Netgear FVS336G FVS336G Reference Manual - Page 79

Configuring IP/MAC Address Binding Alerts, Security > Address Filter, IP/MAC Binding

Get Netgear FVS336G - ProSafe Dual WAN Gigabit Firewall PDF manuals and user guides
UPC - 606449052015
View all Netgear FVS336G manuals
Add to My Manuals
Save this manual to your list of manuals

Page 79 highlights

ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring IP/MAC Address Binding Alerts You can configure the FVS336G to drop packets and generate an alert when a device appears to have hijacked or spoofed another device's IP address. An IP address can be bound to a specific MAC address either by using a DHCP reserved address (see "Configuring DHCP Address Reservation" on page 3-8) or by manually binding in the IP/MAC Binding menu. To enable IP/MAC address binding enforcement and alerts: 1. Select Security > Address Filter > IP/MAC Binding to display the Source MAC Filter tab page. Figure 4-12 2. In the Email IP/MAC Violations frame, check the Yes radio button to enable IP/MAC address binding enforcement and alerts. Email alerts must be enabled (see "E-Mail Notifications of Event Logs and Alerts" on page 4-29). 3. Click Apply. 4. To add a manual binding entry, enter the following data in the Add IP/MAC Bindings section: a. Enter a Name for the bound host device. b. Enter the MAC Address and IP Address to be bound. A valid MAC address is six colonseparated pairs of hexadecimal digits (0 to 9 and a to f). For example: 01:23:45:ab:cd:ef. c. From the pull-down list, select whether dropped packets should be logged to a special counter. To view the counter, click the Set Poll Interval link at the top of the menu. 5. Click Apply. The specified binding will be added to the list. Firewall Protection and Content Filtering v1.0, March 2009 4-23

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual
Firewall Protection and Content Filtering
4-23
v1.0, March 2009
Configuring IP/MAC Address Binding Alerts
You can configure the FVS336G to drop packets and generate an alert when a device appears to
have hijacked or spoofed another device’s IP address. An IP address can be bound to a specific
MAC address either by using a DHCP reserved address (see
“Configuring DHCP Address
Reservation” on page 3-8
) or by manually binding in the IP/MAC Binding menu.
To enable IP/MAC address binding enforcement and alerts:
1.
Select
Security > Address Filter
>
IP/MAC Binding
to display the
Source MAC Filter
tab
page.
2.
In the Email IP/MAC Violations frame, check the
Yes
radio button to enable IP/MAC address
binding enforcement and alerts. Email alerts must be enabled (see
“E-Mail Notifications of
Event Logs and Alerts” on page 4-29
).
3.
Click
Apply.
4.
To add a manual binding entry, enter the following data in the
Add IP/MAC Bindings
section:
a.
Enter a
Name
for the bound host device.
b.
Enter the
MAC Address
and
IP Address
to be bound. A valid MAC address is six colon-
separated pairs of hexadecimal digits (0 to 9 and a to f). For example: 01:23:45:ab:cd:ef.
c.
From the pull-down list, select whether dropped packets should be logged to a special
counter. To view the counter, click the
Set Poll Interval
link at the top of the menu.
5.
Click
Apply
. The specified binding will be added to the list.
Figure 4-12