TP-Link TL-ER604W TL-ER604W V1 User Guide 1910010844 - Page 82

-77-

3.5

3.5 Firewall

3.5.1

Anti ARP Spoofing

ARP (Address Resolution Protocol) is used for analyzing and mapping IP addresses to the

corresponding MAC addresses so that packets can be delivered to their destinations correctly.

ARP functions to translate the IP address into the corresponding MAC address and maintain an ARP

Table in which the latest used IP address-to-MAC address mapping entries are stored. ARP protocol

can facilitate the Hosts in the same network segment to communicate with one another or access to

external network via Gateway. However, since ARP protocol is implemented with the premise that all

the Hosts and Gateways are trusted, there are high security risks during ARP Implementation

Procedure in the actual complex network.

The attacker may send the ARP spoofing packets with false IP address-to-MAC address mapping

entries, and then the device will automatically update the ARP table after receiving wrong ARP

packets, which results in a breakdown of the normal communication. Thus, ARP defense technology is

generated to prevent the network from this kind of attack.

.1.1

IP-MAC Binding

IP-MAC Binding functions to bind the IP address, MAC address of the host together and only allows the

Hosts matching the bound entries to access the network.

Choose the menu

Firewall

→

Anti ARP Spoofing

→

IP-MAC Binding

to load the following page.

Figure 3-50 IP-MAC Binding

The following items are displayed on this screen:



General

Section	Page
Package Contents	6
Chapter 1 About this Guide	7
1.1 Intended Readers	7
1.2 Conventions	7
1.3 Overview of this Guide	7
Chapter 2 Introduction	8
2.1 Overview of the Router	8
2.2 Features	9
2.3 Appearance	11
2.3.1 Front Panel	11
2.3.2 Rear Panel	12
Chapter 3 Configuration	13
3.1 Network	13
3.1.1 Status	13
3.1.2 System Mode	13
3.1.3 WAN	15
3.1.4 LAN	32
3.1.5 MAC Address	35
3.1.6 Switch	36
3.2 Wireless	42
3.2.1 Wireless Setting	42
3.2.2 MAC Filtering	55
3.2.3 Host Status	56
3.3 User Group	57
3.3.1 Group	57
3.3.2 User	58
3.3.3 View	59
3.4 Advanced	60
3.4.1 NAT	60
3.4.2 Traffic Control	68
3.4.3 Session Limit	71
3.4.4 Load Balance	73
3.4.5 Routing	77
3.5 Firewall	82
3.5.1 Anti ARP Spoofing	82
3.5.2 Attack Defense	85
3.5.3 MAC Filtering	87
3.5.4 Access Control	87
3.5.5 App Control	93
3.6 VPN	94
3.6.1 IKE	95
3.6.2 IPsec	99
3.6.3 L2TP/PPTP	105
3.7 Services	109
3.7.1 PPPoE Server	109
3.7.2 E-Bulletin	114
3.7.3 Dynamic DNS	116
3.7.4 UPnP	121
3.8 Maintenance	122
3.8.1 Admin Setup	122
3.8.2 Management	125
3.8.3 License	127
3.8.4 Statistics	128
3.8.5 Diagnostics	130
3.8.6 Time	132
3.8.7 Logs	133
Chapter 4 Application	135
4.1 Network Requirements	135
4.2 Network Topology	136
4.3 Configurations	136
4.3.1 Internet Setting	136
4.3.2 VPN Setting	138
4.3.3 Network Management	144
4.3.4 Network Security	148
Appendix A Hardware Specifications	153
Appendix B FAQ	154

TP-Link TL-ER604W TL-ER604W V1 User Guide 1910010844 - Page 82

Firewall, 3.5.1 Anti ARP Spoofing, IP-MAC Binding

Page 82 highlights