Industrial Managed
Ethernet Switch
User Manual
錯誤
!
使用
[
常用
]
索
引標籤將
Heading
1,Product Manual
套用到您想要在此處
顯示的文字。
Page
120
of
191
Figure 2.133 IP Source Binding Setting Webpage
2.14.3.4 IP Source Binding Status
The user can check the status of IP Source Binding guard setting based on MAC Address and IP address pairs in
this webpage as shown in Figure 2.134. For each entry in the status table, there will be MAC Address, IP
Address, Lease (seconds), Type of Filtering, and list of Ports.
Figure 2.134 IP Source Binding Status Webpage
2.14.4 ARP Spoof Prevention Setting
ARP (Address Resolution Protocol) Spoof Prevention
is a security mechanism supported by Atop’s EH75XX
series to prevent ARP spoof attacks. The ARP spoof attack is a kind of network security attacks that a malicious
host or node sends a falsify ARP messages over a local area network. This type of attack is also called ARP
spoofing, ARP cache poisoning, or ARP poison routing. Typically, the attacker would like other hosts/nodes in the
network to link or map the malicious Ethernet MAC address to a legitimate IP address of a victim host/node.
When
ARP Spoof Prevention
is enabled on EH75XX series, the ARP spoof prevention table must also be set with
prevention entries. Each entry consists of
IPv4 Address
,
MAC Address
, and
Port number(s)
. The IP Address
and the MAC address in each entry belong to a legitimate or valid host/node that the administrator assigned or
approved and the administrator of EH75XX want to protect that host/node from being spooffed. The port number
can be one or group or all of the ports on EH75XX that will be accepting incoming ARP packets from the network.
If there are incoming ARP packets to EH75XX and both IP address and MAC address of the ARP packets match
one of the entries in the table, the ARP packets will be accepted by the EH75XX system. If the sender’s IP address
of an ARP packet matches the IP addess in one of the entries in the table but the sender’s MAC address of the
ARP packet does not match, the EH75XX will drop the ARP packet on its port. Note that EH75XX will bypass or
accept other ARP packets whose sender IP is not in the ARP Spoof Prevention Table.