TP-Link TL-ER604W User Manual page 149

Choose the menu Firewall Anti ARP Spoofing IP-MAC Binding to load the configuration page.
Select the ARP entries needed to be bound or click the <Select All> button, and then click the
<Import>button. The ARP List will display as the following figure shows.
2) Set IP-MAC Binding Entry Manually
Configure the IP-MAC Binding entry manually and add it to ARP List.
Choose the menu Firewall Anti ARP Spoofing IP-MAC Binding to load the configuration page.
To add the host with IP address of 192.168.1.20 and MAC address of 00-11-22-33-44-aa to the list,
you can follow the settings below:
Settings:
IP Address:
MAC Address:
Status:
Click the <Add> button to apply. The other entries can be added in the same way.
3) Set Attack Defense
Choose the menu Firewall Anti ARP Spoofing IP-MAC Binding to load the configuration page.
Select all the items for General and set the GARP packets sending interval to be 1ms as the following
figure shows. Then click the <Save> button to apply.
4.3.4.2 WAN ARP Defense
To prevent the WAN ARP attack, you can bind the default gateway and IP address of WAN port.
Obtain the MAC address of WAN port by ARP Scanning first.
Figure 4-18 ARP List
192.168.0.20
00-11-22-33-44-aa
Activate
Figure 4-19 IP-MAC Binding
-144-