TP-Link TL-ER6120 User Manual page 145

4.3.4.2 WAN ARP Defense
To prevent the WAN ARP attack, you can bind the default gateway and IP address of WAN port.
Obtain the MAC address of WAN port by ARP Scanning first.
Choose the menu Firewall→Anti ARP Spoofing→ARP Scanning to load the configuration page.
Enter the default gateway of the WAN port such as 58.51.128.254 in the Scanning Range field and
click the <Scan> button, the MAC address of the WAN port will display in the Scanning Result table.
After obtaining the MAC address of WAN port from Scanning Result table, select this entry, then click
the <Import> button to finish the binding operation.
4.3.4.3 Attack Defense
Choose the menu Firewall→Attack Defense→Attack Defense to load the configuration page. Select
the options desired to be enabled as Figure 4-20 shows, and then click the <Save> button.
Figure 4-19 IP-MAC Binding
-139-