Home » TP-Link Manuals » Bridges & Routers » TP-Link TL-ER6020 » Manual Viewer

TP-Link TL-ER6020 TL-ER6020 v1 User Guide - Page 147

WAN ARP Defense

Add to My Manuals
Save this manual to your list of manuals

Page 147 highlights

Choose the menu Firewall→Anti ARP Spoofing→IP-MAC Binding to load the configuration page. To add the host with IP address of 192.168.1.20 and MAC address of 00-11-22-33-44-aa to the list, you can follow the settings below: Settings: IP Address: MAC Address: Status: 192.168.0.20 00-11-22-33-44-aa Activate Click the button to apply. The other entries can be added in the same way. 3) Set Attack Defense Choose the menu Firewall→Anti ARP Spoofing→IP-MAC Binding to load the configuration page. Select all the items for General and set the GARP packets sending interval to be 1ms as the following figure shows. Then click the button to apply. Figure 4-19 IP-MAC Binding 4.3.4.2 WAN ARP Defense To prevent the WAN ARP attack, you can bind the default gateway and IP address of WAN port. Obtain the MAC address of WAN port by ARP Scanning first. Choose the menu Firewall→Anti ARP Spoofing→ARP Scanning to load the configuration page. Enter the default gateway of the WAN port such as 58.51.128.254 in the Scanning Range field and click the button, the MAC address of the WAN port will display in the Scanning Result table. After obtaining the MAC address of WAN port from Scanning Result table, select this entry, then click the button to finish the binding operation. -142-

Section	Page
Package Contents	6
Chapter 1 About this Guide	7
1.1 Intended Readers	7
1.2 Conventions	7
1.3 Overview of this Guide	7
Chapter 2 Introduction	9
2.1 Overview of the Router	9
2.2 Features	10
2.3 Appearance	11
2.3.1 Front Panel	11
2.3.2 Rear Panel	13
Chapter 3 Configuration	14
3.1 Network	14
3.1.1 Status	14
3.1.2 System Mode	14
3.1.3 WAN	17
3.1.4 LAN	34
3.1.4.1 LAN	34
3.1.4.2 DHCP	34
3.1.4.3 DHCP Client	36
3.1.4.4 DHCP Reservation	36
3.1.5 DMZ	37
3.1.5.1 DMZ	38
3.1.6 MAC Address	39
3.1.7 Switch	41
3.1.7.1 Statistics	41
3.1.7.2 Port Mirror	42
3.1.7.3 Rate Control	44
3.1.7.4 Port Config	45
3.1.7.5 Port Status	46
3.1.7.6 Port VLAN	47
3.2 User Group	47
3.2.1 Group	48
3.2.2 User	48
3.2.3 View	49
3.3 Advanced	50
3.3.1 NAT	50
3.3.1.1 NAT Setup	50
3.3.1.2 One-to-One NAT	51
3.3.1.3 Multi-Nets NAT	52
3.3.1.4 Virtual Server	55
3.3.1.5 Port Triggering	57
3.3.1.6 ALG	59
3.3.2 Traffic Control	59
3.3.2.1 Setup	60
3.3.2.2 Bandwidth Control	61
3.3.3 Session Limit	63
3.3.3.1 Session Limit	63
3.3.3.2 Session List	64
3.3.4 Load Balance	64
3.3.4.1 Configuration	64
3.3.4.2 Policy Routing	65
3.3.4.3 Link Backup	66
3.3.4.4 Protocol	68
3.3.5 Routing	69
3.3.5.1 Static Route	69
3.3.5.2 RIP	71
3.3.5.3 Route Table	73
3.4 Firewall	74
3.4.1 Anti ARP Spoofing	74
3.4.1.1 IP-MAC Binding	74
3.4.1.2 ARP Scanning	76
3.4.1.3 ARP List	77
3.4.2 Attack Defense	77
3.4.3 MAC Filtering	79
3.4.4 Access Control	80
3.4.4.1 URL Filtering	80
3.4.4.2 Web Filtering	82
3.4.4.3 Access Rules	82
3.4.4.4 Service	84
3.4.5 App Control	86
3.4.5.1 Control Rules	86
3.4.5.2 Database	87
3.5 VPN	88
3.5.1 IKE	88
3.5.1.1 IKE Policy	89
3.5.1.2 IKE Proposal	91
3.5.2 IPsec	92
3.5.2.1 IPsec Policy	93
3.5.2.2 IPsec Proposal	96
3.5.2.3 IPsec SA	98
3.5.3 L2TP/PPTP	99
3.5.3.1 L2TP/PPTP Tunnel	99
3.5.3.2 IP Address Pool	102
3.5.3.3 List of L2TP/PPTP Tunnel	103
3.6 Services	103
3.6.1 PPPoE Server	103
3.6.1.1 General	103
3.6.1.2 IP Address Pool	105
3.6.1.3 Account	106
3.6.1.4 Exceptional IP	108
3.6.1.5 List of Account	109
3.6.2 E-Bulletin	109
3.6.3 Dynamic DNS	111
3.6.3.1 DynDNS	112
3.6.3.2 No-IP	113
3.6.3.3 PeanutHull	114
3.6.3.4 Comexe	116
3.6.4 UPnP	117
3.7 Maintenance	118
3.7.1 Admin Setup	118
3.7.1.1 Administrator	118
3.7.1.2 Login Parameter	119
3.7.1.3 Remote Management	120
3.7.2 Management	121
3.7.2.1 Factory Defaults	121
3.7.2.2 Export and Import	121
3.7.2.3 Reboot	122
3.7.2.4 Firmware Upgrade	123
3.7.3 License	123
3.7.4 Statistics	124
3.7.4.1 Interface Traffic Statistics	124
3.7.4.2 IP Traffic Statistics	125
3.7.5 Diagnostics	126
3.7.5.1 Diagnostics	126
3.7.5.2 Online Detection	128
3.7.6 Time	129
3.7.7 Logs	130
Chapter 4 Application	132
4.1 Network Requirements	132
4.2 Network Topology	133
4.3 Configurations	133
4.3.1 Internet Setting	133
4.3.1.1 System Mode	134
4.3.1.2 Internet Connection	134
4.3.1.3 Link Backup	134
4.3.2 VPN Setting	135
4.3.2.1 IPsec VPN	135
4.3.2.2 PPTP VPN Setting	139
4.3.3 Network Management	141
4.3.3.1 User Group	141
4.3.3.2 App Control	142
4.3.3.3 Bandwidth Control	143
4.3.3.4 Session Limit	145
4.3.4 Network Security	145
4.3.4.1 LAN ARP Defense	146
4.3.4.2 WAN ARP Defense	147
4.3.4.3 Attack Defense	148
4.3.4.4 Traffic Monitoring	148
Chapter 5 CLI	151
5.1 Configuration	151
5.2 Interface Mode	154
5.3 Online Help	155
5.4 Command Introduction	157
5.4.1 ip	157
5.4.2 ip-mac	157
5.4.3 sys	158
5.4.4 user	159
5.4.5 history	160
5.4.6 exit	161
Appendix A Hardware Specifications	162
Appendix B FAQ	163