Draytek Vigor2136 Series User Manual page 181

Block ARP replies with
Virtual MAC Address in
ARP Table (VRRP)
Block IP Packets with
Enable Syslog
Cancel
Apply
After finishing this web page configuration, please click Apply to save the settings.
II-2-3 MAC Filtering Profile
Vigor router may restrict wireless access to specified wireless clients only by referencing a MAC
address black/white list.
The router's administrator may block wireless clients by inserting their MAC addresses into a black
list, or only allow some wireless clients to connect by inserting their MAC addresses into a white list.
II-2-3-1 MAC Filtering Profile
This page allows to set the MAC Filtering Profiles (up to 10) that will be applied to SSID (configured
on Configuration>>Wireless LAN>>SSID) to meet different needs.
This feature can protect a network from ARP (Address Resolution
Protocol) spoofing attacks.
Inconsistent Source MAC addresses – If the sender's MAC address in
the ARP packets does not match the source MAC address from ARP
packet's ethernet header, the Vigor system will block the packets
immediately.
Inconsistent Destination MAC addresses - If the target MAC
address in the ARP packets does not match the destination MAC
address from ARP packet's ethernet header, the Vigor system will
block the packets immediately.
Accept – The virtual MAC address can be recorded in the ARP table.
Decline –The virtual MAC address cannot be recorded in the ARP
table.
IP Spoofing Defense
IP spoofing defense can prevent unauthorized access and then
protect the data integrity to make sure the security of network.
Inconsistent Source IP addresses from WAN – Blocks the fake IP
from WAN. For example, if the source IP address from the WAN
interface is LAN subnet IP packets, the Vigor system will block the
packets immediately.
Inconsistent Source IP addresses from LAN – Blocks the fake IP
from LAN. For example, if the source IP address from the LAN
interface is WAN subnet IP packets, the Vigor system will block the
packets immediately.
Syslog
All Defense Logs – Check the box to record all defense logs onto the
Syslog.
Discard current settings and return to the previous page.
Save the current settings.
171