packets, which results in a breakdown of the normal communication. Thus, ARP defense technology is
generated to prevent the network from this kind of attack.
3.4.1.1 IP-MAC Binding
IP-MAC Binding functions to bind the IP address, MAC address of the host together and only allows the
Hosts matching the bound entries to access the network.
Choose the menu Firewall→Anti ARP Spoofing→IP-MAC Binding to load the following page.
Figure 3-46 IP-MAC Binding
The following items are displayed on this screen:
General
It is recommended to check all the options. You should import the IP and MAC address of the host to
IP-MAC Binding List and enable the corresponding entry before enabling “Permit the packets
matching the IP-MAC Binding entries only”.
When suffered ARP attack, the correct ARP information will be sent to the device suffering attack
initiatively by GARP (Gratuitous ARP) packets, thus the error ARP information of the device will be
replaced. You can set the packets sending rate in the Interval field.
With the box before Enable ARP Logs checked, the router will send ARP logs to the specified
server. The IP address of server is the Server IP set on 3.7.7 Logs.
IP-MAC Binding
IP Address:
Enter the IP Address to be bound.
MAC Address:
Enter the MAC Address corresponding to the IP Address.
-67-
