-144-
Choose the menu FirewallAnti ARP Spoofing IP-MAC Binding to load the configuration page.
Select the ARP entries needed to be bound or click the <Select All> button, and then click the
<Import>button. The ARP List will display as the following figure shows.
Figure 4-18 ARP List
2) Set IP-MAC Binding Entry Manually
Configure the IP-MAC Binding entry manually and add it to ARP List.
Choose the menu FirewallAnti ARP SpoofingIP-MAC Binding to load the configuration page.
To add the host with IP address of 192.168.1.20 and MAC address of 00-11-22-33-44-aa to the list,
you can follow the settings below:
Settings:
IP Address: 192.168.0.20
MAC Address: 00-11-22-33-44-aa
Status: Activate
Click the <Add> button to apply. The other entries can be added in the same way.
3) Set Attack Defense
Choose the menu FirewallAnti ARP Spoofing IP-MAC Binding to load the configuration page.
Select all the items for General and set the GARP packets sending interval to be 1ms as the following
figure shows. Then click the <Save> button to apply.
Figure 4-19 IP-MAC Binding
4.3.4.2 WAN ARP Defense
To prevent the WAN ARP attack, you can bind the default gateway and IP address of WAN port.
Obtain the MAC address of WAN port by ARP Scanning first.
