Security
Preventing ARP Attacks
STEP 5
Preventing ARP Attacks
STEP 1
STEP 2
STEP 3
Cisco RV315W Broadband Wireless VPN Router Administration Guide
•
Time Range: Enter the starting time and ending time to keep the MAC
address filtering rule active at specific times.
•
Week: Check the days to keep the MAC address filtering rule active at
specific days.
Click Save to save your settings.
Use the ARP Attack Protection page to specify how to protect your network
against common types of ARP attacks and configure the IP&MAC binding rules.
IP&MAC Binding allows you to bind an IP address to a MAC address and vice
versa. It only allows traffic when the host IP address matches a specified MAC
address. By requiring the gateway to validate the source traffic's IP address with
the unique MAC address of device, this ensures that traffic from the specified IP
address is not spoofed.
To prevent ARP attacks and configure the IP&MAC binding settings:
Click Security > ARP Attack Protection. The ARP Attack Protection page opens.
Enter the following information:
•
ARP Attack Protection: Click Enable to enable ARP Attack Protection, or
click Disable to disable this feature.
•
Enable Auto Learning: Click Enable to enable Auto Learning, or click
Disable to disable this feature. Enabling this feature allows the system to
determine whether the IP address and MAC address of the user are valid or
not.
•
ARP Flooding Threshold: Enter the threshold value of ARP Flooding attacks.
This value determines the amount of ARP packets that the system allows to
receive per second. The greater value, the more ARP packets can be
allowed to receive.
•
ARP Broadcast Interval: Enter the interval for ARP broadcasting. The value
of zero indicates that this feature is disabled.
Click Save to save your settings.
8
85