User manual TP-LINK TL-ER5120

[. . . ] TL-ER5120 Gigabit Load Balance Broadband Router REV2. 0. 0 1910010931 COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. Other brands and product names are trademarks of their respective holders. No part of the specifications may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from TP-LINK TECHNOLOGIES CO. , LTD. http://www. tp-link. com FCC STATEMENT This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. [. . . ] You should import the IP and MAC address of the host to List of IP-MAC Binding and enable the corresponding entry before enabling “Permit the packets matching the IP-MAC Binding entries only”. When suffered ARP attack, the correct ARP information will be sent to the device suffering attack initiatively by GARP (Gratuitous ARP) packets, thus the error ARP information of the device will be replaced. Check the box before Enable ARP Logs, and the router will send ARP logs to the specified server. IP-MAC Binding IP Address: MAC Address: Description: Status: Enter the IP Address to be bound. Activate or inactivate the entry. List of Rules You can view the information of the entries and edit them by the Action buttons. The first entry in Figure 3-47 indicates: The IP address of 192. 168. 1. 101 and MAC address of 00-19-66-83-53-CF have been bound and this entry is activated. Note: If all the entries in the binding list are disabled and “Permit the packets of IP-MAC Binding entries only” option is selected and saved, the WEB management page of the router cannot be login. At the moment, you should restore the router to factory default and login again. 3. 4. 1. 2 ARP Scanning ARP Scanning feature enables the router to scan the IP address and corresponding MAC address and display them on the List of Scanning Result. Choose the menu Firewall→Anti ARP Spoofing→ARP Scanning to load the following page. -71- Figure 3-48 ARP Scanning Enter the start and the end IP addresses in the Scanning IP Range field. Then click the <Scan> button, the router will scan all the active hosts within the scanning range and display the result in the list. The entries displayed on the List of Scanning Result do not mean the IP and MAC addresses are already bound. The current status for the entry will display in the “Status” field. --Indicates that the IP and MAC address of this entry is not bound and may be replaced by error ARP information. Indicates that this entry is imported to the list on IP-MAC Binding page, but not effective yet. To bind the entries in the list, check these entries and click the <Import> button, then the settings will take effect if the entries do not conflict with the existed entries. Note: If the local hosts suffered from ARP attack, you cannot add IP-MAC Binding entries on this page. Please add entries manually on 3. 4. 1. 1 IP-MAC Binding. 3. 4. 1. 3 ARP List On this page, the IP-MAC information of the hosts which communicated with the router recently will be saved in the ARP list. Choose the menu Firewall→Anti ARP Spoofing→ARP List to load the following page. -72- Figure 3-49 ARP List The configurations for the entries is the same as the configuration of List of Scanning Result on 3. 4. 1. 2 ARP Scanning page. The unbound IP-MAC information will be replaced by new IP-MAC information or be automatically removed from the list if it has not been communicated with others for a long time. This period is regarded as the aging time of the ARP information. 3. 4. 2 Attack Defense With Attack Defense function enabled, the router can distinguish the malicious packets and prevent the port scanning from external network, so as to guarantee the network security. Choose the menu Firewall→Attack Defense→Attack Defense to load the following page. -73- Figure 3-50 Attack Defense The following items are displayed on this screen: General Flood Defense: Flood attack is a kind of commonly used DoS (Denial of Service), which including TCP SYN, UDP, ICMP and so on. It is recommended to check all the Flood Defense options and specify the corresponding thresholds. Keep the default settings if you are not sure. -74- Packet Anomaly Defense: Enable Attack Defense Logs: Packet Anomaly refers to the abnormal packets. It is recommended to select all the Packet Anomaly Defense options. With this box checked, the router will record the defense logs. 3. 4. 3 MAC Filtering On this page, you can control the access to the Internet of local host by specifying their MAC addresses. [. . . ] H. 323 defines a common set of CODECs, call setup and negotiating procedures, and basic data transport methods. HTTP（Hypertext Transfer The protocol used by Web browsers and Web servers to transfer files, such as text and graphic files. Protocol） ICMP（Internet Control Messages Protocol） Network layer Internet protocol that reports errors and provides other information relevant to IP packet processing. Largest global Internetwork, connecting tens of thousands of Internet networks worldwide and having a “culture” that focuses on research and standardization based on real-life use. Network layer protocol in the TCP/IP stack offering a IP（Internet Protocol） connectionless Internetwork service. [. . . ]