLog Table Module Remote Log ¾ Local Log ConfigLocal Log Log Buffer ¾ Log Host Backup LogHost IP Cable Test ¾ Backup LogDevice Diagnose ¾ Cable Test Loopback ErrorSwitch is available Length Ping ¾ Ping ConfigNetwork Diagnose Test ¾ Tracert Config Tracert Hardware Installation System Maintenance via FTPConfigure the Hyper Terminal 232 Download Firmware via bootrom menu 5Port Settings TP-LINK ifconfig ip 172.31.70.22 mask 255.255.255.0 gateway TP-LINK upgrade You can only use the port 1 to upgrade TP-LINK start Start User Access Login Appendix a Specifications Appendix B Configuring the PCs Configure TCP/IP component 238 Now Installation Guide Appendix C 802.1X Client Software 241 242 Uninstall Software Figure C-7 InstallShield Wizard Complete Configuration Figure C-10 Uninstall Complete 245 Figure C-15 Connection Status FAQ Appendix D Glossary Ieee 802.1D Multicast SwitchingGroup Attribute Registration Protocol Garp Ieee 802.1Q Link Aggregation Port AuthenticationRemote Authentication Dial-in User Service Radius Link Aggregation Control Protocol Lacp Spanning Tree Algorithm STA Simple Network Management Protocol SnmpSimple Network Time Protocol Sntp Telnet