Example For Mac Filtering; Network Requirements - TP-Link TL-R470T Plus Configuration Manual

Configuring Firewall
Figure 3-4 Verify IP-MAC Binding Entires
4) In the General section on the same page, check the boxes to enable ARP Spoofing
Defense and Send GARP packets when ARP attack is detected, and keep the interval as
1000 milliseconds. Click Save.
Figure 3-5 Configure Anti ARP Spoofing

3.2 Example for MAC Filtering

3.2.1 Network Requirements

In the diagram below, the router is the gateway of the network. The network administrator now
detects some abnormal attack packets from a host whose MAC address is 00:17:87:4A:5C:25.
To protect the devices from being attacked, it is required that all packets from the attacker
should be dropped when passing through the router.
Figure 3-1 Network Topology
LAN
Layer 2 Switch
Configuration Examples
WAN
LAN
Gateway
Attacker
00:17:87:4A:5C:25
Configuration Guide 98