Configuration Guide 98
Configuring Firewall Configuration Examples
Figure 3-4 Verify IP-MAC Binding Entires
4) In the General section on the same page, check the boxes to enable ARP Spoofing
Defense and Send GARP packets when ARP attack is detected, and keep the interval as
1000 milliseconds. Click Save.
Figure 3-5 Configure Anti ARP Spoofing
3.2 Example for MAC Filtering
3.2.1 Network Requirements
In the diagram below, the router is the gateway of the network. The network administrator now
detects some abnormal attack packets from a host whose MAC address is 00:17:87:4A:5C:25.
To protect the devices from being attacked, it is required that all packets from the attacker
should be dropped when passing through the router.
Figure 3-1 Network Topology
Layer 2 Switch
Attacker
00:17:87:4A:5C:25
Gateway
LAN
LAN
WAN
Internet
To Next Page
Loading...
