TP-Link T2500G-10TS - ARP Defend

200
Configuration Procedure:
Step
Operation
Description
1
Bind the IP address, MAC
address, VLAN ID and the
connected Port number of
the Host together.
Required. On the IP-MAC Binding
page, bind the IP
address, MAC address, VLAN ID and the connected
Port number of the Host together via Manual Binding,
ARP Scanning or DHCP Snooping.
2
Enable the protection for
the bound entry.
Required. On the Network Security→IP-MAC
Binding→Binding Table
page, specify a protect type
for the corresponding bound entry.
3 Specify the trusted port. Required. On the Network Security→ARP
Inspection→ARP Detect
page, specify the trusted port.
The specific ports, such as up-linked port, routing port
and LAG port, should be set as Trusted Port.
4 Enable ARP Detect feature. Required. On the Network Security→ARP
Inspection→ARP Detect page, enable the ARP Detect
feature.
12.2.2 ARP Defend
With the ARP Defend enabled, the switch can terminate receiving the ARP packets for 300
seconds when the transmission speed of the legal ARP packet on the port exceeds the defined
value so as to avoid ARP Attack flood.
Choose the menu Network Security→ARP Inspection→ARP Defend to load the following
page.
Figure 12-14 ARP Defend